Summary
In this chapter, we have learned in depth about network packets and their corresponding analysis, using Wireshark and TCPdump graphical-based tools that are widely used by network administrators. Then, we learned about packet analysis using the Python module pyshark, providing a deep analysis of UDP and DNS packets as examples. Then, we looked at a different approach to network traffic analysis known as packet dissection using the LUA language. As well as network analysis, we performed ARP spoofing and data hijacking using an ARP poisoning attack, and in the last section, we learned about packet generation and replaying tools using NetScanTools.
In the next chapter, we will learn about behavioral analysis and anatomy detection of network packets, IPfix, and NetFlow.
