Packt+ | Advance your knowledge in tech

You're reading from Network Analysis using Wireshark Cookbook This book will be a massive ally in troubleshooting your network using Wireshark, the world's most popular analyzer. Over 100 practical recipes provide a focus on real-life situations, helping you resolve your own individual issues.

Product type Paperback

Published in Dec 2013

Publisher Packt

ISBN-13 9781849517645

Length 452 pages

Edition 1st Edition

Tools

Wireshark

Concepts

Network Security

Author (1):

Yoram Orzach

View More author details

Table of Contents (17) Chapters

Preface

1. Introducing Wireshark FREE CHAPTER

2. Using Capture Filters

3. Using Display Filters

4. Using Basic Statistics Tools

5. Using Advanced Statistics Tools

6. Using the Expert Infos Window

7. Ethernet, LAN Switching, and Wireless LAN

8. ARP and IP Analysis

9. UDP/TCP Analysis

10. HTTP and DNS

11. Analyzing Enterprise Applications' Behavior

12. SIP, Multimedia, and IP Telephony

13. Troubleshooting Bandwidth and Delay Problems

14. Understanding Network Security

A. Links, Tools, and Reading

Index

Analyzing regular DNS operations

In this recipe, we will see how to find out if DNS is working properly or not. We will see some scenarios of DNS operations, and what can go wrong.

Getting ready

Open Wireshark and start capturing data. You should mirror a device that is using DNS, or the DNS server itself.

How to do it...

Connect Wireshark to the LAN switch attached to the monitored device, and configure port mirror to the device from which you suspect the problem is coming. Go through the following steps:

In case of user complains, configure the port mirror for monitoring the user device.
In case of a general problem in the network, configure port mirror to the DNS server:
- When the DNS server is configured on the internal server, configure port mirror on the server
- When the DNS server is configured on external server, configure port mirror to the link that connects you to the Internet