Packt+ | Advance your knowledge in tech

You're reading from Network Analysis using Wireshark Cookbook This book will be a massive ally in troubleshooting your network using Wireshark, the world's most popular analyzer. Over 100 practical recipes provide a focus on real-life situations, helping you resolve your own individual issues.

Product type Paperback

Published in Dec 2013

Publisher Packt

ISBN-13 9781849517645

Length 452 pages

Edition 1st Edition

Tools

Wireshark

Concepts

Network Security

Author (1):

Yoram Orzach

View More author details

Table of Contents (17) Chapters

Preface

1. Introducing Wireshark FREE CHAPTER

2. Using Capture Filters

3. Using Display Filters

4. Using Basic Statistics Tools

5. Using Advanced Statistics Tools

6. Using the Expert Infos Window

7. Ethernet, LAN Switching, and Wireless LAN

8. ARP and IP Analysis

9. UDP/TCP Analysis

10. HTTP and DNS

11. Analyzing Enterprise Applications' Behavior

12. SIP, Multimedia, and IP Telephony

13. Troubleshooting Bandwidth and Delay Problems

14. Understanding Network Security

A. Links, Tools, and Reading

Index

The Expert Infos window and how to use it for network troubleshooting

The Expert Infos window provides us with a list of events and network problems discovered by Wireshark. In this recipe, we will learn how to start the Expert Infos window and how to refer to the various events.

Getting ready

Start Wireshark, and start a live capture or open an existing file.

How to do it...

To start the Expert Infos window, perform the following steps:

Navigate to the Analyze menu and click on Expert Info. The following window will open:

Now you can choose any one of the upper bars: Errors:, Warnings:, Notes:, Chats:, Details:, or Packet Comments:.

Tip

The number at the right-hand side of the bar shows the number of events in this category.

The upper bars give you the following information:

Errors: These are serious problems, mostly malformed packets or missing fields in a protocol header. These can be malformed packets of various types such as malformed SPOOLSS, GTP, or others. These can also be bad checksum errors...