This chapter will help you understand the underlying technology enabling movement of network traffic across routing infrastructures through analysis of the transport layer protocols Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). TCP and UDP are the basis of networking protocols and it is important to understand their structure and behavior.
The following are the topics that we will cover in this chapter:
- The TCP header and how it communicates
- Understanding the TCP flags
- Checking for different analysis flags in Wireshark
- Understanding UDP traffic
- Unusual patterns of TCP and UDP traffic
We will also look at some common anomalies that occur in day-to-day network operations.