What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

Introduction to Wireshark and Packet Analysis

This chapter will help you to understand the basics and science behind packet analysis. Wireshark comes in very handy and proves something of a Swiss knife for professionals dealing with network, security, and digital forensic roles. You will learn about the following topics in this chapter:

Introduction to Wireshark
How Wireshark works
Capturing methodologies
Understanding the GUI of Wireshark
Starting our first capture

Key benefits

<ul><li>Learn protocol analysis, optimization and troubleshooting using Wireshark, an open source tool</li>

<li>Learn the usage of filtering and statistical tools to ease your troubleshooting job</li>

<li>Quickly perform root-cause analysis over your network in an event of network failure or a security breach</li>

</ul>

Description

Wireshark is an open source protocol analyser, commonly used among the network and security professionals. Currently being developed and maintained by volunteer contributions of networking experts from all over the globe. Wireshark is mainly used to analyze network traffic, analyse network issues, analyse protocol behaviour, etc. - it lets you see what's going on in your network at a granular level. This book takes you from the basics of the Wireshark environment to detecting and resolving network anomalies. This book will start from the basics of setting up your Wireshark environment and will walk you through the fundamentals of networking and packet analysis. As you make your way through the chapters, you will discover different ways to analyse network traffic through creation and usage of filters and statistical features. You will look at network security packet analysis, command-line utilities, and other advanced tools that will come in handy when working with day-to-day network operations. By the end of this book, you have enough skill with Wireshark 2 to overcome real-world network challenges.

What you will learn

<ul><li>Learn how TCP/IP works </li>

<li>Install Wireshark and understand its GUI</li>

<li>Creation and Usage of Filters to ease analysis process</li>

<li>Understand the usual and unusual behaviour of Protocols</li>

<li>Troubleshoot network anomalies quickly with help of Wireshark</li>

<li>Use Wireshark as a diagnostic tool for network security analysis to identify source of malware</li>

<li>Decrypting wireless traffic</li>

<li>Resolve latencies and bottleneck issues in the network</li>

</ul>

What do you get with eBook?