by Chris Sanders
March 2017, 368 pp.
Get 30% off with the coupon code EARLYBIRD
Wireshark is the world’s most popular network sniffer that makes capturing packets easy, but it won’t be much help if you don’t have a solid foundation in packet analysis.
Practical Packet Analysis, 3rd Edition will show you how to make sense of your PCAP data and let you start troubleshooting the problems on your network. This third edition is updated for Wireshark 2.0.5 and IPv6, making it the definitive guide to packet analysis and a must for any network technician, administrator, or engineer. This updated version includes two new chapters that will teach you how to use the powerful command-line packet analyzers tcpdump and TShark as well as how to read and reference packet values using a packet map.
Practical Packet Analysis will introduce you to the basics of packet analysis, starting with how networks work and how packets travel along the wire. Then you’ll move on to navigating packets and using Wireshark for packet capture and analysis. The book then covers common lower-layer and upper-layer protocols and provides you with solutions to real-world scenarios like Internet connectivity issues, how to intercept malware traffic, and fighting a slow network.
You’ll learn how to:
Whether you’re a budding network analyst in need of a headfirst dive into packet analysis or an experienced administrator searching for new tricks, look no further than the third edition of Practical Packet Analysis.
About the Author
Chris Sanders is a computer security consultant, researcher, and educator. He is also the author of Applied Network Security Monitoring, and writes regularly for his blog, ChrisSanders.org. Sanders uses packet analysis daily to catch bad guys and find evil.
Table of Contents
Chapter 1: Packet Analysis and Network Basics (AVAILABLE NOW)
Appendix A: Further Reading