Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Wireshark Essentials
  • Table Of Contents Toc
Wireshark Essentials

Wireshark Essentials

By : James H. Baxter
3.8 (5)
Buy this Book
close
close
Wireshark Essentials

Wireshark Essentials

3.8 (5)
By: James H. Baxter
Buy this Book

Overview of this book

This book is aimed at IT professionals who want to develop or enhance their packet analysis skills. Basic familiarity with common network and application services terms and technologies is assumed; however, expertise in advanced networking topics or protocols is not required. Readers in any IT field can develop the analysis skills specifically needed to complement and support their respective areas of responsibility and interest.
Table of Contents (10 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Getting Acquainted with Wireshark
Icon
1. Getting Acquainted with Wireshark
Icon
Installing Wireshark
Icon
Performing your first packet capture
Icon
Summary
2
2. Networking for Packet Analysts
chevron up
Icon
2. Networking for Packet Analysts
Icon
The OSI model – why it matters
Icon
IP networks and subnets
Icon
Switching and routing packets
Icon
WAN links
Icon
Wireless networking
Icon
Summary
3
3. Capturing All the Right Packets
Icon
3. Capturing All the Right Packets
Icon
Picking the best capture point
Icon
Test Access Ports and switch port mirroring
Icon
Capturing interfaces, filters, and options
Icon
Verifying a good capture
Icon
Saving the bulk capture file
Icon
Isolating conversations of interest
Icon
Using the Conversations window
Icon
Wireshark display filters
Icon
Filter Expression Buttons
Icon
Following TCP/UDP/SSL streams
Icon
Marking and ignoring packets
Icon
Saving the filtered traffic
Icon
Summary
4
4. Configuring Wireshark
Icon
4. Configuring Wireshark
Icon
Working with packet timestamps
Icon
Colorization and coloring rules
Icon
Wireshark preferences
Icon
Wireshark profiles
Icon
Summary
5
5. Network Protocols
Icon
5. Network Protocols
Icon
The OSI and DARPA reference models
Icon
Transport layer protocols
Icon
Application layer protocols
Icon
Summary
6
6. Troubleshooting and Performance Analysis
Icon
6. Troubleshooting and Performance Analysis
Icon
Troubleshooting methodology
Icon
Troubleshooting connectivity issues
Icon
Troubleshooting functional issues
Icon
Performance analysis methodology
Icon
Summary
7
7. Packet Analysis for Security Tasks
Icon
7. Packet Analysis for Security Tasks
Icon
Security analysis methodology
Icon
Security assessment tools
Icon
Identifying unacceptable or suspicious traffic
Icon
Scans and sweeps
Icon
OS fingerprinting
Icon
Malformed packets
Icon
Phone home traffic
Icon
Password-cracking traffic
Icon
Unusual traffic
Icon
Summary
8
8. Command-line and Other Utilities
Icon
8. Command-line and Other Utilities
Icon
Wireshark command-line utilities
Icon
Capturing traffic with Dumpcap
Icon
Capturing traffic with Tshark
Icon
Editing trace files with Editcap
Icon
Merging trace files with Mergecap
Icon
Other helpful tools
Icon
Summary
9
Index
Icon
Index

IP networks and subnets

Before moving on, a short review of typical IP subnetting terms and typical applications should help clarify the terms used in this book and will act as a refresher for those already versed in IP addressing.

A /24 designator placed after a network IP address in diagrams or device configurations is a Classless Inter-Domain Routing (CIDR) designator that indicates the following:

  • The first 24 out of the 32 bits in the 4-byte IP address represents the network portion of any IP address on this network. This network is designated as 10.1.1.0 (the next /24 network would be 10.1.2.0, then 10.1.3.0, and so on).
  • The last 8 bits of the 32-bit address can be used to give workstations, hosts, and other devices an IP address, with the following exceptions:
    • The first host address on this network is reserved as a network designator to build routing tables: 10.1.1.0 (typically called the loopback address)
    • The last host address on this network is reserved as an IP broadcast address: 10...
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Wireshark Essentials
End of Section 2
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon