Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Wireshark Essentials
  • Table Of Contents Toc
Wireshark Essentials

Wireshark Essentials

By : James H. Baxter
3.8 (5)
Buy this Book
close
close
Wireshark Essentials

Wireshark Essentials

3.8 (5)
By: James H. Baxter
Buy this Book

Overview of this book

This book is aimed at IT professionals who want to develop or enhance their packet analysis skills. Basic familiarity with common network and application services terms and technologies is assumed; however, expertise in advanced networking topics or protocols is not required. Readers in any IT field can develop the analysis skills specifically needed to complement and support their respective areas of responsibility and interest.
Table of Contents (10 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Getting Acquainted with Wireshark
Icon
1. Getting Acquainted with Wireshark
Icon
Installing Wireshark
Icon
Performing your first packet capture
Icon
Summary
2
2. Networking for Packet Analysts
Icon
2. Networking for Packet Analysts
Icon
The OSI model – why it matters
Icon
IP networks and subnets
Icon
Switching and routing packets
Icon
WAN links
Icon
Wireless networking
Icon
Summary
3
3. Capturing All the Right Packets
Icon
3. Capturing All the Right Packets
Icon
Picking the best capture point
Icon
Test Access Ports and switch port mirroring
Icon
Capturing interfaces, filters, and options
Icon
Verifying a good capture
Icon
Saving the bulk capture file
Icon
Isolating conversations of interest
Icon
Using the Conversations window
Icon
Wireshark display filters
Icon
Filter Expression Buttons
Icon
Following TCP/UDP/SSL streams
Icon
Marking and ignoring packets
Icon
Saving the filtered traffic
Icon
Summary
4
4. Configuring Wireshark
Icon
4. Configuring Wireshark
Icon
Working with packet timestamps
Icon
Colorization and coloring rules
Icon
Wireshark preferences
Icon
Wireshark profiles
Icon
Summary
5
5. Network Protocols
chevron up
Icon
5. Network Protocols
Icon
The OSI and DARPA reference models
Icon
Transport layer protocols
Icon
Application layer protocols
Icon
Summary
6
6. Troubleshooting and Performance Analysis
Icon
6. Troubleshooting and Performance Analysis
Icon
Troubleshooting methodology
Icon
Troubleshooting connectivity issues
Icon
Troubleshooting functional issues
Icon
Performance analysis methodology
Icon
Summary
7
7. Packet Analysis for Security Tasks
Icon
7. Packet Analysis for Security Tasks
Icon
Security analysis methodology
Icon
Security assessment tools
Icon
Identifying unacceptable or suspicious traffic
Icon
Scans and sweeps
Icon
OS fingerprinting
Icon
Malformed packets
Icon
Phone home traffic
Icon
Password-cracking traffic
Icon
Unusual traffic
Icon
Summary
8
8. Command-line and Other Utilities
Icon
8. Command-line and Other Utilities
Icon
Wireshark command-line utilities
Icon
Capturing traffic with Dumpcap
Icon
Capturing traffic with Tshark
Icon
Editing trace files with Editcap
Icon
Merging trace files with Mergecap
Icon
Other helpful tools
Icon
Summary
9
Index
Icon
Index

The OSI and DARPA reference models

We reviewed the purpose of the OSI and DARPA reference models in Chapter 2, Networking for Packet Analysts. The visual depiction of their layers is repeated in the following diagram as a reference and summary of some of the primary protocols and where they fit into their respective layers:

Network layer protocols

Network layer protocols, also known as Internet layer protocols in the DARPA reference model, provide basic network connectivity and internetwork communications services. In this layer, you will predominantly find the IP protocol being used to get packets transported across the network, along with ARP, IGMP, and ICMP.

We covered the IP and ARP protocol packet header structures and fields in Chapter 2, Networking for Packet Analysts, so this information won't be repeated. However, basic Wireshark capture and display filters are provided here and also for the remaining protocols in the following sections:

Wireshark IPv4 filters

Capture filter(s): ip...

Visually different images
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Wireshark Essentials
End of Section 5
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon