The two types of filters offered by Wireshark are capture filter and display filter, which can be used over live traffic and/or with saved capture files. Filters provide advanced capabilities in performing packet analysis, where a user is able to separate the unwanted stream of packets from the stream of packets for analysis.
Wireshark 2 Quick Start Guide
By :
Wireshark 2 Quick Start Guide
By:
Overview of this book
<p>Wireshark is an open source protocol analyser, commonly used among the network and security professionals. Currently being developed and maintained by volunteer contributions of networking experts from all over the globe. Wireshark is mainly used to analyze network traffic, analyse network issues, analyse protocol behaviour, etc. - it lets you see what's going on in your network at a granular level. This book takes you from the basics of the Wireshark environment to detecting and resolving network anomalies.</p>
<p>This book will start from the basics of setting up your Wireshark environment and will walk you through the fundamentals of networking and packet analysis. As you make your way through the chapters, you will discover different ways to analyse network traffic through creation and usage of filters and statistical features. You will look at network security packet analysis, command-line utilities, and other advanced tools that will come in handy when working with day-to-day network operations.</p>
<p>By the end of this book, you have enough skill with Wireshark 2 to overcome real-world network challenges.</p>
Table of Contents (14 chapters)
Title Page
Packt Upsell
Contributors
Preface
Free Chapter
Installing Wireshark
Introduction to Wireshark and Packet Analysis
Filtering Our Way in Wireshark
Analyzing Application Layer Protocols
Analyzing the Transport Layer Protocols TCP/UDP
Network Security Packet Analysis
Analyzing Traffic in Thin Air
Mastering the Advanced Features of Wireshark
Other Books You May Enjoy
Index
Customer Reviews