Buying Options
Practical Packet Analysis
Print $39.95
Add to Cart
Print+Ebook $43.95
Add to Cart
Ebook $31.95
Add to Cart
Safari Books Online
Add to Cart
What is this?
Description
Wireshark (formerly called Ethereal) is the world's most powerful "packet sniffer", allowing its users to uncover valuable information about computer networks (whether theirs or others'). Rather than simply take readers through Wireshark's tools Practical Packet Analysis shows how to use the software to monitor their own networks. The book is aimed at network engineers and system administrators, but it's clear enough for even Wireshark newbies. Includes a bonus CD with trace file examples as well as videos that show packet analysis in action.
Full Description
Table of Contents
  1. Chapter 1 PACKET ANALYSIS AND NETWORK BASICS

    1. What Is Packet Analysis?

    2. Evaluating a Packet Sniffer

    3. How Packet Sniffers Work

    4. How Computers Communicate

  2. Chapter 2 TAPPING INTO THE WIRE

    1. Living Promiscuously

    2. Sniffing Around Hubs

    3. Sniffing in a Switched Environment

    4. Sniffing in a Routed Environment

    5. Network Maps

  3. Chapter 3 INTRODUCTION TO WIRESHARK

    1. A Brief History of Wireshark

    2. The Benefits of Wireshark

    3. Installing Wireshark

    4. Wireshark Fundamentals

  4. Chapter 4 WORKING WITH CAPTURED PACKETS

    1. Finding and Marking Packets

    2. Saving and Exporting Capture Files

    3. Merging Capture Files

    4. Printing Packets

    5. Time Display Formats and References

    6. Capture and Display Filters

  5. Chapter 5 ADVANCED WIRESHARK FEATURES

    1. Name Resolution

    2. Protocol Dissection

    3. Following TCP Streams

    4. The Protocol Hierarchy Statistics Window

    5. Viewing Endpoints

    6. Conversations

    7. The IO Graphs Window

  6. Chapter 6 COMMON PROTOCOLS

    1. Address Resolution Protocol

    2. Dynamic Host Configuration Protocol

    3. TCP/IP and HTTP

    4. Domain Name System

    5. File Transfer Protocol

    6. Telnet Protocol

    7. MSN Messenger Service

    8. Internet Control Message Protocol

    9. Final Thoughts

  7. Chapter 7 BASIC CASE SCENARIOS

    1. A Lost TCP Connection

    2. Unreachable Destinations and ICMP Codes

    3. Fragmented Packets

    4. No Connectivity

    5. The Ghost in Internet Explorer

    6. Inbound FTP

    7. It's Not My Fault!

    8. An Evil Program

    9. Final Thoughts

  8. Chapter 8 FIGHTING A SLOW NETWORK

    1. Anatomy of a Slow Download

    2. A Slow Route

    3. Double Vision

    4. Did That Server Flash Me?

    5. A Torrential Downfall

    6. POP Goes the Email Server

    7. Here's Something Gnu

    8. Final Thoughts

  9. Chapter 9 SECURITY-BASED ANALYSIS

    1. OS Fingerprinting

    2. A Simple Port Scan

    3. The Flooded Printer

    4. An FTP Break-In

    5. Blaster Worm

    6. Covert Information

    7. A Hacker's Point of View

  10. Chapter 10 SNIFFING INTO THIN AIR

    1. Sniffing One Channel at a Time

    2. Wireless Signal Interference

    3. Wireless Card Modes

    4. Sniffing Wirelessly in Windows

    5. Sniffing Wirelessly in Linux

    6. 802.11 Packet Extras

    7. Wireless-Specific Columns

    8. Wireless-Specific Filters

    9. A Bad Connection Attempt

    10. Final Thoughts

  11. Chapter 11 FURTHER READING

  1. AFTERWORD

  2. COLOPHON

View Full Table of Contents
Product Details
Title:
Practical Packet Analysis
By:
Chris Sanders
Publisher:
No Starch Press
Formats:
  • Print
  • Ebook
  • Safari Books Online
Print Release:
May 2007
Ebook Release:
August 2009
Pages:
178
Print ISBN:
978-1-59327-149-7
| ISBN 10:
1-59327-149-2
Ebook ISBN:
978-1-59327-159-6
| ISBN 10:
1-59327-159-X
Customer Reviews
About the Authors
  1. Chris Sanders

    Chris Sanders is currently the network administrator for a public school district in Kentucky. A Microsoft Certified Professional and Certified Wireless Network Administrator, he writes for WindowsNetwork.com, WindowsDevCenter.com, and maintains a blog at chrissanders.org. He is the author of Saving Money and Time with Virtual Server (O'Reilly Short Cut).

    View Chris Sanders's full profile page.

  2. Chris Sanders

    Chris is currently employed as the Network Administrator for one of the largest public schools districts in the Commonwealth of Kentucky. He works daily with various technologies and has an expertise in Windows 2003 Server, Active Directory, Group Policy, Microsoft Virtual Server, wireless network administration, and network security. His is an admin tip writer for WindowsNetworking.com which is owned by the TechGenix network and sees 615,000+ unique visitors daily. He also maintains a personal blog at http://www.chrissanders.org which is updated often in regards to his aforementioned areas of expertise. He currently holds the status of being an A+ Certified Professional, a Microsoft Certified Professional, and a Certified Wireless Network Administrator.

    View Chris Sanders's full profile page.

  • Book cover of Practical Packet Analysis