Practical Packet Analysis, 3rd Edition 版次: Using Wireshark to Solve Real-World Network Problems
Author: Chris Sanders (Author)
Publisher finelybook 出版社: No Starch Press
Edition 版次: 3rd
Publication Date 出版日期: 2017-03-30
Language 语言: English
Print Length 页数: 368 pages
ISBN-10: 1593278020
ISBN-13: 9781593278021
Book Description
It’s easy to capture packets with Wireshark, the world’s most popular network sniffer, whether off the wire or from the air. But how do you use those packets to understand what’s happening on your network?
Updated to cover Wireshark 2.x, the third edition of Practical Packet Analysis will teach you to make sense of your packet captures so that you can better troubleshoot network problems. You’ll find added coverage of IPv6 and SMTP, a new chapter on the powerful command line packet analyzers tcpdump and TShark, and an appendix on how to read and reference packet values using a packet map.
Practical Packet Analysis will show you how to:
–Monitor your network in real time and tap live network communications
–Build customized capture and display filters
–Use packet analysis to troubleshoot and resolve common network problems, like loss of connectivity, DNS issues, and slow speeds
–Explore modern exploits and malware at the packet level
–Extract files sent across a network from packet captures
–Graph traffic patterns to visualize the data flowing across your network
–Use advanced Wireshark features to understand confusing captures
–Build statistics and reports to help you better explain technical network information to non-techies
No matter what your level of experience is, Practical Packet Analysis will show you how to use Wireshark to make sense of any network and get things done.
Review
“I’d recommend this book to junior network analysts, software developers, and the newly minted CSE/CISSP/etc.–folks that just need to roll up their sleeves and get started troubleshooting network (and security) problems.” –Gunter Ollmann, former Chief Technical Officer of IOActive
“The next time I investigate a slow network, I’ll turn to Practical Packet Analysis. And that’s perhaps the best praise I can offer on any technical book.” –Michael W. Lucas, author of Absolute FreeBSD and Network Flow Analysis
“An essential book if you are responsible for network administration on any level.” –Linux Pro Magazine
“A wonderful, simple-to-use, and well-laid-out guide.” –ArsGeek.com
“If you need to get the basics of packet analysis down pat, this is a very good place to start.” –StateofSecurity.com
“Very informative and held up to the key word in its title, practical. It does a great job of giving readers what they need to know to do packet analysis and then jumps right in with vivid real-life examples of what to do with Wireshark.” –LinuxSecurity.com
“Are there unknown hosts chatting away with each other? Is my machine talking to strangers? You need a packet sniffer to really find the answers to these questions. Wireshark is one of the best tools to do this job, and this book is one of the best ways to learn about that tool.” –Free Software Magazine
“Perfect for the beginner to intermediate.” –Daemon News
About the Author
Contents
Chapter 1: Packet Analysis and Network Basics
Chapter 2: Tapping into the Wire
Chapter 3: Introduction to Wireshark
Chapter 4: Working with Captured Packets
Chapter 5: Advanced Wireshark Features
Chapter 6: Packet Analysis on the Command Line
Chapter 7: Network Layer Protocols
Chapter 8: Transport Layer Protocols
Chapter 9: Common Upper-Layer Protocols
Chapter 10: Basic Real-World Scenarios
Chapter 11: Fighting a Slow Network
Chapter 12: Packet Analysis for Security
Chapter 13: Wireless Packet Analysis
Appendix A: Further Reading
Appendix B: Navigating Packets
Amazon page
网盘无法下载，提示下载信息错误
百度网盘的只下载第一个地址即可，第二个地址是提取码，转码错误，不用管它
能不用百度网盘吗？跟其他一样传城通？
100M+的文件后续会上传至城通