Wireshark Network Security (Paperback)

A succinct guide to securely administer your network using Wireshark

About This Book

• Make the most of Wireshark by breezing through all its features and analyzing network security threats
• Full of scenarios faced by security analysts along with comprehensive solutions
• Packed with step-by-step instructions to walk you through the capabilities of Wireshark

Who This Book Is For

If you are network administrator or a security analyst with an interest in using Wireshark for security analysis, then this is the book for you. Basic familiarity with common network and application services terms and technologies is assumed.

What You Will Learn

• Familiarize yourself with the robust features offered by Wireshark
• Use the powerful command-line utilities shipped with Wireshark
• Analyze numerous threats to network security using Wireshark
• Investigate attacks performed using popular security tools such as Nmap, Nessus, Metasploit, and more
• Solve real-world CTF challenges using Wireshark
• Create your own security-related profile in Wireshark
• Configure Wireshark for effective network troubleshooting
• Get accustomed to common scenarios faced by security analysts
• Analyze malware traffic successfully by using Wireshark
• Unearth anomalies hampering the speed of network communications

In Detail

Wireshark is the world's foremost network protocol analyzer for network analysis and troubleshooting.

This book will walk you through exploring and harnessing the vast potential of Wireshark, the world's foremost network protocol analyzer.

The book begins by introducing you to the foundations of Wireshark and showing you how to browse the numerous features it provides. You'll be walked through using these features to detect and analyze the different types of attacks that can occur on a network. As you progress through the chapters of this book, you'll learn to perform sniffing on a network, analyze clear-text traffic on the wire, recognize botnet threats, and analyze Layer 2 and Layer 3 attacks along with other common hacks.

By the end of this book, you will be able to fully utilize the features of Wireshark that will help you securely administer your network.

一本簡明指南：使用Wireshark安全管理您的網絡

關於本書

- 通過瀏覽Wireshark的所有功能並分析網絡安全威脅，充分利用Wireshark
- 充滿了安全分析師面臨的各種情境以及全面的解決方案
- 提供逐步指導，引導您了解Wireshark的功能

適合閱讀對象

- 如果您是網絡管理員或安全分析師，並且有興趣使用Wireshark進行安全分析，那麼這本書就是為您而寫的。假設您對常見的網絡和應用服務術語和技術有基本的熟悉。

您將學到什麼

- 熟悉Wireshark提供的強大功能
- 使用Wireshark附帶的強大命令行工具
- 使用Wireshark分析各種網絡安全威脅
- 使用常用安全工具（如Nmap、Nessus、Metasploit等）進行攻擊調查
- 使用Wireshark解決現實世界的CTF挑戰
- 在Wireshark中創建自己的與安全相關的配置文件
- 配置Wireshark以進行有效的網絡故障排除
- 熟悉安全分析師面臨的常見情境
- 使用Wireshark成功分析惡意軟件流量
- 發現影響網絡通信速度的異常情況

詳細內容

Wireshark是全球領先的網絡協議分析器，用於網絡分析和故障排除。

本書將引導您探索和利用Wireshark的巨大潛力，這是全球領先的網絡協議分析器。

本書首先介紹Wireshark的基礎知識，並向您展示如何瀏覽其提供的眾多功能。您將逐步學習使用這些功能來檢測和分析可能發生在網絡上的不同類型的攻擊。隨著您在本書的章節中不斷深入，您將學習在網絡上進行嗅探，分析明文流量，識別殭屍網絡威脅，以及分析第2層和第3層攻擊以及其他常見的黑客攻擊。

通過閱讀本書，您將能夠充分利用Wireshark的功能，以幫助您安全管理您的網絡。