Practical Packet Analysis: Using Wireshark to Solve Real-World Network Problems, 3/e

Chris Sanders

買這商品的人也買了...

商品描述

Wireshark is the world's most popular network sniffer that makes capturing packets easy, but it won't be much help if you don't have a solid foundation in packet analysis.

Practical Packet Analysis, 3rd Edition will show you how to make sense of your PCAP data and let you start troubleshooting the problems on your network. This third edition is updated for Wireshark 2.0.5 and IPV6, making it the definitive guide to packet analysis and a must for any network technician, administrator, or engineer. This updated version includes two new chapters that will teach you how to use the powerful command-line packet analyzers tcpdump and TShark as well as how to read and reference packet values using a packet map.

Practical Packet Analysis will introduce you to the basics of packet analysis, starting with how networks work and how packets travel along the wire. Then you'll move onto navigating packets and using Wireshark to capture and analyze packets. The book then covers common lower-layer and upper-layer protocols and provides you with real-world scenarios like Internet connectivity issues, how to capture social media traffic, and fighting a slow network.

You'll learn how to:

  • Monitor your network in real-time and tap live network communications
  • Recognize common network protocols including TCP, IPv4 and IPv6, SMTP, and ARP
  • Build customized capture and display filters to quickly navigate through large numbers of packets
  • Troubleshoot and resolve common network problems like loss of connectivity, DNS issues, and sluggish speeds with packet analysis
  • Understand how modern exploits and malware behave at the packet level
  • Carve out data in a packet to retrieve the actual files sent across the network
  • Graph traffic patterns to visualize the data flowing across your network
  • Use advanced Wireshark features to understand confusing captures
  • Build statistics and reports to help you better explain technical network information to non-techies

Whether you're a budding network analyst in need of a headfirst dive into packet analysis or an experienced administrator searching for new tricks, look no further than the third edition of Practical Packet Analysis.

商品描述(中文翻譯)

Wireshark 是全球最受歡迎的網路封包擷取器,讓捕捉封包變得容易,但如果您在封包分析方面沒有堅實的基礎,它將無法提供太多幫助。

《實用封包分析,第三版》將向您展示如何理解您的 PCAP 數據,並讓您開始解決網路上的問題。這本第三版已更新至 Wireshark 2.0.5 和 IPV6,成為封包分析的權威指南,是任何網路技術人員、管理員或工程師必備的書籍。此更新版本還包括兩個新章節,將教您如何使用強大的命令行封包分析器 tcpdump 和 TShark,以及如何使用封包地圖讀取和參考封包值。

《實用封包分析》將向您介紹封包分析的基礎知識,從網路的運作方式和封包在線路上的傳輸開始。然後,您將學習如何使用 Wireshark 捕捉和分析封包。本書還涵蓋了常見的低層和高層協議,並提供了一些實際場景,例如網際網路連接問題、如何捕捉社交媒體流量以及解決網路速度慢的問題。

您將學習如何:

- 即時監控您的網路並截取實時網路通信
- 識別常見的網路協議,包括 TCP、IPv4 和 IPv6、SMTP 和 ARP
- 建立自定義的捕捉和顯示過濾器,以快速導航大量封包
- 通過封包分析解決和排除常見的網路問題,如連接丟失、DNS 問題和網路速度慢
- 了解現代攻擊和惡意軟體在封包層面上的行為
- 從封包中提取數據以檢索實際在網路上傳送的文件
- 繪製流量模式圖以可視化您的網路中的數據流動
- 使用高級的 Wireshark 功能來理解複雜的封包捕捉
- 建立統計和報告,以幫助您向非技術人員解釋技術網路信息

無論您是一位對封包分析有興趣的新手網路分析師,還是一位尋找新技巧的經驗豐富的管理員,都不用再尋找,第三版的《實用封包分析》是您的最佳選擇。