Wireshark fundamentals a network engineer's handbook to analyzing network traffic

Understand the fundamentals of the Wireshark tool that is key for network engineers and network security analysts. This book explains how the Wireshark tool can be used to analyze network traffic and teaches you network protocols and features. Author Vinit Jain walks you through the use of Wireshark...

Descripción completa

Detalles Bibliográficos
Otros Autores: Jain, Vinit, author (author)
Formato: Libro electrónico
Idioma:Inglés
Publicado: Berkeley, California : Apress L. P. [2022]
Materias:
Ver en Biblioteca Universitat Ramon Llull:https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009655515806719
Tabla de Contenidos:
  • Intro
  • Table of Contents
  • About the Author
  • About the Technical Reviewers
  • Acknowledgments
  • Introduction
  • Chapter 1: Introduction to Wireshark
  • Introduction to Network Traffic Analysis
  • Network Sniffing
  • Sniffer Placement
  • Number of Sniffer Placements
  • Network Tap
  • Overview of Wireshark
  • Installing Wireshark
  • Installing Wireshark on Windows
  • Installing Wireshark on Mac
  • Installing Wireshark on Ubuntu
  • Setting Up Port Mirroring
  • SPAN on Cisco IOS/IOS-XE
  • SPAN on Cisco Nexus Switches
  • Enabling Port Mirroring on Arista EOS
  • Enabling Port Mirroring on JunOS
  • Summary
  • References in This Chapter
  • Chapter 2: Getting Familiar with Wireshark
  • Overview of Wireshark Tool
  • Wireshark Preferences
  • Appearance
  • Capture
  • Expert
  • Filter Buttons
  • Name Resolution
  • Protocols
  • RSA Keys
  • Statistics
  • Advanced
  • Performing Packet Capture Using Wireshark
  • Dissectors
  • Configuration Profiles
  • Filtering with Wireshark
  • Capture Filters
  • Display Filters
  • Working with Wireshark Capture Files
  • PCAP vs. PCAPng
  • Capture from Multiple Interfaces
  • Timestamps
  • Embedding Comments
  • Metadata
  • Extendable Format
  • Splitting Packet Captures into Multiple Files
  • Merging Multiple Capture Files
  • Analyzing Packets in Wireshark
  • OSI Model
  • Analyzing Packets
  • Time
  • Length
  • Capture File Properties
  • Summary
  • Chapter 3: Analyzing Layer 2 and Layer 3 Traffic
  • Layer 2 Frames
  • Ethernet Frames
  • Layer 3 Packets
  • Address Resolution Protocol
  • IPv4 Packets
  • IPv4 Addressing
  • ICMP
  • IP Fragmentation and Reassembly
  • IPv6 Packets
  • IPv6 Addressing
  • Extension Headers
  • ICMPv6
  • IPv6 Neighbor Discovery
  • Analyzing QoS Markings
  • Summary
  • Reference in This Chapter
  • Chapter 4: Analyzing Layer 4 Traffic
  • Understanding the TCP/IP Model
  • Problem of Ownership.
  • Transmission Control Protocol
  • TCP Flags
  • TCP Three-Way Handshake
  • Port Scanning
  • Investigating Packet Loss
  • TCP Retransmission
  • TCP Out-of-Order Packets
  • Troubleshooting with Wireshark Graphs
  • TCP Stream Graphs
  • Time Sequence (Stevens)
  • Time Sequence (tcptrace)
  • Throughput Graph
  • Window Scaling Graph
  • RTT Graph
  • I/O Graphs
  • Flow Graphs
  • TCP Expert
  • Wireshark Profile for TCP
  • User Datagram Protocol
  • Summary
  • References in This Chapter
  • Chapter 5: Analyzing Control Plane Traffic
  • Analyzing Routing Protocol Traffic
  • OSPF
  • EIGRP
  • Hello Packet
  • Update Packet
  • Acknowledge Packet
  • Query Packet
  • Reply Packet
  • BGP
  • PIM
  • PIM Hello Message
  • PIM Register Message
  • PIM Register-Stop Message
  • PIM Join/Prune Message
  • Analyzing Overlay Traffic
  • GRE
  • IPSec
  • VXLAN
  • Summary
  • Index.