Wireshark Essentials

Get up and running with Wireshark to analyze network packets and protocols effectivelyAbout This BookTroubleshoot problems, identify security risks, and measure key application performance metrics with WiresharkGain valuable insights into the network and application protocols, and the key fields in each protocolConfigure Wireshark, and analyze networks and applications at the packet level with the help of practical examples and step-wise instructionsWho This Book Is ForThis book is aimed at IT professionals who want to develop or enhance their packet analysis skills. Basic familiarity with common network and application services terms and technologies is assumed; however, expertise in advanced networking topics or protocols is not required. Readers in any IT field can develop the analysis skills specifically needed to complement and support their respective areas of responsibility and interest.What You Will LearnDiscover how packet analysts view networks and the role of protocols at the packet levelCapture and isolate all the right packets to perform a thorough analysis using Wireshark's extensive capture and display filtering capabilitiesUse the optimal timestamp displays, packet marking and coloring, and protocol-level settings for effective analysis of packetsSelect and configure the appropriate Wireshark features and functions for the analysis task at handTroubleshoot connectivity and functionality issues in your networkAnalyze and report the leading causes of poor application performanceAnalyze packets to detect and identify malicious traffic and security threatsLeverage the Wireshark command-line utilities for high performance or scripted analysis activitiesIn DetailThis book introduces the Wireshark network analyzer to IT professionals across multiple disciplines.It starts off with the installation of Wireshark, before gradually taking you through your first packet capture, identifying and filtering out just the packets of interest, and saving them to a new file for later analysis. The subsequent chapters will build on this foundation by covering essential topics on the application of the right Wireshark features for analysis, network protocols essentials, troubleshooting, and analyzing performance issues. Finally, the book focuses on packet analysis for security tasks, command-line utilities, and tools that manage trace files.Upon finishing this book, you will have successfully added strong Wireshark skills to your technical toolset and significantly increased your value as an IT professional.v, 175 p,; 19 x 23.5 c