Network Analysis Using Wireshark 2 Cookbook - Second Edition: Practical recipes to analyze and secure your network using Wireshark 2 - Brossura

Nainar, Nagendra Kumar; Ramdoss, Yogesh; Orzach, Yoram

Brossura

ISBN 10: 1786461676 ISBN 13: 9781786461674

Casa editrice: Packt Publishing, 2018

Riassunto

Over 100 recipes to analyze and troubleshoot network problems using Wireshark 2

Key Features

• Place Wireshark 2 in your network and configure it for effective network analysis
• Deep dive into the enhanced functionalities of Wireshark 2 and protect your network with ease
• A practical guide with exciting recipes on a widely used network protocol analyzer

Book Description

This book contains practical recipes on troubleshooting a data communications network. This second version of the book focuses on Wireshark 2, which has already gained a lot of traction due to the enhanced features that it offers to users. The book expands on some of the subjects explored in the first version, including TCP performance, network security, Wireless LAN, and how to use Wireshark for cloud and virtual system monitoring. You will learn how to analyze end-to-end IPv4 and IPv6 connectivity failures for Unicast and Multicast traffic using Wireshark. It also includes Wireshark capture files so that you can practice what you've learned in the book. You will understand the normal operation of E-mail protocols and learn how to use Wireshark for basic analysis and troubleshooting. Using Wireshark, you will be able to resolve and troubleshoot common applications that are used in an enterprise network, like NetBIOS and SMB protocols. Finally, you will also be able to measure network parameters, check for network problems caused by them, and solve them effectively. By the end of this book, you'll know how to analyze traffic, find patterns of various offending traffic, and secure your network from them.

What you will learn

• Configure Wireshark 2 for effective network analysis and troubleshooting
• Set up various display and capture filters
• Understand networking layers, including IPv4 and IPv6 analysis
• Explore performance issues in TCP/IP
• Get to know about Wi-Fi testing and how to resolve problems related to wireless LANs
• Get information about network phenomena, events, and errors
• Locate faults in detecting security failures and breaches in networks

Who This Book Is For

This book is for security professionals, network administrators, R&D, engineering and technical support, and communications managers who are using Wireshark for network analysis and troubleshooting. It requires a basic understanding of networking concepts, but does not require specific and detailed technical knowledge of protocols or vendor implementations.

Table of Contents

1. Introduction to Wireshark
2. Configuring Wireshark for Network Troubleshooting
3. Advanced configuration of capture filters
4. Advanced configuration of display filters
5. Using Basic Statistics Tools
6. Using Advanced Statistics Tools
7. Using the Expert System
8. Ethernet and LAN Switching
9. Wireless LAN Analysis
10. ARP, IPv4/IPv6 and Multicast
11. Transport Layer Protocol Analysis
12. FTP, HTTP1, and HTTP2
13. Domain Name System (DNS) Protocol Analysis
14. Analyzing Mail Protocols
15. NetBIOS and SMB Protocols Analysis
16. Analyzing Enterprise Applications Behavior
17. SIP, Multimedia and IP Telephony
18. Troubleshooting Bandwidth and Delay Problems
19. Security and Network Forensics

Su questo libro

L'autore

Nagendra Kumar Nainar (CCIE#20987) is a senior technical leader with RP escalation team in Cisco Systems. He is the co-inventor of more than 80 patent applications and the coauthor of six internet RFCs, various internet drafts and IEEE papers. He is a guest lecturer in North Carolina State University and a speaker in different network forums.

Yogesh Ramdoss (CCIE #16183) is a senior technical leader in the technical services organization of Cisco Systems. He is a distinguished speaker at CiscoLive, sharing knowledge and educating customers on enterprise/datacenter technologies and platforms, troubleshooting and packet capturing tools, and open network programmability. Co-inventor of patent in machine/behavior learning.

Yoram Orzach gained his bachelor's degree in science from the Technion in Haifa, Israel, and worked in Bezeq as a systems engineer in the fields of transmission and access networks. From being the technical manager at Netplus, he is now the CTO of NDI Communications. His experience is with corporate networks, service providers, and internet service provider's networks, and his client companies are Comverse, Motorola, Intel, Ceragon networks, Marvel, HP, and others. His experience is in design, implementation, troubleshooting as well as training for R&D, engineering, and IT groups.

Dettagli dell?edizione

• Editore: Packt Publishing
• Data di pubblicazione: 2018
• ISBN 10: 1786461676
• ISBN 13: 9781786461674
• Rilegatura: Copertina flessibile
• Lingua: Inglese
• Numero edizione: 2
• Numero di pagine: 626