文档介绍：EDITION2ND
DON’TDON’T JUSTJUST STARESTARE
ATAT CAPTUREDCAPTURED Download the capture files
used in this book from
PACKETS. EDITION
PACKETS. / 2ND PRACTICALPRACTICAL
ANALYZEANALYZE . PACKETPACKET ANALYSISANALYSIS
PRACTICAL PACKET ANALYSIS PACKET PRACTICAL
PRACTICAL PACKET ANALYSIS PACKET PRACTICAL USING WIRESHARK TO SOLVE REAL-WORLD
NETWORK PROBLEMS
It’s easy to capture packets with Wireshark, the world’s • Graph traffic patterns to visualize the data flowing
most work sniffer, whether off the wire or from across work
the air. But how do you use those packets to understand
• Use advanced Wireshark features to understand
what’s happening on work? CHRIS SANDERS
confusing captures
With an expanded discussion work protocols and 45
• Build statistics and reports to help you better explain
completely new scenarios, this extensively revised second
work information to non-techies
edition of the best-selling Practical Packet Analysis will
teach you how to make sense of your PCAP data. You’ll Practical Packet Analysis is a must for work
find new sections on troubleshooting works and technician, administrator, or engineer. Stop guessing and
packet analysis for security to help you better understand start troubleshooting the problems on work.
how modern exploits and malware behave at the packet
ABOUT THE AUTHOR
level. Add to this a thorough introduction to the TCP/IP
network stack and you’re on your way to packet analysis Chris Sanders is puter security consultant, author,
proficiency. and researcher. A SANS Mentor who holds several
industry certifications, including CISSP, GCIA, GCIH, and
Learn how to:
GREM, he writes regularly for and
• Use packet analysis to identify and mon his blog, . Sanders uses Wireshark daily
network problems like loss of connectivity, DNS issues, for packet analysis. He lives in Charleston, South Carolina,
sluggish speeds, and malware infections