Wireshark 2.x指南：解决网络问题的实战packet分析

5星 · 超过95%的资源需积分: 47 18 浏览量更新于2024-07-19 3 收藏 14.85MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

资源详情

资源推荐

xiv Contents in Detail

Adding Wireless-Specific Columns to the Packet List Pane ..................... 305

Wireless-Specific Filters............................................. 307

Filtering Traffic for a Specific BSS ID ............................. 307

Filtering Specific Wireless Packet Types ........................... 307

Filtering a Specific Frequency .................................. 308

Saving a Wireless Profile ........................................... 309

Wireless Security ................................................. 309

Successful WEP Authentication ................................. 309

Failed WEP Authentication .................................... 311

Successful WPA Authentication................................. 312

Failed WPA Authentication ................................... 314

Final Thoughts ................................................... 315

FURTHER READING 317

Packet Analysis Tools .............................................. 317

CloudShark .............................................. 317

WireEdit ................................................ 318

Cain & Abel.............................................. 319

Scapy .................................................. 319

TraceWrangler ............................................ 319

Tcpreplay................................................ 319

NetworkMiner ............................................ 319

CapTipper ............................................... 320

ngrep .................................................. 321

libpcap ................................................. 321

Npcap.................................................. 321

hping................................................... 321

Python .................................................. 321

Packet Analysis Resources ........................................... 321

Wireshark’s Home Page ..................................... 322

Practical Packet Analysis Online Course........................... 322

SANS’s Security Intrusion Detection In-Depth Course .................. 322

Chris Sanders’s Blog ....................................... 322

Brad Duncan’s Malware Traffic Analysis .......................... 322

IANA’s Website ........................................... 323

W. Richard Stevens’s TCP/IP Illustrated Series ...................... 323

The TCP/IP Guide .......................................... 323

NAVIGATING PACKETS 325

Packet Representation.............................................. 326

Using Packet Diagrams............................................. 328

Navigating a Mystery Packet......................................... 330

Final Thoughts ................................................... 332

INDEX 333

xviii Introduction

Why This Book?

You may ﬁnd yourself wondering why you should buy this book as opposed

to any other book about packet analysis. The answer lies in the title: Practical

Packet Analysis. Let’s face it—nothing beats real-world experience, and the

closest you can come to that experience in a book is through practical

examples with real-world scenarios.

The ﬁrst half of this book gives you the knowledge you’ll need to

understand packet analysis and Wireshark. The second half of the book is

devoted entirely to practical cases that you could easily encounter in day-

to-day network management.

Whether you’re a network technician, a network administrator, a chief

information ofﬁcer, a desktop technician, or even a network security ana-

lyst, you will beneﬁt greatly from understanding and using the packet analy-

sis techniques described in this book.

Concepts and Approach

I’m generally a really laid-back guy, so when I teach a concept, I try to do so

in a really laid-back way. This holds true for the language used in this book.

It’s easy to get lost in technical jargon, but I’ve tried my best to keep things

as casual as possible. I’ve deﬁned all the terms and concepts clearly and

without any added ﬂuff. After all, I’m from the great state of Kentucky, so I

try to keep the big words to a minimum. (But you’ll have to forgive me for

some of the backwoods country verbiage you’ll ﬁnd throughout the text.)

The ﬁrst several chapters are integral to understanding the rest of the

book, so make it a point to master the concepts in these pages ﬁrst. The

second half of the book is purely practical. You may not see these exact

scenarios in your workplace, but you will be able to apply the concepts they

teach in the situations you do encounter.

Here is a quick breakdown of this book’s contents:

Chapter 1: Packet Analysis and Network Basics

What is packet analysis? How does it work? How do you do it? This chap-

ter covers the basics of network communication and packet analysis.

Chapter 2: Tapping into the Wire

This chapter covers the different techniques for placing a packet sniffer

on your network.

Chapter 3: Introduction to Wireshark

Here, we’ll look at the basics of Wireshark—where to get it, how to

use it, what it does, why it’s great, and all that good stuff. This edition

includes a new discussion about customizing Wireshark with conﬁgura-

tion proﬁles.

剩余371页未读，继续阅读

xinconan2

粉丝: 268
资源: 399

Wireshark 2.x指南：解决网络问题的实战packet分析

Practical Packet Analysis, 3rd Edition

Practical Packet Analysis(2nd) epub

Practical Packet Analysis(3rd) 无水印pdf

socket.io 异常 java.lang.IllegalStateException: null at com.corundumstudio.socketio.protocol.PacketType.valueOf(PacketType.java:48)

Select Error: ORA-12571: TNS.packet writer failure

golang读取wmv文件并封装成[]*rtp.Packet

11.4.2.5 Packet Tracer

TypeError: create_bool(): incompatible function arguments. The following argument types are supported: 1. (arg0: bool) -> mediapipe.python._framework_bindings.packet.Packet

typeerror: create_int(): incompatible function arguments. the following argument types are supported: 1. (arg0: int) -> mediapipe.python._framework_bindings.packet.packet

raw = item1.packet if raw.haslayer(Raw): raw_data = raw[Raw].load 上述代码中，item1.packet是scapy的packet数据包。问：raw[Raw].load返回的值是什么，什么进制。以及如何将raw_data转成我们可以看懂的字符串

ModuleNotFoundError: No module named 'reptile.packet'

golang中写入pcma的rtp包pkt := &rtp.Packet{ Header: rtp.Header{ Version: 2, PayloadType: 8, }, Payload: dat.pcma, } dat.rtpPackets = []*rtp.Packet{pkt}是否正确

写一个433Mhz报文数据包联合体包含多个结构体数据包的自定义类型变量

aaa4j-radius 组装radius报文，发送eap中继挑战 java

Packet-In数量比较规则示例 代码

网络模拟器PacketTracer 的思考与分析

利用Python实现Word文档与PDF文档的格式转化 （提取PDF文本内容），实现PDF文件的合并、拆分，PDF页面旋转已经PDF页面增加水印。

基于python的抓包分析软件，以MVC模式运行，需要有相关的代码嘛

DMR packet types

最新资源

Packet-In数量比较规则示例代码

利用Python实现Word文档与PDF文档的格式转化（提取PDF文本内容），实现PDF文件的合并、拆分，PDF页面旋转已经PDF页面增加水印。