Wireshark 2.x指南：解决网络问题的实战packet分析

5星 · 超过95%的资源需积分: 47 19 浏览量更新于2024-07-19 3 收藏 14.85MB PDF 举报

《Practical Packet Analysis》第三版（2017）是一本深度解析网络流量分析的实用指南，由Chris Sanders编著。该书主要围绕Wireshark——全球最受欢迎的网络嗅探工具，全面介绍如何利用它来理解和解决实际网络问题。随着Wireshark 2.x版本的更新，本书提供了最新的技术和工具，使读者能够更有效地进行网络诊断。书中内容涵盖了IPv6和简单邮件传输协议(SMTP)的深入剖析，这两个现代网络通信的重要组成部分，使得读者能够在处理这些新兴技术时更加游刃有余。新增的一章特别关注命令行工具tcpdump和TShark的使用，这对于对命令行操作感兴趣的读者来说是一大亮点，因为它们在很多场景下提供了灵活而高效的分析手段。此外，作者还精心设计了一个附录，教导读者如何通过"packet map"解读和参考捕获到的网络数据包中的具体值，这对于深入理解数据包结构和技术细节至关重要。这使得即使是初级的网络管理员、软件开发者或安全专业人员也能通过这本书建立起坚实的网络分析基础。《Practical Packet Analysis》因其丰富的信息、易读性以及实用价值得到了业界的高度评价。评论者强调，无论是新手入门还是经验丰富的专业人士，这本书都是解决网络问题，包括网络安全问题的宝贵资源。它的价值在于不仅教授基础知识，还能激发读者对网络分析的热情，使他们在面对网络性能瓶颈或异常情况时能迅速找到问题根源。如果你需要掌握网络分析的核心技巧，无论你是初学者还是寻求提升的专业人士，《Practical Packet Analysis》第三版无疑是一个理想的起点，它将帮助你提升网络监控和故障排查能力，确保网络环境的稳定和安全。

xiv Contents in Detail

Adding Wireless-Specific Columns to the Packet List Pane ..................... 305

Wireless-Specific Filters............................................. 307

Filtering Traffic for a Specific BSS ID ............................. 307

Filtering Specific Wireless Packet Types ........................... 307

Filtering a Specific Frequency .................................. 308

Saving a Wireless Profile ........................................... 309

Wireless Security ................................................. 309

Successful WEP Authentication ................................. 309

Failed WEP Authentication .................................... 311

Successful WPA Authentication................................. 312

Failed WPA Authentication ................................... 314

Final Thoughts ................................................... 315

FURTHER READING 317

Packet Analysis Tools .............................................. 317

CloudShark .............................................. 317

WireEdit ................................................ 318

Cain & Abel.............................................. 319

Scapy .................................................. 319

TraceWrangler ............................................ 319

Tcpreplay................................................ 319

NetworkMiner ............................................ 319

CapTipper ............................................... 320

ngrep .................................................. 321

libpcap ................................................. 321

Npcap.................................................. 321

hping................................................... 321

Python .................................................. 321

Packet Analysis Resources ........................................... 321

Wireshark’s Home Page ..................................... 322

Practical Packet Analysis Online Course........................... 322

SANS’s Security Intrusion Detection In-Depth Course .................. 322

Chris Sanders’s Blog ....................................... 322

Brad Duncan’s Malware Traffic Analysis .......................... 322

IANA’s Website ........................................... 323

W. Richard Stevens’s TCP/IP Illustrated Series ...................... 323

The TCP/IP Guide .......................................... 323

NAVIGATING PACKETS 325

Packet Representation.............................................. 326

Using Packet Diagrams............................................. 328

Navigating a Mystery Packet......................................... 330

Final Thoughts ................................................... 332

INDEX 333

xviii Introduction

Why This Book?

You may ﬁnd yourself wondering why you should buy this book as opposed

to any other book about packet analysis. The answer lies in the title: Practical

Packet Analysis. Let’s face it—nothing beats real-world experience, and the

closest you can come to that experience in a book is through practical

examples with real-world scenarios.

The ﬁrst half of this book gives you the knowledge you’ll need to

understand packet analysis and Wireshark. The second half of the book is

devoted entirely to practical cases that you could easily encounter in day-

to-day network management.

Whether you’re a network technician, a network administrator, a chief

information ofﬁcer, a desktop technician, or even a network security ana-

lyst, you will beneﬁt greatly from understanding and using the packet analy-

sis techniques described in this book.

Concepts and Approach

I’m generally a really laid-back guy, so when I teach a concept, I try to do so

in a really laid-back way. This holds true for the language used in this book.

It’s easy to get lost in technical jargon, but I’ve tried my best to keep things

as casual as possible. I’ve deﬁned all the terms and concepts clearly and

without any added ﬂuff. After all, I’m from the great state of Kentucky, so I

try to keep the big words to a minimum. (But you’ll have to forgive me for

some of the backwoods country verbiage you’ll ﬁnd throughout the text.)

The ﬁrst several chapters are integral to understanding the rest of the

book, so make it a point to master the concepts in these pages ﬁrst. The

second half of the book is purely practical. You may not see these exact

scenarios in your workplace, but you will be able to apply the concepts they

teach in the situations you do encounter.

Here is a quick breakdown of this book’s contents:

Chapter 1: Packet Analysis and Network Basics

What is packet analysis? How does it work? How do you do it? This chap-

ter covers the basics of network communication and packet analysis.

Chapter 2: Tapping into the Wire

This chapter covers the different techniques for placing a packet sniffer

on your network.

Chapter 3: Introduction to Wireshark

Here, we’ll look at the basics of Wireshark—where to get it, how to

use it, what it does, why it’s great, and all that good stuff. This edition

includes a new discussion about customizing Wireshark with conﬁgura-

tion proﬁles.

剩余371页未读，继续阅读

xinconan2

粉丝: 269
资源: 399

Wireshark 2.x指南：解决网络问题的实战packet分析

深入浅出Cisco PacketTracer应用教程

Cisco Packet Tracer 7.1 教程与常见问题解答

IPv6 over IEEE 802.15.4: Packet Transmission and Addressing

[Wireshark]Practical Packet.Analysis.3rd.Edition.2017.4.pdf

Practical Packet Analysis 3rd Edition

Practical Packet Analysis(3rd) 无水印pdf

org.xmpp.packet.JID

Practical Packet Analysis, 2nd Edition

Practical_Packet_Analysis

Practical-Packet-Analysis.zip_真实网络数据

最新资源