Network Analysis Using Wireshark 2 Cookbook, 2nd Edition

Network Analysis Using Wireshark 2 Cookbook: Practical recipes to analyze and secure your network using Wireshark 2, 2nd Edition

Over 100 recipes to analyze and troubleshoot network problems using Wireshark 2

Key Features

• Place Wireshark 2 in your network and configure it for effective network analysis
• Deep dive into the enhanced functionalities of Wireshark 2 and protect your network with ease
• A practical guide with exciting recipes on a widely used network protocol analyzer

Book Description

This book contains practical recipes on troubleshooting a data communications network. This second version of the book focuses on Wireshark 2, which has already gained a lot of traction due to the enhanced features that it offers to users. The book expands on some of the subjects explored in the first version, including TCP performance, network security, Wireless LAN, and how to use Wireshark for cloud and virtual system monitoring. You will learn how to analyze end-to-end IPv4 and IPv6 connectivity failures for Unicast and Multicast traffic using Wireshark. It also includes Wireshark capture files so that you can practice what you’ve learned in the book. You will understand the normal operation of E-mail protocols and learn how to use Wireshark for basic analysis and troubleshooting. Using Wireshark, you will be able to resolve and troubleshoot common applications that are used in an enterprise network, like NetBIOS and SMB protocols. Finally, you will also be able to measure network parameters, check for network problems caused by them, and solve them effectively. By the end of this book, you’ll know how to analyze traffic, find patterns of various offending traffic, and secure your network from them.

What you will learn

• Configure Wireshark 2 for effective network analysis and troubleshooting
• Set up various display and capture filters
• Understand networking layers, including IPv4 and IPv6 analysis
• Explore performance issues in TCP/IP
• Get to know about Wi-Fi testing and how to resolve problems related to wireless LANs
• Get information about network phenomena, events, and errors
• Locate faults in detecting security failures and breaches in networks

Who This Book Is For

This book is for security professionals, network administrators, R&D, engineering and technical support, and communications managers who are using Wireshark for network analysis and troubleshooting. It requires a basic understanding of networking concepts, but does not require specific and detailed technical knowledge of protocols or vendor implementations.

Table of Contents

1. Introduction to Wireshark
2. Configuring Wireshark for Network Troubleshooting
3. Advanced configuration of capture filters
4. Advanced configuration of display filters
5. Using Basic Statistics Tools
6. Using Advanced Statistics Tools
7. Using the Expert System
8. Ethernet and LAN Switching
9. Wireless LAN Analysis
10. ARP, IPv4/IPv6 and Multicast
11. Transport Layer Protocol Analysis
12. FTP, HTTP1, and HTTP2
13. Domain Name System (DNS) Protocol Analysis
14. Analyzing Mail Protocols
15. NetBIOS and SMB Protocols Analysis
16. Analyzing Enterprise Applications Behavior
17. SIP, Multimedia and IP Telephony
18. Troubleshooting Bandwidth and Delay Problems
19. Security and Network Forensics