Network Analysis Using Wireshark 2 Cookbook

Over 100 recipes to analyze and troubleshoot network problems using Wireshark 2

Key Features:

• Place Wireshark 2 in your network and configure it for effective network analysis
• Deep dive into the enhanced functionalities of Wireshark 2 and protect your network with ease
• A practical guide with exciting recipes on a widely used network protocol analyzer

Book Description:

This book contains practical recipes on troubleshooting a data communications network. This second version of the book focuses on Wireshark 2, which has already gained a lot of traction due to the enhanced features that it offers to users. The book expands on some of the subjects explored in the first version, including TCP performance, network security, Wireless LAN, and how to use Wireshark for cloud and virtual system monitoring. You will learn how to analyze end-to-end IPv4 and IPv6 connectivity failures for Unicast and Multicast traffic using Wireshark. It also includes Wireshark capture files so that you can practice what you’ve learned in the book. You will understand the normal operation of E-mail protocols and learn how to use Wireshark for basic analysis and troubleshooting. Using Wireshark, you will be able to resolve and troubleshoot common applications that are used in an enterprise network, like NetBIOS and SMB protocols. Finally, you will also be able to measure network parameters, check for network problems caused by them, and solve them effectively. By the end of this book, you’ll know how to analyze traffic, find patterns of various offending traffic, and secure your network from them.

What You Will Learn:

• Configure Wireshark 2 for effective network analysis and troubleshooting
• Set up various display and capture filters
• Understand networking layers, including IPv4 and IPv6 analysis
• Explore performance issues in TCP/IP
• Get to know about Wi-Fi testing and how to resolve problems related to wireless LANs
• Get information about network phenomena, events, and errors
• Locate faults in detecting security failures and breaches in networks

Who this book is for:

This book is for security professionals, network administrators, R&D, engineering and technical support, and communications managers who are using Wireshark for network analysis and troubleshooting. It requires a basic understanding of networking concepts, but does not require specific and detailed technical knowledge of protocols or vendor implementations.

Table of Contents

Chapter 1: Introduction to Wireshark Version 2

Chapter 2: Mastering Wireshark for Network Troubleshooting

Chapter 3: Using Capture Filters

Chapter 4: Using Display Filters

Chapter 5: Using Basic Statistics Tools

Chapter 6: Using Advanced Statistics Tools

Chapter 7: Using the Expert System

Chapter 8: Ethernet and LAN Switching

Chapter 9: Wireless LAN

Chapter 10: Network Layer Protocols and Operations

Chapter 11: Transport Layer Protocol Analysis

Chapter 12: FTP, HTTP/1, and HTTP/2

Chapter 13: DNS Protocol Analysis

Chapter 14: Analyzing Mail Protocols

Chapter 15: NetBIOS and SM B Protocol Analysis

Chapter 16: Analyzing Enterprise Applications’ Behavior

Chapter 17: Troubleshooting SIP, Multimedia, and IP Telephony

Chapter 18: Troubleshooting Bandwidth and Delay Issues

Chapter 19: Security and Network Forensics

About the Authors

Nagendra Kumar Nainar (CCIE#20987) is a senior technical leader with RP escalation team in Cisco Systems. He is the co-inventor of more than 80 patent applications and the coauthor of six internet RFCs, various internet drafts and IEEE papers. He is a guest lecturer in North Carolina State University and a speaker in different network forums.

Yogesh Ramdoss (CCIE #16183) is a senior technical leader in the technical services organization of Cisco Systems. He is a distinguished speaker at CiscoLive, sharing knowledge and educating customers on enterprise/datacenter technologies and platforms, troubleshooting and packet capturing tools, and open network programmability. Co-inventor of patent in machine/behavior learning.

Yoram Orzach gained his bachelor’s degree in science from the Technion in Haifa, Israel, and worked in Bezeq as a systems engineer in the fields of transmission and access networks. From being the technical manager at Netplus, he is now the CTO of NDI Communications. His experience is with corporate networks, service providers, and internet service provider’s networks, and his client companies are Comverse, Motorola, Intel, Ceragon networks, Marvel, HP, and others. His experience is in design, implementation, troubleshooting as well as training for R&D, engineering, and IT groups.