信息安全资料Wireshark手册数据包捕获和分析实用指南.pdfVIP

TheWiresharkHandbook

PracticalGuideforPacketCaptureandAnalysis

RobertJohnson

©2024byHiTeXPress.Allrightsreserved.

Nopartofthispublicationmaybereproduced,distributed,or

transmittedinanyformorbyanymeans,including

photocopying,recording,orotherelectronicormechanical

methods,withoutthepriorwrittenpermissionofthepublisher,

exceptinthecaseofbriefquotationsembodiedincritical

reviewsandcertainothernoncommercialusespermittedby

copyrightlaw.

PublishedbyHiTeXPress

Forpermissionsandotherinquiries,writeto:

P.O.Box3132,Framingham,MA01701,USA

Contents

1IntroductiontoNetworkAnalysisandWireshark

1.1TheImportanceofNetworkAnalysis

1.2TheEvolutionofWireshark

1.3WiresharkFeaturesandCapabilities

1.4UnderstandingNetworkProtocolsandArchitecture

1.5Real-WorldApplicationsofWireshark

2GettingStartedwithWireshark

2.1InstallingWireshark

2.2NavigatingtheWiresharkInterface

2.3SettingUpYourFirstCapture

2.4BasicConfigurationandPreferences

2.5SavingandExportingCaptureFiles

3UnderstandingNetworkProtocols

3.1OSIandTCP/IPModelOverview

3.2EthernetandDataLinkLayerProtocols

3.3IPAddressingandSubnetting

3.4TransportLayerProtocols:TCPandUDP

3.5ApplicationLayerProtocols:HTTP,DNS,andMore

3.6ProtocolAnalysiswithWireshark

4PacketCaptureTechniques

4.1UnderstandingPacketCaptureFundamentals

4.2ChoosingtheRightNetworkInterface

4.3OptimizingCapturePerformance

4.4ImplementingCaptureFilters

4.5UsingRingBuffersforCaptureManagement

4.6CaptureModes:PromiscuousandMonitor

5AnalyzingCapturedData

5.1NavigatingthePacketListPanel

5.2InterpretingPacketDetails

5.3ReassemblingPacketStreams

5.4IdentifyingNetworkAnomalies

5