Rating: 5 out of 5 stars
5/5
Ebook46 pages24 minutes
A Practical Guide Wireshark Forensics
Rating: 5 out of 5 stars
5/5
()
About this ebook
A practical guide to capturing and analyzing network traffic using Wireshark.
This book shows real world network traffic analysis and shows the techniques that DevOp teams need to use to detect malicious behavior. Additionally it shows how DevOps can translate packet captures into valuable information by decoding IP packets and detect malicious activity
Read more from Alasdair Gilchrist
Google Cloud Platform an Architect's Guide The Layman's Guide GDPR Compliance for Small Medium Business Rating: 5 out of 5 stars5/5Google Cloud Platform for Data Engineering: From Beginner to Data Engineer using Google Cloud Platform Rating: 5 out of 5 stars5/5REST API Design Control and Management Rating: 4 out of 5 stars4/5Spreadsheets To Cubes (Advanced Data Analytics for Small Medium Business): Data Science Rating: 0 out of 5 stars0 ratingsAn Introduction to SDN Intent Based Networking Rating: 5 out of 5 stars5/5Concise Guide to OTN optical transport networks Rating: 4 out of 5 stars4/5Six Sigma Yellow Belt Certification Study Guide Rating: 0 out of 5 stars0 ratingsGoogle Cloud Platform - Networking Rating: 0 out of 5 stars0 ratingsConcise and Simple Guide to IP Subnets Rating: 5 out of 5 stars5/5A Concise Guide to Microservices for Executive (Now for DevOps too!) Rating: 1 out of 5 stars1/5Concise Guide to DWDM Rating: 5 out of 5 stars5/5The Certified Ethical Hacker Exam - version 8 (The concise study guide) Rating: 3 out of 5 stars3/5An Executive Guide to Identity Access Management - 2nd Edition Rating: 4 out of 5 stars4/5Supply Chain 4.0: From Stocking Shelves to Running the World Fuelled by Industry 4.0 Rating: 3 out of 5 stars3/5A Last Minute Hands-on Guide to GDPR Readiness Rating: 0 out of 5 stars0 ratingsA Concise Guide to Object Orientated Programming Rating: 0 out of 5 stars0 ratingsManagement Accounting for New Managers Rating: 1 out of 5 stars1/5The Concise Guide to SSL/TLS for DevOps Rating: 5 out of 5 stars5/5Digital Success: A Holistic Approach to Digital Transformation for Enterprises and Manufacturers Rating: 0 out of 5 stars0 ratingsPSD2 - Open Banking for DevOps(Sec) Rating: 5 out of 5 stars5/5GDPR for DevOp(Sec) - The laws, Controls and solutions Rating: 5 out of 5 stars5/5Tackling Fraud Rating: 4 out of 5 stars4/5Why Industry 4.0 Sucks! Rating: 0 out of 5 stars0 ratingsA concise guide to PHP MySQL and Apache Rating: 4 out of 5 stars4/5ChatGPT Will Won't Save The World Rating: 0 out of 5 stars0 ratingsConcise Guide to CompTIA Security + Rating: 3 out of 5 stars3/5FinTech Rising: Navigating the maze of US & EU regulations Rating: 5 out of 5 stars5/5
Related to A Practical Guide Wireshark Forensics
Related ebooks
Wireshark Essentials Rating: 0 out of 5 stars0 ratingsKali Linux Penetration Testing Bible Rating: 0 out of 5 stars0 ratingsPacket Analysis with Wireshark Rating: 0 out of 5 stars0 ratingsMastering Wireshark Rating: 2 out of 5 stars2/5Computer Networking: An introductory guide for complete beginners: Computer Networking, #1 Rating: 5 out of 5 stars5/5Network Security All-in-one: ASA Firepower WSA Umbrella VPN ISE Layer 2 Security Rating: 0 out of 5 stars0 ratingsHands on Hacking: Become an Expert at Next Gen Penetration Testing and Purple Teaming Rating: 3 out of 5 stars3/5Wireshark for Security Professionals: Using Wireshark and the Metasploit Framework Rating: 4 out of 5 stars4/5Instant Traffic Analysis with Tshark How-to Rating: 0 out of 5 stars0 ratingsCompTIA Security+: Network Attacks Rating: 5 out of 5 stars5/5CCNA Interview Questions You'll Most Likely Be Asked Rating: 0 out of 5 stars0 ratingsDesigning and Implementing Linux Firewalls and QoS using netfilter, iproute2, NAT and l7-filter Rating: 0 out of 5 stars0 ratingsThe Compete Ccna 200-301 Study Guide: Network Engineering Edition Rating: 5 out of 5 stars5/5CEH v11 Certified Ethical Hacker Study Guide Rating: 0 out of 5 stars0 ratingsCisco Network Administration Interview Questions: CISCO CCNA Certification Review Rating: 5 out of 5 stars5/5Cisco Packet Tracer for Beginners Rating: 5 out of 5 stars5/5Cisco Networking Essentials Rating: 0 out of 5 stars0 ratingsSome Tutorials in Computer Networking Hacking Rating: 0 out of 5 stars0 ratingsHack into your Friends Computer Rating: 0 out of 5 stars0 ratingsSecurity+ Boot Camp Study Guide Rating: 5 out of 5 stars5/5TCP/IP Networking Interview Questions, Answers, and Explanations: TCP/IP Network Certification Review Rating: 5 out of 5 stars5/5Software-Defined Networks: A Systems Approach Rating: 5 out of 5 stars5/5Comptia Security+ Primer Rating: 5 out of 5 stars5/5Hacking Connected Cars: Tactics, Techniques, and Procedures Rating: 0 out of 5 stars0 ratingsWireless and Mobile Hacking and Sniffing Techniques Rating: 0 out of 5 stars0 ratingsMetasploit Bootcamp Rating: 5 out of 5 stars5/5Learn Kali Linux 2019: Perform powerful penetration testing using Kali Linux, Metasploit, Nessus, Nmap, and Wireshark Rating: 0 out of 5 stars0 ratings
Information Technology For You
An Ultimate Guide to Kali Linux for Beginners Rating: 3 out of 5 stars3/5Creating Online Courses with ChatGPT | A Step-by-Step Guide with Prompt Templates Rating: 4 out of 5 stars4/5Summary of Super-Intelligence From Nick Bostrom Rating: 4 out of 5 stars4/5Cybersecurity for Beginners : Learn the Fundamentals of Cybersecurity in an Easy, Step-by-Step Guide: 1 Rating: 0 out of 5 stars0 ratingsCompTIA A+ CertMike: Prepare. Practice. Pass the Test! Get Certified!: Core 1 Exam 220-1101 Rating: 0 out of 5 stars0 ratingsExcel VBA: A Step-By-Step Tutorial For Beginners To Learn Excel VBA Programming From Scratch: 1 Rating: 4 out of 5 stars4/5Data Analytics for Beginners: Introduction to Data Analytics Rating: 4 out of 5 stars4/5The iPadOS 17: The Complete User Manual to Quick Set Up and Mastering the iPadOS 17 with New Features, Pictures, Tips, and Tricks Rating: 0 out of 5 stars0 ratingsCOMPUTER SCIENCE FOR ROOKIES Rating: 0 out of 5 stars0 ratingsSupercommunicator: Explaining the Complicated So Anyone Can Understand Rating: 3 out of 5 stars3/5Learning Microsoft Endpoint Manager: Unified Endpoint Management with Intune and the Enterprise Mobility + Security Suite Rating: 0 out of 5 stars0 ratingsCompTia Security 701: Fundamentals of Security Rating: 0 out of 5 stars0 ratingsCompTIA ITF+ CertMike: Prepare. Practice. Pass the Test! Get Certified!: Exam FC0-U61 Rating: 5 out of 5 stars5/5Design and Build Modern Datacentres, A to Z practical guide Rating: 3 out of 5 stars3/5How to Write Effective Emails at Work Rating: 4 out of 5 stars4/5How to Find a Wolf in Siberia (or, How to Troubleshoot Almost Anything) Rating: 0 out of 5 stars0 ratingsThe Design Inference Rating: 5 out of 5 stars5/5Self-Sovereign Identity Rating: 0 out of 5 stars0 ratingsInkscape Beginner’s Guide Rating: 5 out of 5 stars5/5Getting started with Audacity 1.3 Rating: 5 out of 5 stars5/5CODING INTERVIEW: Advanced Methods to Learn and Excel in Coding Interview Rating: 0 out of 5 stars0 ratingsLearn Algorithmic Trading: Build and deploy algorithmic trading systems and strategies using Python and advanced data analysis Rating: 0 out of 5 stars0 ratingsCompTIA Network+ CertMike: Prepare. Practice. Pass the Test! Get Certified!: Exam N10-008 Rating: 0 out of 5 stars0 ratingsDevOps Handbook: What is DevOps, Why You Need it and How to Transform Your Business with DevOps Practices Rating: 4 out of 5 stars4/5The Programmer's Brain: What every programmer needs to know about cognition Rating: 5 out of 5 stars5/5WordPress Plugin Development: Beginner's Guide Rating: 0 out of 5 stars0 ratings
Related podcast episodes
cybersecurity maturity model certification (CMMC) (noun) [Word Notes] 0% found this document usefulBonus: Afternoon Cyber Tea: IoT-Based Infrastructures 0% found this document usefulS17:E5 - What is AWS and how you become a cloud engineer (Hiroko Nishimura): Opening doors and knocking out AWS jargon 100% found this document usefulCyberWire Pro Interview Selects: Jaclyn Miller from NTT, Ltd. 0% found this document usefulIs enhanced hardware security the answer to ransomware? [CyberWire-X] 100% found this document usefulC101 86: Powershell 1/4: The Martian, Mutation Testing, and Powershell 0% found this document usefulOSINT: Who's watching you? 0% found this document usefulSecurity Trends in 2023 and Beyond 0% found this document usefulMobile Forensics 0% found this document usefulThe Privacy Paradox with Anna Maria Mandalari 0% found this document usefulGoing Linux #332 · Listener Feedback: Going Linux #332 · Listener Feedback 0% found this document useful
Related articles
Run Kali Linux NetHunter on Android Linux FormatUNLIMITED
Run Kali Linux NetHunter on Android
Jan 14, 2020
7 min readMonitor Your TCP/IP Networks With EBPF Linux FormatUNLIMITED
Monitor Your TCP/IP Networks With EBPF
Jan 10, 2023
8 min readWireshark 4.0.2 Linux FormatUNLIMITED
Wireshark 4.0.2
Mar 7, 2023
2 min readHacking 101 Linux FormatUNLIMITED
Hacking 101
May 31, 2022
5 min readAll about Ethernet TechLifeUNLIMITED
All about Ethernet
Jan 11, 2021
4 min readIntroducing Kali Linux FormatUNLIMITED
Introducing Kali
Nov 17, 2020
4 min readHack The Planet/Parrot Linux FormatUNLIMITED
Hack The Planet/Parrot
May 31, 2022
2 min readIntroducing Kali Maximum PCUNLIMITED
Introducing Kali
Mar 2, 2021
4 min read“Vulnerability Hunters Tend To Be Cut From A Different Cloth. They Are Naturally In Quisitive” PC Pro MagazineUNLIMITED
“Vulnerability Hunters Tend To Be Cut From A Different Cloth. They Are Naturally In Quisitive”
Jan 6, 2022
7 min read‘Open Ports’ Leave a Hole in Smartphone Security FuturityUNLIMITED
‘Open Ports’ Leave a Hole in Smartphone Security
May 8, 2017
Smartphone apps that use “open ports” to share and receive data are more vulnerable to security breaches than previously thought, mainly due to the their widespread use in internet communication, a new study suggests. The vulnerability the researcher
3 min readHow To Create Strong, Secure Passwords By Learning How To Crack Them PCWorldUNLIMITED
How To Create Strong, Secure Passwords By Learning How To Crack Them
Apr 6, 2021
8 min readHack The Planet/Parrot Linux FormatUNLIMITED
Hack The Planet/Parrot
May 31, 2022
2 min readSherlock Linux FormatUNLIMITED
Sherlock
May 31, 2022
1 min readThe 5 Worst Home Networking Mistakes and How to Avoid Them Residential Tech TodayUNLIMITED
The 5 Worst Home Networking Mistakes and How to Avoid Them
Oct 15, 2020
4 min readSocial Engineering Maximum PCUNLIMITED
Social Engineering
Oct 15, 2019
5 min readKRACK Wi-Fi Attack Threatens All Networks: How To Stay Safe And What You Need To Know MacWorldUNLIMITED
KRACK Wi-Fi Attack Threatens All Networks: How To Stay Safe And What You Need To Know
Nov 29, 2017
5 min readRevisiting Tor TechLifeUNLIMITED
Revisiting Tor
Aug 24, 2020
4 min readHacker’s Toolkit 2o22 Linux FormatUNLIMITED
Hacker’s Toolkit 2o22
May 31, 2022
1 min readNmap Deep Dive Linux FormatUNLIMITED
Nmap Deep Dive
May 31, 2022
5 min readRunning The Linux Desktop On Android Linux FormatUNLIMITED
Running The Linux Desktop On Android
Oct 22, 2019
9 min readData Recovery APCUNLIMITED
Data Recovery
Mar 21, 2022
12 min readUnpeeling The Onion Browser Linux FormatUNLIMITED
Unpeeling The Onion Browser
May 5, 2020
8 min readEverything You May Have Wanted to Know About Ethical/Whitehat Hackers TechfastlyUNLIMITED
Everything You May Have Wanted to Know About Ethical/Whitehat Hackers
Oct 21, 2020
5 min readTurn Your Raspberry Pi Into A Cloud Server Linux FormatUNLIMITED
Turn Your Raspberry Pi Into A Cloud Server
Aug 24, 2021
6 min readHacker’s Manual Maximum PCUNLIMITED
Hacker’s Manual
Mar 2, 2021
1 min readDiscover The Secret IPhone Hack Codes iCreateUNLIMITED
Discover The Secret IPhone Hack Codes
Mar 26, 2020
Did you know that your iPhone comes with its own set of manufacturer codes that are used to access detailed information about the device? Typing these codes into the Phone app’s keypad allows you to access hidden modes, troubleshoot any issues that y
1 min readPeople Are Secretly Buying Handguns On The Dark Web FuturityUNLIMITED
People Are Secretly Buying Handguns On The Dark Web
Apr 24, 2019
2 min readPut A Little Linux Into Your Android Device Linux FormatUNLIMITED
Put A Little Linux Into Your Android Device
Sep 24, 2019
9 min readLinux Command-Line Tips & Tricks Maximum PCUNLIMITED
Linux Command-Line Tips & Tricks
Mar 31, 2020
8 min readTools Arsenal Linux FormatUNLIMITED
Tools Arsenal
Nov 17, 2020
1 min read
Reviews for A Practical Guide Wireshark Forensics
Rating: 4.75 out of 5 stars
5/5
4 ratings0 reviews
Book preview
A Practical Guide Wireshark Forensics - alasdair gilchrist
A Practical Guide to Wireshark Network Analysis
Wireshark – Practical Analysis and Forensics
What is Wireshark?
How does it work?
Port Mirroring
Downloading Wireshark
Getting Started
Capturing Packets
Color Coding
Filtering Output
Using Wireshark Sample Source Files
Questions
Part A - Ping.pcap
B - Scan.pcap
C – Malicious.pcap
D- portscan.cap
E-deep.cap
Answers with Workings
Wireshark – Practical Analysis and Forensics
––––––––
What is Wireshark?
Wireshark is an open source, network protocol analyzer for Linux and Windows. It has many features as standard such as deep inspection of hundreds of protocols, live capture and offline analysis. Wireshark has an intuitive GUI frontend plus many inbuilt sorting and filtering options making it very simple to use even for beginners. Tshark is the terminal version of Wireshark which is very similar to Tcpdump.
How does it work?
Wireshark works simply by placing the network card on the machine on which it is running into what is called promiscuous mode. In this more of operation the network card will accept any network information not just information specifically addressed to itself, which is the normal mode of operation.
In a hub network, which is rare these days, this will be sufficient as all network traffic will be send out every port on the hub thereby ensuring that the Wireshark network card would receive all traffic traversing the network. Today's modern networks are not hubs though, they are switches, which means only traffic destined for a host station known to be connected on a port is send out that port. This greatly reduces unnecessary traffic on the network. Unfortunately, this means that Wireshark will not receive all the traffic on the network as it will only see traffic exiting the switch, which is destined for its own directly connected network card.
Port Mirroring
The solution to the switched
Enjoying the preview?
Page 1 of 1