Technical

Sat 4 Sep 2020 09:23 PET

Practical Packet Analysis.

Using Wireshark to solve real-world network problems

F or someone who is already familiar with the concepts of networking, this is a perfect book, the book focuses on packet capture use cases, and of course it guides you through the analysis, also you can download all the .pcap from the offical page.

The book indeed is very simple, easy to read, the way the author tell some story at the beggining of each chapter make it more pleasant to read it.

The book guide you from the begginings going through some installation process until the real world scenarios, with brief explanations and getting deep, not so deep in some chapters, like chapter 6: Packet Analysis on the Command Line, I'm not sure if does it justice to this amazing field about tcpdump and tshark.

But I really enjoyed the part where Chris explains the reason for each case of tapping, as well the advantages and disadvantages, I was wanting more, obviously later I looked for more information

Also 3 chapters were dedicated entirely, of brief explanations about network, transport and application layers and some of more important protocols from this layers, meanwhile he explains what's happening in the packet capture, although sometimes one would like that he go deeper.

But what is most amazing of this book, is the real world scenarios and the chapter of the ever-existing "troubleshooting".

There is also, I must to add, a joke that Chriss does, was he talking about an eight layer error, the first time I read it, I just was blowminded because I never heard about a such layer 8 in OSI model,I just thought it was a typo, but turn out he meant a user error.In my defense, it was the first time I heard it.

As a whole, the book is simple amazing becasuse it's not a just a documentation of a tool, is more of an explanation of the whys and its possible solutions. It's highly recommend to understand and analyze network traffic.