With Wireshark, you can capture data live from a network interface or open and examine pre-captured packets. Once you start working with a packet capture, you will want to make sense of the file and what the packets are telling you.

This book will teach you how to conduct a detailed search, follow the data stream, and identify endpoints so that you can troubleshoot latency issues and actively recognize network attacks.

To prepare for working with Wireshark, download and install the latest version on your system. Detailed instructions are listed in Chapter 3, Installing Wireshark on a PC or macOS, on how to install on a Windows OS.

To get the most out of each chapter, when there is a reference to a packet capture, download the files so that you can follow along with the lessons.

In addition to this, practice your skills on your own and, in particular, review the common protocols in the TCP/IP suite so that you can deepen your knowledge and become more proficient in packet analysis.