Today's networks are complex, and if there are issues, then, on many occasions, the only way you can solve the problem is if you can see the problem. Packet sniffers such as Wireshark have been around for that very reason for many years. In addition to manually conducting packet analysis using Wireshark, today's devices incorporate the ability to pull data from the network and examine the contents to determine whether the data should be allowed on the network.

This chapter will help you recognize the many benefits of using Wireshark for packet analysis. You'll learn about Wireshark and its history as an exceptional open source software product that includes many rich features. You'll see how everyone can benefit from using packet analysis, including network administrators, students, and security analysts. You'll be able to identify the many places to conduct packet analysis, including on a LAN, on a host, or in the real world. Finally, you will gain a better understanding of the many ways in which Wireshark can provide a key role in troubleshooting, testing, baselining, and monitoring for threats.

This chapter will address all of this by covering the following:

• Reviewing packet analysis
• Recognizing who benefits from using packet analysis
• Identifying where to use packet analysis
• Outlining when to use packet analysis
• Getting to know Wireshark