To analyze the types of DNS records, we need to capture the DNS query and response packets. In order to do so, connect Wireshark to the path between the client and the DNS server and capture the packets.
Getting ready
by Yoram Orzach, Yogesh Ramdoss, Nagendra Kumar Nainar
Network Analysis Using Wireshark 2 Cookbook - Second Edition
- Title Page
- Copyright and Credits
- Dedication
- Packt Upsell
- Contributors
- Preface
- Introduction to Wireshark Version 2
- Wireshark Version 2 basics
- Locating Wireshark
- Capturing data on virtual machines
- Starting the capture of data
- Getting ready
- How to do it...
- Capture on multiple interfaces
- How to configure the interface you capture data from
- Capture data to multiple files
- Configure output parameters
- Manage interfaces (under the Input tab)
- Capture packets on a remote machine
- Start capturing data – capture data on Linux/Unix machines
- Collecting from a remote communication device
- How it works...
- There's more...
- See also
- Configuring the start window
- Mastering Wireshark for Network Troubleshooting
- Using Capture Filters
- Using Display Filters
- Using Basic Statistics Tools
- Introduction
- Using the statistics – capture file properties menu
- Using the statistics – resolved addresses
- Using the statistics – protocol hierarchy menu
- Using the statistics – conversations menu
- Using the statistics – endpoints menu
- Using the statistics – HTTP menu
- Configuring a flow graph for viewing TCP flows
- Creating IP-based statistics
- Using Advanced Statistics Tools
- Introduction
- Configuring I/O graphs with filters for measuring network performance issues
- Throughput measurements with I/O graphs
- Advanced I/O graph configurations with y axis parameters
- Getting information through TCP stream graphs – time/sequence (Steven's) window
- Getting information through TCP stream graphs – time/sequences (TCP-trace) window
- Getting information through TCP stream graphs – throughput window
- Getting information through TCP stream graphs – round-trip-time window
- Getting information through TCP stream graphs – window-scaling window
- Using the Expert System
- Ethernet and LAN Switching
- Wireless LAN
- Network Layer Protocols and Operations
- Introduction
- IPv4 address resolution protocol operation and troubleshooting
- ICMP – protocol operation, analysis, and troubleshooting
- Analyzing IPv4 unicast routing operations
- Analyzing IP fragmentation failures
- IPv4 multicast routing operations
- IPv6 principle of operations
- IPv6 extension headers
- ICMPv6 – protocol operations, analysis, and troubleshooting
- IPv6 auto configuration
- DHCPv6-based address assignment
- IPv6 neighbor discovery protocol operation and analysis
- Transport Layer Protocol Analysis
- Introduction
- UDP principle of operation
- UDP protocol analysis and troubleshooting
- TCP principle of operation
- Troubleshooting TCP connectivity problems
- Troubleshooting TCP retransmission issues
- Getting ready
- How to do it...
- Case 1 – retransmissions to many destinations
- Case 2 – retransmissions on a single connection
- Case 3 – retransmission patterns
- Case 4 – retransmission due to a non-responsive application
- Case 5 - retransmission due to delayed variations
- Finding out what it is
- How it works...
- There's more...
- See also
- TCP sliding window mechanism
- TCP enhancements – selective ACK and timestamps
- Troubleshooting TCP throughput
- FTP, HTTP/1, and HTTP/2
- DNS Protocol Analysis
- Analyzing Mail Protocols
- NetBIOS and SMB Protocol Analysis
- Analyzing Enterprise Applications' Behavior
- Troubleshooting SIP, Multimedia, and IP Telephony
- Troubleshooting Bandwidth and Delay Issues
- Security and Network Forensics
Getting ready
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.