ARP sends broadcasts to the network asking for the MAC address of a specific IP destination. Anything that does not follow this pattern should be considered malicious.
How it works...
by Yoram Orzach, Yogesh Ramdoss, Nagendra Kumar Nainar
Network Analysis Using Wireshark 2 Cookbook - Second Edition
- Title Page
- Copyright and Credits
- Dedication
- Packt Upsell
- Contributors
- Preface
- Introduction to Wireshark Version 2
- Wireshark Version 2 basics
- Locating Wireshark
- Capturing data on virtual machines
- Starting the capture of data
- Getting ready
- How to do it...
- Capture on multiple interfaces
- How to configure the interface you capture data from
- Capture data to multiple files
- Configure output parameters
- Manage interfaces (under the Input tab)
- Capture packets on a remote machine
- Start capturing data – capture data on Linux/Unix machines
- Collecting from a remote communication device
- How it works...
- There's more...
- See also
- Configuring the start window
- Mastering Wireshark for Network Troubleshooting
- Using Capture Filters
- Using Display Filters
- Using Basic Statistics Tools
- Introduction
- Using the statistics – capture file properties menu
- Using the statistics – resolved addresses
- Using the statistics – protocol hierarchy menu
- Using the statistics – conversations menu
- Using the statistics – endpoints menu
- Using the statistics – HTTP menu
- Configuring a flow graph for viewing TCP flows
- Creating IP-based statistics
- Using Advanced Statistics Tools
- Introduction
- Configuring I/O graphs with filters for measuring network performance issues
- Throughput measurements with I/O graphs
- Advanced I/O graph configurations with y axis parameters
- Getting information through TCP stream graphs – time/sequence (Steven's) window
- Getting information through TCP stream graphs – time/sequences (TCP-trace) window
- Getting information through TCP stream graphs – throughput window
- Getting information through TCP stream graphs – round-trip-time window
- Getting information through TCP stream graphs – window-scaling window
- Using the Expert System
- Ethernet and LAN Switching
- Wireless LAN
- Network Layer Protocols and Operations
- Introduction
- IPv4 address resolution protocol operation and troubleshooting
- ICMP – protocol operation, analysis, and troubleshooting
- Analyzing IPv4 unicast routing operations
- Analyzing IP fragmentation failures
- IPv4 multicast routing operations
- IPv6 principle of operations
- IPv6 extension headers
- ICMPv6 – protocol operations, analysis, and troubleshooting
- IPv6 auto configuration
- DHCPv6-based address assignment
- IPv6 neighbor discovery protocol operation and analysis
- Transport Layer Protocol Analysis
- Introduction
- UDP principle of operation
- UDP protocol analysis and troubleshooting
- TCP principle of operation
- Troubleshooting TCP connectivity problems
- Troubleshooting TCP retransmission issues
- Getting ready
- How to do it...
- Case 1 – retransmissions to many destinations
- Case 2 – retransmissions on a single connection
- Case 3 – retransmission patterns
- Case 4 – retransmission due to a non-responsive application
- Case 5 - retransmission due to delayed variations
- Finding out what it is
- How it works...
- There's more...
- See also
- TCP sliding window mechanism
- TCP enhancements – selective ACK and timestamps
- Troubleshooting TCP throughput
- FTP, HTTP/1, and HTTP/2
- DNS Protocol Analysis
- Analyzing Mail Protocols
- NetBIOS and SMB Protocol Analysis
- Analyzing Enterprise Applications' Behavior
- Troubleshooting SIP, Multimedia, and IP Telephony
- Troubleshooting Bandwidth and Delay Issues
- Security and Network Forensics
How it works...
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.