Panda, Ashish
Wireshark for Network Forensics: An Essential Guide for It and Cloud Professionals
- ISBN 13:
- 9781484290002
- author:
- Panda, Ashish
- format:
- Paperback
- publisher:
- Apress
- language:
- English
- Publication Year:
- 2022
- Pages:
- 271
- Dimensions:
- 25.4 x 17.8 x 1.6 centimetres (0
- Genre:
- Computers, Computer Science, General,
- Condition:
- New
- Availability:
- Item usually sent within 20 working days
Description
Wireshark for Network Forensics provides an in-depth look at the advanced features and capabilities of this widely-used tool. Considered by many to be the go-to solution for IT operational activities involving traffic analysis, Wireshark is available as both a command-line interface (CLI) and graphical user interface (GUI). This open-source tool offers a range of features, including filter-based analysis and traffic flow graph view. You'll learn how to capture and analyze secured application traffic, such as SecureDNS, HTTPS, and IPSec, as well as control plane and data plane capture. The book also covers the analysis of wireless technology traffic, including 802.11 and Bluetooth. Additionally, you'll discover ways to identify network attacks, malware, covert communications, and perform security incident post mortems. The book provides a unique look at cloud and cloud-native architecture-based traffic capture in Kubernetes, Docker-based, AWS, and GCP environments, making it an essential resource for IT and cloud professionals looking to improve their skills.