网络包分析教材推荐

《 Practical Packet Analysis, 2nd Edition》 学习资料下载 ppa2ecaptures.zip

http://www.nostarch.com/packet2.htm

从网站首页摘录以下内容。 

It's easy to capture packets with Wireshark, the world's most popular network sniffer, whether off the wire or from the air. But how do you use those packets to understand what's happening on your network?

With an expanded discussion of network protocols and 45 completely new scenarios, this extensively revised second edition of the best-selling Practical Packet Analysis will teach you how to make sense of your PCAP data. You'll find new sections on troubleshooting slow networks and packet analysis for security to help you better understand how modern exploits and malware behave at the packet level. Add to this a thorough introduction to the TCP/IP network stack and you're on your way to packet analysis proficiency.

Learn how to:

  • Use packet analysis to identify and resolve common network problems like loss of connectivity, DNS issues, sluggish speeds, and malware infections
  • Build customized capture and display filters
  • Monitor your network in real-time and tap live network communications
  • Graph traffic patterns to visualize the data flowing across your network
  • Use advanced Wireshark features to understand confusing captures
  • Build statistics and reports to help you better explain technical network information to non-techies

Practical Packet Analysis is a must for any network technician, administrator, or engineer. Stop guessing and start troubleshooting the problems on your network.

 

Table of Contents

Chapter 1: Packet Analysis and Network Basics
Chapter 2: Tapping into the Wire
Chapter 3: Introduction to Wireshark
Chapter 4: Working with Captured Packets
Chapter 5: Advanced Wireshark Features
Chapter 6: Common Lower-Layer Protocols
Chapter 7: Common Upper-Layer Protocols
Chapter 8: Basic Case Scenarios
Chapter 9: Fighting a Slow Network
Chapter 10: Packet Analysis for Security
Chapter 11: Wireless Packet Analysis
Appendix A: Further Reading

View the detailed Table of Contents (PDF)

View the Index (PDF)

 

Wireshark抓包iOS入门教程

iOS,Android网络抓包教程之tcpdump

SSL/TLS 握手过程详解 (抓包实例)

互联网安全之数字签名、数字证书与PKI系统

彩虹表破解MD5

ECC椭圆曲线算法

 

linux网络相关命令使用

Redirect traffic to loopback

为什么不能将客户端的连接请求跳转或转发到本机lo回环接口上?

 
curl 指定ip和port Connections - Everything curl
curl --interface 192.168.0.2 --local-port 4000 https://www.example.com/ 

tcpdump 抓取特定的ip和port包

tcpdump host 192.168.0.2 and port 4000 -vvnn -i any

 TCPDump Capture HTTP GET/POST requests  

 

posted @ 2014-09-06 09:05  lvmxh  阅读(514)  评论(0编辑  收藏  举报