Skip to main content

Ethereal Packet Sniffing

  • 1st Edition - February 23, 2004
  • Latest edition
  • Author: Syngress
  • Language: English

This book provides system administrators with all of the information as well as software they need to run Ethereal Protocol Analyzer on their networks. There are currently no other… Read more

World Book Day celebration

Where learning shapes lives

Up to 25% off trusted resources that support research, study, and discovery.

Description

This book provides system administrators with all of the information as well as software they need to run Ethereal Protocol Analyzer on their networks. There are currently no other books published on Ethereal, so this book will begin with chapters covering the installation and configuration of Ethereal. From there the book quickly moves into more advanced topics such as optimizing Ethereal's performance and analyzing data output by Ethereal.

Ethereal is an extremely powerful and complex product, capable of analyzing over 350 different network protocols. As such, this book also provides readers with an overview of the most common network protocols used, as well as analysis of Ethereal reports on the various protocols. The last part of the book provides readers with advanced information on using reports generated by Ethereal to both fix security holes and optimize network performance.

Key features

  • Provides insider information on how to optimize performance of Ethereal on enterprise networks.
  • Book comes with a CD containing Ethereal, Tethereal, Nessus, Snort, ACID, Barnyard, and more!
  • Includes coverage of popular command-line version, Tethereal.

Readership

Engineers and administrators.

Table of contents

Acknowledgments

Author

Contributors

Technical Editor and Contributor

Series Editor

Technical Reviewer

Foreword

Chapter 1: Introducing Network Analysis

Introduction

What is Network Analysis and Sniffing?

Who Uses Network Analysis?

How Does It Work?

Detecting Sniffers

Protecting Against Sniffers

Network Analysis and Policy

Summary

Solutions Fast Track

Chapter 2: Introducing Ethereal: Network Protocol Analyzer

Introduction

What is Ethereal?

Supporting Programs

Using Ethereal in Your Network Architecture

Using Ethereal for Network Troubleshooting

Summary

Solutions Fast Track

Chapter 3: Getting and Installing Ethereal

Introduction

Getting Ethereal

Packet Capture Drivers

Installing Ethereal on Windows

Installing Ethereal on UNIX

Building Ethereal from Source

Summary

Solutions Fast Track

Chapter 4: Using Ethereal

Introduction

Getting Started with Ethereal

Exploring the Main Window

Other Window Components

Exploring the Menus

Using Command Line Options

Summary

Solutions Fast Track

Chapter 5: Filters

Introduction

Writing Capture Filters

Writing Display Filters

Summary

Solutions Fast Track

Chapter 6: Other Programs Packaged with Ethereal

Introduction

Tethereal

Editcap

Mergecap

Text2pcap

Summary

Solutions Fast Track

Chapter 7: Integrating Ethereal with Other Sniffers

Introduction

Reading Capture Files with Ethereal

Saving Capture Files with Ethereal

Ethereal Integration

Summary

Solutions Fast Track

Chapter 8: Real World Packet Captures

Introduction

Scanning

Remote Access Trojans

Dissecting Worms

Summary

Solutions Fast Track

Chapter 9: Developing Ethereal

Introduction

Prerequisites for Developing Ethereal

Ethereal Design

Developing a Dissector

Advanced Topics

Summary

Solutions Fast Track

Appendix: Supported Protocols

About the CD

Index

Product details

  • Edition: 1
  • Latest edition
  • Published: February 23, 2004
  • Language: English

View book on ScienceDirect

Read Ethereal Packet Sniffing on ScienceDirect