The Ethical Hacker Network - Packet Analysis book suggestions

geekyone

Full Member

Offline

Posts: 180

Packet Analysis book suggestions

« on: October 20, 2008, 01:37:01 AM »

I have been looking for a good book about packet analysis. I am really not looking for a book about a specific packet sniffing tool. I want one that really digs into analyzing packet contents. I have been considering getting "Practical Packet Analysis: Using Wireshark to Solve Real-World Network Problems" but I am not sure it is what I want. Has anyone read it? Is it any good?


	Logged

CISSP, CEH, GPEN, GCIH, GCFA

don

Editor-In-Chief
Administrator
Hero Member

Offline

Posts: 4168

Editor-In-Chief

Re: Packet Analysis book suggestions

« Reply #1 on: October 20, 2008, 08:39:45 AM »

I enjoyed it very much. In fact, I was thinking about doing a writeup on it. It goes through the basics like protocol overviews and how they look in Wireshark. And there are several real-world examples of how it can be used to solve networking issues. It's also a quick read being only 192 pages.

The guy who wrote it runs this site with tutorials and other good stuff:
http://www.chrissanders.org

I haven't read Jay Beale's "Wireshark & Ethereal Network Protocol Analyzer Toolkit," but knowing Jay and looking at it's size, it will get much more in depth. It was also published in 2006, but not much has changed with basic protocol analysis in 2 years. Wink

Hope this helps,
Don


	Logged

CISSP, MCSE, CSTA, Security+ SME

chuck378

Newbie

Offline

Posts: 5

Re: Packet Analysis book suggestions

« Reply #2 on: October 20, 2008, 04:56:51 PM »

If you really enjoy it and have the money, I suggest the "Laura Chappell Master Library". It's $999, but it's well worth the money. Several tutorials, presentations, hands on and pretty much all the books she wrote. I learned so much with just the first DVD. It's a complete course on packet analysis. You can find more information at w w w. packet-level.com. Check it out.
chuck378


	Logged

don

Editor-In-Chief
Administrator
Hero Member

Offline

Posts: 4168

Editor-In-Chief

Re: Packet Analysis book suggestions

« Reply #3 on: October 20, 2008, 06:27:16 PM »

Great suggestion, Chuck.

Don


	Logged

CISSP, MCSE, CSTA, Security+ SME

Thomas

Newbie

Offline

Posts: 4

Re: Packet Analysis book suggestions

« Reply #4 on: October 21, 2008, 01:07:43 PM »

Quote from: chuck378 on October 20, 2008, 04:56:51 PM

Still working my way through the set. Done with 1/4. So far I really like it. Some new info, some old but mostly seeing things in a different way now.


	Logged

geekyone

Full Member

Offline

Posts: 180

Re: Packet Analysis book suggestions

« Reply #5 on: October 21, 2008, 05:54:13 PM »

Thanks for all the suggestions. I would love to get the Master Library but that is a little out of my price range right now. I probably break down and get the "Practical Packet Analysis" book and just keep dreaming about Laura's collection.


	Logged

CISSP, CEH, GPEN, GCIH, GCFA

hayabusa

Hero Member

Offline

Posts: 1633

Re: Packet Analysis book suggestions

« Reply #6 on: March 16, 2009, 09:10:50 PM »

Along with the suggestion for the master library, which I have a copy of as well, you'd also be good to look into the Wireshark University courses and CBT's. They lend a lot of practical insight, and really cover a lot, specific to both Wireshark AND packet analysis, in general.


	Logged

~ hayabusa ~

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'

OSCE, OSCP , GPEN, C|EH

don

Editor-In-Chief
Administrator
Hero Member

Offline

Posts: 4168

Editor-In-Chief

Re: Packet Analysis book suggestions

« Reply #7 on: March 16, 2009, 11:13:22 PM »

And since this thread has been bumped, let me throw in Josh Wright's Wireless Course, SANS 617. In addition to some mad wireless fu, it was also a master class in pcap analysis. He even wrote a couple chapters for a Syngress title.

Quote

“Wireshark and Ethereal Packet Sniffing”, published by Syngress Press, Angela Orebaugh, et al. I wrote two chapters for this book, chapter 6 on wireless analysis with Wireshark and chapter 9 on Wireshark accompanying tools (for command-line use). My editor said I could give away the wireless chapter as the sample for free.

http://www.willhackforsushi.com

Don


	Logged

CISSP, MCSE, CSTA, Security+ SME

punkrokk

Newbie

Offline

Posts: 21

Re: Packet Analysis book suggestions

« Reply #8 on: March 17, 2009, 12:09:15 AM »

Quote from: geekyone on October 20, 2008, 01:37:01 AM

I have not read the above book, but I have read and used Network Intrusion Detection, by Northcutt and Novak. It has a lot of great sections on Packet Analysis, some excellent tcpdump examples, as well as a very well rounded analysis of TCP and it's weaknesses. It goes into some stuff in more detail than Hacking Exposed in some cases (although the book is really on a different topic) and has dozens of example packet captures with detail analysis and explanations. I use it to teach a Network Forensics and Security class.


	Logged

-=punkrokk=-

Pages: [1] Go Up

« previous next »