HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 119 guests and 5 members online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Featuresarrow Book Reviewsarrow Packet Analysis book suggestions
EH-Net
February 10, 2012, 07:42:51 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
« previous next »
  Print  
Author Topic: Packet Analysis book suggestions  (Read 10105 times)
0 Members and 1 Guest are viewing this topic.
geekyone
Full Member
***
Offline Offline

Posts: 175



View Profile
« on: October 20, 2008, 01:37:01 AM »
I have been looking for a good book about packet analysis.  I am really not looking for a book about a specific packet sniffing tool.  I want one that really digs into analyzing packet contents.  I have been considering getting "Practical Packet Analysis: Using Wireshark to Solve Real-World Network Problems" but I am not sure it is what I want.  Has anyone read it?  Is it any good?
Logged
CISSP, CEH, GPEN, GCIH, GCFA
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 3845


Editor-In-Chief


View Profile WWW
« Reply #1 on: October 20, 2008, 08:39:45 AM »
I enjoyed it very much. In fact, I was thinking about doing a writeup on it. It goes through the basics like protocol overviews and how they look in Wireshark. And there are several real-world examples of how it can be used to solve networking issues. It's also a quick read being only 192 pages.

The guy who wrote it runs this site with tutorials and other good stuff:
http://www.chrissanders.org

I haven't read Jay Beale's "Wireshark & Ethereal Network Protocol Analyzer Toolkit," but knowing Jay and looking at it's size, it will get much more in depth. It was also published in 2006, but not much has changed with basic protocol analysis in 2 years. Wink

Hope this helps,
Don
Logged
CISSP, MCSE, CSTA, Security+ SME
chuck378
Newbie
*
Offline Offline

Posts: 5


View Profile
« Reply #2 on: October 20, 2008, 04:56:51 PM »
If you really enjoy it and have the money, I suggest the "Laura Chappell Master Library".  It's $999, but it's well worth the money.  Several tutorials, presentations, hands on and pretty much all the books she wrote.  I learned so much with just the first DVD.  It's a complete course on packet analysis.  You can find more information at w w w. packet-level.com.  Check it out.
chuck378
Logged
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 3845


Editor-In-Chief


View Profile WWW
« Reply #3 on: October 20, 2008, 06:27:16 PM »
Great suggestion, Chuck.

Don
Logged
CISSP, MCSE, CSTA, Security+ SME
Thomas
Newbie
*
Offline Offline

Posts: 4


View Profile WWW
« Reply #4 on: October 21, 2008, 01:07:43 PM »
Quote from: chuck378 on October 20, 2008, 04:56:51 PM
If you really enjoy it and have the money, I suggest the "Laura Chappell Master Library".  It's $999, but it's well worth the money.  Several tutorials, presentations, hands on and pretty much all the books she wrote.  I learned so much with just the first DVD.  It's a complete course on packet analysis.  You can find more information at w w w. packet-level.com.  Check it out.
chuck378

Still working my way through the set.  Done with 1/4.  So far I really like it. Some new info, some old but mostly seeing things in a different way now.
Logged
geekyone
Full Member
***
Offline Offline

Posts: 175



View Profile
« Reply #5 on: October 21, 2008, 05:54:13 PM »
Thanks for all the suggestions.  I would love to get the Master Library  but that is a little out of my price range right now.  I probably break down and get the "Practical Packet Analysis" book and just keep dreaming about Laura's collection.
Logged
CISSP, CEH, GPEN, GCIH, GCFA
hayabusa
Hero Member
*****
Offline Offline

Posts: 1202



View Profile
« Reply #6 on: March 16, 2009, 09:10:50 PM »
Along with the suggestion for the master library, which I have a copy of as well, you'd also be good to look into the Wireshark University courses and CBT's.  They lend a lot of practical insight, and really cover a lot, specific to both Wireshark AND packet analysis, in general.
Logged
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'

OSCP , GPEN, C|EH
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 3845


Editor-In-Chief


View Profile WWW
« Reply #7 on: March 16, 2009, 11:13:22 PM »
And since this thread has been bumped, let me throw in Josh Wright's Wireless Course, SANS 617. In addition to some mad wireless fu, it was also a master class in pcap analysis. He even wrote a couple chapters for a Syngress title.

Quote

“Wireshark and Ethereal Packet Sniffing”, published by Syngress Press, Angela Orebaugh, et al.  I wrote two chapters for this book, chapter 6 on wireless analysis with Wireshark and chapter 9 on Wireshark accompanying tools (for command-line use).  My editor said I could give away the wireless chapter as the sample for free.


http://www.willhackforsushi.com

Don
Logged
CISSP, MCSE, CSTA, Security+ SME
punkrokk
Newbie
*
Offline Offline

Posts: 21


View Profile
« Reply #8 on: March 17, 2009, 12:09:15 AM »
Quote from: geekyone on October 20, 2008, 01:37:01 AM
I have been looking for a good book about packet analysis.  I am really not looking for a book about a specific packet sniffing tool.  I want one that really digs into analyzing packet contents.  I have been considering getting "Practical Packet Analysis: Using Wireshark to Solve Real-World Network Problems" but I am not sure it is what I want.  Has anyone read it?  Is it any good?


I have not read the above book, but I have read and used Network Intrusion Detection, by Northcutt and Novak. It has a lot of great sections on Packet Analysis, some excellent tcpdump examples, as well as a very well rounded analysis of TCP and it's weaknesses. It goes into some stuff in more detail than Hacking Exposed in some cases (although the book is really on a different topic) and has dozens of example packet captures with detail analysis and explanations.  I use it to teach a Network Forensics and Security class.
Logged
-=punkrokk=-
Pages: [1]   Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.234 seconds with 24 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge Training: Build Security Skills to Protect and Defend

offsec_130x200-2_jan-feb2012.png
Offensive Security
AWE Live in the Caribbean!
March 5 - 9, 2012

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: Refer_EHN
Including SANS Phoenix 2012, SANS 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.