Instant Traffic Analysis With Tshark How-to : Master the Terminal-based Version of Wireshark for Dealing With Network Security Incidents
Language: English
Published by Packt Publishing, 2013
- Softcover
- Used
Seller: GreatBookPrices, Columbia, MD, U.S.A.GreatBookPrices
AbeBooks seller since April 6, 2009
Condition: Used - As new
£ 24.02
Quantity: Over 20 available
Add to basketItem description from seller
Unread book in perfect condition.
Seller Inventory # 23290247
- Title
- Instant Traffic Analysis With Tshark How-to : Master the Terminal-based Version of Wireshark for Dealing With Network Security Incidents
- Author
- Merino, Borja
- Publisher
- Packt Publishing
- Publication year
- 2013
- Condition
- As New
- Binding
- Soft cover
- Language
- English
- ISBN 10
- 178216538X
- ISBN 13
- 9781782165385
Master the terminal-based version of Wireshark for dealing with network security incidents
Overview
- Learn something new in an Instant! A short, fast, focused guide delivering immediate results.
- Terminal-based version of Wireshark for dealing with network security incidents
- Useful filters to quickly identify and limit network problems derived from malware and a variety of network attacks
- Decoding capabilities to investigate suspicious traffic and detect network anomalies
In Detail
Malware, DoS attacks, SQLi, and data exfiltration are some of the problems that many security officers have to face every day. Having advanced knowledge in communications and protocol analysis is therefore essential to investigate and detect any of these attacks. Tshark is the ideal tool for professionals who wish to meet these needs, or students who want to delve into the world of networking.
Instant Traffic Analysis with Tshark How-to is a practical, hands-on guide for network administrators and security officers who want to take advantage of the filtering features provided by Tshark, the command-line version of Wireshark. With this guide you will learn how to get the most out of Tshark from environments lacking GUI, ideal for example in Unix/Linux servers, offering you much flexibility to identify and display network traffic.
The book begins by explaining the basic theoretical concepts of Tshark and the process of data collection. Subsequently, you will see several alternatives to capture traffic based on network infrastructure and the goals of the network administrator. The rest of the book will focus on explaining the most interesting parameters of the tool from a totally practical standpoint.
You will also learn how to decode protocols and how to get evidence of suspicious network traffic. You will become familiar with the many practical filters of Tshark that identify malware-infected computers and lots of network attacks such as DoS attacks, DHCP/ARP spoof, and DNS flooding. Finally, you will see some tricks to automate certain tasks with Tshark and python scripts.
You will learn everything you need to get the most out of Tshark and overcome a wide range of network problems. In addition you will learn a variety of concepts related to networking and network attacks currently exploited.
What you will learn from this book
- Basic use of the tool and theoretical concepts of operation and dependence with other tools
- Find the root of many problems related to the performance of your network
- Decode SSL to inspect network attacks that attempt to evade IDS
- Identify well-known networks attacks and get evidence of suspicious network traffic
- Limit security incidents to locate network intrusions
- Audit applications that make use of sockets
- Automate tasks with the help of scripts
- Use Tshark in a clever way to detect traffic anomalies
Approach
Filled with practical, step-by-step instructions and clear explanations for the most important and useful tasks. This How-to guide will explore TShark. As this is the terminal version, it will show the user all commands and syntax as well as all options for Tshark and its common uses through small recipes.
"Synopsis" may belong to another edition of this title.
About the Author
Borja Merino
Borja Merino is a security researcher from Leon (Spain). He studied computer science at the Pontificia University of Salamanca and he is certified in OSCP, OSWP, OSCE, CCNA Security, CCSP, Cisco Firewall, SMFE, CISSP and NSTISSI 4011. He has published several papers about pentesting and exploiting, is a Metasploit community contributor and one of the authors of the blog http://www.securityartwork.com where he regularly writes security articles. You can follow him on Twitter: @BorjaMerino
"About the title" may belong to another edition of this title.
GreatBookPrices
Columbia, MD, U.S.A.
AbeBooks seller since April 6, 2009
Shipping rates within U.S.A.
| Item | 5 to 14 business days | 8 to 14 business days |
|---|---|---|
| First item | £ 1.99 | £ 1.99 |
Payment methods
Store description
SuperBookDeals.com is your top source for finding new books at the absolute lowest prices, guaranteed ! We offer big discounts - everyday - on millions of titles in virtually any category, from Architecture to Zoology -- and everything in between. Discover great deals and super-savings, on professional books, text book titles, the newest computer guides, or your favorite fiction authors. You'll find it all - at HUGE SAVINGS - at SuperBookDeals. Browse through our complete online product catalog today. Serving customers around the world for years, we help thousands find just the books they're looking for -- at incredibly low, bargain prices.…
Seller's business information
Expert Trading Limited
9220 Rumsey Road, Suite 101
Columbia, MD U.S.A. 21045
Terms of sale
Company Name: GreatBookPrices
Legal Entity: Expert Trading, LLC
Address: 6310 Stevens Forest, suite 200, Columbia MD 21046
Email address: CustomerService@SuperBookDeals.com
Phone number: 410-964-0026
consumer complaints can be addressed to address above
Registration #: 52-1713923
Authorized representative: Danielle Hainsey
Right of withdrawal
If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.
Information regarding the right of withdrawal
Statutory right to withdraw
You have the right to withdraw from this contract within 14 days without giving any reason.
The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.
To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).
We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.
We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.
We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.
We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.
You shall send back the goods or hand them over to GreatBookPrices, Bensenville, Illinois, U.S.A., without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Exceptions to the right of withdrawal
The right of withdrawal does not apply to:
- The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
- The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.
Shipping terms
Our warehouses across the globe are fully operational without substantial delays. We are working hard and continue to overcome the daily challenges presented by COVID-19. We appreciate your understanding.
Internal processing of your order will take about 1-2 business days. Please allow an additional 4-14 business days for Media Mail delivery. We have multiple ship-from locations - MD,IL,NJ,UK,IN,NV,TN & GA