| Wireshark Network Analysis: The Official Wireshark Certified Network Analyst Study Guide |  | Author: Laura Chappell Creator: Gerald Combs Publisher: Laura Chappell University Category: Book
List Price: $99.95 Buy New: $75.99 as of 9/8/2010 02:30 CDT details You Save: $23.96 (24%)
New (8) Used (3) from $75.99
Seller: blissmoon Rating: 8 reviews Sales Rank: 6,991
Media: Paperback Pages: 800 Number Of Items: 1 Shipping Weight (lbs): 3.1 Dimensions (in): 9.5 x 7.5 x 1.7
ISBN: 1893939995 Dewey Decimal Number: 004 EAN: 9781893939998 ASIN: 1893939995
Publication Date: March 15, 2010 Availability: Usually ships in 1-2 business days
| |
| Similar Items:
| |
| Editorial Reviews:
Product Description Wireshark is rated #2 in the Top 100 Network Security Tools by sectools.org. Wireshark is the world's most popular network analyzer tool. This book is the ultimate resource on Wireshark which is a MUST HAVE tool used by network IT professionals to troubleshoot, secure and optimize networks. Readers learn to capture wired and wireless traffic, focus on the cause of slow web browsing, identify why applications don't run properly across the network, locate the cause of poor VoIP call quality, determine why WLANs are plagued with problems and more. The author, Laura Chappell is the founder of Wireshark University and Chappell University and has been analyzing networks for over 20 years - the book is written in a clear manner with hundreds of screenshots for the visual learner. The foreword was written by Gerald Combs, creator of Wireshark. Wireshark Network Analysis covers the test objectives for the Wireshark Certified Network Analyst Exam and includes test questions and answers for all topics covered. Filled with 45 real-life case studies, Wireshark Network Analysis takes you inside small, medium and large corporations to see how they solved network problems in a more efficient, accurate way using Wireshark. Book supplements are available online at www.wiresharkbook.com.
|
| Customer Reviews:
Showing reviews 1-5 of 8
Excellent book with material beyond Wireshark April 10, 2010 M. Christodonte II 13 out of 14 found this review helpful
I was a little nervous when I started reading this book. Chapter 1 provided an overview of network analysis, but had a lot of "personality." When I read, "Wait...more data is coming in...and more...and...SCREECH!" I wasn't too sure if I was going to finish the book. At over 700 pages, I was hoping that each page contained only "meat and potatoes," without a lot of dry humor and meaningless analogies. Thankfully, a few pages later I began what turned into a great read -- full of solid content.
Wireshark Network Analysis goes well beyond Wireshark functionality. Although the first several chapters outline how to best use Wireshark -- examining the settings, filters, and other configurations -- I think the true value of the book is in the detailed explanations of network traffic analysis. For instance, pg. 304 delves into DNS. This section tells the reader exactly what DNS is used for and provides an analysis of normal and abnormal DNS traffic. It also shows screenshots of the packet, displays and describes its contents. This type of analysis is provided throughout the book and covers all forms of network traffic (including suspect traffic -- my personal favorite).
Page 563 resonated with me, as I'm a firm believer in baselining network traffic. In this section, Wireshark Network Analysis details the importance of baselining and the types of traffic to focus on. Like other sections, this section also provides screenshots and shows how to analyze traffic and packet statistics.
There were minimal grammar errors, and it does seem like the case studies were not tech edited by the book editor -- many of them contained several grammar mistakes. Although, it does appear that the case studies were all submitted by third parties and probably used as-is. Nevertheless, I can provide plenty of other examples as to why Wireshark Network Analysis is a great book. There are plenty of screenshots, review questions with answers on the next page (instead of making the reader turn to the back of the book), and links to tons of packet captures for analyzing on your own. Overall, the book is well-written and, in my opinion, the best network analysis book on the market today.
excellent resource May 14, 2010 John Modlin (USA) 7 out of 7 found this review helpful
As a Network Forensic Analyst I spend all day sniffing packets, isolating and correcting network issues. I grabbed this book immediately because even though I've used other sniffers, and am sniffer certified, I use wireshark all the time. This book has been an EXCELLENT resource! It's divided up by protocol making it very easy to follow with Great Case Studies which provide insight into problems you might also be having. Because of how it's written, it's great for beginning sniffers, (as long as you have a good handle on the TCP/IP OSI model), and for experts as a resource to look up methods and technical info.
Bonus, if you read the notes at the bottom of the pages, and sometimes in the main text, you will find subtle humor which has made me laugh a few times. This is a fresh approach to an otherwise tedious task in writing a technical type manual. I've also attended Lauras webinars, which are also enlightening as Laura is a really enthusiastic and fun teacher.
Laura, GREAT JOB!!!
John
Best introductory book on Wireshark available today August 5, 2010 Richard Bejtlich (Metro Washington, DC) 4 out of 4 found this review helpful
Wireshark Network Analysis (WNA) is a very practical, thorough, comprehensive introduction to Wireshark, written in an engaging style and produced in a professional manner. WNA provides a variety of methods for teaching network analysis with Wireshark, including description, screen shots, user-supplied case studies, review questions (with answers), "practice what you've learned" sections, and dozens of network traces (available online). Readers who approach the book as more of a class in printed (text) and electronic (trace file) forms will likely understand the higher-than-normal price tag. Anyone trying to learn how to use Wireshark, including basic protocol analysis, will greatly benefit by reading WNA.
WNA will not bore you. Author Laura Chappell offers one of the more lively writing styles you're likely to find in technical books, reminiscent of Michael W. Lucas. The book is expertly organized, starting with multiple chapters explaining Wireshark, followed by sections on common protocols and concluding with other uses and applications. WNA provides plenty of coverage on configuration, customization, and profiles which I have not seen addressed elsewhere.
I've been using Wireshark (previously Ethereal) for at least 10 years, and I still found a few cool tips by reading WNA. These included right click -> Apply As Column, right click -> Filter Field Reference, right click -> Colorize Conversation, Display Filter auto-completion, Display Filter Macros, Mark Packet with ctrl-M, and Ignore Packet with ctrl-X. I also learned that applying a display filter to Tshark (via -R) does NOT change the packets saved to disk -- only those counted or displayed on screen. I liked the chapters on WLAN and VoIP analysis, 26 and 27 respectively.
I only have a few caveats for WNA. First, the book doesn't talk about how to extend Wireshark. It doesn't explain how protocol dissectors work, or how to use the Lua programming language with Wireshark. The chapter on network forensics (ch 30) doesn't saw much about the subject. I would have liked examples of using Rawshark in chapter 33.
I also appreciate that WNA offers an online errata so readers can identify any typos. For example, I expect to see an issue I found with Figure 200 on p 378 to appear soon; basically some of the TCP sequence numbers need to be adjusted. Also on p 452, "Referrer" should be the misspelled but accurate Referer.
I have recommended all my junior analysts read WNA. They will learn a ton about Wireshark, and will also be able to follow Laura's explanations of many common network protocols. We may even pursue the certification tied to the book. Great work Laura!
Can put the book down. April 28, 2010 William K. Folger (Pipestone, MN USA) 3 out of 3 found this review helpful
What a refreshing approach to network analysis. I have been to one of Laura's two day seminars and reading this book is like having Laura right here in the room. Great book indeed. This will guide a novice with a basic understanding to being proficient at understanding packet communication. I recommend to anyone in the network administration field.
Hands down the best network analysis book to date. June 13, 2010 Dan (Calgary, AB Canada) 3 out of 3 found this review helpful
I saw this book in the Tech Ed 2010 book store the day before Laura's session and thought $99 - you've got to be kidding! After seeing her present in her first session, my opinion changed completely and I rushed (along with many other attendees at the session) directly to the bookstore down the hall to grab a copy.
Needless to say the book sold out immediately and I was lucky to have obtained one.
I have been in the Networking industry for close to 20 years, and Laura has the unique ability to make this material understandable and accessible for anyone that has basic network knowledge. Coupled with her sense of humor, it enables one to tackle this esoteric topic and even enjoy it along the way.
This book has enabled me to "fill in the gaps" in my network analysis skill set and I look forward to referring to it for a long time to come.
Great job Laura, I look forward to seeing more material from you in the future!
Showing reviews 1-5 of 8
|
|
|
Copyright © 2009 Troubleshooting a Home Network
| |