Packt+ | Advance your knowledge in tech

You're reading from Network Analysis using Wireshark 2 Cookbook Practical recipes to analyze and secure your network using Wireshark 2

Product type Paperback

Published in Mar 2018

Publisher

ISBN-13 9781786461674

Length 626 pages

Edition 2nd Edition

Tools

Wireshark

Concepts

Network Security

Authors (3):

Nagendra Kumar Nainar

Yoram Orzach

Yogesh Ramdoss

View More author details

Table of Contents (25) Chapters

Title Page

Dedication

Packt Upsell

Contributors

Preface

1. Introduction to Wireshark Version 2 FREE CHAPTER

2. Mastering Wireshark for Network Troubleshooting

3. Using Capture Filters

4. Using Display Filters

5. Using Basic Statistics Tools

6. Using Advanced Statistics Tools

7. Using the Expert System

8. Ethernet and LAN Switching

9. Wireless LAN

10. Network Layer Protocols and Operations

11. Transport Layer Protocol Analysis

12. FTP, HTTP/1, and HTTP/2

13. DNS Protocol Analysis

14. Analyzing Mail Protocols

15. NetBIOS and SMB Protocol Analysis

16. Analyzing Enterprise Applications' Behavior

17. Troubleshooting SIP, Multimedia, and IP Telephony

18. Troubleshooting Bandwidth and Delay Issues

19. Security and Network Forensics

Index

ICMP – protocol operation, analysis, and troubleshooting

Internet Control Message Protocol (ICMP) is a network layer protocol that serves the purpose of error reporting and network path diagnostic functions. The Ping and Traceroute utility tools leverage ICMP messages for fault detection and isolation. ICMP messages are sent using basic IP header. The protocol field in IP header will be set to ICMP followed by the ICMP payload. The ICMP packet has the following format:

ICMP header format

The ICMP message types used for network connectivity verification are echo request (Type = 8) and echo reply (Type = 0).

Getting ready

When there are any issues with an end application such as a web service or mail service, the first troubleshooting step using the bottom-up approach is to verify the data-link layer. Once we have verified the data-link layer using the steps defined in the previous section, the next step is to verify the network connectivity between the end points. Network connectivity between...