Packt+ | Advance your knowledge in tech

You're reading from Network Analysis using Wireshark 2 Cookbook Practical recipes to analyze and secure your network using Wireshark 2

Product type Paperback

Published in Mar 2018

Publisher

ISBN-13 9781786461674

Length 626 pages

Edition 2nd Edition

Tools

Wireshark

Concepts

Network Security

Authors (3):

Nagendra Kumar Nainar

Yoram Orzach

Yogesh Ramdoss

View More author details

Table of Contents (25) Chapters

Title Page

Dedication

Packt Upsell

Contributors

Preface

1. Introduction to Wireshark Version 2 FREE CHAPTER

2. Mastering Wireshark for Network Troubleshooting

3. Using Capture Filters

4. Using Display Filters

5. Using Basic Statistics Tools

6. Using Advanced Statistics Tools

7. Using the Expert System

8. Ethernet and LAN Switching

9. Wireless LAN

10. Network Layer Protocols and Operations

11. Transport Layer Protocol Analysis

12. FTP, HTTP/1, and HTTP/2

13. DNS Protocol Analysis

14. Analyzing Mail Protocols

15. NetBIOS and SMB Protocol Analysis

16. Analyzing Enterprise Applications' Behavior

17. Troubleshooting SIP, Multimedia, and IP Telephony

18. Troubleshooting Bandwidth and Delay Issues

19. Security and Network Forensics

Index

Analyzing IPv4 unicast routing operations

IPv4 unicast routing is the process of forwarding unicast data packets from a host in one network to a receiver in the same or another network. The data packet may traverse one or more routers along the path that will perform a lookup in the IP header to take a forwarding decision.

Getting ready

Just open Wireshark, connect it to the network, configure port mirroring to the device that you want to test, and start it. Fragmentation will mostly influence interactive applications such as databases, and these are the places where we should look for problems.

How it works...

If PC1 in the 10.1.100.0/24 network wants to communicate to PC4 in 10.1.200.0/24, it performs the following:

PC1 generates the data and encapsulates it with an IP header. The source IP address is set to 10.1.100.101 and the destination IP address is set to 10.1.200.102.
PC1 encapsulates the packet with an Ethernet header. The source MAC address is set to the PC1 MAC address and the destination...