Wireshark for Network Forensics: An Essential Guide for IT and Cloud Professionals

The book "Wireshark for Network Forensics" provides a comprehensive guide to capturing and analyzing traffic, covering various technologies and environments. It covers the basics of Wireshark, secure application traffic, control plane and data plane capture, wireless technology traffic, network attacks, malware, covert communications, security incident post mortems, and prevention. It also explores cloud and cloud-native architecture-based traffic capture in Kubernetes, Docker-based, AWS, and GCP environments.

Format: Paperback / softback
Length: 271 pages
Publication date: 31 December 2022
Publisher: APress

With the emergence of advanced technologies, traffic capture and analysis have become essential components of IT operations. This book delves into the extensive features and functionalities of Wireshark, widely recognized as the Swiss army knife for IT operational tasks involving traffic analysis. Available as both a command-line interface (CLI) and a graphical user interface (GUI), Wireshark offers versatile capturing options and integrates community-developed features like filter-based analysis and traffic flow graph views. The book begins by covering the fundamentals of Wireshark, followed by in-depth exploration of capturing and analyzing secured application traffic, including SecureDNS, HTTPS, and IPSec. It also delves into control plane and data plane capture, wireless technology traffic analysis (e.g., 802.11 and Bluetooth), and network attack identification, malware detection, covert communication analysis, security incident post-mortem, and prevention strategies. Additionally, the book explores the capture and analysis of secure multimedia traffic, which accounts for a significant portion of internet traffic. It covers cloud and cloud-native architecture-based traffic capture in Kubernetes, Docker-based, AWS, and GCP environments. The book is designed for IT professionals, cloud architects, and infrastructure engineers who want to enhance their skills in network forensics and traffic analysis. By the end of the book, readers will have gained a comprehensive understanding of Wireshark's capabilities and be able to apply them to real-world scenarios.

Weight: 556g
Dimension: 254 x 178 (mm)
ISBN-13: 9781484290002
Edition number: 1st ed.