Network Analysis Using Wireshark Cookbook

A great reference for everybody with tons of practical examples

This is definitely a great book to dive in the Wireshark world. It is a good reference for who uses Wireshark for the first time and at the same time it is a good cookbook book for network administrators who often uses the packet analyzer.

The book starts of with a general introduction to the traffic analys and Wireshark in general. The next two section introduce the reader to BPF and display filter, and offer a wide set of practical examples. Then the book dives in the analys tools in Wireshark and describes what they do and how they work. Once the reader had built up enough knowledge on the different tools, the book goes trough the different stack layers illustrating how to put together filters and tools to solve common network issues on the different layers.

One of nice things about this book is that it's self contained, you can read this book without having to look around for other network reference (e.g. protocol headers, SSL handshake, HTTP status code). It's nice to have everything in the same place, especially when you are dealing with the tons of standards and acronyms of the networking world.

I enjoyed reading this book and I highly recommended it both to people that are approaching Wireshark for the first time and for people that work with networks and are looking for a great and practical cookbook.