Okay, I am just now learning how to use wireshark as an application, however when looking at the "info" section of the packet captures I don't fully understand what some of the information means. Is there a book or website I can reference to help me understand the packet/s analysis better? I understand the coloring rules and that they can help you determine the problem with most packets, but I was wondering if there is a good book or website out there to help you fully understand the packet/s info data? asked 18 Aug '12, 11:20  I_GEEK_IT |
2 Answers:
Laura Chappell's book Wireshark Network Analysis is the definitive guide. The main page of www.wireshark.org has a link titled "Learn Wireshark, Resources and Documentation." There are YouTube videos and other web sites with Wireshark information. Google is your friend. And, of course, you can come back here when you have specific questions. answered 18 Aug '12, 11:33  Jim Aragon |
Check this out: TRAFFIC ANALYSIS WITH WIRESHARK A great starting point and there is the Chris Sanders book from No Starch, it is great: Using Wireshark to Solve Real-World Network Problems answered 20 Aug '12, 03:44  sha8e |
