This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'm finding a lot of excellent material online and ebooks on how to use wireshark from beginner to advanced but I am not finding anything on how to actually read the information in the captures.

Are there any good resources online or ebooks that actually help someone to become literate in reading what all of that packet information is actually saying and what to look out for?

asked 31 Dec '14, 20:32

araKnid's gravatar image

araKnid
11112
accept rate: 0%


That's a very big pile of information you intend to swallow there. Are you really trying to understand over a thousand protocols that Wireshark can handle? I guess not. If you want to start with the most common ones (TCP/IP and friends) then I suggest to get a hold of some reading material like O'Reilly's Internet Core Protocols: The Definitive Guide, or Steven's TCP/IP Illustrated, Vol. 1: The Protocols, or the online TCP/IP guide. If that's done you should be able to base further study on the specific protocols you're faced with.

permanent link

answered 02 Jan '15, 04:22

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×205
×10
×3

question asked: 31 Dec '14, 20:32

question was seen: 1,357 times

last updated: 02 Jan '15, 04:22

p​o​w​e​r​e​d by O​S​Q​A