Wireshark is the world's most popular network analyzer tool with over 1 million downloads per month. As the Founder of Wireshark University, Laura Chappell is undoubtedly one of the best Wireshark instructors around.

In this updated book, Laura offers step-by-step instructions on the key functions and features of Wireshark, including:

• Filter on addresses, protocols, fields or traffic characteristics
• Create custom columns for more efficient analysis
• Find the source of delays with filters and coloring rules
• Perform unattended captures with auto-stop conditions
• Filter on keywords using wildcards and regular expressions
• Graph and compare user, subnet and application traffic
• Reassemble and extract a file from captured traffic
• Identify DNS and HTTP errors fast
• Export important packet details to .csv format
• ...and more

This book includes 46 step-by-step Labs to quickly bring you up to speed with Wireshark version 2 regardless of whether you are a newbie or already working with Wireshark today

This book is intended to provide practice quiz questions based on the thirty-three areas of study defined for the Wireshark Certified Network Analyst(TM) Exam. This Official Exam Prep Guide offers a companion to Wireshark Network Analysis: The Official Wireshark Certified Network Analyst Study Guide (Second Edition).

Wireshark is the world's most popular network analyzer solution. Used for network troubleshooting, forensics, optimization and more, Wireshark is considered one of the most successful open source projects of all time.

Laura Chappell has been involved in the Wireshark project since its infancy (when it was called Ethereal) and is considered the foremost authority on network protocol analysis and forensics using Wireshark.

This book consists of 16 labs and is based on the format Laura introduced to trade show audiences over ten years ago through her highly acclaimed Packet Challenges. This book gives you a chance to test your knowledge of Wireshark and TCP/IP communications analysis by posing a series of questions related to a trace file and then providing Laura's highly detailed step-by-step instructions showing how Laura arrived at the answers to the labs.

Book trace files and blank Answer Sheets can be downloaded from this book's supplement page (see https: //www.chappell-university.com/books).

Lab 1: Wireshark Warm-Up
Objective: Get Comfortable with the Lab Process. Completion of this lab requires many of the skills you will use throughout this lab book. If you are a bit shaky on any answer, take time when reviewing the answers to this lab to ensure you have mastered the necessary skill(s).

Lab 2: Proxy Problem
Objective: Examine issues that relate to a web proxy connection problem.

Lab 3: HTTP vs. HTTPS
Objective: Analyze and compare HTTP and HTTPS communications and errors using inclusion and field existence filters.

Lab 4: TCP SYN Analysis
Objective: Filter on and analyze TCP SYN and SYN/ACK packets to determine the capabilities of TCP peers and their connections.

Lab 5: TCP SEQ/ACK Analysis
Objective: Examine and analyze TCP sequence and acknowledgment numbering and Wireshark's interpretation of non-sequential numbering patterns.

Lab 6: You're Out of Order
Objective: Examine Wireshark's process of distinguishing between out-of-order packets and retransmissions and identify mis-identifications.

Lab 7: Sky High
Objective: Examine and analyze traffic captured as a host was redirected to a malicious site.

Lab 8: DNS Warm-Up
Objective: Examine and analyze DNS name resolution traffic that contains canonical name and multiple IP address responses.

Lab 9: Hacker Watch
Objective: Analyze TCP connections and FTP command and data channels between hosts.

Lab 10: Timing is Everything
Objective: Analyze and compare path latency, name resolution, and server response times.

Lab 11: The News
Objective: Analyze capture location, path latency, response times, and keepalive intervals between an HTTP client and server.

Lab 12: Selective ACKs
Objective: Analyze the process of establishing Selective acknowledgment (SACK) and using SACK during packet loss recovery.

Lab 13: Just DNS
Objective: Analyze, compare, and contrast various DNS queries and responses to identify errors, cache times, and CNAME (alias) information.

Lab 14: Movie Time
Objective: Use various display filter types, including regular expressions (regex), to analyze HTTP redirections, end-of-field values, object download times, errors, response times and more.

Lab 15: Crafty
Objective: Practice your display filter skills using contains operators, ASCII filters, and inclusion/exclusion filters, while analyzing TCP and HTTP performance parameters.

Lab 16: Pattern Recognition
Objective: Focus on TCP conversations and endpoints while analyzing TCP sequence numbers, Window Scaling, keep-alive, and Selective Acknowledgment capabilities.

Wireshark is the world's most popular network analyzer tool with over 500,000 downloads per month. This book provides insider tips and tricks to spot performance issues fast - no more finger pointing because the packets never lie From Death by Database to Troubleshooting Time Syncing, 49 case studies offer insight into performance and security situations solved with Wireshark. Learn to customize Wireshark for faster and more accurate analysis of your network traffic. Build graphs to identify and expose issues such as packet loss, receiver congestion, slow server response, network queuing and more. This book is the Official Study Guide for the Wireshark Certified Network Analyst program. This Second Edition includes an introduction to IPv6, ICMPv6 and DHCPv6 analysis, updated Wireshark functionality and new trace files. Refer to www.wiresharkbook.com for book supplements, index, table of contents and more.

Whether you are a Wireshark newbie or an experienced Wireshark user, this book streamlines troubleshooting techniques used by Laura Chappell in her 20+ years of network analysis experience. Learn insider tips and tricks to quickly detect the cause of poor network performance. This book consists of troubleshooting labs to walk you through the process of measuring client/server/network delays, detecting application error responses, catching delayed responses, locating the point of packet loss, spotting TCP receiver congestion, and more. Key topics include: path delays, client delays, server delays, connection refusals, service refusals, receive buffer overload, rate throttling, packet loss, redirections, queueing along a path, resolution failures, small MTU sizes, port number reuse, missing support for TCP SACK/Window Scaling, misbehaving infrastructure devices, weak signals (WLAN), and more. Book supplements include sample trace files, Laura's Wireshark troubleshooting profile, and a troubleshooting checklist.

Filled with real-world event examples, insider tips, and essential planning, development, and troubleshooting checklists, this book is the ultimate resource for virtual event planners and hosts. Whether your virtual event is a conference, online course series, job interview day, or something else, this book offers step-by-step instructions and checklists to help.

• Plan, develop, and host a virtual event from start to finish
• Compare and host live, simulated live, or a hybrid event elements
• Add interactivity and promote socialization within virtual events
• Effectively market your online events to attendees and exhibitors/sponsors
• Ensure the most effective global delivery

This book includes links to numerous online virtual event checklists:

• Platform Checklist (all the features and functions to look for)
• Agenda Checklist (single and multi-track, single and multi-day)
• Session Checklist (live, simulive, on-demand planning)
• Speaker Checklist (details for marketing, promotion and sessions)
• Exhibitor Checklist (modern/traditional booth elements, interactivity, resources, and more)
• Sponsor Checklist (visibility and marketing)
• Testing Checklist (general, session, exhibit, chat and miscellaneous tests to run)

In addition, the book provides links to an online payment processing spreadsheet and sample multi-track agenda.