Features
- Cover Type: Paperback with 552 pages
- Published by: Syngress; Pap/Cdr edition September 1, 2006
- Written in: English
- ISBN 10 Number: 1597490733
- ISBN 13 Number: 978-1597490733
-
Book Dimensions:
8.9 x 6.9 x 1.7 inches
- Weighs: 1.6 pounds
Book Description
Ethereal is the #2 most popular open source security tool used by system administrators and security professionals. This all new book builds on the success of Syngress best-selling book Ethereal Packet Sniffing.
This book provides complete information and step-by-step Instructions for analyzing protocols and network traffic on Windows, Unix or Mac OS X networks. First, readers will learn about the types of sniffers available today and see the benefits of using Ethereal. Readers will then learn to install Ethereal in multiple environments including Windows, Unix and Mac OS X as well as building Ethereal from source and will also be guided through Ethereals graphical user interface. The following sections will teach readers to use command-line options of Ethereal as well as using Tethereal to capture live packets from the wire or to read saved capture files. This section also details how to import and export files between Ethereal and WinDump, Snort, Snoop,
Microsoft Network Monitor, and EtherPeek. The book then teaches the reader to master advanced tasks such as creating sub-trees, displaying bitfields in a graphical view, tracking requests and reply packet pairs as well as exclusive coverage of MATE, Ethereals brand new configurable upper level analysis engine. The final section to the book teaches readers to enable Ethereal to read new Data sources, program their own protocol dissectors, and to create and customize Ethereal reports.
Ethereal is the #2 most popular open source security tool, according to a recent study conducted by insecure.org
Syngress' first Ethereal book has consistently been one of the best selling security books for the past 2 years
The companion Web site for the book provides readers with dozens of open source security tools and working scripts
About The Author
Angela Orebaugh (, GCIA, GCFW, GCIH, GSEC, CCNA) is a Senior Scientist in the Advanced Technology Research Center of Sytex, Inc. where she works with a specialized team to advance the state of the art in information systems security. She has over ten years experience in information technology, with a focus on perimeter defense, secure network design, vulnerability discovery, penetration testing, and intrusion detection systems. She has a Masters in Computer Science, and is currently pursuing her Ph.D. with a concentration in Information Security at George Mason University.
Reader Reviews
Despite the new title, Wireshark & Ethereal Protocol Analyzer Toolkit (WEPAT) is a second edition of Ethereal Packet Sniffing (EPS). I reviewed that book almost three years ago, in May 2004. WEPAT has replaced all of the earlier screen captures with Wireshark replacements. Unfortunately, WEPAT is largely a repeat of EPS, really only featuring a new wireless chapter. If you own EPS, you don't need to upgrade. If you don't own EPS but want to learn how to use Wireshark, I recommend buying WEPAT. One new feature of WEPAT that helped me in production work was the coverage of Tshark statistics in ch 9. I used the advice for displaying top destinations to help me better understand traffic distribution in an unfamiliar network. I also liked the new wireless section, Ch 6, especially the coverage of protocols. The tip that packet details could be launched in a new window via View -
Search for books at
