Packet Sniffing (ala Hak5 406/408/409)
I must apologize again for the lack of show notes lately. I didn’t make the time I should’ve.
Anyway, getting down to business:
I focused in on a couple of things during this series, as trying to compact the entirety of the OSI model and TCP/IP/wireshark would just be impossible, and I would probably have to charge you money.
I wanted to really focus on allowing people to understand the foundation of how the internet is kind of built, without having to memorize all sorts of terms. At the same time, I wanted to delve a little deeper into the TCP/IP portions of a packet and really allow people to understand what a packet is and does in terms of communication. Finally, I wanted to show them a tool that pretty much every seasoned IT professional has used to look at packets and perform analysis of any sort.
For 406/408, I highly reccommend just reading wikipedia articles and RFC’s if you are really interested in learning more about this. I also suggest finding a decent TCP/IP book. I don’t want to be an advertising link whore so I won’t be spewing out an amazon associate link to a random IT book here.
In 409, I used wireshark’s own manual and wiki, which is just stellar. Here is a link to their documentation page: http://www.wireshark.org/docs/. Trust me, there are far more advanced things you can do with their filters/expressions.
If you have any specific requests, please contact me either via feedback@hak5.org, this site, or you can also IM me through my digsby widget on the front page of the site if you allow it.
Thank you for reading this post. You can now Leave A Comment (0) or Leave A Trackback.
Post Info
This entry was posted on Wednesday, October 29th, 2008 and is filed under Hak5, Hak5ShowNotes.You can follow any responses to this entry through the Comments Feed. You can Leave A Comment, or A Trackback.
Previous Post: The lack of show notes. »
Next Post: Digsby »
