Wireshark filter tutorial: A Wireshark guide from Laura Chappell

• Published: 26 May 2010

Wireshark and other network monitoring/reporting tools: How-to Wireshark 1.2 tutorial: Open source network analyzer's new tools -- Learn about features in the Wireshark 1.2 network analyzer Using Wireshark and Tshark display filters for troubleshooting -- Understand how to use display filters for network security and troubleshooting. Testing Snort with Metasploit -- Learn how using Snort with Metasploit can help avoid faulty testing. Graph performance behavior with Pilot -- Learn how to improve performance monitoring reports with Pilot, a graphing tool. Learn how to sniff network traffic in this Wireshark tutorial

With the Wireshark network analyzer, networking pros can address a wide range of monitoring for functions that range from bandwidth optimization and application analysis to troubleshooting and network security. Wireshark is an open source network monitoring tool, so networking pros can tailor the tool to their exact needs. And those needs can range from basic traffic transmission testing to intrusion prevention, analysis of bandwidth usage, application security testing and identification of faulty configurations.

In "Wireshark Network Analysis: The Official Wireshark Certified Network Analyst Guide," Wireshark expert Laura Chappell explores capturing and analyzing various types of traffic, application-specific monitoring, WLAN and VoIP monitoring, and more.

Wireshark guide: The open source network monitoring tool in action

In "The world of Network Analysis," the  first chapter of "Wireshark Network Analysis," Chappell lays out a network analysis to-do list, including all of the tasks networking pros will face in using Wireshark. She also guides you through the process of a typical network analysis session; provides a switching, routing and firewall overview; and provides case studies of the Wireshark network analyzer in action. Case studies include a school district with 50 VLANs and a 22-branch enterprise campus network.

More Laura Chappell Wireshark resources Learn about Laura Chappell's Wireshark training series, Wireshark University.   Laura Chappell's blog, Inside Laura's Lab, offers a look inside her protocol analysis lab. Learn more about Chappell's Wireshark Network Analysis book.

Wireshark filter tutorial: A how-to

The beauty of Wireshark as an open source network monitoring tool is that it can be tailored to the specific needs of an enterprise network. So a big part of learning Wireshark is learning how to establish Wireshark filters. In this Wireshark video, part of the Wireshark training series "Coffee and a Quickie," Chappell explains the difference between Wireshark capture filters and Wireshark display filters, and she provides a step-by-step guide to setting up Wireshark filters.

So you think you can do it without the Wireshark network analyzer?

Sure you can survive without Wireshark, but why bother? Chappell outlines 10 reasons why Wireshark is a must-have for networking pros. Two of our favorite reasons for working Wireshark? You'll always know what's happening on the network, and -- Chappell quips -- you'll never have to flip burgers for a living.