Chapter 1, Introduction to Wireshark Version 2, covers basic tasks related to Wireshark. Chapter 2, Mastering Wireshark for Network Troubleshooting, covers issues that improve the use of Wireshark as a network analysis tool. Chapter 3, Using Capture Filters, talks about capture filters. Chapter 4, Using Display Filters, shows how to work with display filters. Chapter 5, Using Basic Statistics Tools, looks at simple tools that provide us with basic network statistics. Chapter 6, Using Advanced Statistics Tools, covers advanced statistical tools—I/O graphs, TCP stream graphs, and, in brief, UDP multicast streams. Chapter 7, Using the Expert System, teaches you how to use the expert system, a tool that provides deeper analysis of network phenomena, including events and problems. Chapter 8, Ethernet and LAN Switching, focuses on how to find and resolve layer 2-based problems, with a focus on Ethernet-based issues such as broadcast/multicast events, errors, and finding their source. Chapter 9, Wireless LAN, analyzes wireless LAN traffic and diagnoses connectivity and performance problems reported by users. Chapter 10, Network Layer Protocols and Operations, primarily focuses on layer 3 of the OSI reference model and shows how to analyze the layer 3 protocol (IPv4/IPv6) operations. We also cover unicast and multicast traffic flow analysis. Chapter 11, Transport Layer Protocol Analysis, primarily focuses on the transport layer of the OSI reference model, but also teaches you how to analyze various layer 4 protocol (TCP/UDP/SCTP) operations. Chapter 12, FTP, HTTP/1, and HTTP/2, discusses these protocols, how they work, and how to use Wireshark to find common errors and problems in the network. Chapter 13, DNS Protocol Analysis, covers the basic principles of the DNS protocol, the functionality, commonly faced issues, and the use of Wireshark to analyze and troubleshoot the protocol. Chapter 14, Analyzing Mail Protocols, looks at the normal operation of email protocols and h

WireShark使用教程

Wireshark 是网络包分析工具。网络包分析工具的主要作用是尝试捕获网络包， 并尝试显示包的尽可能详细的情况。 你可以把网络包分析工具当成是一种用来测量有什么东西从网线上进出的测量工具，就好像使电工用来测量进入电信的电量的电度表一样。（当然比那个更高级） 过去的此类工具要么是过于昂贵，要么是属于某人私有，或者是二者兼顾。 Wireshark出现以后，这种现状得以改变。 Wireshark可能算得上是今天能使用的最好的开元网络分析软件。 1. 主要应用 下面是Wireshark一些应用的举例： 网络管理员用来解决网络问题 网络安全工程师用来检测安全隐患 开发人员用来测试协议执行情况 用来学习网络协议 除了上面提到的，Wireshark还可以用在其它许多场合。 2.特性 减压密码：csdn.netok 支持UNIX和Windows平台 在接口实时捕捉包 能详细显示包的详细协议信息 可以打开/保存捕捉的包 可以导入导出其他捕捉程序支持的包数据格式 可以通过多种方式过滤包 多种方式查找包 通过过滤以多种色彩显示包 创建多种统计分析 …还有许多 不管怎么说，要想真正了解它的强大，您还得使用它才行

网络抓包工具，顾名思义，可以抓取局域网内的数据包，主要是监测是否有计算机在发广播包，从而导致网络速度缓慢、掉线等现象。

网络抓包工具 wireshark win7 32位 很强大的网络抓包工具，适用于win7 32位操作系统

通过安装npcap工具解决wireshark不能抓取本地回路的数据包的问题

网友发的D7编写的一个抓包工具 抓包后是乱码 做了很小改动在xe10.3.2下编译通过 可以显示UTF8字符

SIP(Session Initiation Protocol)是一个应用层的信令控制协议。用于创建、修改和释放一个或多个参与者的会话。这些会话可以是Internet多媒体会议、IP电话或多媒体分发。

fiddler网络抓包分析软件

Wireshark使用经典教程（带书签） 不可多得的详细教程，适合没有wireshark使用基础的童鞋。