Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Network Analysis using Wireshark 2 Cookbook
  • Toc
  • feedback
Network Analysis using Wireshark 2 Cookbook

Network Analysis using Wireshark 2 Cookbook

By : Nagendra Kumar Nainar, Yoram Orzach, Yogesh Ramdoss
4.3 (6)
close
Network Analysis using Wireshark 2 Cookbook

Network Analysis using Wireshark 2 Cookbook

4.3 (6)
By: Nagendra Kumar Nainar, Yoram Orzach, Yogesh Ramdoss

Overview of this book

This book contains practical recipes on troubleshooting a data communications network. This second version of the book focuses on Wireshark 2, which has already gained a lot of traction due to the enhanced features that it offers to users. The book expands on some of the subjects explored in the first version, including TCP performance, network security, Wireless LAN, and how to use Wireshark for cloud and virtual system monitoring. You will learn how to analyze end-to-end IPv4 and IPv6 connectivity failures for Unicast and Multicast traffic using Wireshark. It also includes Wireshark capture files so that you can practice what you’ve learned in the book. You will understand the normal operation of E-mail protocols and learn how to use Wireshark for basic analysis and troubleshooting. Using Wireshark, you will be able to resolve and troubleshoot common applications that are used in an enterprise network, like NetBIOS and SMB protocols. Finally, you will also be able to measure network parameters, check for network problems caused by them, and solve them effectively. By the end of this book, you’ll know how to analyze traffic, find patterns of various offending traffic, and secure your network from them.
Table of Contents (20 chapters)
close

TCP sliding window mechanism

When the endpoints establish a TCP session, the Window size field in the TCP header will be used to signal the receiving buffer capacity and govern the amount of data that can be received and processed. Each endpoint will maintain a local receive window (RWND). This is the maximum amount of data the receiver can receive for buffering and processing. The endpoint will include this RWND value in the TCP header. The sender uses RWND as input to decide the Sliding window size. It can send TCP segments to a peer of size defined in the window size before waiting for an acknowledgment.

The sender endpoint maintains the sliding window by managing the number of outstanding TCP segments waiting for an acknowledgement. The sender slides the window towards the right as and when it receives the ACK for the segments it has sent and are waiting for acknowledgement...

bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete