Elementary Information Security, 3rd Edition

▶ 11.5 Network Inspection Tools

This section examines two tools for inspecting a computer network. The first tool, Wireshark, collects network traffic and displays it as a sequence of packets. The second tool is nmap, the “network mapper” utility. Nmap scans a network for host computers and tries to identify the services those computers provide.

Wireshark

Network traffic becomes easier to understand, both for beginners and experts, if we look at the messages firsthand. We use Wireshark to watch hosts exchange packets and to examine individual packets in detail. Wireshark provides a graphical interface organized around a single window, as shown in FIGURE 11.14.

The tabs at the top of the window are File, Edit, View, Go, capture, Analyze, ...