Book Review: Practical Packet Analysis: Using Wireshark to Solve Real-World Network Problems

The overall equation is pretty simple: If you want to understand network traffic, you really should install Wireshark. And, if you really want to use Wireshark effectively, you should consider this book. Already in its third edition, Practical Packet Analysis both explains how Wireshark works and provides expert guidance on how you can use the tool to solve real-world network problems.

Yes, there are other packet analyzers, but Wireshark is one of the best, works on Windows, Mac, and Linux, and is free and open source. And, yes, there are other books, but this one focuses both on understanding the tool and using it to address the kind of problems that you’re likely to encounter.

Practical Packet Analysis will help you to fully understand packet analysis. It will show you how to:

  • capture packets
  • work with captured packets
  • follow packet streams
  • make use of Wireshark’s graphical interface
  • understand both transport and upper-layer protocols
  • address the kind of problems you’re likely to encounter
  • and use Wireshark to do packet analysis and track down security issues

The book provides clear, understandable explanations and a good focus on the things you need to understand and will walk you through the process with enough examples to prepare you to work on your own.