Skip to content

Network Security Textbook

A free, self-paced textbook in 6 chapters. Read a chapter, then drill it with the 728 companion flashcards using spaced repetition.

6 chapters · 728 cards · Updated

Chapters

  1. 1Wireshark Fundamentals and Capture Operations

    Wireshark is a widely used network protocol analyzer that captures and inspects packets traversing a network interface. Originally developed for troubleshooting, packet analysis, s...

  2. 2Display Filter Syntax and Core Concepts

    Display filters in Wireshark form a powerful query language for selecting packets based on protocol fields, values, and metadata. At the heart of this language are three logical op...

  3. 3Network and Transport Layer Filters

    At the network layer, Wireshark provides extensive filters for IPv4 and IPv6, the cornerstones of modern internet communication. For IPv4, ip.ttl isolates packets with specific Tim...

  4. 4Application and Routing Protocol Filters

    Hypertext Transfer Protocol dissection is one of Wireshark's most mature and richly featured areas. HTTP methods are filtered with http.request.method, supporting equalities like "...

  5. 5Statistics and Built-in Analysis Tools

    Wireshark transforms raw packet data into actionable insight through a rich set of statistical tools accessible from the Statistics menu. Protocol Hierarchy presents a tree view of...

  6. 6Advanced Features, Command-Line Tools, and Security Analysis

    Beyond filtering and statistics, Wireshark offers a number of features that streamline in-depth analysis. Follow TCP Stream reconstructs the bidirectional byte stream of a session,...

← Back to the Network Security deck