
Many open source tools are available to us but none match tcpdump. It can be installed or updated by using the following command: sudo apt-get install tcpdump Many tools are available for the analysis of packets, the most basic and most powerful one being tcpdump. It is better to concentrate on a single book and try out various tools to get a good command over them. The best way to get a strong foundation on the subject would be to Google for information, instead of just reading many books. I would suggest you visit some of the links below, which will be helpful to get an understanding of the basics of networking. This understanding is necessary because, with the help of the IP address, we can determine the location of someone who is mounting an attack. We do have many versions of IP and the address varies with the type. The basic types are TCP (Transmission Control Protocol) and IP (Internet Protocol). In this article, I will start with the basics so that even a newbie can easily analyse the data, using the tools mentioned.Īnyone who is new to network security needs to have a good grasp of the various types of networks. The type of file is the Ethernet packet sniffer, which means that this file format is used by the tools that analyse the network traffic. The name PCAP comes from the two words, packet capture. This can be achieved by analysing your data and making sure that no one is intruding on your network. When it comes to network security, the first thing that people should be taking care of is their own network.
