数据包分析实战里的插图

A hierarchical view of the seven layers of the OSI model

图片.png

ARP cache poisoning lets you intercept the traffic of your target computer

图片.png

Tapping into the wire

图片.png

Search Types for Finding Packets

图片.png

Commonly Used Capture Filters

图片.png

Commonly Used Display Filters

图片.png

tcpdump packets display format

图片.png

The ARP resolution process

图片.png

The gratuitous ARP process

图片.png

The IPv4 packet structure

图片.png

The TCP header

图片.png

Three-way handshake for TCP connection establishment

图片.png

TCP connection termination

图片.png

The UDP header

图片.png

The DHCP DORA process

图片.png

DHCP Message Types

图片.png

A recursive DNS query

图片.png

Duplicate ACKs from the recipient result in a fast retransmission

图片.png

Data transfer stops when the window size is set to 0 bytes

图片.png

Learning from TCP Error-Control and Flow-Control Packets

图片.png

This diagram can be used to troubleshoot your own latency issues

图片.png

Possible results of a TCP SYN scan

图片.png

ARP cache poisoning as an MITM attack

图片.png

The different wireless card modes

图片.png