Learn the fundamentals of traffic analysis through a pragmatic approach in this comprehensive conference talk. Explore packet capture techniques, network interface cards, and kernel structures in FreeBSD and Linux. Discover various capture mechanisms, including tcpdump and libpcap, and understand how to handle packet drops. Gain insights into reporting and statistics using gnuplot, and delve into BPF filters and IP options. Examine practical examples of capturing specific network traffic, such as SYN packets and HTTP GET methods. Investigate tools like netsniff-ng for advanced packet capture and analysis, and develop essential skills for effective network traffic analysis.
An Introduction to Traffic Analysis - A Pragmatic Approach