Most of you probably have heard of Wireshark, a very popular and capable network protocol analyzer. What you may not know is that there exists a console version of Wireshark called tshark. The two ...

In this final installment of the series, I present examples based on actual cases I’ve encountered where these tools were utilized to solve the problem. In the first example, a small network with a ...

Ubiquitous encryption of network traffic prevents you from performing deep packet inspection, but you can still detect and prevent a lot of attacks. Security experts have been screaming at you for ...