大量パケットの分析方法 hebikuzure

1 hebikuzure wireshark ISBN978-4-87311-351-7 (7/18 ) Windows WinPcap WinPcap NPF [ ] HKLM SYSTEM CurrentControlSet services NPF Start 0x1 : SERVICE_SYSTEM_START 0x2 : SERVICE_AUTO_START 0x3 : SERVICE_DEMAND_START How To Set Up a Capture Security Platform-Specific information about capture privileges Expert Info Composite (Conversations) (Endpoint)

2 IO Graph [Statistics] [Summary] Expert Info Composite [Analyze] [Expert Info Composite] Checksum Offload NIC Checksum Offload Windows [ ] [Edit] [Preference] [Protocols] [IPv4] ( [IPv6]) [Validate the IPv4 checksum if possible] sequence number Window fast retransmission ACK TTL / (Conversations) (Endpoint)

3 Top N / [Statistics] [Conversations] / MAC / IP IP PORT / IP PROT [Statistics] [Conversation List] [Statistics] [Protocol Hierarchy] IO Graph [Statistics] [IO Graphs] X Axis : X Tick interval Pixels per tick View as time of day X Axis Y Axis : Y Unit Packet , Byte , Bit , Advanced Scale Y Axis [Graphs] [Filter] Display Filter [Graph n] / [Graphs] [Filter] [Save] TCP Stream Graph [Statistics] [TCP Stream Graph] Graph Control [Graph Type] wireshark User s Guide wsug_html_chunked/ wireshark Wiki wireshark University