Buy Used
CDN$ 8.80
+ CDN$ 6.49 shipping
Used: Very Good | Details
Sold by momox ca
Condition: Used: Very Good
Comment: Please allow 1-2 weeks for delivery. For DVDs please check region code before ordering.
Have one to sell?
Flip to back Flip to front
Listen Playing... Paused   You're listening to a sample of the Audible audio edition.
Learn more
See all 2 images

Practical Packet Analysis: Using Wireshark to Solve Real-World Network Problems Paperback – May 27 2007

1.0 out of 5 stars 1 customer review

See all 2 formats and editions Hide other formats and editions
Amazon Price
New from Used from
"Please retry"
"Please retry"
CDN$ 28.15 CDN$ 8.80

There is a newer edition of this item:

Harry Potter and the Cursed Child
click to open popover

No Kindle device required. Download one of the Free Kindle apps to start reading Kindle books on your smartphone, tablet, and computer.
Getting the download link through email is temporarily not available. Please check back later.

  • Apple
  • Android
  • Windows Phone
  • Android

To get the free app, enter your mobile phone number.

Product Details

  • Paperback: 178 pages
  • Publisher: No Starch Press; 1 edition (May 27 2007)
  • Language: English
  • ISBN-10: 1593271492
  • ISBN-13: 978-1593271497
  • Product Dimensions: 17.8 x 1.4 x 23.5 cm
  • Shipping Weight: 358 g
  • Average Customer Review: 1.0 out of 5 stars 1 customer review
  • Amazon Bestsellers Rank: #1,052,963 in Books (See Top 100 in Books)
  •  Would you like to update product info, give feedback on images, or tell us about a lower price?

  • See Complete Table of Contents

Product Description

About the Author

Chris Sanders is currently the network administrator for a public school district in Kentucky. A Microsoft Certified Professional and Certified Wireless Network Administrator, he writes for,, and maintains a blog at He is the author of Saving Money and Time with Virtual Server (O'Reilly Short Cut).

Customer Reviews

1.0 out of 5 stars
5 star
4 star
3 star
2 star
1 star
See the customer review
Share your thoughts with other customers

Top Customer Reviews

Format: Paperback
I had the displeasure of reading this publication courtesy of my local library and I am aghast that the publisher would let it go to press given the obvious lack of technical editing. I'm certainly glad that I didn't spring for a copy out of pocket.

To be quite frank, either the reviewers on that gave this publication a good review didn't bother reading the book or completely lack any technical knowledge.

Just my opinion...
One person found this helpful. Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback.
Sorry, we failed to record your vote. Please try again.
Report abuse

Most Helpful Customer Reviews on (beta) HASH(0xb6be754c) out of 5 stars 15 reviews
28 of 33 people found the following review helpful
HASH(0x97559af8) out of 5 stars Packet traces don't match the text Sept. 8 2007
By Early Adopter - Published on
Format: Paperback
The conversational style of the book and the basic idea are very sound. Some of the information is well presented. So we'll start with 5 stars and see where we end up.

There are some typos and errors in the book (the Syn-Ack-Ack mentioned in two reviews is simply a typo in the diagram, the text on the same page correctly has it as Syn-Syn/Ack-Ack). Unfortunately, there are more serious errors than this, so there goes one star.

This is clearly a beginner's book, so some basic configuration explanations are needed to get Wireshark (and Cain and Able) set up properly. When the novice is presented with multiple network interfaces they can capture from, how do they decide which is the one to use? The author provides no help here, so the novice can do nothing but try each one in turn and see which one works. In my case, since I was using a notebook with a wireless connection, none of them worked in either program. Turning off promiscuous mode in Wireshark did the trick, but the author should have explained the need for that in the text. This book is about using these tools, so not explaining the basics is worth a star.

I downloaded the sample traces. The first one I tried: wrongdissector.dmp wasn't in the archive. An oversight perhaps? Let's try the next one in the text: suspectemployeechat.dmp. The content of this trace doesn't match the text all: the two individuals are chatting on a similar topic, perhaps, the contents of their conversation is complete different. There is no way to reconcile it with the text. Now we've moved from oversight to rubbish. Say goodbye to another star.

Final score: two stars out of five. If the publisher and/or their agents reads these reviews (they appear to have written some of them), please issue an errata and fix the download.
2 of 2 people found the following review helpful
HASH(0xb6c28ed0) out of 5 stars Helped me use Wireshark. June 8 2011
By L. Byrd - Published on
Format: Paperback
I was looking for a book simple enough for me to follow regarding Wireshark.
After reading, I at least feel confidant enough that I can read a pcap file and make sense out of it.
If your a newbie to packet captures like I was, you will find this book very helpful.
2 of 2 people found the following review helpful
HASH(0x97c0f9a8) out of 5 stars The title states the obvious Aug. 17 2009
By Mike Cherry - Published on
Format: Paperback
While this book will give you a passable introduction to the technical aspects of packet analysis and WireShark, the goal is to introduce the reader to some practical uses of WireShark. It answers questions that the accidental, occasional or beginning user asks themselves. I do not fault the author for a few inaccuracies as almost every technical/boring tome has them if you stay awake long enough to come across them. Since this book is so short, it made an easy target for the trained professional reviewer to rip it to shreds. Oh well.

If you want serious, practical training in the use of WireShark, find out about the consummate expert in teaching this subject. Her name is Laura Chappell. Search the web for more info. She goes light years beyond any publication in print with on demand and live video seminars and training for the serious student. Chappell has numerous titles (10 or more) specific to this subject listed on
8 of 11 people found the following review helpful
HASH(0x97554c90) out of 5 stars Could be reviewed much better. July 3 2007
By RP Faber - Published on
Format: Paperback
I bought also "Computer Networks: Internet Protocols in Action
by Jeanna Matthews". Both as reference books. See also my review on that.

Let's start by saying it's very annoying if you have to read other material or have some doubt about your own knowledge concerning specific topics and then afterwards it proved to be your understanding and assumptions WHERE RIGHT and the book presented something wrong like the three way TCP way handshake is not SYN - ACK - SYN, Richard Bejtlich mentioned. These are crucial aspects of protocol understanding, the main reason you would buy a book like this. Nevertheless some faults can be made and maybe in the next version of the book this is reviewed and solved.

Rob Faber [CISSP, CEH, MCSE]
Security Consultant
The Netherlands
3 of 4 people found the following review helpful
HASH(0x98020c24) out of 5 stars A must for Wireshark users Dec 31 2008
By J. Cornell - Published on
Format: Paperback
Lately I have been reading reviews after I buy books just to see how they stack up, and this is no exception. I bought the book after checking it out at the book store and saw that there was good stuff in it. If you use Wireshark, or if you are learning it, you should have this book on your shelf period.
Chris Sanders not only does a great job of introducing you to the mindset of packet analysis, he shows a side of it that most of the people I interact with don't consider...the day to day administrator's needs for a way to diagnose network problems.

If you live the world of network monitoring and information security then this books works for you as well. The concepts are what is important and they are presented very well.

As to those who say there are too many things like the mis-representation of the three-way handshake I say Thanks for pointing it out to the novice among us. For the novice, now you know, the book anyway. If I put a technical book back every time I saw a mistake that the proofer missed, I'd have empty shelves.

Thanks Chris for taking a tough subject and making it much easier to digest.