2004-08-06 21:06:27 +00:00
|
|
|
<!-- $Id$ -->
|
|
|
|
|
|
|
|
<preface id="Preface">
|
|
|
|
<title>Preface</title>
|
|
|
|
<section id="PreForeword">
|
|
|
|
<title>Foreword</title>
|
|
|
|
<para>
|
2006-05-22 08:14:01 +00:00
|
|
|
Wireshark is one of those programs that many network managers would love
|
2004-08-06 21:06:27 +00:00
|
|
|
to be able to use, but they are often prevented from getting what they
|
2006-05-30 20:49:45 +00:00
|
|
|
would like from Wireshark because of the lack of documentation.
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
<para>
|
2006-05-22 08:21:22 +00:00
|
|
|
This document is part of an effort by the Wireshark team to improve the
|
2013-01-18 15:51:54 +00:00
|
|
|
usability of Wireshark.
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
<para>
|
|
|
|
We hope that you find it useful, and look forward to your comments.
|
|
|
|
</para>
|
|
|
|
</section>
|
|
|
|
|
|
|
|
<section id="PreAudience">
|
|
|
|
<title>Who should read this document?</title>
|
|
|
|
<para>
|
2006-05-30 20:49:45 +00:00
|
|
|
The intended audience of this book is anyone using Wireshark.
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
<para>
|
|
|
|
This book will explain all the basics and also some of the advanced features
|
2006-05-30 20:49:45 +00:00
|
|
|
that Wireshark provides. As Wireshark has become a very complex program since
|
2007-02-02 22:06:20 +00:00
|
|
|
the early days, not every feature of Wireshark may be explained in this
|
2004-08-06 21:06:27 +00:00
|
|
|
book.
|
|
|
|
</para>
|
|
|
|
<para>
|
|
|
|
This book is not intended to explain network sniffing in general and it will
|
2005-01-15 19:37:35 +00:00
|
|
|
not provide details about specific network protocols. A lot of useful
|
2006-05-22 08:21:22 +00:00
|
|
|
information regarding these topics can be found at the Wireshark Wiki at
|
2006-05-30 20:49:45 +00:00
|
|
|
<ulink url="&WiresharkWikiPage;">&WiresharkWikiPage;</ulink>
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
<para>
|
2006-05-30 20:49:45 +00:00
|
|
|
By reading this book, you will learn how to install Wireshark, how to use the
|
2007-02-02 22:06:20 +00:00
|
|
|
basic elements of the graphical user interface (such as the menu) and what's
|
|
|
|
behind some of the advanced features that are not always obvious at first
|
|
|
|
sight. It will hopefully guide you around some common problems that
|
|
|
|
frequently appear for new (and sometimes even advanced) users of Wireshark.
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
</section>
|
|
|
|
|
|
|
|
<section id="PreAck">
|
|
|
|
<title>Acknowledgements</title>
|
|
|
|
<para>
|
2006-05-30 20:49:45 +00:00
|
|
|
The authors would like to thank the whole Wireshark team for their
|
2013-01-18 15:51:54 +00:00
|
|
|
assistance. In particular, the authors would like to thank:
|
2004-08-06 21:06:27 +00:00
|
|
|
<itemizedlist>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Gerald Combs, for initiating the Wireshark project and funding to
|
|
|
|
do this documentation.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Guy Harris, for many helpful hints and a great deal of patience
|
|
|
|
in reviewing this document.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Gilbert Ramirez, for general encouragement and helpful hints along
|
|
|
|
the way.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
</itemizedlist>
|
|
|
|
</para>
|
|
|
|
<para>
|
|
|
|
The authors would also like to thank the following people for their
|
2013-01-18 15:51:54 +00:00
|
|
|
helpful feedback on this document:
|
2004-08-06 21:06:27 +00:00
|
|
|
<itemizedlist>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Pat Eyler, for his suggestions on improving the example on
|
|
|
|
generating a backtrace.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Martin Regner, for his various suggestions and corrections.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Graeme Hewson, for a lot of grammatical corrections.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
</itemizedlist>
|
|
|
|
</para>
|
|
|
|
<para>
|
|
|
|
The authors would like to acknowledge those man page and README authors
|
2013-01-18 15:51:54 +00:00
|
|
|
for the Wireshark project from who sections of this document borrow heavily:
|
2004-08-06 21:06:27 +00:00
|
|
|
<itemizedlist>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Scott Renfro from whose <command>mergecap</command> man page
|
|
|
|
<xref linkend="AppToolsmergecap"/> is derived.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Ashok Narayanan from whose <command>text2pcap</command> man page
|
|
|
|
<xref linkend="AppToolstext2pcap"/> is derived.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
<listitem>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Frank Singleton from whose <filename>README.idl2wrs</filename>
|
|
|
|
<xref linkend="AppToolsidl2wrs"/> is derived.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</listitem>
|
|
|
|
</itemizedlist>
|
|
|
|
</para>
|
|
|
|
</section>
|
|
|
|
|
|
|
|
<section id="PreAbout">
|
|
|
|
<title>About this document</title>
|
|
|
|
<para>
|
|
|
|
This book was originally developed by
|
2006-09-28 19:53:11 +00:00
|
|
|
<ulink url="mailto:&AuthorEmail2;">Richard Sharpe</ulink> with
|
2006-05-22 08:21:22 +00:00
|
|
|
funds provided from the Wireshark Fund. It was updated by
|
2013-01-18 15:51:54 +00:00
|
|
|
<ulink url="mailto:&AuthorEmail3;">Ed Warnicke</ulink> and more recently
|
|
|
|
redesigned and updated by <ulink url="mailto:&AuthorEmail;">Ulf
|
|
|
|
Lamping</ulink>.
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
<para>
|
|
|
|
It is written in DocBook/XML.
|
|
|
|
</para>
|
|
|
|
<para>
|
2013-01-18 15:51:54 +00:00
|
|
|
You will find some specially marked parts in this book:
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
<warning><title>This is a warning!</title>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
You should pay attention to a warning, as otherwise data loss might occur.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</warning>
|
|
|
|
<note><title>This is a note!</title>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
A note will point you to common mistakes and things that might not be
|
|
|
|
obvious.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</note>
|
|
|
|
<tip><title>This is a tip!</title>
|
2013-01-18 15:51:54 +00:00
|
|
|
<para>
|
|
|
|
Tips will be helpful for your everyday work using Wireshark.
|
|
|
|
</para>
|
2004-08-06 21:06:27 +00:00
|
|
|
</tip>
|
|
|
|
</section>
|
|
|
|
|
|
|
|
<section id="PreDownload">
|
|
|
|
<title>Where to get the latest copy of this document?</title>
|
|
|
|
<para>
|
|
|
|
The latest copy of this documentation can always be found at:
|
2006-05-30 20:49:45 +00:00
|
|
|
<ulink url="&WiresharkUsersGuidePage;"/>.
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
</section>
|
|
|
|
|
|
|
|
<section id="PreFeedback">
|
|
|
|
<title>Providing feedback about this document</title>
|
|
|
|
<para>
|
2007-09-10 21:02:58 +00:00
|
|
|
Should you have any feedback about this document, please send it
|
2006-05-30 20:49:45 +00:00
|
|
|
to the authors through <ulink url="mailto:&WiresharkDevMailList;">&WiresharkDevMailList;</ulink>.
|
2004-08-06 21:06:27 +00:00
|
|
|
</para>
|
|
|
|
</section>
|
|
|
|
</preface>
|