cuốn sách khác về phân tích gói tin. Câu trả lời nằm ngay trong tiêu đề: Phân tích thực tế gói. Hãy đối mặt với nó-không có gì nhịp đập kinh nghiệm thế giới thực, và gần nhất bạn có thể đến với kinh nghiệm trong một cuốn sách là thông qua các ví dụ thực tế của phân tích gói tin | Packet Bytes Pane The lower pane and perhaps the most confusing is the Packet Bytes pane. This pane displays a packet in its raw unprocessed form that is it shows what the packet looks like as it travels across the wire. This is raw information with nothing warm or fuzzy to make it easier to follow. NOTE It is very important to understand how these different panes work with each other since you will be spending most of your time working with them in the main window. The Preferences Dialog Wireshark has several preferences that can be customized to meet your needs. Let s look at some of the more important ones. To access Wireshark s preferences select Edit from the main drop-down menu and click Preferences. This should call up the Preferences dialog which contains several customizable options Figure 3-6 . Figure 3-6 You can customize Wireshark in the Preferences dialog. These preferences are divided into five major sections user interface capture printing name resolution and protocols. 34 Chopter 3 User Interface The user interface preferences determine how Wireshark presents data. You can change most options here according to your personal preferences including whether or not to save window positions the layout of the three main panes the placement of the scrollbar the placement of the Packet List pane columns the fonts used to display the captured data and the background and foreground colors. Capture The capture preferences allow you to specify options related to the way packets are captured including your default capture interface whether or not to use promiscuous mode by default and whether or not to update the Packet List pane in real time. Printing The printing preferences section allows you to specify various options related to the way Wireshark prints your data. Name Resolution The preferences in the name resolution section allow you to activate features of Wireshark that allow it to resolve addresses into more recognizable names including MAC network and .
