This course focuses on network forensics including capture locations, stealth-mode capture,optimal capture and display filters, validating encrypted logins, identifying reconnaissance processes, locating header and payload signatures, catching penetration tests, malware behavior, backdoor communications and virus traffic.

LinuxCBT BPF Edition encompasses: 1. Berkeley Packet Filters (BPF) Security.
LinuxCBT BPF Edition focuses on the implementation of Berkeley Packet Filters with common network analysis tools: TCPDump, Snort, and WireShark.

Ethereal is the #2 most popular open source security tool used by system administrators and security professionals. This all new book builds on the success of Syngress best-selling book Ethereal Packet Sniffing.