Network Analysis

  1. The Analysis Process
    1. Establishing a Baseline
      1. Defining Normal Network Behavior
        1. Traffic Patterns
          1. Peak Usage Times
            1. Application Usage Patterns
              1. User Behavior Patterns
              2. Protocol Distribution
                1. Protocol Usage Statistics
                  1. Application Protocol Mix
                    1. Overhead Analysis
                    2. Performance Characteristics
                      1. Typical Response Times
                        1. Bandwidth Utilization
                          1. Error Rates
                        2. Measuring Key Performance Indicators
                          1. Throughput Metrics
                            1. Bits per Second
                              1. Packets per Second
                                1. Transactions per Second
                                  1. Measurement Techniques
                                    1. Interface Counters
                                      1. Flow-based Measurement
                                        1. Application-level Measurement
                                      2. Latency Measurements
                                        1. Round-Trip Time
                                          1. One-way Delay
                                            1. Processing Delay
                                              1. Tools for Measuring Latency
                                                1. Ping Utilities
                                                  1. Traceroute Tools
                                                    1. Synthetic Transactions
                                                  2. Jitter Analysis
                                                    1. Delay Variation
                                                      1. Buffer Requirements
                                                        1. Impact on Real-time Applications
                                                          1. Voice Quality
                                                            1. Video Streaming
                                                              1. Interactive Applications
                                                            2. Packet Loss Detection
                                                              1. Loss Rate Calculation
                                                                1. Loss Pattern Analysis
                                                                  1. Detection Methods
                                                                    1. Sequence Number Analysis
                                                                      1. Flow-based Detection
                                                                        1. Application-level Detection
                                                                    2. Documentation and Baseline Management
                                                                      1. Baseline Documentation
                                                                        1. Periodic Baseline Updates
                                                                          1. Seasonal Variations
                                                                        2. Capturing Traffic
                                                                          1. Capture Planning
                                                                            1. Capture Objectives
                                                                              1. Duration Planning
                                                                                1. Storage Requirements
                                                                                2. Full Packet Capture vs. Headers Only
                                                                                  1. Storage Considerations
                                                                                    1. Disk Space Requirements
                                                                                      1. Compression Options
                                                                                        1. Retention Policies
                                                                                        2. Use Cases for Each Method
                                                                                          1. Full Packet Analysis
                                                                                            1. Metadata Analysis
                                                                                              1. Compliance Requirements
                                                                                            2. Using Capture Filters
                                                                                              1. Filter Syntax
                                                                                                1. Berkeley Packet Filter
                                                                                                  1. Wireshark Capture Filters
                                                                                                    1. Protocol-specific Filters
                                                                                                    2. Filter Examples
                                                                                                      1. Host-based Filters
                                                                                                        1. Port-based Filters
                                                                                                          1. Protocol Filters
                                                                                                          2. Performance Optimization
                                                                                                            1. Filter Efficiency
                                                                                                              1. Hardware Acceleration
                                                                                                                1. Buffer Management
                                                                                                            2. Filtering and Displaying Data
                                                                                                              1. Understanding Display Filters
                                                                                                                1. Filter Syntax and Usage
                                                                                                                  1. Field Names
                                                                                                                    1. Comparison Operators
                                                                                                                      1. Value Formats
                                                                                                                      2. Filter Construction
                                                                                                                        1. Simple Filters
                                                                                                                          1. Complex Filters
                                                                                                                            1. Filter Validation
                                                                                                                          2. Common Filter Types
                                                                                                                            1. IP Address Filtering
                                                                                                                              1. Single Host Filters
                                                                                                                                1. Subnet Filters
                                                                                                                                  1. Address Range Filters
                                                                                                                                  2. Protocol Filtering
                                                                                                                                    1. Layer 2 Protocols
                                                                                                                                      1. Layer 3 Protocols
                                                                                                                                        1. Layer 4 Protocols
                                                                                                                                          1. Application Protocols
                                                                                                                                          2. Port Number Filtering
                                                                                                                                            1. Source Port Filters
                                                                                                                                              1. Destination Port Filters
                                                                                                                                                1. Port Range Filters
                                                                                                                                              2. Logical Operators
                                                                                                                                                1. AND Operations
                                                                                                                                                  1. OR Operations
                                                                                                                                                    1. NOT Operations
                                                                                                                                                      1. Operator Precedence
                                                                                                                                                      2. Advanced Filtering Techniques
                                                                                                                                                        1. Time-based Filters
                                                                                                                                                          1. Size-based Filters
                                                                                                                                                            1. Flag-based Filters
                                                                                                                                                          2. Following Conversations and Streams
                                                                                                                                                            1. TCP Stream Analysis
                                                                                                                                                              1. Stream Identification
                                                                                                                                                                1. Stream Reconstruction
                                                                                                                                                                  1. Session Analysis
                                                                                                                                                                    1. Connection Establishment
                                                                                                                                                                      1. Data Transfer
                                                                                                                                                                        1. Connection Termination
                                                                                                                                                                      2. UDP Conversation Analysis
                                                                                                                                                                        1. Conversation Identification
                                                                                                                                                                          1. Stateless Communication
                                                                                                                                                                            1. Request-Response Patterns
                                                                                                                                                                            2. HTTP Stream Analysis
                                                                                                                                                                              1. Request-Response Pairs
                                                                                                                                                                                1. Session Tracking
                                                                                                                                                                                  1. Performance Analysis
                                                                                                                                                                                  2. Application-specific Streams
                                                                                                                                                                                    1. FTP Data Streams
                                                                                                                                                                                      1. DNS Query Streams
                                                                                                                                                                                        1. Email Protocol Streams

                                                                                                                                                                                    Previous

                                                                                                                                                                                    4. Tools for Network Analysis

                                                                                                                                                                                    Go to top

                                                                                                                                                                                    Next

                                                                                                                                                                                    6. Analyzing Network Protocols