The article analyzes the proposed G3 Beijing‑Taipei highway, modeling the missing 126‑km Taiwan Strait crossing as a bridge in a graph, estimating network benefits with a gravity model, and applying game‑theoretic signaling to assess the political feasibility of such a connection.
This guide explains how to set up remote packet capture using Wireshark and the rpcapd service, covering software installation, network requirements, enabling the remote daemon, and configuring Wireshark for real‑time analysis of high‑frequency traffic on devices with limited resources.
This guide explains why local packet captures can be impractical for real‑time analysis, then walks through installing rpcapd, configuring network requirements, launching the remote capture service, and setting up Wireshark to capture traffic from a distant machine.
Wireshark, the open‑source packet analyzer formerly known as Ethereal, captures live network traffic on Windows and UNIX systems and is widely used for network management, security analysis, troubleshooting, and especially penetration testing, offering capabilities such as data capture, unencrypted information detection, attack behavior analysis, vulnerability discovery, and real‑time monitoring.
Sniffnet is a free, Rust‑written network monitoring application that offers real‑time traffic visualization, precise IP and geographic identification, protocol analysis, customizable themes, and exportable PCAP capture files, with step‑by‑step installation guides for Windows, macOS, and Linux, plus optional Npcap support.
This article provides a comprehensive step‑by‑step process for detecting server compromises, collecting system, memory, and network evidence, analyzing logs, isolating the affected host, removing malicious artifacts, and hardening the environment to prevent future attacks.
This article explains the concept of centrality in social networks, describes degree, betweenness, and eigenvector centralities, presents a Python simulation showing how high‑centrality nodes receive information faster, and offers practical strategies to improve one’s position and influence within a network.
This guide explains why every server must monitor CPU, memory, disk and network usage, shows how to clean disks and analyze traffic using command‑line utilities such as df, du, iotop, iostat, iftop, lsof and tcpdump, and provides real‑world case studies for troubleshooting disk space exhaustion, port conflicts and abnormal outbound traffic.
This comprehensive guide walks you through installing Wireshark, capturing packets, navigating its main interfaces, analyzing TCP handshakes, and mastering both capture and display filter expressions for effective network troubleshooting and protocol inspection.
This tutorial walks you through using Charles on macOS to capture and manipulate HTTP and HTTPS traffic for both PC and mobile devices, covering proxy configuration, SSL handling, breakpoints, throttling, DNS spoofing, request rewriting, remote/local redirection, and basic stress testing.
The article examines the growing threat of black‑market malicious websites, outlines a five‑part war‑themed framework for comprehensive opponent analysis, detection strategies across traffic, channel, content and relationship dimensions, and advanced detection models—including fingerprint, text, image, graph, and multimodal approaches—while highlighting the supporting operational and intelligence systems.
This article examines twisted‑pair Ethernet (10Base‑T and 100Base‑TX) using a mixed‑signal oscilloscope to decode Manchester, 4B5B, MLT‑3 and NRZ‑I encodings, demonstrates practical packet capture with ping tests, and compares hardware‑captured signals to software‑derived data, bridging the software‑hardware analysis gap.
This guide introduces tcpdump, a powerful command‑line packet analyzer, covering its history, core features, basic usage, advanced filtering techniques, practical tips, and real‑world scenarios to help system administrators and network engineers diagnose and monitor network issues effectively.
Wireshark, the open‑source network protocol analyzer, lets users capture traffic and then refine what they see using two distinct filter types—display filters applied after capture and capture filters applied during capture—each with its own syntax, common examples (IP, port, protocol) and advanced expressions to isolate relevant packets.
This article introduces the open‑source Python library communities, which provides implementations of several community‑detection algorithms—including Louvain, Girvan‑Newman, hierarchical clustering, spectral clustering, and Bron‑Kerbosch—along with installation instructions, usage examples, and visualization tools for network analysis.
This comprehensive guide introduces Wireshark and Tcpdump, explains their installation, core features, common use cases, filter syntax, interface components, and step‑by‑step examples—including TCP three‑handshake analysis—empowering IT professionals to capture and analyze network traffic efficiently.
By modeling crime relationships as graphs and applying centrality metrics such as degree, betweenness, and closeness, investigators can mathematically identify key suspects, trace financial flows, and prioritize targets, demonstrating how graph theory transforms complex criminal networks into actionable intelligence.
This article details a year‑long front‑end performance optimization effort for the Tongtian Tower project, covering analysis tools, caching strategies, code splitting, lazy loading, and business‑logic refinements that together delivered a 58.8% reduction in first‑screen load time.
Graph theory and complex network principles help model everyday systems—from friendships and city roads to power grids and ecosystems—by representing entities as nodes and relationships as edges, enabling analysis of properties like small‑world effects, clustering, and path lengths to optimize traffic, social insights, and stability.
This article examines information diffusion in social networks by introducing the Independent Cascade and Linear Threshold models, discussing network structures, the influence maximization problem, and presenting a simulation experiment that quantifies spread under varying probabilities.
This guide explains how to use tcpdump for network packet capture, covering basic usage, interface selection, host and port filtering, logical expressions, saving captures, limiting packet counts, and real‑world troubleshooting of a Node.js service behind Nginx.
This guide reviews five popular packet‑capture tools—Savvius Omnipeek, Ettercap, Kismet, SmartSniff, and EtherApe—detailing their features, platform support, licensing, and unique capabilities to help network engineers choose the right solution for traffic monitoring and security analysis.
This comprehensive guide walks you through Wireshark fundamentals, common use cases, capture principles, step‑by‑step packet capture examples, interface components, filter configuration, TCP three‑way handshake analysis, and practical tips for effective network troubleshooting and analysis.
This guide introduces Wireshark, explains its common networking scenarios, capture principles, interface components, filter syntax, and demonstrates a TCP three‑handshake capture, providing practical steps and tips for effective packet analysis.
This guide walks you through installing tcpdump on various Linux distributions, explains its core features, and provides step‑by‑step command examples for capturing packets from specific interfaces, limiting packet counts, displaying data in ASCII or hex, saving to files, and filtering by IP, port, or protocol.
Celebrating Wireshark's 25‑year journey, this article recounts its origin as Ethereal, the community‑driven growth, pivotal milestones, and the essential support structures that turned a simple open‑source packet analyzer into a cornerstone tool for network reliability, education, and security worldwide.
This tutorial introduces Wireshark, walks through its main interface, demonstrates a simple packet‑capture workflow, explains capture and display filter syntax with practical examples, and details how to analyze TCP three‑way handshakes and common UI operations for effective network traffic analysis.
This article provides a comprehensive overview of graph computing, covering its fundamental concepts, historical development from Euler's bridges to modern graph neural networks, various algorithmic techniques, and practical applications in search, recommendation, finance, fraud detection, and many other AI‑driven domains.
This guide walks through Wireshark’s installation, main interface, packet capture steps, filter syntax (both capture and display), detailed pane explanations, TCP three‑way handshake inspection, and common UI tweaks, providing a practical foundation for network traffic analysis.
This guide walks through Wireshark's powerful features—including precise packet filtering, time‑display adjustments, absolute sequence numbering, exporting filtered captures, traffic statistics, decoding mixed logs, TCP stream tracing, and MAC‑address vendor lookup—to help engineers troubleshoot and analyze network traffic efficiently.
This guide walks you through Wireshark’s main interface, demonstrates simple packet captures, explains how to use capture and display filters with concrete examples, and details TCP three‑handshake analysis, providing practical tips for network engineers and security analysts.
This article explains how Wireshark captures map to the TCP/IP four‑layer model, walks through Ethernet, IP, TCP/UDP, and application layers, and demonstrates detailed HTTP request‑response analysis using Wireshark, HttpWatch, and browser developer tools.
Wireshark 4.0, the latest major release of the popular open‑source network protocol analyzer, introduces an enhanced display filter syntax, redesigned dialogs, side‑by‑side packet details, faster MaxMind geolocation, new address type AT_NUMERIC, expanded protocol support, and numerous UI and backend improvements.
Wireshark 4.0 introduces a revamped default layout with adjacent detail and byte views, enhanced Conversations and Endpoints dialogs, consistent hex‑dump import tools, drops 32‑bit Windows support, and plans future dark‑mode and Arm64 features, offering a more modern and powerful network analysis experience.
The Louvain algorithm, a fast modularity‑maximizing community‑detection method, iteratively merges nodes into hierarchical super‑nodes, enabling anti‑fraud systems to uncover hidden collusive groups in weighted transaction graphs, thereby improving detection of fake orders, coupon abuse, and other illicit behaviors despite its iterative nature and streaming limitations.
This guide walks you through setting up a Docker container, installing tcpdump, capturing HTTP/TCP traffic with tcpdump, dissecting the three‑way handshake and data exchange, saving packets to a pcap file, and using Wireshark for deeper analysis and filtering.
A curious case where entering the wrong Vue documentation URL (https://cn.vuejs.org) redirects to an adult site, prompting a technical investigation that reveals 301 redirects, hidden JavaScript, random target selection, and broader security implications for web developers.
This article introduces the Python NetworkX library, covering its installation via Anaconda, fundamental graph creation, node and edge manipulation, attribute handling, directed and multigraph features, built‑in generators, analysis functions, and visualization with Matplotlib, all illustrated with concrete code examples.
This comprehensive guide introduces Wireshark's main interface, demonstrates step‑by‑step packet capture, explains how to use capture and display filters—including protocol, IP, and port filters—and walks through analyzing TCP three‑way handshake packets, providing essential techniques for network troubleshooting and security analysis.
This guide explains how to use tcpdump for capturing and filtering network packets, covering basic and advanced command options, logical filters, saving captures, and a real‑world troubleshooting scenario involving a Node.js server behind Nginx.
This guide explains tcpdump’s core features, common parameters, filtering expressions, packet format details, and practical command examples, helping users capture and analyze network traffic effectively while noting important usage considerations.
This comprehensive tutorial explains what tcpdump is, how it differs from Wireshark, walks through its core parameters, output format, common and advanced filtering rules, optional flags, and provides dozens of practical command‑line examples for precise packet capture on Unix systems.
This article introduces three essential packet‑capture utilities—Wireshark, Kela Network Analyzer, and Fiddler—explaining their core features, filtering techniques, session analysis, protocol decoding, and how to intercept HTTPS traffic for effective network debugging.
This tutorial walks through capturing and analyzing an HTTP request using Wireshark, detailing the environment setup, three‑way TCP handshake, key TCP header fields such as window scaling and SACK, the four‑step termination (including merged ACK/FIN), and the role of HTTP Keep‑Alive across different protocol versions.
This tutorial explains the principles behind Linux packet capture, introduces tcpdump, shows how to install it, details its command‑line options, and provides practical examples for capturing, filtering, and saving network traffic for analysis with Wireshark.
This article presents a comprehensive overview of using graph representation learning and clustering, particularly GraphSAGE and its optimizations, to identify and mitigate black‑market (malicious) accounts in virtual networks, discussing background, objectives, challenges such as isolation and heterogeneity, and evaluation results.
This article explains the background, three transmission modes of server load balancing (SLB), and detailed packet‑capture analysis for reverse‑proxy, transparent, and triangle modes, illustrating how traffic is rewritten and forwarded between clients, the load balancer, and real servers.
This article explains Wireshark display filters, covering the dialog and text‑expression methods, and provides common filter examples for protocols, IP addresses, ports, packet size, comparison and logical operators, with code snippets for each case.
This article explains the purpose of Server Load Balancing (SLB), describes its three transmission modes—reverse proxy, transparent, and triangle—detailing packet flows, TCP handshakes, and HTTP interactions captured with Tcpdump and Wireshark, and discusses security considerations for each mode.
This guide explains how to use Fiddler to intercept and inspect HTTP and HTTPS requests, walks through its interface components, shows configuration steps for browsers, Android and iPhone, demonstrates filtering by domain, and outlines key metrics for request performance analysis.
This article explains the concept of communities in graphs, illustrates Granovetter's weak tie theory, introduces the Louvain algorithm for modularity‑based community detection, and presents the overlapping‑community detection method BigCLAM built on the Community Affiliation Graph Model.
This guide walks you through building test environments, capturing packets with tcpdump, visualizing them in Wireshark, and dissecting TCP features such as three‑way handshake, retransmission timers, fast open, flow control, Nagle algorithm and delayed ACKs, while showing the exact Linux kernel parameters that control each behavior.
This article explains the origins, definition, basic frame format, masking purpose, and handshake process of the WebSocket protocol, and demonstrates packet capture analysis with a simple demo to illustrate how full‑duplex communication works over a single TCP connection.
Learn how to effectively use tcpdump for network packet capture, understand its syntax and expression filters, explore common parameters, and see practical examples of analyzing MySQL traffic and packet details, empowering you to troubleshoot network issues and perform deep packet analysis.
Lens is an integrated iOS debugging toolkit that adds a floating window with plug‑in modules—such as view inspection, real‑time network error alerts, simulated memory warnings, DNS spoofing, FPS monitoring, measurement tools, and configurable switches—to streamline development, testing, design, and product management, boosting team efficiency and reducing production incidents.
This article presents a detailed investigation of occasional Redis connection errors in a large‑scale production environment, analyzing network packets, TCP backlog behavior, Redis internal client‑cron logic, jemalloc memory reclamation, and ultimately resolving the issue by adjusting query‑buffer handling and upgrading Redis to a newer version.
This article introduces Wireshark as a cross‑platform packet capture tool, explains its installation and basic UI, details capture and display filter syntax with examples, and demonstrates how to decrypt and analyze HTTPS traffic by importing SSL key logs.
This article explains how to capture network traffic with tcpdump, parse the resulting PCAP file using Node.js (node‑pcap), extract HTTP request/response data and timing information, and convert it into HAR format for detailed H5 performance analysis.
This guide introduces Wireshark, a powerful open‑source packet capture tool, explains what it can and cannot do, compares it with Fiddler, details its interface, filtering options, OSI layer mapping, and walks through a practical TCP three‑way handshake analysis, helping network engineers and testers master protocol inspection.
This article examines the rise of organized “wool‑pulling” fraud groups during China’s Double‑11 shopping festival, outlines their tools and tactics, and details NetEase Cloud Security’s multi‑layered anti‑fraud system—including captcha, SMS verification, IP rules, device fingerprinting, rule engines, user profiling, network graph analysis, and blacklist strategies—to protect e‑commerce platforms.
This tutorial explains the main Wireshark panes, demonstrates how to create and save display and capture filters, outlines common filter expression syntax, and walks through a practical example of capturing and dissecting the three‑way TCP handshake using Wireshark.
This article compiles a comprehensive list of 123 Python-based penetration testing tools, covering network utilities, debugging and reverse‑engineering frameworks, fuzzing platforms, web testing kits, forensic analysis utilities, malware analysis helpers, PDF inspection modules, miscellaneous libraries, recommended books, talks, and additional resources for security professionals.
This article explains how to improve HTTP API debugging and testing by using two Golang‑based tools—pproxy, a cross‑platform proxy for capturing and modifying traffic, and api‑front, a BS‑architecture front‑end that forwards, records, and replicates API calls—detailing their features, usage, and deployment scenarios.
This guide explains how to download, install, and configure Fiddler, set up proxy settings for browsers and mobile devices, use common shortcuts and breakpoints, capture HTTPS traffic, install certificates, and customize the UI to display server IPs.
This guide introduces Wireshark’s packet capture process, from selecting network interfaces and configuring capture filters to analyzing captured data with display filters, interpreting protocol layers, and performing detailed TCP flow analysis, providing practical examples and filter expressions for effective network troubleshooting and security investigations.
Beats are lightweight data shippers in the ELK Stack, and this guide details the purpose, key features, and integration of Filebeat for log collection, Metricbeat for system and service metrics, Packetbeat for network traffic analysis, Winlogbeat for Windows event logs, and Heartbeat for service uptime monitoring.
Tcpdump is a powerful command‑line packet sniffer for Unix‑like systems; this guide introduces its purpose, installation steps, essential command‑line options, filter expression syntax, and practical examples, enabling users to capture, analyze, and troubleshoot network traffic efficiently.
