Packet Slicing, What, How and Why?

Packet Slicing, What, How and Why? As a Protocol Analyst, one of the most important technique I can share is called, “Packet Slicing”. Packet slicing simply saves a specific number of Bytes from your packets rather than the entire packet. By default, most protocol analyzers will save the entire packet but there are many scenarios where you might want to save a portion of the packet instead of the entire packet. Here are some examples/reasons when to consider slicing: – The data is not useful or unreadable/encrypted – To conserve disk space or reduce your trace file size – Legal issues around the payload of captured packets – Reduce load on your capture device. Some packet capture tools ARE LESS LIKELY TO drop packets when packets are sliced. If you want the MAC, IP, TCP layers and a bit of ..

read the rest for free when its published at: http://www.networkcomputing.com/author-bio.asp?author_id=2332 ... https://www.youtube.com/watch?v=fGcZUbaPoRA