Monday, April 2, 2012

TCP & UDP



If your going to be in the network field, its a must that you learn how to read a packet capture. Some good articles that break down TCP/UDP to assist you with understanding how to read a capture are below.

Most, if not all companies have appliances that you will use to capture data on and store it for data mining purposes.  I am fortunate to have access to all the major players  in the sniffer appliance industry (Netscout,Niksun and Network Instruments). They have similar functionality to wire shark but with additional storage capabilities in the terabytes and a ton of add-ons, too many to list.

The Basics of Reading TCP/IP Traces

Understanding the TCP/IP Protocol Part 1 - 3

Understanding the UDP Protocol

As networks evolve, the amount of time it takes to put a frame on the wire             (serialization) is down to the nanosecond level, which I find amazing.  For smaller companies this might not matter as much. When you work for a financial company, thats all that does matter, how fast can you deliver a trade. Some time symbols are below for comparison and this is useful for packet captures. They all tie in together over time.

Minute --> Symbol: min
Second --> Symbol: s, sec
Millisecond --> Symbol: ms, msec
Microsecond --> Symbol: µs
Nanosecond --> Symbol: ns

Time Converter


No comments:

Post a Comment