Index_T

---

T

tap systems, 429, 434

tap-xxx file, 387

tap.h file, 396

TAPS. See tap systems

Taps. See Test Access Points

tar archive format, 79, 85–86

tarballs, 85–87

TCP Connect scans, 355–356

TCP flags field, 221–223

TCP header, 215, 216

TCP/IP protocols, 18–19

tcp keyword, 214, 215, 217, 218

TCP Stream Analysis submenu, Analyze menu, 181–192. See also Contents of TCP Stream Window

TCP SYN scans, 356–357

TCP (Transmission Control Protocol), 18–19, 354

TCPDump

capturing and saving data, 314–316

command-line options, 314

defined, 10

vs. display filters, 227

ether keyword, 211

Ethereal compatibility, 43

as format for reading capture files, 304

and hardware addresses, 211

and host names and addresses, 210–211

logical operations, 212–213

malicious code in, 79

overview, 78, 313

and ports, 212

and protocol fields, 215–221

protocol names as keywords, 213–215

reading Ethereal files with, 316–317

syntax, 209–224

usage output, 313

viewing capture files together with snoop capture files, 352

vs. WinDump, 317

tcpflow, 78

TCPIPtrace utility, 44, 305

TCPstat, 78

tcptrace time-sequence graphs, 183–187, 192

Telnet, 7, 19

Test Access Points, 21

testing capture filters, 224

Tethereal

-z (statistics) option, 267, 271–278

capturing and saving data, 310–312

command-line options, 263–267, 309–310

displaying output in PDML format, 278–281

displaying packets to screen, 267

vs. editcap, 301

filter capability, 301

glossary of protocol and field names, 248–249

overview, 54–56, 262, 299, 308

reading Ethereal files with, 312–313

tools and libraries, 384

usage examples, 267–271, 310–312

usage output, 262–263, 308–309

using display filters on capture, 206

writing captures to files, 267

text2pcap

command-line options, 295–297

overview, 58–59, 293, 300

usage examples, 297–298

usage output, 294–295

throughput graphs, 187, 192

time fields, 230, 239–240

Time Reference submenu, Edit menu, 148, 151–152

time-sequence graphs

Stevens’, 182–183, 192

tcptrace, 183–187, 192

TLS (Transport Layer Security), 32

TokenPeek, 43, 305

Tool Bar, 128

tools directory, 392

TOrnKit, 7

Toshiba, 43, 305

to_str.h file, 396

Transmission Control Protocol/Internet Protocol (TCP/IP), 18–19

transport layer, Open Systems Interconnection (OSI) model, 17

Transport Layer Security (TLS), 32

transport name resolution, 140

tree data structure, 401

trojans

defined, 364

and Ethereal TCP Stream feature, 361, 362

NetBus, 361–363

overview, 359–360, 377

remote access, 359–363, 377

RST.b trojan, 363

SubSeven trojan, 360–361

vs. viruses and worms, 364–365

troubleshooting networks with Ethereal, 64–68

trr keyword, 218

tvb data structure, 401

tvb_get functions, 402, 406

tvbuff.h file, 396

---