Python Passive Network Mapping : P2NMAP

Python Passive Network Mapping: P2NMAP is the first book to reveal a revolutionary and open source method for exposing nefarious network activity. The "Heartbleed" vulnerability has revealed significant weaknesses within enterprise environments related to the lack of a definitive mapping of network assets. In Python Passive Network Mapping , Chet Hosmer shows you how to effectively and definitively passively map networks. Active or probing methods to network mapping have traditionally been used, but they have many drawbacks - they can disrupt operations, crash systems, and - most importantly - miss critical nefarious activity. You require an accurate picture of the environments you protect and operate in order to rapidly investigate, mitigate, and then recover from these new attack vectors. This book gives you a deep understanding of new innovations to passive network mapping, while delivering open source Python-based tools that can be put into practice immediately. Python Passive Network Mapping is for practitioners, forensic investigators, IT teams, and individuals who work together when performing incident response and investigating potential damage, or are examining the impacts of new malware threats. Those defending critical infrastructures will have a special interest in this book, as active or probing methods of network mapping are rarely used within these environments as any resulting impacts can be disastrous. Python Passive Network Mapping is ideally suited for use as a text in a variety of academic programs to expose and engage students in the art of passively mapping enterprise networks, with the added benefit of providing exposure to open source Python solutions. First book to show you how to use open source Python to conduct passive network mapping Provides a new method for conducting incident response and investigating the extent of potential damage to your systems Python code forensics toolkit for network mapping included on the companion website This book reveals a revolutionary and open source method for exposing nefarious network activity. Hosmer shows how to effectively and definitively passively map networks. Active or probing methods to network mapping have traditionally been used, but they have many drawbacks - they can disrupt operations, crash systems, and - most importantly - miss critical nefarious activity. It provides new innovations to passive network mapping, while delivering open source Python-based tools that can be put into practice immediately. -- Edited summary from book Content: Front matter, Page iii Copyright, Page iv Dedication, Page v Biography, Page ix Preface, Pages xi-xiii Acknowledgments, Page xv Chapter 1 - Introduction, Pages 1-15 Chapter 2 - What You DON’T Know About Your Network, Pages 17-36 Chapter 3 - Capturing Network Packets Using Python, Pages 37-61 Chapter 4 - Packet Capture Analysis, Pages 63-97 Chapter 5 - PCAP Extractor and OS Fingerprinting, Pages 99-135 Chapter 6 - Future Considerations and Challenge Problems, Pages 137-141 Subject Index, Pages 143-145