学习网络追踪 [英] Learning Network Tracing

问题描述

我想学习网络跟踪以解决Windows环境问题，并且想知道：

I would like to learn network tracing for troubleshooting Windows environments and was wondering:

a）Microsoft  Message Analyzer是初学者的好工具（网络跟踪初学者） ，一般不是Windows环境）？

a) Is Microsoft Message Analyzer a good tool for a beginner (beginner in network tracing, not Windows environments in general)?

b）有人可以推荐任何好的在线资源来使用MMA学习网络追踪吗？

b) Can anybody recommend any good online resources for learning network tracing using MMA?

谢谢

Thanks

Andy

推荐答案

网络故障排除或任何协议故障排除的挑战在于有工具，并且有协议知识。  Message Analyzer或任何协议分析工具具有一定的学习水平。 对于Message Analyzer
，我们将其设计得更广泛，因此获取网络友好视图需要进行一些更改并需要一些理解。

A challenge with Network Troubleshooting, or any protocol troubleshooting, is that there is the tool, and there is the protocol knowledge.  Message Analyzer, or any protocol analysis tool, has a certain level of learning.  And for Message Analyzer we've designed it to be even broader, so getting a Network friendly view takes some changes and requires some understanding.

对于Message Analyzer和Network Monitor（前一个），你可以使用博客，
http://blogs.technet.com/MessageAnalzyer 和
http：//blogs/technet.com/Netmon 。 网络监视器，特别是定义了一些基本的网络概念。

For Message Analyzer and Network Monitor (the predecessor), you can use the blogs, http://blogs.technet.com/MessageAnalzyer and http://blogs/technet.com/Netmon.  The Network Monitor one, in particular has some basic network concepts defined.

对于网络，一般来说，Douglas Comer编写了一本好书，
http://www.amazon.com/Internetworking-TCP-Volume-One-Edition/dp/013608530X ，这是一个很好的起点。 您应该能够直接将本书中的主题与使用Message Analyzer在链接层完成的捕获相关联。 请记住，我们会自动重新组合并隐藏大部分细节，但您可以使用Viewpoints修改透视图以查看Comer描述的TCP帧。 特别是这些博客可能会帮助您理解观点：

For Networking in general, a good book was written by Douglas Comer, http://www.amazon.com/Internetworking-TCP-Volume-One-Edition/dp/013608530X, which is a great starting point.  You should be able to relate topics in this book directly with a capture done at the Link Layer with Message Analyzer.  Just keep in mind that we automatically reassemble and hide much of the details, but you can use Viewpoints to modify your perspective to see that TCP frames that Comer describes.  In particular these blogs, might help you understand viewpoints:

• http://blogs.technet.com/b/messageanalyzer/archive/2013/09/25/message-analyzer -why-so-different-from-network-monitor.aspx
• http://blogs.technet.com/b/messageanalyzer/archive/2013/08/14/viewpoints-osi-model-and-apstndp.aspx
• http://blogs.technet.com/b/messageanalyzer/archive/2014/04/07/needle-in-a-hayfield-of-haystacks.aspx

希望有所帮助，

Paul

这篇关于学习网络追踪的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！