Network intrusion detection Book

I	TCP/IP
1	IP Concepts	3
2	Introduction to TCPdump and TCP	23
3	Fragmentation	43
4	ICMP	57
5	Stimulus and Response	79
6	DNS	103
II	Traffic Analysis
7	Packet Dissection Using TCPdump	125
8	Examining IP Header Fields	143
9	Examining Embedded Protocol Header Fields	161
10	Real-World Analysis	185
11	Mystery Traffic	203
III	Filters/Rules for Network Monitoring
12	Writing TCPdump Filters	221
13	Introduction to Snort and Snort Rules	237
14	Snort Rules - Part II	249
IV	Intrusion Infrastructure
15	Mitnick Attack	273
16	Architectural Issues	291
17	Organizational Issues	319
18	Automated and Manual Response	339
19	Business Case for Intrusion Detection	359
20	Future Directions	379
App. A	Exploits and Scans to Apply Exploits	401
App. B	Denial of Service	425
App. C	Ctection of Intelligence Gathering	439
	Index	465