> I don't know of a good Wireshark specific book. But if you just want > to understand TCP/IP, TCP/IP Illustrated Volume 1 by Stevens is still Another good author is Douglas Comer. http://books.google.ca/books?as_auth=Douglas+E+Comer&sa=X&oi=print&ct=title&cad=author-navigational&hl=en cheers -- Rick