The first book is Windows Forensic Analysis Including DVD Toolkit by Harlan Carvey. The second book is Practical Packet Analysis by Chris Sanders. The content of Chris Sanders’ book seems very simple, but it might be just the right book for people starting their network traffic inspection careers. Incidentally, if you like the approach of using Ethereal/Wireshark to look at traffic that the author explains, you should look at Jeanna Matthews’ 2005 book. The author’s approach to looking at traffic is similar to that of Jeanna’s 2005 book, Computer Networking.”]
Source: https://taosecurity.blogspot.com/2007/06/two-pre-reviews.html