Upload File

lab 1: packet sniffing and wireshark - computer … sniffer (cont’d) • applicaons ( web...

  • Home
  • Documents
  • Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet
14
Lab 1: Packet Sniffing and Wireshark Fengwei Zhang Wayne State University CSC 5991 Cyber Security Prac@ce 1

Upload: trinhnhan

Post on 29-May-2018

222 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

Lab1:PacketSniffingandWireshark

FengweiZhang

WayneStateUniversity CSC5991CyberSecurityPrac@ce 1

Page 2: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

PacketSniffer•  Packetsnifferisabasictoolforobservingnetworkpacketexchangesinacomputer

•  Capturing(“sniffs”)packetsbeingsent/receivedfrom/byyourcomputer

•  Apacketsnifferitselfispassive

•  Displayingthecontentsofthevariousprotocolfieldsinthesecapturedpackets,butneversendingpacketsitself

WayneStateUniversity CSC5991CyberSecurityPrac@ce 2

Page 3: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

PacketSnifferStructure

WayneStateUniversity CSC5991CyberSecurityPrac@ce 3

Page 4: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

PacketSniffer(cont’d)•  Applica@ons(webbrowsers,FTPclients,emailclients)

•  Networkprotocols(Internetprotocol)

•  Packetcapture–  Thepacketcapturelibraryreceivesacopyofeverylink-layerframe

thatissentfromorreceivedbyyourcomputer

•  PacketAnalyzer–  Displayingthecontentsofallfieldswithinaprotocolmessage–  Understandingthestructureofallmessagesexchangedbyprotocols–  IP,TCP,HTTPheaders

•  Wireshark,TCPDump

WayneStateUniversity CSC5991CyberSecurityPrac@ce 4

Page 5: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

TCP/IPNetworkStack•  TCP/IPisthemostcommonlyusednetworkmodelfor

Internetservices.

•  Becauseitsmostimportantprotocols,theTransmissionControlProtocol(TCP)andtheInternetProtocol(IP)werethefirstnetworkingprotocolsdefinedinthisstandard,itisnamedasTCP/IP.

•  Itcontainsmul@plelayersincluding:–  Applica@onlayer–  Transportlayer–  Networklayer–  Datalinklayer

WayneStateUniversity CSC5991CyberSecurityPrac@ce 5

Page 6: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

AnExampleLayeredApproach

WayneStateUniversity CSC5991CyberSecurityPrac@ce 6

Page 7: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

NetworkLayers

WayneStateUniversity CSC5991CyberSecurityPrac@ce 7

Page 8: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

Applica@onLayer

•  Theapplica@onlayerincludestheprotocolsusedbymostapplica@onsforprovidinguserservices

•  Examplesofapplica@onlayerprotocolsareHypertextTransferProtocol(HTTP),SecureShell(SSH),FileTransferProtocol(FTP),andSimpleMailTransferProtocol(SMTP)

WayneStateUniversity CSC5991CyberSecurityPrac@ce 8

Page 9: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

TransportLayer•  Thetransportlayerestablishesprocess-to-process

connec@vity,anditprovidesend-to-endservicesthatareindependentofunderlyinguserdata.

•  Toimplementtheprocess-to-processcommunica@on,theprotocolintroducesaconceptofport.TheexamplesoftransportlayerprotocolsareTransportControlProtocol(TCP)andUserDatagramProtocol(UDP).

•  TheTCPprovidesflowcontrol,connec@onestablishment,andreliabletransmissionofdata,whiletheUDPisaconnec@onlesstransmissionmodel.

WayneStateUniversity CSC5991CyberSecurityPrac@ce 9

Page 10: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

InternetLayer•  TheInternetlayerisresponsibleforsendingpacketstoacrossnetworks.

•  Ithastwofunc@ons:1)Hostiden@fica@onbyusingIPaddressingsystem(IPv4andIPv6);and2)packetsrou@ngfromsourcetodes@na@on.

•  TheexamplesofInternetlayerprotocolsareInternetProtocol(IP),InternetControlMessageProtocol(ICMP),andAddressResolu@onProtocol(ARP).

WayneStateUniversity CSC5991CyberSecurityPrac@ce 10

Page 11: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

LinkLayer

•  Thelinklayerdefinesthenetworkingmethodswithinthescopeofthelocalnetworklink.

•  Itisusedtomovethepacketsbetweentwohostsonthesamelink.AncommonexampleoflinklayerprotocolsisEthernet.

WayneStateUniversity CSC5991CyberSecurityPrac@ce 11

Page 12: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

DataEncapsula@oninNetworkStack

WayneStateUniversity CSC5991CyberSecurityPrac@ce 12

Page 13: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

Lab0

•  SigntheCSC5991CyberSecurityPrac@ceClassStudentAgreement

•  MakesureyoucanloginasCSC5991studentonZeroClient– UsingyourWSUaccessIDandpassword– ProvidingVMimagesforlabexperiments

WayneStateUniversity CSC5991CyberSecurityPrac@ce 13

Page 14: Lab 1: Packet Sniffing and Wireshark - Computer … Sniffer (cont’d) • Applicaons ( web browsers, FTP clients, email clients ) • Network protocols (Internet protocol) • Packet

Lab0(cont’d)

•  [email protected]–  ListHomepage(webinterfaceforsubscriberstojoin/leavelist,postmessages,viewarchives):hip://lists.wayne.edu/cgi-bin/wa?A0=csc5991-security

•  Sendanemailtothelisttointroduceyourselfbynextclass

•  Sendazippedtest.txtfileonBackboardbythisweek

WayneStateUniversity CSC5991CyberSecurityPrac@ce 14


Clients, clients everywhere (Traduemprende 2013)

BIOS IT TAPASres.bios-it.co.uk/.../BIOS_TAPAS.pdfBIOS IT TAPAS The BIOS TAPAS (Trade Analysis and Packet cApture System) provides clients with nano-second-accurate monitoring of network

Live Packet! Packet is Dead! Long

ozonize 1. ozonlaştırmak; 2. içine ozon karıştırmak ‐P‐ · packet paket packet buffer paket yastığı packet format paket formatı packet header paket başlığı packet

LAB0: GETTING UP TO SPEED VERSION 1.9 Introduction to ...We will be using the Wireshark packet sniffer [wireshark.org] for these labs, allowing us to display the contents of messages

Packet-to-Packet Applications

Surf Communication Solutions - Packet To Packet Apps

Cisco Packet Tracer Overview - Freedemay.iut.lr.free.fr/doc/Packet Tracer/Packet Tracer 6.1.1 Overview...• Cisco Packet Tracer Overview ... network “world” Packet Tracer is an

Children’s Program Registration Packet - Adult Clients...Sep 24, 2020  · Children’s Program Registration Packet - Adult Clients This is 1 of 2 sets of forms you will need to

2.11.14 COUNCIL PACKET page3 - Berwyn, Illinois · 2.11.14 COUNCIL PACKET page3. 2.11.14 COUNCIL PACKET page4. 2.11.14 COUNCIL PACKET page5

Pet Sitting Registration Packet - Fur-Get Me Not · PDF filePet Sitting Registration Packet " " " " " " " ... best quality pet care by treating our clients’ pets as if they were

May 6 Packet Park Board Information Packet

Section 3 Assessing Clients' Needs - Victory Programs 3 Assessing Clients’ Needs FORMS IN THIS SECTION • Intake-Assessment Packet o Case Management Intake-Assessment Form o Addictions

Sniffer - unipr.it · 2018-01-16 · promiscuous mode permettendo alla macchina ’A’ di vedere tutto il traffico che intercorre tra le macchine ’B’ e ’C’, sempre se condividono

Improving Oral Health in HUSKY Health€¦ · • Welcome Packet mailed to all new client households • 368,000 telephone calls to non-utilizing clients in 2014 • Overall > 500,000

ComNet - Lab n 1fourmaux/ARes/ARes_T1_en.pdfMasterInformatique ComNet CommunicationNetworks 1.2 Analyzingaframebyhand To fully understand how a sniffer analyzes a frame, we analyze

Thin Clients VS Thick (fat) Clients

Converged Packet Transport- Circuit to Packet

Back Pressure Based Packet by Packet Adaptive

Satsuma 100 Sales Packet (082216)7c7c91abefc96e8de526-7960ebb42497653e18c098e437b25388.r60.cf2.rackcdn.com/...• A SALES AGENT must be sponsored by a broker and works with clients

Packet-Switching Networks Routing in Packet Networks

Under Renovation...Memphis, TN 38119 . PHONE: 901-410-5452 . FAX: 901-205-0629 TurnkeyInvestProperties.com. To our current and prospective clients: Enclosed in this packet is information

Stanislaus County Client Packet€¦ · 12/5/2020  · (Commercial) (Bus/Limo) (Standard) Points on my driving record: ... Text messaging is provided as a service to clients. Your

Under Normal and Adverse Network Conditions...POLQA&Score& & Normal Conditions iOS3to3iOS& Test Results High-Definition Client - “On Net” - Continued Google Android Clients Packet

Packet Reordering Measurement and Simulation Simulation on IPG, packet delay and packet reordering,

EE 4272Spring, 2003 Chapter 10 Packet Switching Packet Switching Principles Switching Techniques Packet Size Comparison of Circuit Switching & Packet

Protecting Clients. Conserving the Land. - King Land & Waterkinglandwater.com/.../Big-Tank-Ranch-packet-2017.pdf · King Land & Water LLC P.O. Box 109, 600 State Street, Fort Davis,

Converting to the IP-based FOMA Voice Network for … GGSN SGSN RNC IMS GGSN SGSN RNC. ATM ATM. Voice/Packet Packet Packet Packet Voice/Packet Voice/Packet Voice/Packet Voice/Packet

L'informatique et la programmation x 5 ème …technostnazaire.free.fr/styled-2/downloads-43/downloads...16 clients 16 clients clients clients 15 clients. Tous les clients ne sont

An T. Le - USF 2006 - VoIP Packet...1 VOIP Packet loss, packet labeling and packet classification An T. Le

The Fruit Packet - worksheetuniverse.com Fruit Packet - worksheetuniverse.com

Packet Tracer - Packet Tracer Physical View

Internet Protocol Stack - University of MichiganARP+DHCP.pdf · Internet Protocol Stack ... ethereal, network sniffer ... Address Resolution Protocol (ARP) How would host A discover

Supporting Clients’ Choices:Supporting Clients’ Choices · 2017-03-03 · Supporting Clients’ Choices:Supporting Clients’ Choices: Developing a Policy to Support ClientsDeveloping

Child and Adolescent Forms Packet - The Westwood GroupChild and Adolescent Forms Packet This packet includes: • Child and Adolescent Registration Form -- for clients 17 ... Shy/Timid