What are the steps to Analyze the Packets Using Wireshark
What will be an ideal response?
Step 1. Apply a filter to the saved capture.
a. Press ENTER to see the prompt. Start Wireshark on Node: H1. Click OK when
prompted by the warning regarding running Wireshark as superuser.
[root@secOps analyst]# wireshark-gtk &
b. In Wireshark, click File > Open. Select the saved pcap file located at /home/analyst/
capture.pcap.
c. Apply a tcp filter to the capture. In this example, the first 3 frames are the interested
traffic.
Step 2. Examine the information within packets including IP addresses, TCP port numbers, and TCP
control flags.
a. In this example, frame 1 is the start of the three-way handshake between the PC and
the server on H4. In the packet list pane (top section of the main window), select the
first packet, if necessary.
b. Click the arrow to the left of the Transmission Control Protocol in the packet details
pane to expand the window and examine the TCP information. Locate the source and
destination port information.
c. Click the arrow to the left of the Flags. A value of 1 means that flag is set. Locate the
flag that is set in this packet.
Note: You may have to adjust the top and middle windows sizes within Wireshark to display the necessary information.
You might also like to view...
A C++ exception object may be an int, a char or a double, but unlimited information to be sent when an exception is thrown may be put in
a) The catch block b) The try block c) The throw block d) An exception object e) The function that throws the exception
Access does not have a set order of operations
Indicate whether the statement is true or false
When you press Enter, any tab stops in the current paragraph are automatically copied to the next paragraph
Indicate whether the statement is true or false
Any new scene you add has the name Scene, followed by a ____.
A. number that is one higher than the previous scene B. random number C. number that is two higher than the previous scene to allow for editing D. number based on the creation date