07 Oct In this lab, you will analyze packet capture (pcap) files (SNMP_Sample.cap and HTTP_Sample.cap) using the Wireshark network analysis tool in order to better understand the workings of
In this lab, you will analyze packet capture (pcap) files (SNMP_Sample.cap and HTTP_Sample.cap) using the Wireshark network analysis tool in order to better understand the workings of UDP and TCP, the Transport Layer protocols. Download the attached instructions and pcap files for this exercise. When you have completed the lab, click on the assignment link to submit your finished work.
IS 3413 Lab: Transport Protocols
This lab involves analysis of two packet capture (pcap) files (SNMP_Sample.cap and HTTP_Sample.cap) using the Wireshark network analysis tool. The pcap files are available on Blackboard as attachments to the project assignment. Open each file in Wireshark and use it to determine answers to the questions below the underlined file name.
Turn-in Requirements: To complete the assignment, upload a Word (.docx) or Adobe (.pdf) file with answers to the numbered questions as your submission to this assignment in Blackboard.
SNMP_Sample
1. (2 pts) Examine the details in the first packet. What transport layer protocol is being used?
2. (4 pts) What is the first packet’s destination port number? What is the significance, if any, of this port number?
3. (4 pts) What is the first packet’s source port number? What is the significance, if any, of this port number?
4. (6 pts) Consider all 8 packets in this pcap file. Taken together, are they part of a connection-oriented message between two endpoints? Why or why not?
5. (4 pts) Research and provide a brief description of a common SNMP security vulnerability?
HTTP_Sample
6. (2 pts) Examine the details in the first packet. What transport layer protocol is being used?
7. (4 pts) What is the first packet’s destination port number? What is the significance, if any, of this port number?
8. (4 pts) What is the first packet’s source port number?
9. (6 pts) Examine the first 3 packets. What transport layer flags are set and what does this sequence of packets represent in terms of a connection-oriented messaging session? Which IP address initiated this connection?
10. (4 pts) Research and provide a brief description of a common HTTP security vulnerability?
,
$K£@ìó��6���6���������þÿ �����E��(Àž@�/�1–AÐäß‘þ í�P ,�LaŒ8¯ÿóP�� „!��$K£@k)��š���š���������þÿ �����E��ŒÀŸ@�/�,1AÐäß‘þ í�P ,�LaŒ8¯ÿóP�� + ��HTTP/1.1 200 OK Date: Thu, 13 May 2004 10:17:12 GMT Server: Apache Last-Modified: Tue, 20 Apr 2004 13:17:00 GMT ETag: "9a01a-4696-7e354b00" Accept-Ranges: bytes Content-Length: 18070 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html; charset=ISO-8859-1 <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>Ethereal: Download</title> <style type="text/css" media="all"> @import url("mm/css/ethereal-3-0.css"); </style> </head> <body> <div class="top"> <table width="100%" cellspacing="0" cellpadding="0" border="0" summary=""> <tr> <td valign="middle" width="1"> <a href="/"><img class="logo" title="Ethereal home" src="mm/image/elogo-64-trans.gif" alt="" width="64" height="64"></img></a> </td> <td align="left" valign="middle"> <h2>Ethereal</h2> <h5 style="white-space: nowrap;">Download</h5> </td> <td align="right"> <table style="margin-right: 10px;" cellspacing="0" cellpadding="0" border="0" summary=""> <form name="search" method="post" action="http://www.ethereal.com/cgi-bin/htsearch"> <tr> <td> <div class="topformtext"> %K£@¶ã��6���6���þÿ �����������E��(�F@�€�‘î‘þ íAÐäß ,�P8¯ÿó�LfðP�%¼r!��%K£@¶ã��š���š���������þÿ �����E��ŒÀ @�/�,0AÐäß‘þ í�P ,�Lfð8¯ÿóP�� ÃQ�� <a href="search.html">Search:</a> </div> </td> <td> <div class="topformtext"> <input type="text" size="12" name="words"> <input type="hidden" name="config" value="ethereal"> </div> </td> <td valign="bottom"> <input type="image" class="gobutton" src="mm/image/go-button.gif"> </td> </tr> </form> </table> </div> </td> </tr> </table> </div> <div class="sitebar"> <p> <a href="/">Home</a> <span class="sitebarsep">|</span> <a href="introduction.html">Introduction</a> <span class="sitebarsep">|</span> Download <span class="sitebarsep">|</span> <a href="docs/">Documentation</a> <span class="sitebarsep">|</span> <a href="lists/">Lists</a> <span class="sitebarsep">|</span> <a href="faq.html">FAQ</a> <span class="sitebarsep">|</span> <a href="development.html">Development</a> </p> </div> <div class="navbar"> <p> <a href="#releases">Official Releases</a> <span class="navbarsep">|</span> <a href="#otherplat">Other Platforms</a> <span class="navbarsep">|</span> <a href="#otherdown">Other Downloads</a> <span class="navbarsep">|</span> <a href="#legal">Legal Notices</a> </p> </div> <!– Begin Ad 468×60 –> <div class="adblock"> <script type="text/javascript"><!– google_ad_client = "pub-230919194867%K£@�ò��6���6���þÿ �����������E��(�G@�€�‘í‘þ íAÐäß ,�P8¯ÿó�LlTP�%¼l½��%K£@1„��š���š���������þÿ �����E��ŒÀ¡@�/�,/AÐäß‘þ í�P ,�LlT8¯ÿóP�� �K��3629"; google_ad_width = 468; google_ad_height = 60; google_ad_format = "468x60_as"; google_color_border = "666633"; google_color_bg = "FFFFFF"; google_color_link = "000000"; google_color_url = "666633"; google_color_text = "333333"; //–></script> <script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js"> </script> </div> <!– End Ad –> <div class="block"> <h2 class="headerline" id="releases">Official Releases</h2> <p> The Official source code release and installers for Windows, Red Hat Linux/Fedora, and Solaris can be found on the main Ethereal web site and its mirrors. </p> <h4>Source Code</h4> <p> HTTP: <a href="http://www.ethereal.com/distribution/">Main site</a> <a href="http://ethereal.planetmirror.com/distribution/">Australia</a> <a href="http://www.mirrors.wiretapped.net/security/packet-capture/ethereal/">Australia</a> <a href="http://netmirror.org/mirror/ftp.ethereal.com/">Germany</a> <a href="http://ethereal.netarc.jp/distribution/">Japan</a> <a href="http://ethereal.secuwiz.com/distribution/">Korea</a> <a href="http://ethereal.0ni0n.org/distribution/">Malaysia</a> <a href="http://ftp.sunet.se/pub/network/monitoring/ethereal/">Sweden</a> <a href="http://sourceforge.net/project/showfiles.php?group_id=255">SourceForge</a> </p> <p> FTP: <a href="ftp://ftp.ethereal.com/pub/ethereal/">Main site</a> <a href=%K£@€2 �š���š���������þÿ �����E��ŒÀ¢@�/�,.AÐäß‘þ í�P ,�Lq¸8¯ÿóP�� á5��"ftp://ftp.planetmirror.com/pub/ethereal/">Australia</a> <a href="ftp://ftp.mirrors.wiretapped.net/pub/security/packet-capture/ethereal/">Australia</a> <a href="ftp://gd.tuwien.ac.at/infosys/security/ethereal/">Austria</a> <a href="ftp://netmirror.org/ftp.ethereal.com/">Germany</a> <a href="ftp://ftp.ayamura.org/pub/ethereal/">Japan</a> <a href="ftp://ftp.azc.uam.mx/mirrors/ethereal/">Mexico</a> <a href="ftp://ftp.sunet.se/pub/network/monitoring/ethereal/">Sweden</a> </p> <p> The latest development sources are available via <a href="development.html#anoncvs">anonymous CVS</a>. </p> <h4>Windows 98/ME/2000/XP/2003 Installers</h4> <p> HTTP: <a href="http://www.ethereal.com/distribution/win32/">Main site</a> <a href="http://ethereal.planetmirror.com/distribution/win32/">Australia</a> <a href="http://www.mirrors.wiretapped.net/security/packet-capture/ethereal/win32/">Australia</a> <a href="http://netmirror.org/mirror/ftp.ethereal.com/win32/">Germany</a> <a href="http://ethereal.netarc.jp/distribution/win32/">Japan</a> <a href="http://ethereal.secuwiz.com/distribution/win32/">Korea</a> <a href="http://ethereal.0ni0n.org/distribution/win32/">Malaysia</a> <a href="http://ftp.sunet.se/pub/network/monitoring/ethereal/win32/">Sweden</a> <a href="http://sourceforge.net/project/showfiles.php?group_id=255">SourceForge</a> </p> <p> FTP: <a href="ftp://ftp.ethereal.com/pub/%K£@€2 �6���6���þÿ �����������E��(�H@�€�‘ì‘þ íAÐäß ,�P8¯ÿó�Lw�P�%¼aõ��%K£@€2 �Y���Y���þÿ �����������E��K�I��€�c¥‘þ í‘ý�Ë�Á�5�7�¯�#�����������pagead2�googlesyndication�com�����%K£@sk��š���š���������þÿ �����E��ŒÀ£@�/�,-AÐäß‘þ í�P ,�Lw�8¯ÿóP�� £x��ethereal/win32/">Main site</a> <a href="ftp://ftp.planetmirror.com/pub/ethereal/win32/">Australia</a> <a href="ftp://ftp.mirrors.wiretapped.net/pub/security/packet-capture/ethereal/win32/">Australia</a> <a href="ftp://gd.tuwien.ac.at/infosys/security/ethereal/win32/">Austria</a> <a href="ftp://netmirror.org/ftp.ethereal.com/win32/">Germany</a> <a href="ftp://ftp.ayamura.org/pub/ethereal/win32/">Japan</a> <a href="ftp://ftp.azc.uam.mx/mirrors/ethereal/win32/">Mexico</a> <a href="ftp://ftp.sunet.se/pub/network/monitoring/ethereal/win32/">Sweden</a> </p> <h4>Red Hat Linux / Fedora Packages</h4> <p> HTTP: <a href="http://www.ethereal.com/distribution/rpms/">Main site</a> <a href="http://ethereal.planetmirror.com/distribution/rpms/">Australia</a> <a href="http://www.mirrors.wiretapped.net/security/packet-capture/ethereal/rpms/">Australia</a> <a href="http://netmirror.org/mirror/ftp.ethereal.com/rpms/">Germany</a> <a href="http://ethereal.netarc.jp/distribution/rpms/">Japan</a> <a href="http://ethereal.secuwiz.com/distribution/rpms/">Korea</a> <a href="http://ethereal.0ni0n.org/distribution/rpms/">Malaysia</a> <a href="http://ftp.sunet.se/pub/network/monitoring/ethereal/rpms/">Sweden</a> </p> <p> FTP: <a href="ftp://ftp.ethereal.com/pub/ethereal/rpms/">Main site</a> <a href="ftp://ftp.planetmirror.com/pub/ethereal/rpms/">Australia</a> <a href="ftp://ftp.mirrors.wi&K£@Vé��6���6���þÿ �����������E��(�J@�€�‘ê‘þ íAÐäß ,�P8¯ÿó�L|€P�%¼‘��&K£@I"��š���š���������þÿ �����E��ŒÀ¤@�/�,,AÐäß‘þ í�P ,�L|€8¯ÿóP�� ™���retapped.net/pub/security/packet-capture/ethereal/rpms/">Australia</a> <a href="ftp://gd.tuwien.ac.at/infosys/security/ethereal/rpms/">Austria</a> <a href="ftp://netmirror.org/ftp.ethereal.com/rpms/">Germany</a> <a href="ftp://ftp.ayamura.org/pub/ethereal/rpms/">Japan</a> <a href="ftp://ftp.azc.uam.mx/mirrors/ethereal/rpms/">Mexico</a> <a href="ftp://ftp.sunet.se/pub/network/monitoring/ethereal/rpms/">Sweden</a> </p> <h4>Solaris Packages</h4> <p> HTTP: <a href="http://www.ethereal.com/distribution/solaris/">Main site</a> <a href="http://ethereal.planetmirror.com/distribution/solaris/">Australia</a> <a href="http://www.mirrors.wiretapped.net/security/packet-capture/ethereal/solaris/">Australia</a> <a href="http://netmirror.org/mirror/ftp.ethereal.com/solaris/">Germany</a> <a href="http://ethereal.netarc.jp/distribution/solaris/">Japan</a> <a href="http://ethereal.secuwiz.com/distribution/solaris/">Korea</a> <a href="http://ethereal.0ni0n.org/distribution/solaris/">Malaysia</a> <a href="http://ftp.sunet.se/pub/network/monitoring/ethereal/solaris/">Sweden</a> <a href="http://sourceforge.net/project/showfiles.php?group_id=255">SourceForge</a> </p> <p> FTP: <a href="ftp://ftp.ethereal.com/pub/ethereal/solaris/">Main site</a> <a href="ftp://ftp.planetmirror.com/pub/ethereal/solaris/">Australia</a> <a href="ftp://ftp.mirrors.wiretapped.net/pub/security/packet-captu&K£@†p��¼���¼���������þÿ �����E��®�•@�ù�£õ‘ý�Ë‘þ í�5�Á�š0��#�€���������pagead2�googlesyndication�com�����À�������¼Á���pagead2�googleÀ&À;�������z���pagead�google�akadns�net�ÀX�������{��Øï;hÀX�������{��Øï;c&K£@[‚����������þÿ �����������E��ù�M@�€�¡s‘þ íØï;c +�P6Â�(.kS„P�"8�d��GET /pagead/ads?client=ca-pub-2309191948673629&random=1084443430285&lmt=1082467020&format=468x60_as&output=html&url=http%3A%2F%2Fwww.ethereal.com%2Fdownload.html&color_bg=FFFFFF&color_text=333333&color_link=000000&color_url=666633&color_border=666633 HTTP/1.1 Host: pagead2.googlesyndication.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 300 Connection: keep-alive Referer: http://www.ethereal.com/download.html &K£@¶÷��6���6���þÿ �����������E��(�N@�€�‘æ‘þ íAÐäß ,�P8¯ÿó�L�äP�%¼W-��&K£@üw �š���š���������þÿ �����E��ŒÀ¥@�/�,+AÐäß‘þ í�P ,�L�ä8¯ÿóP�� �}��re/ethereal/solaris/">Australia</a> <a href="ftp://gd.tuwien.ac.at/infosys/security/ethereal/solaris/">Austria</a> <a href="ftp://netmirror.org/ftp.ethereal.com/solaris/">Germany</a> <a href="ftp://ftp.ayamura.org/pub/ethereal/solaris/">Japan</a> <a href="ftp://ftp.azc.uam.mx/mirrors/ethereal/solaris/">Mexico</a> <a href="ftp://ftp.sunet.se/pub/network/monitoring/ethereal/solaris/">Sweden</a> </p> </div> <div class="block"> <h2 class="headerline" id="otherplat">Other Platforms</h2> <p> Binary distributions and ready-to-compile packages are available for most platforms. Please note these packages may depend on external libraries including GLib/GTK+, libpcap, Net-SNMP, PCRE, and GNU ADNS. You may have to download and install them before installing Ethereal. </p> <table cellspacing="1" cellpadding="2" border="0" summary=""> <tr bgcolor="#cccc99"> <th>Platform</th> <th>Location(s)</th> </tr> <tr> <td valign="top">Apple Computer:<br>Mac OS X</td> <td valign="top"> <a href="http://fink.sourceforge.net/pdb/package.php/ethereal">Fink Project</a> <a href="http://darwinports.opendarwin.org">DarwinPorts</a> </td> </tr> <tr class="even"> <td valign="top">Be (Palm?):<br>BeOS</td> <td valign="top"> <a href="http://www.bebits.com/app/2979">BeBits</a> </td> </tr> <tr> <td valign="top">Debian:<br>Debian GNU/Linux</td> <td valign="top"> &K£@iM��š���š���������þÿ �����E��ŒÀ¦@�/�,*AÐäß‘þ í�P ,�L‡H8¯ÿóP�� ½��� <a href="http://packages.debian.org/stable/net/ethereal">stable</a>, <a href="http://packages.debian.org/testing/net/ethereal">testing</a>, <a href="http://packages.debian.org/unstable/net/ethereal">unstable</a> </td> </tr> <tr class="even"> <td valign="top">The FreeBSD Project:<br>FreeBSD</td> <td valign="top"> <a href="http://www.freebsd.org/cgi/ports.cgi?query=ethereal&stype=all">ports</a> </td> </tr> <tr> <td valign="top">Gentoo Technologies:<br>Gentoo Linux</td> <td valign="top"> <a href="http://www.gentoo.org/packages/net-analyzer/ethereal.html">portage</a> </td> </tr> <tr class="even"> <td valign="top">HP:<br>Tru64 Unix</td> <td valign="top"> <a href="ftp://ftp.thewrittenword.com/packages/by-name/ethereal-0.9.16/">The Written Word (4.0d, 5.1)</a><super><small>1</small></super> </td> </tr> <tr> <td valign="top">HP:<br>HP-UX</td> <td valign="top"> <a href="http://hpux.connect.org.uk/hppd/hpux/Gtk/Applications/">UK</a>, <a href="http://hpux.asknet.de/hppd/hpux/Gtk/Applications/">Germany</a>, <a href="http://hpux.tn.tudelft.nl/hppd/hpux/Gtk/Applications/">Netherlands</a>, <a href="http://hpux.cs.utah.edu/hppd/hpux/Gtk/Applications/">US</a>, <a href="http://hpux.ee.ualberta.ca/hppd/hpux/Gtk/Applications/">Canada</a>, <a href="http://hpux.petech.ac.za//hppd/hpux/Gtk/Applications/">South Afr&K£@iM��6���6���þÿ �����������E��(�O@�€�‘å‘þ íAÐäß ,�P8¯ÿó�LŒ¬P�%¼Le��&K£@�q��š���š���������þÿ �����E��ŒÀ§@�/�,)AÐäß‘þ í�P ,�LŒ¬8¯ÿóP�� ¿…��ica</a> <br>(more mirrors are listed on each site's home page),<br> <a href="ftp://ftp.thewrittenword.com/packages/by-name/ethereal-0.9.16/">The Written Word (10.20, 11.00, 11.11)</a><super><small>1</small></super> </td> </tr> <tr class="even"> <td valign="top">IBM:<br>AIX</td> <td valign="top"> <a href="http://www.bullfreeware.com/">Bull archive</a><br> <a href="http://ftp.univie.ac.at/aix/">Vienna University mirror</a><br> <a href="http://aixpdslib.seas.ucla.edu/bull.html">UCLA mirror</a> </td> </tr> <!– Ashley G Chaloner <csuwf [at] dcs.warwick.ac.uk> –> <tr> <td valign="top">IBM:<br>S/390 Linux (Red Hat 7.2)</td> <td valign="top"> <a href="http://www.dcs.warwick.ac.uk/~csuwf/RPMs/">Ashley Chaloner</a><br> </td> </tr> <tr class="even"> <td valign="top">MandrakeSoft:<br>Mandrake Linux</td> <td valign="top"> <a href="http://www.linux-mandrake.com/en/cookerdevel.php3">Cooker</a> (in the contrib section) </td> </tr> <tr> <td valign="top">Microsoft:<br>Windows (Intel, 32-bit)</td> <td valign="top"> <a href="http://www.ethereal.com/distribution/win32">local archive</a><br> <a href="http://www.openxtra.com/products/ethereal_xtra.htm">OPENEXTRA</a> </td> </tr> <tr class="even"> <td valign="top">NetBSD Foundation:<br>NetBSD</td> <td valign="top"> <a href="ftp://ftp.netbsd.org/pub/NetBSD/packages/p&K£@1˜��6���6���������þÿ �����E��(…8��7�·IØï;c‘þ í�P +.kS„6 ùP�zä�Œ��'K£@öî��6���6���þÿ �����������E��(�P@�€�‘ä‘þ íAÐäß ,�P8¯ÿó�L’�P�%¼G���'K£@&v��Ì���Ì���������þÿ �����E��¾…Î��7�±�Øï;c‘þ í�P +.kS„6 ùP�zä¬Ù��HTTP/1.1 200 OK P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC" Content-Type: text/html; charset=ISO-8859-1 Content-Encoding: gzip Server: CAFE/1.0 Cache-control: private, x-gzip-ok="" Content-length: 1272 Date: Thu, 13 May 2004 10:17:14 GMT �‹�������ÿÍWësÚ8�ÿ~�…ÎmI˜���y‚¹1yдMzí¥7½O7²%Ûº�Ë•d�Mó¿ßÊ�p d’ÞÍÍ™aôاv÷·²{‰�ñ~/¡˜ô{JO9í÷~n4~²Ãä6Ì¥�ò(�,ÕTvËe‚Sr‡mLŽ8K¯Ñ- �‡mô¢Y<hF�3Å4%›È‰�S¹‰ˆCÍÆôAª¢X†Éªå¨x*ôuëk,«�¬1¬y±äÀZK�䚉t³+U¦Çü©òmvªÊµÑ3„�§Ñè÷œ2‘*”,Ó³„Fy��i¤Ôöd‡‘:º�°”ˆ‰4Ö¹B�št%Õ¹L‘–9íÞ-$Bµ]¿ÏìmmUéx�×o‘�™ÍEˆÍž�H�yD„ùˆ¦ÚŽ©>åÔL�Ós�Ü�½¢"ÆÛb‡‚O,BÛ�Ä€Š=a3b«<P�Ž4ÞvëÝ�<·¬®œ 1�ÔÖX‚l×(‹ALÃf�‚ݨ˜dX‚ÊKAhÁ��‡Q��Ž¤˜¬p$u£=1ô»;D¹‚à'…!%ÃÒÃBw²®{¡Y/T�‚ö<Œ¾�GY9J�ëÕð?;šwwóä—Ywf ��™¢ >6µâYeXˆÓH_@˜XêYMË$¯²��Ó #:©¬�ÊâD›�~Oã€STrtö�,4§î��H9W��!EžåÎÖ�&¤X�=�’P9›ÆaéÙ�<í¶Ñ-áOÖlì-mì�¬Øh®Øp7Ø(O?·a��:àÐ-knhieý˜� ñq�ZU��æ�#ž¥ñÄps¬”g…ÉÂp«u¸Tß��`ÎbpÍdÊBãr�‰²�HÏ �@�À¼��È�šL�œTŽ#!Cj‡bälíl�¥ºa¿�¹¢�ÆÆ�§‰,drpÆ4�£å˜³ðÚ³�

Our website has a team of professional writers who can help you write any of your homework. They will write your papers from scratch. We also have a team of editors just to make sure all papers are of HIGH QUALITY & PLAGIARISM FREE. To make an Order you only need to click Ask A Question and we will direct you to our Order Page at WriteDemy. Then fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Fill in all the assignment paper details that are required in the order form with the standard information being the page count, deadline, academic level and type of paper. It is advisable to have this information at hand so that you can quickly fill in the necessary information needed in the form for the essay writer to be immediately assigned to your writing project. Make payment for the custom essay order to enable us to assign a suitable writer to your order. Payments are made through Paypal on a secured billing page. Finally, sit back and relax.
About Wridemy
We are a professional paper writing website. If you have searched a question and bumped into our website just know you are in the right place to get help in your coursework. We offer HIGH QUALITY & PLAGIARISM FREE Papers.
How It Works
To make an Order you only need to click on “Place Order” and we will direct you to our Order Page. Fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Are there Discounts?
All new clients are eligible for 20% off in their first Order. Our payment method is safe and secure.