Network Packet Anaylsis (simple)

Закрыт

Описание

Here are the details regarding the network:

Employee Title IP address

Server Server [url removed, login to view]

Phil Farnsworth Owner [url removed, login to view]

James Garrett Network Admin [url removed, login to view]

Allen Beard Payroll Admin [url removed, login to view]

If you don't know whether it's suspicious -- sometimes it's difficult to tell -- say so, and describe why you can't tell whether it's suspicious or not. There are examples of EACH of the aforementioned categories of behavior included in the packet capture.

NOTE: I want a DETAILED INTERPRETATION of what is happening. Don't simply DESCRIBE what is going on, I want an expert interpretation. Here’s an example:

POOR DESCRIPTION: IP [url removed, login to view] is accessing port 21 over TCP on IP xx.xx.xx.xx.

My feedback to you: That is useless information.

GOOD DESCRIPTION: IP [url removed, login to view] is attempting to connect to port 21 on IP xxx.xxx.xxx.xxx. Port 21 is ftp, which sends credentials in the clear. The series of packet captures shows that the intruder was attempting to guess passwords for user "sumowrestler". The intruder was eventually successful after the 5th try. The passwords guessed were "password", "sumo", "wrestler", "beatles" and "sumo1", the latter of which allowed the intruder to gain access to the computer.

Questions

1. What is occurring in packets 3-4? Is it evidence of an intrusion? Provide an interpretation of what is occurring, and the possible uses of the information gained. If there’s nothing suspicious, tell me so, and explain why it’s normal traffic.

2. Is the activity occurring in packets 17-20, 24-25, 28-33, 36-41 evidence of an intrusion? Provide a detailed interpretation of what is occurring, and the possible uses of the information gained. How many computers are involved? Who owns them?

3. Is the activity starting in packet 80-116 evidence of an intrusion? Provide a detailed interpretation of what is occurring, and the possible consequences. How many ports are involved, and what are their associated services? What information would be gained, and how would it be used by an attacker?

4. Are packets 508-595 abnormal? (Note: this is a TCP stream so you can select the first packet, right click your mouse, select "Follow TCP Stream", and Wireshark will extract those packets and form a single readable stream.) Provide a detailed description AND interpretation of what is occurring, and the possible consequences. THERE IS A LOT GOING ON. TELL ME WHAT HAPPENED!

5. Is the activity starting in packet 618 evidence of an intrusion? (Note: this is a TCP stream so you can select the packet, right click your mouse, select "Follow TCP Stream", and Wireshark will extract those

Навыки: Компьютерная безопасность, Администрирование сети, Безопасность сети

Показать больше: simple project packet tracer, simple php social network, simple code capture packet network winpcap, simple udp packet generator, simple packet tracer network, simple network topology packet tracer, project packet network, find simple affordable social network maker, packet network, simple client server network example, simple java game network, simple udp packet, simple udp packet sender, simple cms social network, network packet sniffer project pdf

ID проекта: #11782051

Поручено:

rozeny2k

Hi.. I am an expert network engineering with an MS in Computer Science and Engineering. Check my work history. I have completed 250+ projects on network/security/system/forensic and several other similar topic. I am th Больше

$100 USD за 3 дней(-я)
(113 отзывов(-а) )
6.8

6 фрилансеров(-а) подали заявки на эту работу; средняя заявка - $114

$111 USD за 1 день
(60 отзывов(-а))
5.9
$111 USD за 3 дней(-я)
(13 отзывов(-а))
3.9
Softeria

I am a Computer Engineer and a Network Administrator. I have done my Master in Computer Security. I teaches Wireless communications. I am CCNA certified. I have worked on VoLTE, IPV6, Distributed Computing, Cloud compu Больше

$100 USD за 3 дней(-я)
(6 отзывов(-а))
3.4
zkutch

Hello. More 20 years programming experience. I need more details to set real time and price. Regards. -------------------------------------------------------------------------------------------------------------- Больше

$100 USD за 5 дней(-я)
(2 отзывов(-а))
3.2
VirtualBrainInc

Pay only if you get what you desire, No third parties involved in your project this is what most of the other people want to do with your project. I deliver high quality work on time! In the URL below YOU WILL FIND, so Больше

$160 USD за 1 день
(0 отзывов(-а))
0.0