Use Tshark for the following question: Capture traffic on the network interface "eth0," filter out all...

Use Tshark for the following question: Capture traffic on the network interface "eth0," filter out all traffics to/from port 22 or port 10 except port 11 or port 13, and store the results in the file "quiz1.pcap."

Solutions

Expert Solution

Installation of Tshark

To install the latest version on Ubuntu 16.04 or 17.04 use the following commands to add the package repository.

```
sudo add-apt-repository ppa:dreibh/ppa
```

sudo apt-get update && sudo apt-get install wireshark tshark

To capture packets using Tshark, you could do it in two steps

1. capture general traffic of interest using tshark or even dumpcap

tshark -i eth0 -f "(tcp[0:2] >= 10 and tcp[0:2] < 11) or (tcp[2:2] > 13 and tcp[2:2] <= 22) or (port 12)" -a filesize:100 -n -w quiz1.pcap

it captures all the TCP packets of eth0 interface between the range of ports 10 - 11 and 14 - 22 and lastly stores that result to a file quiz1.pcap.

2. Once Tshark terminates, have Tshark read the exact packets of interest from the capture file and process the packets as you'd like

tshark -r quiz1.pcap -Y "ipp contains 02:00:00" -T pdml > output.xml

Results are shown in the following screenshots. In this result i have used wlp3s0f0 interface and captured packets on some different ports

venereology answered 3 months ago

Next > < Previous

Related Solutions

How would you use data about network traffic to deter attacks to the network? question based...

How would you use data about network traffic to deter attacks to the network? question based on computer forensics

Perform a wireshark capture on your machine and use the wireshark filter to examine ARP packets...

Perform a wireshark capture on your machine and use the wireshark filter to examine ARP packets Save your wireshark capture and submit it Tell me which packet represents an ARP request What is the destination MAC address for the packet ? show step by step with pictures

Which of the following statements is true? a. A network interface card (NIC) is assigned a...

Which of the following statements is true? a. A network interface card (NIC) is assigned a permanent IP address by the manufacturer. b. A MAC address is assigned dynamically by DHCP and can change when you attach your computer to a different network. c. An IP address is assigned dynamically by DHCP and can change when you attach your computer to a different network. d. To communicate via inter-networking, a device does not require a MAC address. e. To communicate...

Finish the following java question: Consider the following interface: interface Duty { public String getDuty(); }...

Finish the following java question: Consider the following interface: interface Duty { public String getDuty(); } Write a class called Student which implements Duty. Class Student adds 1 data field, id, and 2 methods, getId and setId, along with a 1-argument constructor. The duty of a Student is to study 40 hours a week. Write a class called Professor which implements Duty. Class Professor adds 1 data field, name, and 2 methods, getName and setName, along with a 1-argument constructor....

Because a single question often cannot capture all aspects of a concept, multiple questions summarized into...

Because a single question often cannot capture all aspects of a concept, multiple questions summarized into an index or scale can help us achieve greater validity. True False -------------- A type of composite measure based upon the difference of intensity in the responses. indicator typology scale index ----------------- Whether or not someone has ever shown up to work drunk might be an indicator of alcohol abuse. Such a statement has face validity. True False

All of the following price discrimination policies allow a firm to capture some of the deadweight...

All of the following price discrimination policies allow a firm to capture some of the deadweight loss or to extract some of the consumer's surplus, except: a)Bundle pricing. b)Tie-in sales. c)All-or-nothing pricing. d)Two-part tariffs.

Scenario 1 (Use the network 221.153.17.0 for the following questions.) We need to subnet this network...

Scenario 1 (Use the network 221.153.17.0 for the following questions.) We need to subnet this network to support a minimum of 4 (four) networks. How many bits do we need to use from the last octet to support this? How many hosts would each network be able to support? What will the subnet mask be? Give the network, IP range, and broadcast address for the first 3 networks: Network 1: _________________ Broadcast: _________________ Host IP Range: _________________ to _________________...

Use pseudo code to plan a programming solution for the following: A GUI interface to ensure...

Use pseudo code to plan a programming solution for the following: A GUI interface to ensure a user is old enough to play a game. See additional resources above for additional resources. Properly formatted prompts to input name, address, phone number, and age. Instructions to ensure that the information is displayed back to the user. Also, the user must be 21. So, include instructions to display an appropriate message about whether or not the user can continue. Instructions that will...

QUESTION Most grocery stores use bar code scanning technologies that interface with cash registers used to...

QUESTION Most grocery stores use bar code scanning technologies that interface with cash registers used to process customer purchases. Cashiers use the scanners to read bar code labels attached to each product, which the system then uses to obtain unit prices, calculate transaction totals, including sales taxes, and update perpetual inventory databases. Similarly, cashiers scan bar codes on coupon or member discount cards presented by the customer to process discounts. Along with the scanning technologies, groceries use point-of-sale technologies that...

this is a question for marketing class, i need to know out of all of the...

this is a question for marketing class, i need to know out of all of the 2020 year Toyota vehicles, which trims have navigation for which models? for ex the Toyota Tundra Platinum and higher has navigation, and etc.

Subjects