Question: 1. Write a Python program to analyse the global header of the PCAP file, and provide the following information: a. The length of the global
1. Write a Python program to analyse the global header of the PCAP file, and provide the following information:
a. The length of the global header
b. The magic number and the endianness of the PCAP file
c. The major and minor version numbers of the file format
d. The SnapLength
e. The data link type
Note:- I have the Pcap file but I just need the code and I will replace the the name of the Pcap file
2. The first protocol frame captured in the PCAP file is a DHCP frame, which contains a lot of basic information of the captured communication. Write a Python program to analyse this DHCP frame and provide the following information:
a. The timestamp indicating when this packet was captured
b. The actual GMT time corresponding to this timestamp
c. The length of this DHCP frame
d. The source and destination MAC addresses of the captured communication
e. The source and destination IP addresses of the captured communication
f. The name of the host PC Describe in the report how you use your program to achieve these.
3. The user of the host PC tried to access some suspected website whose domain name ends with .top. Use Python (with the help of Regular Expression) to find the susceptible website.
4. Before the user got infected/attacked, they used a popular search engine (not Google) to search some information. Use Python to find out which search engine and which keywords they used to do such searches. Which website did the search engine recommend and the user actually access?
5. Based on what you have achieved so far, expand your Python code to a more generic tool to identify more potential security threats.
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
