Question: And then use a protocol analysis tool (such as wireshark or tcpdump) to answer the following: 1- How many TCP sessions and UDP exchanges have

And then use a protocol analysis tool (such as wireshark or tcpdump) to answer the following: 1- How many TCP sessions and UDP exchanges have been captured in the file? 2- How many web sessions have been captured in the file? 3- Is it possible to read the content of any of the web sessions? Show examples and explain why. 4- Are there any DNS interactions in the file? If no explain why you reached that conclusions, else show samples. 5- Can you find any usernames and/or passwords (you have permission to look for such information in this file only, and only for the purpose of this assignment)? If so, what are they and at which site were they used? 6- Which other application protocols can be found in the capture file (e.g., ssh, ftp, mail, etc)? Please support all of your answers with screen shots and/or partial traffic dumps.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!