Task $(1)$

$(1)$ Locate and install a wiretapping software tool such as Wireshark. It can eavesdrop on

both wired and wireless networks. Make sure that you are downloading from the reliable

source such as

www$.$wireshark.org. Do not use third party websites since attackers may

embed malware in it$.$

$(2)$ Use Wireshark to open the packet capture file that we provide. Please note that the file

contains some Industrial Control System $($ICS$)$ network traffic that we capture. It uses a

protocol called Modbus. You can use google to figure out the protocol and port number

that Modbus uses.

In this capture file, please answer the following questions:

$($a$)$ How many unique MAC addresses were on the network?

$($b$)$ How many unique IP addresses were on the network $($IPv$4$ and IPv$6)?$

$($c$)$ What were the two UDP protocols used?

$($d$)$ Which Ethernet address was shared between an IPv$4$ and IPv$6$ address?

$($e$)$ It seems that there is a Human$-$Machine Interface $($HMI$)$ server that interacts with

multiple devices in the network through Modbus. What is the IP address of the

server?

To accomplish these tasks, you need to use the analysis tools in Wireshark. In the top tool

bar, locate the entry called "Statistics". Everything you need should be there. I will

recommend you to look at the entries such as "Protocol Hierarchy", "EndPoints", and

"Conversations".Which Ethernet address was shared between an IPv$4$ and IPv$6$