Task Overview

This lab is intended to be run in a Linux virtual machine that has the program Wireshark installed at Security Onion.The students will practice using the tools Wireshark, Tshark, and NetMiner to analyze packets captured during different attack scenarios. They will use their knowledge of network protocols to evaluate what happened in the attacks and extract important data from the captured traffic. Additionally, students will be introduced to setting up Access Control Lists (ACLs) using the IPTables tool.

Pcap file - https://github.com/ACandeias/IntrusionDetection/tree/master/PCAP

Dropbox link for the actual question- https://www.dropbox.com/s/96z2w69yz3am7w4/Lab3-Advanced%20Packet%20Analysis.pdf?dl=0

ircdAttack.pcap Identify all IP addresses involved. Which IP is the attacker machine and which is the victim? . What port did the exploit occur over? Provide 3 commands that were run on the victim machine