1. TCP sequence numbers, host B sends a TCP segment to A with the following information in the header: seq number = 120, size = 230, ack = 500. In the next segment that A sends to B, what would the seq and ack numbers be, assuming no packets have been lost?
2. If you want to poison the cache on a local DNS name server, what packets do you need to sniff and spoof? Explain what the filter would be for sniff, e.g. what is the destination port? Explain what you need to copy to the spoofed packet.
3. What is an NS record, and what section would it be in for a DNS packet?
4. What is the difference between the nat table and the mangle table in iptables?
5. Suppose attacker M can accurately predict the initial sequence number that client A will send to server B. Suppose M can force A to try to connect to B, and A can connect to B without a password. The connection is only established after the 3-way handshake is complete. How can M hijack the session that A opens with B without sniffing? What does M need to guess? Explain the problem.