Changes between Version 6 and Version 7 of netsec2018wireshark

Timestamp:

Jun 10, 2018, 6:00:04 PM (6 years ago)

Author:

admin

Comment:

--

netsec2018wireshark

@@ -93 +93 @@
 
 '''chat.dump'''
-
+ - What are the email addresses of the chatters?
+ - What were they planning to do?
 Open the file. Go to Analyse>Follow>TCP Stream.
 
- - What are the email addresses of the chatters?
- - What were they planning to do?
-
 '''ftp.pcap'''
-
+ - What is the IP address of the FTP server and the Client?
+ - What is the error code 530?
 Open the file. Statistics>Coversation.  Click TCP. Check the Statistics. Go to Analyse>Follow>TCP Stream
 
- - What is the IP address of the FTP server and the Client?
- - What is the error code 530?
-
 '''foobar.pcap'''
-
+ - What is the protocol use TCP 6346?
+ -  What could be this scenario?
 Open the file. Statistics>Coversation and check for source and destination IP and port. Go to Statistics>Protocol Hierarchy
 
- - What is the protocol use TCP 6346?
- -  What could be this scenario?
-
 '''convertinfo.pcap'''
-
+ - Ids this a normal icmp packet?
 Open the file. Statistics>Coversation and check for packet length. 
 
- - Ids this a normal icmp packet?
-
 '''sip.pcap'''
+ - What is the protocol used for media?
+ - Can you listen to the phone conversation?
+Statistics>Protocol Hierarchy check for UDP protocols. Use Telephony>(Protocol) > Analysis