The tag has no wiki summary.

learn more… | top users | synonyms

5
votes
1answer
204 views

Does TCP/IP protocol offer a reliable way of determining who the actual sender was?

So I'm just poking around the TCP/IP protocol using a Ruby library called PacketFu, and it seems to me that in each packet, it is possible to set all of the following Source IP Destination IP Source ...
0
votes
0answers
31 views

Snort reading pcap

I have 2000 something .pcap files I need to read with snort. I want to: Save all the alerts, and only the alerts, in a .pcap Run a very small ruleset What I have so far is this: read files in ...
0
votes
1answer
36 views

How to log packets which are allowed by SNORT?

Suppose i have not written rule for a type of attack in SNORT; It is obvious that it wont show any alerts. I wanna develop a system wherein i capture packets that SNORT allows n do further processing ...
1
vote
3answers
74 views

Is there a way to get information out of the router [closed]

Is there any way (directly from a computer or device) to see the packets that pass the router from the different devices. Thanks.
1
vote
0answers
76 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

I've started thinking about how to approach analyzing my network traffic for information relating to SSL and browser usage for my web server farm. I also suspect there are some shadow (legacy, ...
0
votes
4answers
109 views

If you connect through a website via a proxy, and the proxy doesn't save information, can you still be linked back?

Say I connect to a specific proxy that I know will not keep information/data about who connected to it, and I go to a website and do something deliberately illegal. If the "middle-server" doesn't have ...
1
vote
4answers
272 views

Can Your ISP use a Packet Sniffer? [closed]

Can ISPs presumably use packet sniffing applications such as wireshark and monitor my unencrypted data? Are they "allowed" to do so?
0
votes
1answer
93 views

Packet filtering firewall - (Network Layer) [closed]

I would like to know what does this particular rule of the packet filtering firewall ruleset do: Source Address: Any Source Port: Any Destination Address: 192.168.1.0 Destination Port: 1023 and above ...
-1
votes
1answer
681 views

IP packet generate manually? [closed]

I have heard that we can create ip-packets by our own and send it to a network or a host. How this Can Be Done ?Please Explain step by step??
3
votes
3answers
1k views

How to capture wireless data from an intruder using a home router

After my house mate experienced consistent ping spikes whilst gaming, he asked me to check/set the wireless router password. I did and I found two intruders from obviously nearby. How can the data ...
1
vote
1answer
268 views

Protect an application that uses internet from packet sniffing

I developed a stand alone application such a way that, application use a remote service (using SOAP/REST) which available WWW. I am using HTTPS though out the application calls. It was perfectly ...
-3
votes
1answer
247 views

How to convert some packets in a readable format [closed]

I am looking for a tool for osx, that can convert this raw data in some readable format. Testing my wifi network, I began sniffing my packets, and ran tcpflow -i en1 -c I want to get the sniffed ...
0
votes
1answer
417 views

What's the best route to watch network traffic on our networks?

We have a single switch that routes all our different offices around the country using Meraki VPN. We have a VM on the switch (to the extent it can see all subdomains and different IP addresses in our ...
2
votes
1answer
227 views

Reassemble sniffed packets [closed]

I am attempting to analyse my WiFi network with on Mac OS X, is there a tool to reassemble TCP stream from Wireshark capture. I would like to see the entire HTML pages that are passing through the ...
2
votes
2answers
1k views

What's the difference between an application-level and circuit-level gateway?

From Wikipedia, I understand that circuit level gateways look at TCP handshakes to filter illegitimate traffic and that application level gateways somehow filter application specific traffic. But I ...
1
vote
1answer
199 views

Configure Wireshark to capture preformatted data from pseudo-device

So, for a research project, I'm trying to use the HONE project on github, which creates during its module installation two pseudo-devices in the /dev folder. These are called hone and honet, the ...
6
votes
1answer
275 views

Reconstructing bittorrent data from PCAP

I am doing a CTF flag for my school project with a PCAP flag based on this CTF write-up: eindbazen.net - Plaid CTF 2012 - Torrent I setup a local torrent file containing an .mp3 (the audio is my ...
6
votes
4answers
10k views

Can Skype chat be protected from snooping? Are there safe alternatives?

I use Skype a lot. With all of my clients, staff, contractors and friends, however, the acquisition by Microsoft worries me, as two of my clients are direct MS competitors, and I often work on long ...
1
vote
3answers
1k views

How to encrypt packets in network?

I have a simple wireless router to share the internet with single access username/password. I was wondering if it is possible somehow to set packet encryption so that other people on the LAN cannot ...
2
votes
1answer
170 views

isaac random number generator and the type of encryption it is used for (game packet encryption)?

I recently found isaac but I'm not sure what type of encryption is possible using it. Does the random number generator itself become the message somehow or does it get used as a seed for an encryption ...
2
votes
1answer
497 views

snort ignores packets with matching src/dest IP address

This is my rule: alert udp 192.168.1.1 4000 -> 192.168.1.1 7000 (msg:"This rule doesn't work"; sid:1234567;) I am running snort against a precaptured packet file where there are UDP packets that ...
1
vote
1answer
613 views

Snort, add TCP retransmission rule

Can somebody help me with adding rule for packet retransmission. I found some documentation about the snort rules, but I am confused how to use it. The rules which catches the packet retransmission ...