The packet tag has no wiki summary.
0
votes
1answer
46 views
Understanding Hearthbleed attacks [duplicate]
In order for a Heartbleed attack to happen and for someone to grab the SSL private key and even spy they have to be on the local network with a router, switch or server, correct?
Or can this be done ...
20
votes
1answer
841 views
Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
So I'm just poking around the TCP/IP protocol using a Ruby library called PacketFu, and it seems to me that in each packet, it is possible to set all of the following
Source IP
Destination IP
Source ...
-1
votes
0answers
39 views
Snort reading pcap
I have 2000 something .pcap files I need to read with snort. I want to:
Save all the alerts, and only the alerts, in a .pcap
Run a very small ruleset
What I have so far is this:
read files in ...
0
votes
1answer
36 views
How to log packets which are allowed by SNORT?
Suppose i have not written rule for a type of attack in SNORT; It is obvious that it wont show any alerts. I wanna develop a system wherein i capture packets that SNORT allows n do further processing ...
1
vote
3answers
76 views
Is there a way to get information out of the router [closed]
Is there any way (directly from a computer or device) to see the packets that pass the router from the different devices.
Thanks.
1
vote
0answers
78 views
Suggestions on how to capture network connections/traffic for determining browser/SSL versions?
I've started thinking about how to approach analyzing my network traffic for information relating to SSL and browser usage for my web server farm. I also suspect there are some shadow (legacy, ...
0
votes
4answers
112 views
If you connect through a website via a proxy, and the proxy doesn't save information, can you still be linked back?
Say I connect to a specific proxy that I know will not keep information/data about who connected to it, and I go to a website and do something deliberately illegal. If the "middle-server" doesn't have ...
1
vote
4answers
276 views
Can Your ISP use a Packet Sniffer? [closed]
Can ISPs presumably use packet sniffing applications such as wireshark and monitor my unencrypted data? Are they "allowed" to do so?
0
votes
1answer
94 views
Packet filtering firewall - (Network Layer) [closed]
I would like to know what does this particular rule of the packet filtering firewall ruleset do:
Source Address: Any
Source Port: Any
Destination Address: 192.168.1.0
Destination Port: 1023 and above
...
-1
votes
1answer
705 views
IP packet generate manually? [closed]
I have heard that we can create ip-packets by our own and send it to a network or a host.
How this Can Be Done ?Please Explain step by step??
3
votes
3answers
1k views
How to capture wireless data from an intruder using a home router
After my house mate experienced consistent ping spikes whilst gaming, he asked me to check/set the wireless router password. I did and I found two intruders from obviously nearby. How can the data ...
2
votes
1answer
280 views
Protect an application that uses internet from packet sniffing
I developed a stand alone application such a way that, application use a remote service (using SOAP/REST) which available WWW. I am using HTTPS though out the application calls. It was perfectly ...
-3
votes
1answer
251 views
How to convert some packets in a readable format [closed]
I am looking for a tool for osx, that can convert this raw data in some readable format. Testing my wifi network, I began sniffing my packets, and ran
tcpflow -i en1 -c
I want to get the sniffed ...
0
votes
1answer
420 views
What's the best route to watch network traffic on our networks?
We have a single switch that routes all our different offices around the country using Meraki VPN. We have a VM on the switch (to the extent it can see all subdomains and different IP addresses in our ...
2
votes
1answer
237 views
Reassemble sniffed packets [closed]
I am attempting to analyse my WiFi network with on Mac OS X, is there a tool to reassemble TCP stream from Wireshark capture. I would like to see the entire HTML pages that are passing through the ...
2
votes
2answers
1k views
What's the difference between an application-level and circuit-level gateway?
From Wikipedia, I understand that circuit level gateways look at TCP handshakes to filter illegitimate traffic and that application level gateways somehow filter application specific traffic.
But I ...
1
vote
1answer
200 views
Configure Wireshark to capture preformatted data from pseudo-device
So, for a research project, I'm trying to use the HONE project on github, which creates during its module installation two pseudo-devices in the /dev folder. These are called hone and honet, the ...
6
votes
1answer
279 views
Reconstructing bittorrent data from PCAP
I am doing a CTF flag for my school project with a PCAP flag based on this CTF write-up: eindbazen.net - Plaid CTF 2012 - Torrent
I setup a local torrent file containing an .mp3 (the audio is my ...
6
votes
4answers
10k views
Can Skype chat be protected from snooping? Are there safe alternatives?
I use Skype a lot. With all of my clients, staff, contractors and friends, however, the acquisition by Microsoft worries me, as two of my clients are direct MS competitors, and I often work on long ...
1
vote
3answers
1k views
How to encrypt packets in network?
I have a simple wireless router to share the internet with single access username/password.
I was wondering if it is possible somehow to set packet encryption so that other people on the LAN cannot ...
2
votes
1answer
173 views
isaac random number generator and the type of encryption it is used for (game packet encryption)?
I recently found isaac but I'm not sure what type of encryption is possible using it. Does the random number generator itself become the message somehow or does it get used as a seed for an encryption ...
2
votes
1answer
503 views
snort ignores packets with matching src/dest IP address
This is my rule:
alert udp 192.168.1.1 4000 -> 192.168.1.1 7000 (msg:"This rule doesn't work"; sid:1234567;)
I am running snort against a precaptured packet file where there are UDP packets that ...
1
vote
1answer
616 views
Snort, add TCP retransmission rule
Can somebody help me with adding rule for packet retransmission.
I found some documentation about the snort rules, but I am confused how to use it. The rules which catches the packet retransmission ...
