What hostname was queried most often using dns in the pcap

Assignment Help Computer Engineering

Reference no: EM133337822

Question: Go to the pcaps directory on the SecurityOnion VM.

(a) Using tshark, find what hostnames were visited in the PCAP nitroba.pcap. Sort your output by the number of times that each was visited, largest number first.

(b) Using tshark, find what hostname was queried most often using DNS in the PCAP nuclear- exploit-kit.pcap. Show the top 5 results only.

(c) Using bro (zeek), find what hostname was queried most often using DNS in the PCAP nuclear- exploit-kit.pcap.
Show the top 5 results only.

(d) Using tshark, find how many times URLs containing the work 'photos' are visited in nitroba.pcap.

(e) Using tshark, find the top 10 IP addresses to which SYN packets were sent in the PCAP nuclear-exploit-kit-traffic.pcap.

These should not include SYN/ACK packets - SYN packets only.

Reference no: EM133337822

Questions Cloud

Perspective of israeli diplomat : From the perspective of an Israeli diplomat, which would be the most and least suitable of the listed organizations for serving as the mediator

How are secure software update, management : CSC 120 Hampton University How are secure software update, management of trusted applications, and attestation used to automate security assurance verification

History of criminal organizations : Compare, contrast, and analyze the organization, methods, and history of criminal organizations within at least two different nations.

What is the purpose of the first line of a script : CITA 170 SUNY Canton Can you name three popular compiled programming languages and What is the purpose of the first line of a script

What hostname was queried most often using dns in the pcap : CHE 212 The Bells University of Technology what hostname was queried most often using DNS in the PCAP nuclear- exploit-kit.pcap. Show the top 5 results only

Security issues regarding specified characteristic : Discuss how you can apply the McCumber Cube model to address security issues regarding the specified characteristic (utility) .

Hardening jump box : How should a jump box be configured? list of configurations that you would use to set up a jump box that had the fewest risks.

Discuss a possible security risk you see in each layer : ISSC 660 American Public University OSI model and each layer discuss a possible security risk you see in each layer. You will see a common theme by the end

Generate third-party certificates for ssl traffic : BIOD 702 George Mason University protected passwords should never be stored in plain text, but rather, using salted one-way cryptographic hashes of passwords

User Account

All Pages