Collaborate Disseminate
I have this configuration:
HOST-A <—> GAT-A <—> MiTM <—> GAT-B <—> HOST-B
I’m doing a security project on MTU-IPsec vulnerabilities and following this guide of Hal-Inria, I’m able to inject a packet to the … Continue reading IPSec MTU DDos attack
We are building a packet based anomaly detection system and I’m trying to find labeled packets.
Such dataset doesn’t exist based on my search, but I can find labeled flows.
Can we say that every packet is hostile which is part of a flow th… Continue reading Is every packet of a hostile network flow hostile?
I’m quite new to Wireshark traffic analysis, and I have to figure out what the exploit is in the following capture.
Could someone help me with it?
Packet file can be found here if images not enough. Capture File
This is the single packet t… Continue reading What’s the actual attack / exploit in this Wireshark capture? [closed]
For some experiments I have conducted using the Mininet SDN, I test with varying network parameters — specifically in my case, network link delay and packet loss.
However, the feasibility of my experiments involving these parameters truly… Continue reading How is latency (link delay) and packet loss (network jitter) implemented in Mininet? Are they realistic? [closed]
If there is an intruder in a LAN who knows the encryption type and password, will he be able to monitor all the packets which are in the LAN? Suppose someone on the LAN is visiting HTTP sites, which supposedly have no encryption.
I was recently reading through the nmap port scanning documentation and it points out that to perform a SYN scan (-sS) you require root privileges because an unprivileged user cannot send raw packets. Why does the OS not allow an unprivile… Continue reading Why do I need root privileges to send a raw packet from a UNIX machine?
I am trying to analyze my own network traffic. I have a wireless router and its clients are both wired and wireless.
On my Kali computer which is connected to the router over Ethernet port and with Promiscuous mode, captured the packets in… Continue reading How to capture wireless packets [closed]
I just did a capture for an SSH transmission. At the bottom of the wireshark window, I see the following…
To open the window to the right, I right clicked the data segment and chose "Show Packet Bytes"
My question is why is th… Continue reading Wireshark – Why is this ASCII data not human readable? [closed]
I have always known that if I am making a purchase or browsing through products online and then later I get onto another device that is connected to my internet service, I will start to see commercials about that product I was browsing for… Continue reading How do stop my internet service provider from reading what apps I have on my devices? [closed]
I have a python code on Linux to create a raw packet:
import socket
s = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_TCP)
s.setsockopt(socket.IPPROTO_IP, socket.IP_HDRINCL, 1)
ip_header = b’\x45\x00\x00\x28′
ip_header +… Continue reading Snort doesn’t capture raw packets