Collaborate Disseminate
I am new to networking and packet sniffing. I have wireshark installed on my ubuntu machine. I am capturing packets but they all have 802.11 as protocol and Broadcast destination. I have enabled promiscuous mode and I set my … Continue reading Why Do All Captured Packets Have 802.11 Protocol and Broadcast Destination? [closed]
I am currently trying to setup my own little SIEM, but cannot seem to transfer the files how I want them.
I am capturing the data with tshark:
tshark -i eth0 -T ek > cap.pcap.json
This outputs a json file that is suit… Continue reading How to import json (pcap) data from TShark to Elasticsearch and Kibana [closed]
The only two posts I could find that are related are this one and this one, but unfortunately, they didn’t receive many answers and googling it I wasn’t able to make some order in my mind.
What I would like to do is make my … Continue reading How to program my own OS fingerprinter [on hold]
My question relates to this question: How does Google know where I am? and ask a similar question to this (but that accepted answer doesn’t pertain to BSSIDs).
The chosen answer in my first linked question describes a large … Continue reading How far is my Access Point BSSID sent in my internet packets?
I know that the
EPC consists of Mobile management entity which is the control
plane element allowing user plane traffic to bypass over a direct
tunnel
I searched online but couldn’t understand.
Can someone please e… Continue reading Evolved Packet Core elements
I was able to find the Teardrop Attack.
However, there is another one but I couldn’t explain it. It keeps getting the warning: Source MAC must not be a group address. Is this some sort of ARP spoofing to steal data?
The capture file if needed
There is supposed to be abnormal behaviour here, and I see that there is. But I can’t figure out what it is.
There is no response from the ICMP requests. Furthermore some packets have the warni… Continue reading I can’t figure out the abnormal behaviour from this Wireshark capture file
How do I run a successful DoS attack? This is one of the most simple attacks out there, and yet I have no idea how to perform one.
From what I understand, when you send a network IP packets of bytes, it breaks down the pack… Continue reading What are the steps necessary to perform a Denial of Service (DoS) attack, assuming i have someones IP?
I have an old server (Windows Server 2003) that has a few externally visable services. Recently, I started collecting PCAP data through this machine and noticed a 500+ second GRE session from a suspicious IP address that invo… Continue reading How to decrypt captured GRE sessions
Situation: I am trying to intercept TCP (not HTTP) traffic on a Windows machine using Python. I am posting this question as most answers I was able to find teaches how to sniff traffic.
Normal operation:-
Machine A ===> M… Continue reading Intercept TCP traffic using Python