Network Packet Analysis and some tools - Wireshark, TCPdump, ettercap, Cain & Abel, Carnivore

Опубликовано: 04 Октябрь 2024
на канале: Cloud Security Training & Consulting
310
3

Network Packet Analysis: What is it and some tools - Wireshark, TCPdump, ettercap, Cain and Abel, Carnivore, Nurusinsight, dSniff, Network Monitor

Packet Analysis:
A process by which one can analyze network packets to review packet characteristics, encapsulation and flow.
Packet analysis can be in two modes:
Live mode - real time packet capture and analysis
Analysis of per-captured packet

sniffers:
Cain and Abel - effective tools for cracking passwords; can sniff the network to voice-over IP conversations and uncovering cached passwords; optimized for Windows use

Carnivore - https://www.historyofinformation.com/...
NarusInsight - Replaced Carnivore later, used by FBI https://www.historyofinformation.com/... - can monitor all internet traffic

dSniff - collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.) https://www.monkey.org/~dugsong/dsniff/

Ettercap - Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections https://www.ettercap-project.org/down...

TCPdump - command line based protocol analyzer https://www.tcpdump.org/index.html

Wireshark - Probably most well known tool for packet capture today. Open source and free.

Network Monitor - Windows based tool, can be used for packet capture https://www.microsoft.com/en-us/downl...