! ' ,-. +) +))+, /+*, 2 01/)*,, 01/)*, + 01/+*, ) 054 +) +++++))+, ) 05,-. /,*+), 01/-*+) + 01/.*+)
|
|
|
- Scot Haynes
- 5 years ago
- Views:
Transcription
1 ! "#! # $
2 %& #! '!!!( &!)'*+' '(,-. +) /,*+), 01/-*+) + 01/.*+) ) 05,-. +))+, /+*, 2 01/)*,, 01/)*, + 01/+*, ) 054 +) +++++))+,3 4 +.
3 6*! ) ) ) ) 5 ) ) ) ) ) ) ) ) ) ) ) + ) 5, ) ) ) + ) ) 5 7 ) + ) ) + + ) 5. ) ) + ) 5 +) /0 + ) / ) ) 5 +, /0 + + ) / ) 5 +7 / /0
4 #: ;! ) 5+*!! * '# &!
5 &< " & #! * /& /& "= ( &6 "0 "=/ 6 "1&6 "0
6 @!! >!!! " %"?! # 0 A# #!! =;>> >BC"
7 C>! C D A# # '# #?@!' % D ;.9! : /0 :
8 :!D >!;D +2D+.D28( ,(+.(,+)( (+2+E &3' --)-8'3+'.7! /)0!
9 ;6 6*!!D ;D +2D,9D)-( ,(+.(,+)( &3' 7.,.'3+ 3+'.7 )*))))D7-))))-7))))7)))7))++.2)+),92 )*))+)D78 -.9)9)) 4,,+,+,)))+, )*)),)D,--) )))9)4)) )) ))+)+++,+2 )*))2)D ,),+,,,2 )*))7)D,7,-,.,8,9,4,,,,,,2)2+2,22 )*))-)D272-6 &6
10 !=:.9 '!.9 A '!! (!!! D G G
11 !6 6 13:47: :50:56:f4:44 4:da > 00:0c:29:98:5d:11, ethertype IPv4 (0x0800), length 98: > : ICMP echo reply, id 2095, seq 1, length 64 0x0000: 000c d f4 44da x0010: efdd 4a7d 5b68 ac10 0x0020: d f e ca49 dd9c 0x0030: a0b 0c0d 0e0f x0040: a1b 1c c1d 1e1f x0050: a2b 2c2d 2e2f Frame Header = 14 bytes IP Header = 20 bytes ICMP Header = 8 bytes2e2f
12 6 " " IPv4 Head der (RFC 791) Byte Offset 0 Byte Offset 1 Byte Offset 2 Byte Offset 3 IP hdr length (4- Version (4-bit) Type of Service (8-bit) Total Length (16-bit) (in Byte Offsets) bit) Byte Offset 4 Byte Offset 5 Byte Offset 6 Byte Offset 7 IP Identification Number (16-bit) Byte Offset 8 Byte Offset 9 Time to Live (8-bit) Protocol (8-bit) Byte Offset 12 Byte Offset 13 R DF MF Fragment Offset (13-bit) Byte Offset 10 Byte Offset 11 Header Checksum (16-bit) Byte Offset 14 Byte Offset By ytes Source IP Address (32-bit) Byte Offset 16 Byte Offset 17 Byte Offset 18 Byte Offset 19 Destination IP Address (32-bit) Byte Offset 20 Byte Offset 21 Byte Offset 22 Byte Offset 23 IP Options (variable.if any) data (variable.) bit IP Header length multiply by 4 to con nvert to bytes 16-bit IP datagram total length 13-bit Fragment offset length multiply by 8 to convert to bytes
13 : /+0 Byte 0 Byte 1 Version 4, IHL 5 ToS 0 0x0000: f4 4a f2b8 ac10 d202 0x0010: ac10 d aaf4 00e0 7d0c 7a6a x0020: x0030: e 2d x0040: c00 01c0 0c00 0c x0050: 0000 Byte 0 contains both Version and Initial Header Length. IP Version Upper Nibble byte 0: 4 IPv4 IHL Lower Nibble byte 0: 5 32-bite wo ords ToS Byte 1: 0 not set
14 6 0x0000: f4 4a f2b8 ac10 d202 0x0010: ac10 d aa af4 00e0 7d0c 7a6a x0020: x0030: e 2d x0040: c c00 01c0 0c00 0c x0050: 0000 IP Header Length = 5 or 5 32-bit words 5*4 bytes = 20 bytes in leng gth Note: Minimum IP Header length is 20 bytes Are there any IP options?
15 ; 0x0000: c9 7f x0010: 7f f d x0020: 0052 ea5d e a IP Header Length = 7 or 7 32-bit words 7*4 bytes = 28 bytes in length Type:8bits = 0x89 = 137 decimal Length:8bits = 07 bytes Pointer:8bits = 08 Route data: variable = Note: Strict source route - RFC 791
16 : /,0 Bytes 2,3 Bytes 4,5 Bytes 6,7 Total Length: 244 bytes Identification Flags, Frags offset 0x0000: f4 4a f2b8 ac10 d202 0x0010: ac10 d aaf4 00e0 7d0c 7a6a x0020: x0030: e 2d x0040: c00 01c0 0c00 0c x0050: 0000 Byte 2,3 Total Length: 0xf4 = 244 bytes Bytes 4,5 IPID: 4a99 Bytes 6,7 IP Flags 3 bits and 13-bit Fragments offset. An example will be shown in slide!"
17 :!" 0x0000: c9 7f x0010: 7f f d x0020: 0052 ea5d e a IP Datagram Length = 30 = 48 bytes in length Note: 2 bytes frame check sum missing from dump
18 ! " 0x0000: c8f 7f x0010: 7f b4c e4a 9e x0020: x0000: c8f 7f x0010: 7f d65 6e74 0x0020: 6564 Bytes 6, 7 offset zero of ip header conta ains: 3 bits flags field - 0x2 = 0010 binary first bit is set meaning More Fragments 13 Fragment offset zero offset meanin ng first fragment Fragment offset length 2 13 = 8192 bytes All possible datagram length 2 16 = 65,536 bytes 65,536 / 8192 = 8 Therefore, fragment offset must be multiplied by 8
19 : /20 Bytes 8 TTL: 128 Byte 9 Embedded Protocol 11 (UDP) 0x0000: f4 4a f2b8 ac10 d202 0x0010: ac10 d aaf4 00e0 7d0c 7a6a x0020: x0030: e 2d x0040: c00 01c0 0c00 0c x0050: 0000 Byte 8 Time To Live: 0x80 = 128 Bytes 9 Embedded Protocol: 0x11 = 17 decimal UDP
20 : /70 Bytes 16,17,18,19 Dest. Address Bytes 10,11 Bytes 12,13,14,15 Checksum Source Address 0x0000: f4 4a f2b8 ac10 d202 0x0010: ac10 d aaf4 00e0 7d0c 7a6a x0020: x0030: e 2d x0040: c00 01c0 0c00 0c x0050: 0000 Byte 10,11 Checksum: f2b8 Bytes 12,13,14,15 Source address = ac10 d Bytes 16,17,18,19 Dest. address = ac c10 d
21 &6 6 TCP Heade er (RFC 793) Byte Offset 0 Byte Offset 1 Byte Offset 2 Byte Offset 3 Source Port Number (16-bit) Destination Port Number (16-bit) Byte Offset 4 Byte Offset 5 Byte Offset 6 Byte Offset 7 Sequence Number (32-bit) Byte Offset 8 Byte Offset 9 Byte Offset 10 Byte Offset 11 Acknowledgement Number (32-bit) 20 Bytes Byte Offset 12 Byte Offset 13 Byte Offset 14 Byte Offset 15 Hdr Length (4-bit) Reserved (4- bit) CWR ECE URG ACK PSH RST SYN FIN Window Size (16-bit) Byte Offset 16 Byte Offset 17 Byte Offset 18 Byte Offset 19 Checksum (16-bit) Urgent Pointer (16-bit) Byte Offset 20 Byte Offset 21 Byte Offset 22 Byte Offset 23 TCP Options (variable.if any) data (variable.)
22 : & & /+0 Bytes 0,1 Bytes 2,3 Src. Port 1061 Dest. Port 0 Bytes 4,5,6,7 Seq. Number x0000: ee e59 7f x0010: 7f dd b112 0x0020: dbb f 6d e 0x0030: 646f 6d a x0040: x0050: 0000 Bytes 0,1 Source Port: Bytes 2,3 Destination Port: 0000 Byte offset 4, length 4 bytes Sequenc ce number: dd
23 &6 " 0x0000: ee e59 7f x0010: 7f dd b112 0x0020: dbb f 6d e 0x0030: 646f 6d a x0040: x0050: 0000 The TCP header length is found in the high-order nibble of the 12 th byte offset in the TCP Header expressed as 32-bit word and must be multiplied by 4 to convert to bytes. Needed to calculate where the TCP header stops, and where data starts.
24 : & & /,0 Offset 12, length 4 bits Offset 13, length 1 Header Length byte, Flags Ack. Number x0000: ee e59 7f x0010: 7f dd b112 0x0020: dbb f 6d e 0x0030: 646f 6d a x0040: x0050: 0000 Window Size Byte offset 8, length 4 bytes Ack. Number: 4030 b Byte offset 12, length 4 bits Header Length: 5 32-bit words Byte offset 13, length 1 byte TCP Fla ags: = PSH, ACK Byte offset 14, length 2 byte Windows Size:
25 &6 " 0x0000: f e66a 7f x0010: 7f a d2d 2e30 da24 0x0020: a ef2e feeb 0x0030: b x0040: f f6e 730a x0050: 0000 TCP Header length = 8 * 4 = 32 Minimum TCP header length = 20 Options length = = 12 starting from 20 th TCP byte offset nop nop 08 Timestamp followed by timestamp - 080a ef2e feeb Padding
26 : & & /20 Offset 16, length 2 bytes Checksum Offset 18, le ength 2 bytes, Urgent Pointer Offset 20, length 96 bytes Data 0x0000: ee e59 7f x0010: 7f dd b112 0x0020: dbb f 6d e 0x0030: 646f 6d a x0040: x0050: 0000 Byte offset 16, length 2 bytes Checksum: dbb Byte offset 18, length 2 bytes Urgent pointer 0000 Byte offset 20, length 96 bytes Data: Some random data + padding. (TCP HL Min. TCP HL) = TCP Options Length (5*4) 20 = 0 NO Options IP TL (IHL + TCP HL) = Payload Length 136 ((5*4) + (5*4)) = 96 bytes - Rest t of padding is not showing/was not captured
27 6 ; " Header Offset Shortcuts Field Length (bits) TCPDUMP Filter IP Header Length 4 ip[0] &0x0F IP Packet Length 16 ip[2:2] IP TTL 8 ip[8] IP Protocol 8 ip[9] D Hex Proto D 1 0x01 ICMP 9 2 0x02 IGMP x06 TCP 47 IP Address - Src 32 ip[12:4] IP Address - Dst 32 ip[16:4] IP Fragmentation flag=3 offset=13 ICMP Type 8 icmp[0] ICMP Code 8 icmp[1] TCP Src Port 16 tcp[0:2] TCP Dst Port 16 tcp[2:2] TCP Header Length 4 tcp[12] &0x0F Notes Remember to use a 4 byte multiplier to find header length in bytes The is no multiple for this length field Hex Proto D Hex Proto 0x09 IGRP 47 0x2F GRE 0x11 UDP 50 0x32 ESP 0x2F GRE 51 0x33 AH ip[6] &0x20 = 0x20 More Fragment bit is set. ip[6:2] &0x1fff!= 0x000 fragment offset in not 0 Remember to use a 4 byte multiplier to find header length in bytes TCP Flags 8 tcp[13] TCP Windows Size 16 tcp[14:2] UDP Src Port 16 udp[0:2] UDP Dst Port 16 udp[2:2] UDP Header Length 16 udp[4:2] The is no multiple for this length field
28 &:A Two different formats to specify 1. Byte displacement <protocol header> [offset t:length] <relation> <value> ip[9] = 6 embedded protocol is TCP tcp[2:2] = 80 destination port is 80 udp[6:2]!= 0 udp chec cksum not zero Icmp[0] = 8 echo packet 2. <macro> <value> dst host port!= ssh ether src MAC net /24 filters:
29 &:A *! Look for all IP packets with TC CP embedded protocol #> tcpdump nnx r <pcap.file> ip[9] = 6 Look for all TCP packets with flags #> tcpdump nnx r <pcap.file> tcp[13]!= 0 Look for all TCP packets with Sync bit only #> tcpdump nnx r <pcap.f file> tcp[13] = 2 Look for all ICMP packets with port unreachable #> tcpdump nnx r <pcap.file> ic cmp[0] = 3 and icmp[1] = 3 Or #> tcpdump nnx r <pcap.file> icmp[0:2] = 0x0303
30 ""!!* '!! (> &?>#! B/%:0!!!" #!$ %& '( CD!! (& BB!H B )*!%+ & 6! (!/@ 0'
31 " & &( '( CD!! 2 (?D@ &!!! 2 ( )*!%, &!
32 " & &( '( CD!! &!!! + *( )*!%, &,! *!G* (
33 " & &( '( CD!! I (J ( G*!D)*!%,, &-!.?DA=!B 3 (!! -! (( )*!%
34 " & &( '( CD!!I I (J (?DA=!B 3 (! & 2294!! ( )*!%++ & 6!
35 " & &( '/( CD: * ( )*))))D7-))))228-47)))7))..-9+),92 )*))+)D79).9-))-)974,).)))))))) )*)),)D)),+. )+))) ))),)7)- 7)7),)9) )*))2)D) )))))))))+)2)2).! D " D "D "& ;> :! #"!#
CIS-331 Exam 2 Fall 2015 Total of 105 Points Version 1
Version 1 1. (20 Points) Given the class A network address 117.0.0.0 will be divided into multiple subnets. a. (5 Points) How many bits will be necessary to address 4,000 subnets? b. (5 Points) What is
CIS-331 Exam 2 Spring 2016 Total of 110 Points Version 1
Version 1 1. (20 Points) Given the class A network address 121.0.0.0 will be divided into multiple subnets. a. (5 Points) How many bits will be necessary to address 8,100 subnets? b. (5 Points) What is
CIS-331 Spring 2016 Exam 1 Name: Total of 109 Points Version 1
Version 1 Instructions Write your name on the exam paper. Write your name and version number on the top of the yellow paper. Answer Question 1 on the exam paper. Answer Questions 2-4 on the yellow paper.
CIS-331 Exam 2 Fall 2014 Total of 105 Points. Version 1
Version 1 1. (20 Points) Given the class A network address 119.0.0.0 will be divided into a maximum of 15,900 subnets. a. (5 Points) How many bits will be necessary to address the 15,900 subnets? b. (5
CIS-331 Fall 2013 Exam 1 Name: Total of 120 Points Version 1
Version 1 1. (24 Points) Show the routing tables for routers A, B, C, and D. Make sure you account for traffic to the Internet. NOTE: Router E should only be used for Internet traffic. Router A Router
Packet Header Formats
A P P E N D I X C Packet Header Formats S nort rules use the protocol type field to distinguish among different protocols. Different header parts in packets are used to determine the type of protocol used
CIS-331 Fall 2014 Exam 1 Name: Total of 109 Points Version 1
Version 1 1. (24 Points) Show the routing tables for routers A, B, C, and D. Make sure you account for traffic to the Internet. Router A Router B Router C Router D Network Next Hop Next Hop Next Hop Next
CIS-331 Final Exam Spring 2018 Total of 120 Points. Version 1
Version 1 Instructions 1. Write your name and version number on the top of the yellow paper and the routing tables sheet. 2. Answer Question 2 on the routing tables sheet. 3. Answer Questions 1, 3, 4,
K2289: Using advanced tcpdump filters
K2289: Using advanced tcpdump filters Non-Diagnostic Original Publication Date: May 17, 2007 Update Date: Sep 21, 2017 Topic Introduction Filtering for packets using specific TCP flags headers Filtering
CIS-331 Final Exam Fall 2015 Total of 120 Points. Version 1
Version 1 1. (25 Points) Given that a frame is formatted as follows: And given that a datagram is formatted as follows: And given that a TCP segment is formatted as follows: Assuming no options are present
EE 610 Part 2: Encapsulation and network utilities
EE 610 Part 2: Encapsulation and network utilities Objective: After this experiment, the students should be able to: i. Understand the format of standard frames and packet headers. Overview: The Open Systems
CIS-331 Final Exam Spring 2015 Total of 115 Points. Version 1
Version 1 1. (25 Points) Given that a frame is formatted as follows: And given that a datagram is formatted as follows: And given that a TCP segment is formatted as follows: Assuming no options are present
CNT5505 Programming Assignment No. 4: Internet Packet Analyzer (This is an individual assignment. It must be implemented in C++ or C)
. CNT5505 Programming Assignment No. 4: Internet Packet Analyzer (This is an individual assignment. It must be implemented in C++ or C) PURPOSE Experience with packet analyzing and Internet packet formats.
ECE4110 Internetwork Programming. Introduction and Overview
ECE4110 Internetwork Programming Introduction and Overview 1 EXAMPLE GENERAL NETWORK ALGORITHM Listen to wire Are signals detected Detect a preamble Yes Read Destination Address No data carrying or noise?
CIS-331 Final Exam Spring 2016 Total of 120 Points. Version 1
Version 1 1. (25 Points) Given that a frame is formatted as follows: And given that a datagram is formatted as follows: And given that a TCP segment is formatted as follows: Assuming no options are present
Course Contents. The TCP/IP protocol Stack
Course Contents PART 1 Overview and Introduction PART 2 Communication Reference Models PART 3 Data Communication Fundamentals and Physical Layer PART 4 Datalink Layer and Emerging Network Technologies
Introduction to TCP/IP networking
Introduction to TCP/IP networking TCP/IP protocol family IP : Internet Protocol UDP : User Datagram Protocol RTP, traceroute TCP : Transmission Control Protocol HTTP, FTP, ssh What is an internet? A set
TCP /IP Fundamentals Mr. Cantu
TCP /IP Fundamentals Mr. Cantu OSI Model and TCP/IP Model Comparison TCP / IP Protocols (Application Layer) The TCP/IP subprotocols listed in this layer are services that support a number of network functions:
Slide 1. TCPDUMP Filters. Can you repeat that please! Mentor Session. NS2001 October 15 th 22 nd 2001 San Diego, California
Slide TCPDUMP 3.6.2 Filters Can you repeat that please! Mentor Session NS2 October 5 th 22 nd 2 San Diego, California Jamie French, GCIA J.French@whitehats.ca www.whitehats.ca Slide 2 Recap What makes
Module : ServerIron ADX Packet Capture
Module : ServerIron ADX Packet Capture Objectives Upon completion of this module, you will be able to: Describe Brocade ServerIron ADX (ADX) Packet Capture feature Configure and verify the Packet Capture
IP : Internet Protocol
1/20 IP : Internet Protocol Surasak Sanguanpong nguan@ku.ac.th http://www.cpe.ku.ac.th/~nguan Last updated: July 30, 1999 Agenda 2/20 IP functions IP header format Routing architecture IP layer 3/20 defines
ECE 358 Project 3 Encapsulation and Network Utilities
ECE 358 Project 3 Encapsulation and Network Utilities Objective: After this project, students are expected to: i. Understand the format of standard frames and packet headers. ii. Use basic network utilities
Layer 4: UDP, TCP, and others. based on Chapter 9 of CompTIA Network+ Exam Guide, 4th ed., Mike Meyers
Layer 4: UDP, TCP, and others based on Chapter 9 of CompTIA Network+ Exam Guide, 4th ed., Mike Meyers Concepts application set transport set High-level, "Application Set" protocols deal only with how handled
Your Name: Your student ID number:
CSC 573 / ECE 573 Internet Protocols October 11, 2005 MID-TERM EXAM Your Name: Your student ID number: Instructions Allowed o A single 8 ½ x11 (front and back) study sheet, containing any info you wish
Veryx ATTEST TM. Sample Test cases Overview. Conformance Test Suite. Internet Protocol version 4 (IPv4) Part Number: T / TCLS IPv /1.
Veryx ATTEST TM Conformance Test Suite Internet Protocol version 4 (IPv4) Sample Test cases Overview Part Number: T / TCLS IPv4 1.0-1110/1.0 This page is intentionally left blank. Introduction The Veryx
Introduction to Internet. Ass. Prof. J.Y. Tigli University of Nice Sophia Antipolis
Introduction to Internet Ass. Prof. J.Y. Tigli University of Nice Sophia Antipolis What about inter-networks communications? Between LANs? Ethernet?? Ethernet Example Similarities and Differences between
The Internet Protocol. IP Addresses Address Resolution Protocol: IP datagram format and forwarding: IP fragmentation and reassembly
The Internet Protocol IP Addresses Address Resolution Protocol: IP datagram format and forwarding: IP fragmentation and reassembly IP Addresses IP Addresses are 32 bit. Written in dotted decimal format:
CHAPTER-2 IP CONCEPTS
CHAPTER-2 IP CONCEPTS Page: 1 IP Concepts IP is a very important protocol in modern internetworking; you can't really comprehend modern networking without a good understanding of IP. Unfortunately, IP
Interconnecting Networks with TCP/IP
Chapter 8 Interconnecting s with TCP/IP 1999, Cisco Systems, Inc. 8-1 Introduction to TCP/IP Internet TCP/IP Early protocol suite Universal 1999, Cisco Systems, Inc. www.cisco.com ICND 8-2 TCP/IP Protocol
Networking Technologies and Applications
Networking Technologies and Applications Rolland Vida BME TMIT Transport Protocols UDP User Datagram Protocol TCP Transport Control Protocol and many others UDP One of the core transport protocols Used
App. App. Master Informatique 1 st year 1 st term. ARes/ComNet Applications (7 points) Anonymous ID: stick number HERE
Master Informatique 1 st year 1 st term Anonymous ID: stick number HERE Master Informatique 1 st year 1 st term App ARes/ComNet 2015-2016 Midterm exam : Version A in English Duration: 2h00 Allowed: One
Protocol Layers & Wireshark TDTS11:COMPUTER NETWORKS AND INTERNET PROTOCOLS
Protocol Layers & Wireshark TDTS11:COMPUTER NETWORKS AND INTERNET PROTOCOLS Mail seban649@student.liu.se Protocol Hi Hi Got the time? 2:00 time TCP connection request TCP connection response Whats
ECE 461 Internetworking Fall Quiz 1
ECE 461 Internetworking Fall 2013 Quiz 1 Instructions (read carefully): The time for this quiz is 50 minutes. This is a closed book and closed notes in-class exam. Non-programmable (Type 2) calculators
CSCI-GA Operating Systems. Networking. Hubertus Franke
CSCI-GA.2250-001 Operating Systems Networking Hubertus Franke frankeh@cs.nyu.edu Source: Ganesh Sittampalam NYU TCP/IP protocol family IP : Internet Protocol UDP : User Datagram Protocol RTP, traceroute
IPv4. Christian Grothoff.
IPv4 christian@grothoff.org http://grothoff.org/christian/ Sites need to be able to interact in one single, universal space. Tim Berners-Lee 1 The Network Layer Transports datagrams from sending to receiving
CS 356: Computer Network Architectures. Lecture 10: IP Fragmentation, ARP, and ICMP. Xiaowei Yang
CS 356: Computer Network Architectures Lecture 10: IP Fragmentation, ARP, and ICMP Xiaowei Yang xwy@cs.duke.edu Overview Homework 2-dimension parity IP fragmentation ARP ICMP Fragmentation and Reassembly
TCPDUMP. Chia-Tien Dan Lo Department of Computer Science and Software Engineering Southern Polytechnic State University
TCPDUMP Chia-Tien Dan Lo Department of Computer Science and Software Engineering Southern Polytechnic State University PURPOSE Dump the content of a packet Analyze network traffic You have to be root to
network security s642 computer security adam everspaugh
network security s642 adam everspaugh ace@cs.wisc.edu computer security today Announcement: HW3 to be released WiFi IP, TCP DoS, DDoS, prevention 802.11 (wifi) STA = station AP = access point BSS = basic
Network Interconnection
Network Interconnection Covers different approaches for ensuring border or perimeter security Computer Networking: A Top Down Approach 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 Lecture
Troubleshooting Communication in WebSphere MQ
IBM Software Group Troubleshooting Communication in WebSphere MQ Rick Armstrong (rickied@us.ibm.com) Advisory Software Engineer 27 October 2010 WebSphere Support Technical Exchange Agenda TCP/IP networking
IPv6 Protocols and Networks Hadassah College Spring 2018 Wireless Dr. Martin Land
IPv6 1 IPv4 & IPv6 Header Comparison IPv4 Header IPv6 Header Ver IHL Type of Service Total Length Ver Traffic Class Flow Label Identification Flags Fragment Offset Payload Length Next Header Hop Limit
How to use IP Tables
How to use IP Tables ******************************************************************* *** IPTABLES TUTORIAL I. Definitions and similarities to ipchains II. Chain types and options III. Command line
Dongsoo S. Kim Electrical and Computer Engineering Indiana U. Purdue U. Indianapolis
Session 8. TCP/IP Dongsoo S. Kim (dskim@iupui.edu) Electrical and Computer Engineering Indiana U. Purdue U. Indianapolis IP Packet 0 4 8 16 19 31 Version IHL Type of Service Total Length Identification
Aruba 8320 Configuring ACLs and Classifier Policies Guide for ArubaOS- CX 10.00
Aruba 8320 Configuring ACLs and Classifier Policies Guide for ArubaOS- CX 10.00 Part Number: 5200-4710a Published: April 2018 Edition: 2 Copyright 2018 Hewlett Packard Enterprise Development LP Notices
4. Specifications and Additional Information
4. Specifications and Additional Information AGX52004-1.0 8B/10B Code This section provides information about the data and control codes for Arria GX devices. Code Notation The 8B/10B data and control
CSE/EE 461 The Network Layer. Application Presentation Session Transport Network Data Link Physical
CSE/EE 461 The Network Layer Application Presentation Session Transport Network Data Link Physical This Lecture Focus: What to do when one wire isn t big enough? Point to point link Broadcast link (Ethernet
Internetworking models
TEL3214 Computer Communication s Lecture 2 Internetworking models SSH (Secure Shell) SNMP (Simple Management Protocol) SMTP (Simple Mail Transfer Protocol) FTP (File Transfer Protocol) TFTP (Trivial File
I TCP 1/2. Internet TA: Connection-oriented (virtual circuit) Connectionless (datagram) (flow control) (congestion control) TCP Connection-oriented
I TCP 1/2 TA: Connection-oriented (virtual circuit) Connectionless (datagram) (flow control) (congestion control) Internet TCP Connection-oriented UDP Connectionless IP + TCP (connection-oriented) (byte
Subnet Masks. Address Boundaries. Address Assignment. Host. Net. Host. Subnet Mask. Non-contiguous masks. To Administrator. Outside the network
Subnet Masks RFCs 917 922 925 (1984) 932 936 940 950 (1985) First major change to IP after RFC791 Net Host Subnet Mask 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Net Bits set indicate net number Bits clear indicate
ECE 435 Network Engineering Lecture 15
ECE 435 Network Engineering Lecture 15 Vince Weaver http://web.eece.maine.edu/~vweaver vincent.weaver@maine.edu 26 October 2016 Announcements HW#5 due HW#6 posted Broadcasts on the MBONE 1 The Transport
IP - The Internet Protocol. Based on the slides of Dr. Jorg Liebeherr, University of Virginia
IP - The Internet Protocol Based on the slides of Dr. Jorg Liebeherr, University of Virginia Orientation IP (Internet Protocol) is a Network Layer Protocol. IP: The waist of the hourglass IP is the waist
App. App. Master Informatique 1 st year 1 st term. ARes/ComNet Applications (6 points) Anonymous ID: stick number HERE
Master Informatique 1 st year 1 st term Anonymous ID: stick number HERE Master Informatique 1 st year 1 st term App ARes/ComNet 2014-2015 Midterm exam : Version A in English Duration: 2h00 Allowed: One
tcp6 v1.2 manual pages
tcp6 v1.2 manual pages Description This tool allows the assessment of IPv6 implementations with respect to a variety of attack vectors based on TCP/IPv6 segments. This tool is part of the IPv6 Toolkit
University of Toronto Faculty of Applied Science and Engineering. Final Exam, December ECE 461: Internetworking Examiner: J.
University of Toronto Faculty of Applied Science and Engineering Final Exam, December 2009 ECE 461: Internetworking Examiner: J. Liebeherr Exam Type: A Calculator: Type 2 There are a total of 10 problems.
CS 465 Networks. Disassembling Datagram Headers
CS 465 Networks Disassembling Datagram Headers School of Computer Science Howard Hughes College of Engineering University of Nevada, Las Vegas (c) Matt Pedersen, 2006 Recall the first 5x4 octets of the
OSI Network Layer. Network Fundamentals Chapter 5. Version Cisco Systems, Inc. All rights reserved. Cisco Public 1
OSI Network Layer Network Fundamentals Chapter 5 Version 4.0 1 Objectives Identify the role of the Network Layer, as it describes communication from one end device to another end device. Examine the most
IPv6. IPv4 & IPv6 Header Comparison. Types of IPv6 Addresses. IPv6 Address Scope. IPv6 Header. IPv4 Header. Link-Local
1 v4 & v6 Header Comparison v6 Ver Time to Live v4 Header IHL Type of Service Identification Protocol Flags Source Address Destination Address Total Length Fragment Offset Header Checksum Ver Traffic Class
The cache is 4-way set associative, with 4-byte blocks, and 16 total lines
Sample Problem 1 Assume the following memory setup: Virtual addresses are 20 bits wide Physical addresses are 15 bits wide The page size if 1KB (2 10 bytes) The TLB is 2-way set associative, with 8 total
Telecom Systems Chae Y. Lee. Contents. Overview. Issues. Addressing ARP. Adapting Datagram Size Notes
Internetworking Contents Overview Functions Issues Basic Delivery Unit Addressing Datagram Delivery ARP IPv4 Header Adapting Datagram Size Notes 2 Overview - Example 3 Direct Delivery 4 Indirect Delivery
Transport: How Applications Communicate
Transport: How Applications Communicate Week 2 Philip Levis 1 7 Layers (or 4) 7. 6. 5. 4. 3. 2. 1. Application Presentation Session Transport Network Link Physical segments packets frames bits/bytes Application
Network Security. Introduction to networks. Radboud University, The Netherlands. Autumn 2015
Network Security Introduction to networks Radboud University, The Netherlands Autumn 2015 What is a (computer) network Definition A computer network is two or more computers that are connected, so that
Trp. Trp. Master Informatique 1 st year 1 st term. ARes/ComNet Transport layer (7 points) Anonymous ID: stick number HERE
Master Informatique 1 st year 1 st term Anonymous ID: stick number HERE Master Informatique 1 st year 1 st term App ARes/ComNet 2015-2016 Midterm exam : Version A in English Duration: 2h00 Allowed: One
Layered Networking and Port Scanning
Layered Networking and Port Scanning David Malone 22nd June 2004 1 IP Header IP a way to phrase information so it gets from one computer to another. IPv4 Header: Version Head Len ToS Total Length 4 bit
3. Provide the routing table of host H located in LAN E, assuming that the host s network interface is called i1. ARes/ComNet
Anonymous number: 3 Provide the routing table of host H located in LAN E, assuming that the host s network interface is called i1 AResComNet 20172018 Rou destination Final exam : Version A in English Rou
TCP = Transmission Control Protocol Connection-oriented protocol Provides a reliable unicast end-to-end byte stream over an unreliable internetwork.
Overview Formats, Data Transfer, etc. Connection Management (modified by Malathi Veeraraghavan) 1 Overview TCP = Transmission Control Protocol Connection-oriented protocol Provides a reliable unicast end-to-end
Networks. an overview. dr. C. P. J. Koymans. Informatics Institute University of Amsterdam. February 4, 2008
Networks an overview dr. C. P. J. Koymans Informatics Institute University of Amsterdam February 4, 2008 dr. C. P. J. Koymans (UvA) Networks February 4, 2008 1 / 53 1 Network modeling Layered networks
Internet Networking recitation #2 IP Checksum, Fragmentation
Internet Networking recitation #2 IP Checksum, Fragmentation Winter Semester 2012, Dept. of Computer Science, Technion 1 IP Header Diagram Ver. IHL TOS Total Length Identification Flags Fragment Offset
Ref: A. Leon Garcia and I. Widjaja, Communication Networks, 2 nd Ed. McGraw Hill, 2006 Latest update of this lecture was on
IP Version 4 (IPv4) Header (Continued) Identification (16 bits): One of the parameters of any network is the maximum transmission unit (MTU) parameter. This parameter specifies the maximum size of the
Sequence Number. Acknowledgment Number. Checksum. Urgent Pointer plus Sequence Number indicates end of some URGENT data in the packet
TCP Urgent Source Port Destination Port Sequence Number Acknowledgment Number HdrLen Reserved UA P RS F Checksum Window Size Urgent Pointer Urgent Pointer plus Sequence Number indicates end of some URGENT
FOCUS on Intrusion Detection: Intrusion Detection Level Analysis of Nmap and Queso Page 1 of 6
FOCUS on Intrusion Detection: Intrusion Detection Level Analysis of Nmap and Queso Page 1 of 6 Intrusion Detection Level Analysis of Nmap and Queso by Toby Miller last updated Wednesday, August 30, 2000
Muhammad Farooq-i-Azam CHASE-2006 Lahore
Muhammad Farooq-i-Azam CHASE-2006 Lahore Overview Theory Existing Sniffers in action Switched Environment ARP Protocol and Exploitation Develop it yourself 2 Network Traffic Computers and network devices
Elements of Networks
Elements of Networks CS342, Lecture 7 Tuesday, Sept. 26 th, 2006 Wellesley College Daniel Bilar 9/26/2006 1 Today s class goals Introduction to networks (structure, addressing, protocols) Familiarity with
Computer Networks A Simple Network Analyzer PART A undergraduates and graduates PART B graduate students only
Computer Networks A Simple Network Analyzer PART A undergraduates and graduates PART B graduate students only Objectives The main objective of this assignment is to gain an understanding of network activities
Computer Networks. Transmission Control Protocol. Jianping Pan Spring /3/17 CSC361 1
Computer Networks Transmission Control Protocol Jianping Pan Spring 2017 2/3/17 CSC361 1 https://connex.csc.uvic.ca/portal NSERC USRA awards available at UVic CSc for 2017/18 2/3/17 CSC361 2 TCP Transmission
CompSci 356: Computer Network Architectures. Lecture 8: Spanning Tree Algorithm and Basic Internetworking Ch & 3.2. Xiaowei Yang
CompSci 356: Computer Network Architectures Lecture 8: Spanning Tree Algorithm and Basic Internetworking Ch 3.1.5 & 3.2 Xiaowei Yang xwy@cs.duke.edu Review Past lectures Single link networks Point-to-point,
Transport Over IP. CSCI 690 Michael Hutt New York Institute of Technology
Transport Over IP CSCI 690 Michael Hutt New York Institute of Technology Transport Over IP What is a transport protocol? Choosing to use a transport protocol Ports and Addresses Datagrams UDP What is a
Sirindhorn International Institute of Technology Thammasat University
Name.............................. ID............... Section...... Seat No...... Thammasat University Final Exam: Semester, 205 Course Title: Introduction to Data Communications Instructor: Steven Gordon
Transport Layer. <protocol, local-addr,local-port,foreign-addr,foreign-port> ϒ Client uses ephemeral ports /10 Joseph Cordina 2005
Transport Layer For a connection on a host (single IP address), there exist many entry points through which there may be many-to-many connections. These are called ports. A port is a 16-bit number used
ELEC / COMP 177 Fall Some slides from Kurose and Ross, Computer Networking, 5 th Edition
ELEC / COMP 177 Fall 2011 Some slides from Kurose and Ross, Computer Networking, 5 th Edition One of the core protocols in the Internet Primarily used to communicate errors among routers and hosts IP datagram
Network and Security: Introduction
Network and Security: Introduction Seungwon Shin KAIST Some slides are from Dr. Srinivasan Seshan Some slides are from Dr. Nick Mckeown Network Overview Computer Network Definition A computer network or
TSIN02 - Internetworking
Lecture 4: Outline Literature: Lecture 4: Transport Layer Forouzan: ch 11-12 RFC? Transport layer introduction UDP TCP 2004 Image Coding Group, Linköpings Universitet 2 The Transport Layer Transport layer
CS519: Computer Networks. Lecture 2: Feb 2, 2004 IP (Internet Protocol)
: Computer Networks Lecture 2: Feb 2, 2004 IP (Internet Protocol) A hypothetical service You want a mail delivery service You have two choices: Acme Guaranteed Mail Delivery Service We never fail Rocko
Chapter 7. The Transport Layer
Chapter 7 The Transport Layer 1 2 3 4 5 6 7 8 9 10 11 Addressing TSAPs, NSAPs and transport connections. 12 For rarely used processes, the initial connection protocol is used. A special process server,
Packet Capturing with TCPDUMP command in Linux
Packet Capturing with TCPDUMP command in Linux In this tutorial we will be looking into a very well known tool in Linux system administrators tool box. Some times during troubleshooting this tool proves
Access List Commands
Access List Commands This module describes the Cisco IOS XR software commands used to configure IP Version 4 (IPv4) and IP Version 6 (IPv6) access lists. An access control list (ACL) consists of one or
Access List Commands
This chapter describes the Cisco IOS XR software commands used to configure IP Version 4 (IPv4) and IP Version 6 (IPv6) access lists on Cisco ASR 9000 Series Aggregation Services Routers. An access control
Configuring IPv6 ACLs
CHAPTER 37 When the Cisco ME 3400 Ethernet Access switch is running the metro IP access image, you can filter IP Version 6 (IPv6) traffic by creating IPv6 access control lists (ACLs) and applying them
Transport Protocols. Raj Jain. Washington University in St. Louis
Transport Protocols Raj Jain Washington University Saint Louis, MO 63131 Jain@cse.wustl.edu These slides are available on-line at: http://www.cse.wustl.edu/~jain/cse473-05/ 16-1 Overview q TCP q Key features
Technical Specification. Third Party Control Protocol. AV Revolution
Technical Specification Third Party Control Protocol AV Revolution Document AM-TS-120308 Version 1.0 Page 1 of 31 DOCUMENT DETAILS Document Title: Technical Specification, Third Party Control Protocol,
Access List Commands
Access List Commands This module describes the Cisco IOS XR software commands used to configure IP Version 4 (IPv4) and IP Version 6 (IPv6) access lists. An access control list (ACL) consists of one or
TSIN02 - Internetworking
Lecture 2: Internet Protocol Literature: Forouzan: ch (4-6), 7-9 and ch 31 2004 Image Coding Group, Linköpings Universitet Lecture 2: IP Goals: Understand the benefits Understand the architecture IPv4
TCP/IP and the OSI Model
TCP/IP BASICS TCP/IP and the OSI Model TCP/IP BASICS The network protocol of the Internet Composed of six main protocols IP Internet Protocol UDP User Datagram Protocol TCP Transmission Control Protocol
A quick theorical introduction to network scanning. 23rd November 2005
A quick theorical introduction to network ASBL CSRRT-LU (Computer Security Research and Response Team Luxembourg) http://www.csrrt.org/ 23rd November 2005 IP protocol ACK Network is not exact science When
Internet Control Message Protocol (ICMP), RFC 792. Prof. Lin Weiguo Copyleft 2009~2017, School of Computing, CUC
Internet Control Message Protocol (ICMP), RFC 79 Prof Lin Weiguo Copyleft 009~07, School of Computing, CUC Oct 07 Overview } The IP (Internet Protocol) relies on several other protocols to perform necessary
CS Lecture 1 Review of Basic Protocols
CS 557 - Lecture 1 Review of Basic Protocols IP - RFC 791, 1981 TCP - RFC 793, 1981 Spring 2013 These slides are a combination of two great sources: Kurose and Ross Textbook slides Steve Deering IETF Plenary
Chapter 5 OSI Network Layer
Chapter 5 OSI Network Layer The protocols of the OSI model Network layer specify addressing and processes that enable Transport layer data to be packaged and transported. The Network layer encapsulation
SSC-D02 HOMEWORK 2. Jean-Yves Le Boudec. November 6, 2002
SSC-D02 HOMEWORK 2 Jean-Yves Le Boudec November 6, 2002 Exercise 1 You need to log on to a UNIX machine for this exercise. You may have to use the UNIX commands: traceroute, arp, ping, ifconfig, nslookup,
with
Version 3 Page Topic/Header ------------------------------------- 2 2.1 3 Ethernet II 4 ARP 5 IP 6 ICMP 7 UDP TCP 9 RIPv1 1 RIPv2 11 RIP authentication 12 EIGRP 13 EIGRP TLVs 14-25 OSPFv2 25-end OSPFv3
Communication Systems DHCP
Communication Systems DHCP Computer Science Copyright Warning This lecture is already stolen If you copy it please ask the author Prof. Dr. Gerhard Schneider like I did 2 Internet Protocol the Universal
Computer Networking: A Top Down Approach Featuring the. Computer Networks with Internet Technology, William
Dr. John Keeney 3BA33 TCP/IP protocol architecture with IP OSI Model Layers TCP/IP Protocol Architecture Layers TCP/IP Protocol Suite Application Layer Application Layer Telnet FTP HTTP DNS RIPng SNMP