usrportsdevelp5-Curses-UI.pptVIP

Network AdministrationHomework1 Perl Programming Exercises Analysis Ethereal Output (1) Ethereal A tool that can be used to analysis network traffic passed through your network interface Analysis Ethereal Output (2) Network Monitoring Turn on the “promiscuous mode” of your NIC Normal mode NIC will collect those packets that destined to your computer That is, destination IP = My IP / Broadcast IP Otherwise, NIC will drop it. Promiscuous mode NIC will collect “all” packets Turning on the promiscuous mode needs Root privilege Tools that can do this: tcpdump, ssldump, Ethereal Analysis Ethereal Output (3) To install ethereal, you can use this URL: /download.html Download and execute it To begin monitoring your network, you can: Ctrl + K Choose your interface Specify filter Man tcpdump Ex: Host dst port 22 Check Update list of packets in real time Start capture Analysis Ethereal Output (4) After you have captured packets Spend some time to investigate the content of each packet Frame header IP header TCP/UDP header Application data Analysis Ethereal Output (5) Purpose of this first exercise: Learn how to use ethereal Learn how to use ethereal to inspect TCP/IP that we have taught Learn how to use Perl built-in function “pack” and “unpack” Learn how to use Perl Curses::UI CPAN Works you have to do in this exercise Install and user ethereal Install /usr/ports/devel/p5-Curses-UI Spend some time to investigate packets content that you have captured How TCP/IP headers looks like Write a Perl script that satisfies those requirements in next slide Analysis Ethereal Output (6) Requirements of the first exercise Input: One Ethereal output Output: One curses window that lists packets found in Ethereal-output file Each line represents one packet Each line should have the following fields SrcMac: Source MAC of that packet DstMac: destination MAC of that packet SrcIP: Source IP of that packet DstIP: destination IP of that packet SrcPort: source port of that packet DstP