Hello folks. Welcome to section. Town Hall
ability, audits.
And this video that is first video section 10. I'm going
to talk about tracing the packets and
actually is a very good topic and is going to be very helpful for
you in your Justice in your world. And actually maybe
personal Journey.
We have to question here. They may want to face in
your mind. How do we Trace
packets? And actually what we need? Exactly.
So choosing the packet is
one of the most things in a security words. Because for
example, we talked about them a lot because it is the main things.
I be teaching this course, so we'll be using nmap.
We tracing and trading
sending getting the packets we
get information.
We had a packet to ascend a Commons trying
to execute them and then
descend Packers that are. If you remember in
the previous sections, sometimes we Face of the file will tell
which side we switches do. Try to,
you know.
Get over the firewall or sometime. We use the pink
a scanning. I do we do not to trace any
leaving a trace. So why is
exactly what I'm talking about? The packet spreaded are
important music. Your tea wardens, all about packets. So,
how do we trust back? If there is a not very good
application? Wireshark that the use for monitoring monitoring
or entering everybody, stay calm to
rivers or personal devices.
And there's also lots of
the monitoring is and networking Mentor is tools and
you can use. But we're going to use a version of is one
of them famous one. So it actually is the use and as a user
from, you want to start with that one, trying to help get over
it. Installation is easy and how
to use it. Actually the most important thing but
it's real actual good and helpful application use. So
let's go to the
scenarios. I'm going to show you how
It works in that case again. You'll understand better. Let's
go draw that.
But this time, I'm going to our Windows machine.
You have to change the environment. Actually can
install it on your Linux and your Windows machine, anything
you want, if they were a little football table. So
here's the wire sharks and the like this.
And if you want to know how to download it, just to
show you how to download exactly where we're going to the water park.
There's a Wireshark there is what
I meant.
Go deep pleasure and his Wikipedia fit.
So as we know far from here, one shot is
free open source, and actually super easily into the issue and
pay for it to analyze. The packets and
data is in the network.
All right, so we can see you hit the download button and
it's going to start downloading. So I'll install the downloaded. So
I'm just going to hit the start, click on it.
We also and map them, a there, introduce you
later previous wheel. Sorry, so,
let me click on ads trying to know loading
the selves and then when it's loading
is going to show you.
Few interfaces so many Wonder. Okay, which one should
I choose? What is it? Exactly? So we introduced
that the conflict.
Dashiell comfortable.
So we know that our network adapter
is a term at 20 or 80,
80. So when we conquer water
masks, which one you want to choose, There Is Us Eternal
0 - click
on it and a way to
Wireshark, load, the packets. So
as you can see, starch analyzing
the packets that are in
our Network. See well, so let's explain step-by-step.
First, we have with time here.
This is not very important, but it's good to know.
We have the source here and we have in the session. Where
is the exactly Source. The place that packets sent
in by and destination is the place that you receive it.
So sometimes you machine or sometimes is
your target or some website or some other devices
in the network. So you can see here. We
have a source of fascination with IP addresses here.
So what is our IP address? And see this
is our IP address?
225.
Theory 0. Okay. This is a ripe.
So and is this nation sometimes we
were dissension and someone send you some packets. So
another thing. See you have is a portable. It's very important.
So we can see which Portugal and how
it's used and in the wheel, which protocol is received
packet or send it back sometimes TCP sometimes.
We have DNS. See
we have some from the Ennis as you can see
her and probably. Yeah, obviously, these are network we
are type ears are on the same network. So it's
using the answer.
With my default.
Or manual configuration. So we have inspectors here.
And then we have something called length. That is
that sort of baggage. I'm going to talk about it later. I want, will
you an example and we have the info of the package? See?
It's package, of course, have an info and it
has some around here and we
can't see that. Okay, we have an ack packet here. We have a snack package
here. We have something like alright,
we over try to broadcast and tell
who was this IP and tell the
router. See. This is our
Router IP address. We Vicky IP and
this all happens, all the things that happen
in our network, but let's
Governor exam.
There is a little box here. Take a pic Terrier.
Analyze our results. For example, you can type http.
It didn't turn to acknowledge to Rebecca's yet. That's
great. So I just want to show you some example, for
example, that's something that we usually face
to its liquid page of the simile.
Okay.
So, I'm going to Ping our website here.
Ping but before that, as we know,
icmp protocol is a for the pink, so
I'm going to hit the icmp.
Filter and hit the filters. So
wait for the result of your from going to peace is
you can see the website for nothing. Cancel that
order.
All right, waiting for the results. See, as
soon as possible. I will get a result in the
CMD or compound. We had resolved in
the water sugar as well. So let's check out. We
have the source here, which is where IP address. And
we have the sensation, which is the easy Council website,
IP address. It seems on packet into
it, and I called ping request. And
then,
It's back to us. We are applied at. Yes.
We had a connection and here's a package.
As you can see here, really interesting, right? So
let's look about the lens. If you click on
each packet here.
And see some information about it. For example, in
a frame. We have some information on it, interfaces ID.
Then we have arrival time. We have a
good time and we have frame a frame length. So
about a friendly.
Sometimes we have something like at pinging
something or I don't know anything that could
be possible, something like this. We have something left
that tell us how big is a packet. So
as you can see, sir, so in four bytes, so it's
actually nothing compared to
other packets. So we can see here is not something
big deal. But sometimes we Face to
a large B there,
we can find out here around.
Decide that oh, this is a large packets and
then you may want to be so special packet. Try
to stop it. Try to find out. Is it a
trusted resource? Am I? Nothing is happening? Different not could
be malicious packets, but sending to your computer or
someone trying to attacking your
computer or server, actually, or network. Let's
close it. Let's go to next option.
We have Internet.
Sr cs10 for Source, swimmer
and destination.
The third one, we have to wear them for IP version 4, and
the header length and
All the information on packets securing, the minor is
against, he's kinda encryption or
packet. We have the protocol here for
sure, and source and IP address. And
we have an integer to control message protocol. We
have a new fire, the TTL that
we have here. That's time to leave is time for trying
to leave and we have the data.
This was from each packets. So
let's check out the options. We have some sort of like file here.
The same as the other applications. Edit open save, if
you click this button, it's going to stop.
Forking and you have no control and
catatonic analyze it without having a meal packets.
Here, adding new results here.
We have an edit option.
We can use a fine packet with a Ctrl F actually and
trying to find a specific package. You want then?
Of course, we have something like
find next one. Previous ignore
some packets. If you want. You can just, for
example, if you want to have a, you know, I have a organizer
shop for your network. You can ignore
the ICP package to the show,
you all those a package, that's have a little
small lens. That doesn't put
For you.
Indigo on the wheel. We have there who you have to worry once,
see exactly. Here. We have Indigo or packets.
Actually have something important here to capture. If
you click on a capture feature, we can see some captures here.
There's very important for us, you can add or delete any.
Filter you want, for example, as I said some filters are
some packets are doesn't really important for you. You
don't want our more organized. Why? Sure you don't want
to deal with the lots of package each time each seconds and come
into your network and try to help the loan. It's crazy. So
for having, you know, better experience with
that. You may want to filter your Wireshark. It's have a
very experienced promise me.
I'm gonna do that.
We have analyzed, you can analyze each winter here
or the quite a bit and actually falls on Packers. Here.
We have Statics.
We have wireless, we have tools and that's all. So
we don't want to get into it a lot because it's not
exactly a Tropic, but it's very important to know what's happening.
You know, I don't work when you, you know, sending packets
trying to find information from a website, trying to get
information from it. This is actually what's happening. Now,
we know that was happening in the packets. I
maybe should tell that to her, but actually it's good to,
you know, now because it's sometimes, maybe
be confident that some people doesn't.
No, why don't you do it? Exactly. So let's go back to our slides. All
right, so we have a quick brief on a packet. So I win a
date. How we're gonna do that? Explain the tools for some
comments here and the Tule, how its works with it,
and actually see a little bit scenario and exponent, how
to find out which particle, and which package I'm
going to use for it and how to analyze the packets.
Next video, I'm going to talk about what are the firewall or
ideas through the actual importance. Because
we talked about how do you know, when we faced firewalls
in and Maps or actually, it's good to know. What is
far all. I designed it scored on how it's going to work Declan,
an extra pair website. So see you and good
luck.