ITM-301 Lab 5 Fall 2023

#10

Select the FALSE statements as shown below: i) Two distinct Web pages (e.g., www.uthm.edu.my/research.html and www.uthm.edu.my/students.html) can be sent over the same persistent connection. ii) With non-persistent connections between browser and origin server, it is possible for a single TCP segment to carry two distinct HTTP request messages. iii) The Date: header in the HTTP response message indicates when the object in the response was last modified. iv) HTTP response messages never have an empty message body. a) i, ii, and iii b) i, ii, and iv c) i, iii, and iv d) ii, iii, and iv

16

Q1 aciq

Q10/ write True or False answer for the following statements. Correct the false statements 1. DHCP allow host to statically obtain its IP address from network server when it joins network. 2. IPV6 addresses are 32 bits, while IPV4 addresses are 128 bits. 3. IPsec is standard for IP network security, available for both IPV4 and IPV6. 4. IPSec helps to create authenticated and confidential packets for the transport layer 5. ICMP does not attempt to make IP a reliable protocol. it simply attempts to report errors and provide feedback on specific condition.

CSE2A Eighth Question

-Ans please fast

Write a snort rule to generate an alert for the following: search for the word “HTTP” in the first 20bytes of the payload of a packet that is originating in subnet (192.168.34.0/24) and going toyour subnet (192.168.56.0/24). The alert should read: “HTTP detected”. Could you please also include the nmap command used to scan the target?

b) Please continue to fill the next blank below to display all the IP addresses as shown below $last -i| grep "ics325" | grep "Apr 18" | 21 22 96.78.91.134 96.78.91.134 24.131.154.199 107.4.210.159 71.82.136.152 71.82.136.152 107.4.210.159 107,4.210.159

Q10: Complete the frames (x & y) given below with appropriate port, IP and MAC addresses. The sender Host E has two applications running; one for email with port number 49254 and the other for accessing the web server with port number 52167. The frame x is intended for the BRACU Web server and frame y is coming from the Email Server. (MAC addresses are alphabets and IP addresses are numbers) Port 80 BRACU Web Frame x Server A/20 B/21 Frame X D. Mac Frame Y D. Mac Switch-PT Switcho C/22 S. MAC S. MAC BRACU G/51, Router F/25 Frame y Switch-P Switch1 D/23 D. IP D. IP ISP Router 1/91 H/52 E/24 Sender S. IP S. IP Hub-PT Hubo D. Port D. Port K/93 Port 25 Email Server 3/92 S. Port S. Port Data Data Trailer Trailer

Please written by computer source Write a Snort rule to detect a connection attempt on the telnet server which has an IP address 192.168.32.129 and generate alerts for packets with content ‘Telnet!’ directed to the server.

The given IPV6 subnet address is 2001:0DA7:FF00:FAF8: :/64. • Use the above IPV6 address for Subnet 0. • Increment the subnet field by 1 and find the IPV6 address for the remaining subnets. • Write simplified IPV6 address. Subnet IPV6 network address (Write simplified IPV6 address) Number 1 3. Complete the 2 following IPV6 addressing table 3 using IPV6 subnetting. Follow the instructions given below and write the IPV6 address in the table.

2

Accomplish the following tasks involving SNORT rules: Add an appropriate rule options part to the following rule headeralert udp any any  any 53 Add an appropriate rule header to the following rule options part(msg:”possible HTTP GET request”; sid:xxxxx; rev:y;) Write a complete rule header and rule options to detect an FTP connection attempt. Explain what the following rule does.alert tcp $HOME_NET 21  any any (msg:"FTP failed login";content:"Login or password incorrect"; sid:xxxxx; rev:y;)

Using tcpdump,read the packets from tcpdump.pcap and filter packets to include ip address 184.107.41.72 and port 80 only. Write these packets to a new file and md5sum that file. what is the md5sum shown?

Complete the frames (x & y) given below with appropriate port, IP and MAC addresses. The sender Host E has two applications running; one for email with port number 49254 and the other for accessing the web server with port number 52167. The frame x is intended for the BRACU Web server and frame y is coming from the Email Server. (MAC addresses are alphabets and IP addresses are numbers) Port 80 Frame y K/93 BRACU Web Frame x Server BRACU G/51 Router ISP Router I/91 Port 25 H/52 F/25 Hub-PT Hubo A/20 Switc-PT Switho Swich-P Syitch1 Enail Server J/92 B/21 E/24 C/22 D/23 Sender

Question 6 sm.Full explain this question and text typing work only     We should answer our question within 2 hours takes more time then we will reduce Rating Dont ignore this line

end network should be "192.168.128.0", its routes disappears after R1

Create a Client/Server using DatagramSocket and DatagramPacket Programming and using RSA (2048) as encryption algorithm. A client and a server. The server receives the encrypted datagram packet over a datagram socket. The client should ask the user to enter the 12-digit number, and then send the encrypted credit number to the server. The datagram packet received by the server should be decrypted and display the unencrypted credit card number to the server screen. When the server receives a datagram, it replies by sending a datagram packet that contains a one-line "received with thanks" back to the client. Note: The key/s should be generated, use the appropriate class to generate the key. Use the IPv4 loopback

A browser sends an HTTP request to a web server on port 80. One line of the request is "GET / HTTP/1.1". Explain the purpose of the request,and describe the process that will be used to prepare the response. It is not necessary to show actual content of the HTTP response.

4.3-3. What is an IP address actually associated with? Which of the following statements is true regarding an IP address? (Zero, one or more of the following statements is true). O It is not necessary for a device using the IP protocol to actually have an IP address associated with it. If a router has more than one interface, then it has more that one IP address at which it can be reached. An IP address is associated with an interface. If a host has more than one interface, then it has more that one IP address at which it can be reached.

Task 2: Access Control Lists You will need to work out which interface on which router this needs to be applied to. Each ACL must work and be seen to work.  Stop any IP address from 10.0.0.128 to 10.0.0.191 from pinging 123.123.123.123 - yet allow all other addresses   Creating an ACL that meets the above 'selected' criteria Proving that a change of IP address, other than those allocated to the PC's also demonstrates the operation of the ACL. Also prove that you are still able to ping to 99.0.0.2 irrespective of device IP address

Q1) Refer to the exhibit. NAT is configured on Remote and Main. The PC is sending a request to the web server. What IPv4 address is the source IP address in the packet between Main and the web server? * S000 208.185.200 226 GO 1721611 Bc Web Server inside Local 172.16.1.10 Inside Locat 10.1305.76 inside Global 20301135 Inside Global 209165 200 245 17216.1.10 209.165.200.245 192021 0000 203.0.113.5

Find the first address, last address and the number of addresses of a network whose one of the IP addresses is 12.28.22.12 / 25.      Please Solve it briefly with one by one steps

Assume that a national ISP is assigned an IPv4 block which starts with 132.56.40.0/16 and creates 4 subblocks to be assigned to 4 local ISPs. What will be the /n value for local ISPs?

For the given IP address "195.10.10.01" write down it's subnet mask.