Answered: Explain what this rule does: alert tcp…

Explain what this rule does: alert tcp any any -> 192.168.1.0/24 80 (content:”|A1 CC 35 87|”; msg:”accessing port 80 on local”).

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Using the following snort rule as a model, write a rule that would detect all the packets shown (1-6): alert tcp any any -> any 80 (msg:"LOCAL my message"; content:"my content"; nocase; sid:1000110; rev:1;) Write a rule which will match all the following: 1. 64.12.10.32:8437 -> 204.126.133.22:80 GET /admin/scripts/setup.php 2. 64.12.10.47:8435 -> 204.126.133.22:80 GET /phpAdmin/Setup.php 3. 64.12.10.2:8439 -> 204.126.133.22:80 GET /php2-1- 10/siteadmin/login.php 4. 64.12.10.18:2173 -> 204.126.133.23:80 POST /admin/scripts/setup.php 5. 64.12.11.2:2174 -> 204.126.133.23:80 GET /php2-1- 10/admin/main/setup.php 6. 64.12.11.2:2176 -> 204.126.133.23:80 GET /ADMIN/PHP/SCRIPTS/login.ph e p Note: Full points are given only if your rule is precise and doesn't generate a lots of false positives. Answer:
Breakdown each part of the following rules and tell what each segment does iptables -t filter -A INPUT -s 221.98.146.40 -j DROP i. What would happen here if we omitted the ‘-t filter’option? iptables -A INPUT -p tcp --dport ssh -j DROP c. iptables -A INPUT -p udp --dport ftp -j REJECT d. iptables -A INPUT -p tcp --dport 443 -j ACCEPT e. iptables -A INPUT -m iprange --src-range 192.168.40.25-192.168.40.35 -j DROP
I made a TCP server using socket python,basically my server can: - Upload (“put”) request: The client should, at the very least, open (in binary mode) the local file defined on the command line, read its data, send it to the server through the socket, and finally close the connection. - Download (“get”) request: The client should, at the very least, create the local file defined on the command line (in exclusive binary mode), read the data sent by the server, store it in the file, and finally close the connection. To avoid accidents, the client should deny overwriting existing files. - Listing (“list”) request: the client should, at the very least, send an appropriate request message, receive the listing from the server, print it on the screen one file per line, and finally close the connection. I want you to draw an ER diagram that can show the process above please.
Write a Java UDP socket program that would send a simple “Hello World” message to are ceiver using DatagramSocket and DatagramPacket. You have to write only the sender program and assume that the receiver program runs in the same system.
You are supposed write two separate TCP socket programs that implements both Client/Server parts of a communication such that Client will send two integers and Server will reply with the sum of those integers. In your programs you should clearly indicate the header files that are used Using a suitable diagram, Briefly explain how the two programs communicate with each other?
Q.3 In network programming, structs are often used to represent protocol headers due to their ability to neatly encapsulate various types of data. (a) Define a struct named ProtocolHeader with the following fields to mimic a network protocol header: " version (unsigned integer, 4 bits) IHL (Internet Header Length, unsigned integer, 4 bits) typeOfService (unsigned integer, 8 bits) totalLength (unsigned integer, 16 bits) identification (unsigned integer, 16 bits) flags (unsigned integer, 3 bits) fragmentOffset (unsigned integer, 13 bits) timeToLive (unsigned integer, 8 bits) protocol (unsigned integer, 8 bits) headerChecksum (unsigned integer, 16 bits)
Read the manual page of arp command, give the complete command line to add an entry to ARP table for network interface eth1 that maps IP address 192.168.2.45 to MAC address 08:01:23:b2:a0:9d, and then the complete command line to delete this entry.
C Programming: Write a program that optionally accepts an address and a port from the command line. If there is no address and port on the command line, it should create a TCP socket and print the address (i.e. server mode). You can choose any port number for your server (>1024). If there is an address and port, it should connect to it (i.e., client mode). Once the connections are set up, each side should enter a loop of receive, print what it received, then send a message. The ping from the client should be sent before entering that loop to start the process. Otherwise both sides will sit and listen without getting anything. The message should be ping from the client and a pong from the server. In order to test this on one machine, you will need to run the same program twice (in two separate terminals). Run first in server mode, then run in client mode using the information printed from the server as your command line arguments. This is the output it must print out: Running…
please
import socket def authenticate_user(tcp_socket): while True: response = tcp_socket.recv(1024).decode() print(response) username = input() tcp_socket.sendall(username.encode()) response = tcp_socket.recv(1024).decode() print(response) password = input() tcp_socket.sendall(password.encode()) auth_response = tcp_socket.recv(1024).decode() if "successful" in auth_response: print(auth_response) return True else: print(auth_response) def receive_items(tcp_socket): while True: response = tcp_socket.recv(1024).decode() if "Item List:" in response: print(response) while True: item = tcp_socket.recv(1024).decode() if not item.strip(): break print(item) break def select_items(tcp_socket): selected_items = [] while True: item_id = input("Select item by entering…