Southern New Hampshire University CYB 310 Module Three Lab Worksheet Complete this worksheet by replacing the bracketed phrases in the Response column with the relevant information. Lab: Performing a Denial-of-Service Attack From the WAN Prompt In the lab section, "TCP Flood," Step 11, include your name after the command prompt and take a screenshot of your name with the output from running the tcpdump command. Response Applications Places -Terminal Sun 20:35 root@kali2: ~ O File Edit View Search Terminal Help RX bytes : 28132 (27.4 KiB) TX bytes : 10106 (9.8 KiB) lo Link encap:Local Loopback inet addr : 127. 0. 0.1 Mask : 255. 0.0.0 inet6 addr: : : 1/128 Scope: Host UP LOOPBACK RUNNING MTU: 65536 Metric:1 RX packets: 38 errors: 0 dropped: 0 overruns : 0 frame : 0 TX packets: 38 errors: 0 dropped: 0 overruns: 0 carrier : 0 collisions: 0 txqueuelen: 0 RX bytes: 2100 (2.0 KiB) TX bytes: 2100 (2.0 KiB) E root@kali2 :- # tcpdump -- help tcpdump version 4.6.2 Libpcap version 1.6.2 OpenSSL 1.0.1k 8 Jan 2015 Usage: tcpdump [-aAbdDe fhHIJKLnNOpqRStuUvxx#] [ -B size ] [ -c count ] [ -C file_size ] [ -E algo: secret ] [ -F file ] [ -G seconds ] [ -i interface ] [ -j tstamptype ] [ -M secret ] [ -- number ] [ -Q in|out | inout ] [ -r file ] [ -s snaplen ] [ -- time-stamp-precision precision ] [ -T type ] [ -- version ] [ -V file ] [ -w file ] [ -W filecount ] [ -y datalinktype ] [ -z command ] [ -Z user ] [ expression ] root@kali2 :- # Jacob Stiver 1
Prompt In the lab section, "HTTP2 Flood," Step 16, add your name at the command prompt after you run the capinfos HTTP2capture. cap command. Take a screenshot of your name and the output for the total number of packets captured in the number of packets data. How can the The LOIC tool could be used to test whether a network could withstand a DDoS Low Orbit Ion attack. It could also be used to see how much traffic a network or application could withstand before it experienced slow response times or crashed altogether. Cannon (LOIC) tool be used in the daily work an analyst would do? What are two The LOIC tool could retrieve an attacker's IP address and it could also retrieve the protocol type that data packets were being sent it to such as TCP, UDP, and HTTP. examples of information the LOIC tool could retrieve? Southern New Hampshire University Response Applications Places -Terminal Sun 21:03 1 root@kali2: ~ File Edit View Search Terminal Help root@kali2 :- # tcpdump -i eth0 -nntttt -s 0 -w HTTP2capture. cap tcpdump: listening on eth0, Link-type EN10MB (Ethernet), capture size 262144 | ^C9447 packets captured 9447 packets received by filter 0 packets dropped by kernel root@kali2 :- # capinfos HTTP2capture. cap File name: HTTP2capture. cap E File type: Wireshark/tcpdump/ . .