Log into the FTP site for Centers for Disease Control and Prevention (CDC) with user anonymous and no password.ģ31 Anonymous access allowed, send identity (e-mail name) as password.

Open another terminal window to access an external ftp site.

Start a Wireshark capture for the enp0s3 interface.

The ampersand (&) sends the process to the background and allows you to continue to work in the same terminal. Open a terminal window and start Wireshark.

Start and log into the CyberOps Workstation VM.In Part 1, you use Wireshark to capture an FTP session and inspect TCP header fields. Instructions Part 1: Identify TCP H eader F ields and O peration U sing a Wireshark FTP S ession C apture If using a packet sniffer is an issue, the instructor may wish to assign the lab as homework or perform a walk-through demonstration. It is recommended that permission be obtained before running Wireshark for this lab. Īnswers Note : Using a packet sniffer, such as Wireshark may be considered a breach of the security policy of the school. In Part 2 of this lab, you will use Wireshark to capture and analyze UDP header fields for TFTP file transfers between two Mininet host computer s. The terminal command line is used to connect to an anonymous FTP server and download a file. In Part 1 of this lab, you will use the Wireshark open source tool to capture and analyze TCP protocol header fields for FTP file transfers between the host computer and an anonymous FTP server. UDP provides t ransport l ayer support for the D omain N ame System (DNS) and TFTP, among others. For example, TCP is used to provide t ransport l ayer support for the HyperText Transfer Protocol ( HTTP ) and FTP protocols, among others. Both protocols support upper-layer protocol communication. Two protocols in the TCP/IP t ransport l ayer are TCP ( defined in RFC 761 ) and UDP ( defined in RFC 768 ). Part 2: Identify UDP H eader F ields and O peration U sing a Wireshark TFTP S ession C apture Background / Scenario

Part 1: Identify TCP H eader F ields and O peration U sing a Wireshark FTP S ession C apture This topology consists of the CyberOps Workstation VM with internet access. Part 1 will highlight a TCP capture of an FTP session. Lab – Using Wireshark to Examine TCP and UDP Captures (Answers Version)Īnswers Note : Red font color or g ray highlights indicate text that appears in the instructor copy only.

Explain my wireshark captures