diff options
| author | Camil Staps | 2015-09-17 20:54:06 +0200 |
|---|---|---|
| committer | Camil Staps | 2015-09-17 20:54:06 +0200 |
| commit | b00f4349fe7cd82524b5dcf9d6853f4ec98fa98f (patch) | |
| tree | 10a317e74ad96b06e8726aaef660d4b520b8733a /netsec-assignment2-S4498062/exercise3/exercise3e | |
| parent | Assignment 1 (diff) | |
Assignment 2
Diffstat (limited to 'netsec-assignment2-S4498062/exercise3/exercise3e')
| -rw-r--r-- | netsec-assignment2-S4498062/exercise3/exercise3e | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/netsec-assignment2-S4498062/exercise3/exercise3e b/netsec-assignment2-S4498062/exercise3/exercise3e new file mode 100644 index 0000000..e195f2c --- /dev/null +++ b/netsec-assignment2-S4498062/exercise3/exercise3e @@ -0,0 +1,10 @@ +In the Conversations > TCP view, we see many very short (few packets) +conversations between 192.168.84.56 (several ports) and 192.168.86.10:21057. I +would guess then that .56 is being rejected by .10. +Using the filter + + ip.addr==192.168.84.56 and ip.addr==192.168.84.10 + +this is confirmed. We see many TCP packets from .56 with SYN, but .10 +continuously repeats with RST, ACK. + |