diff options
Diffstat (limited to 'netsec-assignment2-S4498062/exercise3/exercise3e')
| -rw-r--r-- | netsec-assignment2-S4498062/exercise3/exercise3e | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/netsec-assignment2-S4498062/exercise3/exercise3e b/netsec-assignment2-S4498062/exercise3/exercise3e new file mode 100644 index 0000000..e195f2c --- /dev/null +++ b/netsec-assignment2-S4498062/exercise3/exercise3e @@ -0,0 +1,10 @@ +In the Conversations > TCP view, we see many very short (few packets) +conversations between 192.168.84.56 (several ports) and 192.168.86.10:21057. I +would guess then that .56 is being rejected by .10. +Using the filter + + ip.addr==192.168.84.56 and ip.addr==192.168.84.10 + +this is confirmed. We see many TCP packets from .56 with SYN, but .10 +continuously repeats with RST, ACK. + |