From b00f4349fe7cd82524b5dcf9d6853f4ec98fa98f Mon Sep 17 00:00:00 2001
From: Camil Staps
Date: Thu, 17 Sep 2015 20:54:06 +0200
Subject: Assignment 2

---
 netsec-assignment2-S4498062/exercise3/exercise3e | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 netsec-assignment2-S4498062/exercise3/exercise3e

(limited to 'netsec-assignment2-S4498062/exercise3/exercise3e')

diff --git a/netsec-assignment2-S4498062/exercise3/exercise3e b/netsec-assignment2-S4498062/exercise3/exercise3e
new file mode 100644
index 0000000..e195f2c
--- /dev/null
+++ b/netsec-assignment2-S4498062/exercise3/exercise3e
@@ -0,0 +1,10 @@
+In the Conversations > TCP view, we see many very short (few packets) 
+conversations between 192.168.84.56 (several ports) and 192.168.86.10:21057. I
+would guess then that .56 is being rejected by .10.
+Using the filter
+
+    ip.addr==192.168.84.56 and ip.addr==192.168.84.10
+
+this is confirmed. We see many TCP packets from .56 with SYN, but .10
+continuously repeats with RST, ACK.
+
-- 
cgit v1.2.3