Book Image

Wireshark 2 Quick Start Guide

By : Charit Mishra
Book Image

Wireshark 2 Quick Start Guide

By: Charit Mishra

Overview of this book

<p>Wireshark is an open source protocol analyser, commonly used among the network and security professionals. Currently being developed and maintained by volunteer contributions of networking experts from all over the globe. Wireshark is mainly used to analyze network traffic, analyse network issues, analyse protocol behaviour, etc. - it lets you see what's going on in your network at a granular level. This book takes you from the basics of the Wireshark environment to detecting and resolving network anomalies.</p> <p>This book will start from the basics of setting up your Wireshark environment and will walk you through the fundamentals of networking and packet analysis. As you make your way through the chapters, you will discover different ways to analyse network traffic through creation and usage of filters and statistical features. You will look at network security packet analysis, command-line utilities, and other advanced tools that will come in handy when working with day-to-day network operations.</p> <p>By the end of this book, you have enough skill with Wireshark 2 to overcome real-world network challenges.</p>
Table of Contents (14 chapters)
Title Page
Packt Upsell
Contributors
Preface
8
Mastering the Advanced Features of Wireshark
Index

Analysing brute force attacks


You must be aware of the popularity of brute force attacks. The chances of success are not very high, but also it is not impossible due to the lack of complex passwords configured in corporate machines. Brute force attack is a way to guess login passwords configured in devices using a tool that automates password guessing process.

To analyze malicious traffic of such nature, I will attempt to perform brute force over a preconfigured FTP service. FTP is used to transfer files efficiently with the assurance of integrity and confirmed delivery of the data in modern and critical network infrastructures.

For testing and our analysis purposes, I have configured one FTP server at 192.168.1.108 over a Windows 7 machine and the attacker is at IP 192.168.1.106 over a Kali machine.

Let's replicate and analyze the attack and normal FTP traffic pattern. Perform the following steps if you want to replicate it, but for educational purposes only:

  1. Configure the FTP client and the...