From the course: Performing a Technical Security Audit and Assessment
Unlock the full course today
Join today to access over 24,800 courses taught by industry experts.
Conduct network sniffing
From the course: Performing a Technical Security Audit and Assessment
Conduct network sniffing
- [Narrator] Network sniffing involves capturing and analyzing network traffic for various purposes, including collecting and reviewing information within network packets, discovering active devices, identifying operating systems, application services and protocols, and uncovering potential security vulnerabilities. Network sniffing is both a review technique and a target analysis and identification technique. Network sniffers are typically software tools installed on laptops or network appliances. They must be deployed by individuals familiar with the network to ensure that targeted traffic is captured. This often entails connecting the sniffer to a hub or switch where all traffic is copied to a single port known as port spanning network. Sniffing is a passive activity and should have minimal to no impact on systems or networks. Specialized tools are used for capturing and analyzing network traffic, including dsniff, Ettercap, Wireshark, Kismet, tcpdump and libpcap. Links to these…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
Baseline skill sets for security reviews2m 21s
-
(Locked)
Conduct documentation reviews1m 58s
-
(Locked)
Conduct log reviews2m 8s
-
(Locked)
Conduct ruleset reviews2m 18s
-
(Locked)
Conduct system configuration reviews2m 51s
-
(Locked)
Conduct network sniffing1m 19s
-
(Locked)
Network sniffing tool demo: Wireshark2m 16s
-
(Locked)
Conduct file integrity checking2m 39s
-
File integrity checking tool demo1m 21s
-
(Locked)
Challenge: Pick the right reviews1m 6s
-
(Locked)
Solution: Pick the right reviews2m 37s
-
-
-
-
-
-
-