Question

Chapter 5 Networking and Server Attacks a topes of addresses are these, and at which layer of the Open Systems Interconnec- 3. While examining the frame discussed in Question 2, you determine that Wireshark has e trame, expanding the Transmission Control Protocol node in the middle rame, expanding the Internet Protocol node in the middle frame, and tion model are they processed? identified the packet as abnormal. You discover this by a. clicking th b. clicking the f c. clicking the frame, expanding the Transmission Control Protocol node in the middle frame, and seeing that the Flags item lists seeing that the source IP address is that of Server frame, and seeing that the Acknowledgement number fiel (RST) d lists Broken TCP cking the frame, expanding the Transmission Control Protocol node in the middle frame, and seeing that the Version field lists 7 d. cli 4. Which of the following options in hping3 splits packets into fragments c. -mtu d. -tos 5. Which of the following options in hping3 sets the ACK flag?

3, 4 and 5

Answer 1

Solution:-

3. Wireshark identifies the packet as abnormal by clicking the frame, expanding the Transmission Control Protocol node in the middle frame, and seeing that the Flag item lists(RST).

4.

a. -f

hping3 -f command splits the packets into more fragments which may be used to test IP stacks fragmentation performance and also test weak packet filter that can be passed using tiny fragments.

5.

a. -A

hping3 -A command sets the ACK flag