Network Traffic Analysis Using tcpdump, Wireshark, and Snort for Security Assessment
Network Traffic Analysis Using tcpdump, Wireshark, and Snort for Security Assessment
Practical Implementation of tcpdump
Execute packet capture using tcpdump to monitor traffic during access to www.163.com. The objective involves determining how many distinct web servers are contacted and their respective IP addresses.
The analysis revealed 7 u ...
Posted on Fri, 18 Sep 2026 16:36:31 +0000 by jdpatrick
Installing and Configuring Snort on CentOS 6.5
Prerequisties
yum install flex bison libpcap libpcap-devel zlib zlib-devel glibc-headers gcc-c++ make -y
Enstalling Dependencies
tar -zxf libdnet-1.11.tar.gz
cd libdnet-1.11
./configure && make && make install
tar -zxf pcre-8.39.tar.gz
cd pcre-8.39
./configure && make && make install
Installing DAQ
tar -zxf da ...
Posted on Tue, 25 Aug 2026 16:22:55 +0000 by Opticon
Deploying Snort with BASE on Windows 7 for Real-Time Intrusion Analysis
Prerequisites
Host OS: Windows 7 SP1
VirtualBox (latest stable build)
WinPcap 4.1.3 – packet-capture driver
Snort 2.8.6 Windows build (Snort_2_8_6_Installer.exe)
Official rule set: snortrules-snapshot-2860.tar.gz
AppServ 8.6.0 – Apache + MySQL + PHP stack
BASE 1.4.5 (base-1.4.5.tar.gz) – web front-end
All components are installed on a single ...
Posted on Mon, 11 May 2026 05:42:42 +0000 by cytech