Network Programming Wikiclass | Tutorial / Network Security

Please put all the answers in a PowerPoint file and send it to Steven by email before the tutorial class.

Activity One - Netstat

Find out if your computer is secretly connecting to the networks and the Internet

Type cmd in your Windows Run box.
Type "netstat -b 60 > activity.txt" and press enter.
After say a few hours, press Ctrl+C.
Type "activity.txt" on the command line to open the log file in notepad.

This .txt file will have a record of everything that has made an Internet connection in the last couple of minutes; you can then check your task manager to find out where it is and take care of it.

Analyze the statistics about the programs that open network connections.
Analyze the statistics about the TCP ports (foregin ports) in the network connections.
Analyze the statistics about the foreign addresses/hosts. Do you find any foreign hosts that you do not have any knowledge?

Reference: Is Your Computer Connecting To Websites Without Your Knowledge

Useful tools for you: Notepad2, Excel sorting, charting and other functions

Activity Two - Nmap

Nmap is a free security scanner for network exploration and security audits.

Install Nmap in your computer.
Use Nmap to scan a host for network exploration.
Prepare a presentation about your findings such as:
- Operating system
- Ports and the corresponding services that are opened

Activity Three - NetStumbler

NetStumbler is a tool for Windows that allows you to detect Wireless Local Area Networks (WLANs) using 802.11b, 802.11a and 802.11g. It has many uses:

Verify that your network is set up the way you intended.

Find locations with poor coverage in your WLAN.

Detect other networks that may be causing interference on your network.

Detect unauthorized "rogue" access points in your workplace.

Help aim directional antennas for long-haul WLAN links.

Use it recreationally for WarDriving.

Install and run NetStumbler on your machine.
Find ten wireless access point (WAP) and report the following details:
- MAC Address
- SSID
- Channel
- Speed
- Encryption method

Useful tools for you: Notepad++, MS Excel

Activity Four - Wireshark

Wireshark is a network packet analyzer. A network packet analyzer will try to capture network packets and tries to display that packet data as detailed as possible.

Install Wireshark on your machine.
Run Wireshark to capture network packets.
Look at the Frame 100. Find the following answers:

      Frame 100: XX bytes on wire (xxx bits), xx bytes captured (xxx bits)
      Ethernet II, Src: Htc_66:d7:XX (YY:e7:d8:66:d7:XX), Dst: HonHaiPr_59:6d:XX (YY:23:4d:59:6d:XX)
      Internet Protocol, Src: 130.239.18.??? (130.239.18.???), Dst: 192.168.1.??? (192.168.1.???)
      Transmission Control Protocol, Src Port: http (80), Dst Port: dkmessenger (1177), Seq: 6833, Ack: 473, Len: 8

Explain each of the above info in your presentation.

Submission

Please put all the answers in a PowerPoint file and send it to Steven by email before the tutorial class.
Please submit your work to Steven by email: sochoy@ouhk.edu.hk.
Please use SXXXXXXX - NP Tutorial 20 Submission as the email subject.