Who is dependable and efficient with this type of assignment? Please read instructions before bidding.

Instructions

This assignment asks you to participate in two projects and then to write about both projects in ONE paper.

1. Complete Project 4-1: Using an Internet Port Scanner on page 150 within the textbook

2. Complete Project 4-4: Launching the Linux Wireshark Network Protocol Analyzer on pages 154-156 within the textbook

Write a one-two- page paper about both projects below, and describe any unusual problems that arose as a result of these projects. Also include a brief description of a port scanner and a network protocol analyzer. Include a title page and a separate reference page. Follow CSU APA guidelines. This includes in-text citations, referencing and formatting of the paper.

Pg. 150

Project 4-1: Using an Internet Port Scanner

Internet port scanners are available that will probe the ports on a system to determine which ports are open, closed, and or blocked. In this project, you will perform a scan using an Internet-based scanner.

1. Use your web browser to go to www.grc.com. The location of content on the Internet, such as this program, may change without warning. If you are no longer able to access the program through the preceding URL, then use a search engine to search for “ShieldsUP!”

2. Click Services and then click ShieldsUps!

3. Click the Proceed button.

4. Click the All Service Ports button to scan ports on your computer. A grid is displayed indicating which ports are open (red), closed (blue), or blocked (green). When the scan completes, scroll through the report to view the results. Then print the report.

ShieldsUp! Refers to blocked ports as “stealth.”

5. Scroll down and then click the File Sharing button. ShieldsUp! Probes your computer to identify basic security vulnerabilities. Print this page when finished.

6. Closing or blocking open ports can be done through either the router or firewall to which the computer is attached or through the software firewall running on the computer. The Windows 7 firewall opens ports primarily based on approved application, although users can open select ports. To view the applications that have open ports on a Windows 7 computer, click Start, click Control Panel and then Security.

7. Click Windows Firewall.

8. Click Change settings.

9. Click the Exceptions tab. A list of programs that have open ports will appear. To close any ports, uncheck the box next to the program.

10. Close all windows.

Pg. 154-155

Project 4-4: Launching the Linux Wireshark Network Protocol Analyzer

Network traffic can be viewed by protocol analyzer software. This software captures each packet to decode and analyze its contents. BackTrack 4 contains the protocol analyzer Wireshark, recognized as one of the premiere protocol analyzers. In order to view the broadest range of data, a laptop computer with a wireless network interface card adapter should be used. However, attempting to capture wireless data using a Windows based network protocol analyzer software application can be difficult. This is because wireless network interface card adapters can operate in one of six different modes: master (when the card acts as an AP), managed (when the station acts as a normal client), repeater, mesh, ad-hoc, or monitor mode, a card can capture frames without first being associated with an AP. Prior to Microsoft Windows Vista, the Microsoft Windows Vista, the Microsoft Windows Network Driver Interface Specification (NDIS) did not support monitor mode, and only data frames could be displayed. Later versions of Windows (Vista and &) added some support for monitor mode, yet this is dependent upon specific types of cards. Unlike Windows, Linux does support monitor mode so that most cards and their drivers can easily display all three types of frames. Using Linux does not require that the operating system and protocol analyzer software be installed on a hard drive, instead, a “live” bootable CD or USB flash drive containing Linux protocol analyzer without using the hard drive. The Wireshark wireless network protocol analyzer can capture and display control, management, and network frames. In this project you will use Wireshark as a penetration tool to capture wireless traffic.

You should only capture frames from your own WLAN or one that is approved for you to use. You should not capture frames from a foreign WLAN without the owner’s permission.

1. Insert the USB flash drive into a computer that contains a wireless network interface card adapter.

2. Reboot the computer.

3. If the computer is not configured to launch from a USB flash drive, press the appropriate key to change the boot sequence so that the USB drive is the first drive from which the computer launches. If that is not available, press the appropriate key to enter the ROM BIOS and change the boot order settings so that the USB drive is first.

4. Click Default.

5. When the root@bt: ̴ # prompt appears, type iwconfig and then press Enter. Note the interface that is associated with IEEE 802.11.

6. When the root@bt: ̴ # prompt appears, type iwconfig interface channel number. For example, if the interface is wlan0 on channel 11, type iwconfigwlan0 channel 11 and then press Enter.

7. When the root@bt: ̴ # prompt appears, type airmon-ng start interface. For example, if the interface is wlan0, type airmon-ng start wlan0 and then press Enter.

8. When the root@bt: ̴ # prompt appears, type startx and then press Enter.

9. Click the K Menu icon (the first icon in the lower-left corner).

10. Navigate through the different penetration tools available in BackTrack 4.

11. Click Internet.

12. Click Wireshark-Network Analyzer.

13. When the Wireshark application starts, click Capture.

14. Click Interfaces.

15. Select the device monO and then click Start.

16. Allow Wireshark to collect 1-2 minutes of frames. Within this time be sure that someone on the same WLAN is performing a network activity such as surfing the Web.

17. Click Capture and then Stop to stop collecting packets.

18. Click File and Save As to save your capture to a data file. In the Name folder, enter [Lastname]-Project 4-3.pcap.

19. In the Save in folder: navigate to a location to save the file.

You will not be able to save your file to the same USB flash drive from which you booted the computer.

20. Leave Wireshark open for the next project.

Reference

Ciampa, M. (2012). Security + guide to network security fundamentals (4th ed.). Boston: MA: Course Technology.