Computer Forensics foredrag - Prosa
Computer Forensics foredrag - Prosa
Computer Forensics foredrag - Prosa
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
kan gemme netværkspakker i filer<br />
kan læse netværkspakker fra filer<br />
tcpdump - filformat<br />
TCPDUMP format er blevet de facto standarden for opsamling af<br />
netværkstrafik<br />
[root@otto hlk]# tcpdump -i en0<br />
tcpdump: listening on en0<br />
13:29:39.947037 fe80::210:a7ff:fe0b:8a5c > ff02::1: icmp6: router advertisement<br />
13:29:40.442920 10.0.0.200.49165 > dns1.cybercity.dk.domain: 1189+[|domain]<br />
13:29:40.487150 dns1.cybercity.dk.domain > 10.0.0.200.49165: 1189 NXDomain*[|domain]<br />
13:29:40.514494 10.0.0.200.49165 > dns1.cybercity.dk.domain: 24765+[|domain]<br />
13:29:40.563788 dns1.cybercity.dk.domain > 10.0.0.200.49165: 24765 NXDomain*[|domain]<br />
13:29:40.602892 10.0.0.200.49165 > dns1.cybercity.dk.domain: 36485+[|domain]<br />
13:29:40.648288 dns1.cybercity.dk.domain > 10.0.0.200.49165: 36485 NXDomain*[|domain]<br />
13:29:40.650596 10.0.0.200.49165 > dns1.cybercity.dk.domain: 4101+[|domain]<br />
13:29:40.694868 dns1.cybercity.dk.domain > 10.0.0.200.49165: 4101 NXDomain*[|domain]<br />
13:29:40.805160 10.0.0.200 > mail: icmp: echo request<br />
13:29:40.805670 mail > 10.0.0.200: icmp: echo reply<br />
...<br />
c○ copyright 2005 Security6.net, Henrik Lund Kramshøj 20
![Brug dit studieliv aktivt [s.8-15] - Prosa](https://img.yumpu.com/25535032/1/184x260/brug-dit-studieliv-aktivt-s8-15-prosa.jpg?quality=85)
Change language