Wireshark challenge Flashcard

Front

For this problem, find all web servers that were visited in the trace (that is, contacted via HTTP). Type the total number of webservers in the list. (Please note that you should not try to identify HTTPS traffic)

Back

41

Front

Find a host that appears to be attempting a Directory Traversal attack and submit its IP address.

Back

152.153.157.125

Front

Find the host that attempted a brute force attack against a password protected FTP server.

Back

83.95.78.96

Front

List the password attempted for the Telnet attack as your answer.

Back

w00t

Front

Find the host running the OLDEST version of Apache. (Apache is the most widely used web server on the Internet.) Don’t count “Apache-Coyote” as “Apache”.

Back

1.3.28

Front

Identify the hosts that are running Ping in the traffic trace. Submit the list of IP addresses used as targets (separate them with coma)

Back

55.117.246.18,62.97.163.225

Front

On the trace they are using a special network protocol for terrestrial trunk radio (What is the name of it?)

Back

tetra

Front

What name query is 172.19.81.17 requesting to 50.7.4.102? (Include the dash in your answer)

Back

GALA-FOO

Front

At what packet number was the first password attempt made?

Back

2190