Homec4science
Diffusion InfoSec (master) Browse

infosec/hw6/ex3/solutions.txt
d86a7f0ce4e6master

Last Change
Raw File

solutions.txt
View Options

Dennis Gankin
284089
# Trace 1: HTTP
## Give three websites (domain name and IP addresses) visited from source IP
address `192.168.0.100` (this does not include the URLs related to online ads,
showing images, internet telemetry, API calls, etc.)
www.amazon.com - 205.251.242.54
www.baidu.com - 180.76.3.151
www.bing.com - 69.16.143.26
## Give three search queries and the domain of the site for each query made from source IP address `192.168.0.100`
www.amazon.com - adventures in Stochastic Processes
www.bing.com - madison map
www.bing.com - chicago metro
# Trace 2: FTP
## What is the user name and password used to connect to the FTP server?
username: shiningmoon
password: public
## List all files that were downloaded.
dragon.zip, ARP.java, L2Switch.java, phase1.html
## List the full path for two files (in different directories) on the FTP server that were NOT downloaded.
/TeNet/RESULT.xlsx, /phase1/StoreForwardingDatalink.java
# Trace 3: Traceroute
## Briefly describe how the traceroute tool works including which network protocols are in use.
Traceroute is a tool for displaying the route to a destination. It works by sending the udp packet (in case of Linux and MacOSX) and ICMP packet (in case of Windows) with increasing TTL values in IPv4 until it reaches the destination.
When TTL expires, the intermediate routers reply and that’s how the tool knows all intermediate machines. By default the traceroute tool makes a reverse DNS query for the IP address of each intermediate route and displays the name in the output of the traceroute command.
## Give the source IP address that issued the traceroute command and the destination IP address.
Source IP: 192.168.0.100
Destination IP: 74.125.225.46
## List the IP addresses on the route between source and destination (meaning:
do not include the IP addresses of the source and destination).
192.168.0.1, 10.131.180.1, 96.34.20.20, 96.34.17.95, 96.34.16.112, 96.34.16.77, 96.34.2.4, 96.34.0.7, 96.34.0.9, 96.34.3.9, 96.34.152.30, 209.85.254.120, 209.85.250.28
# Trace 4: POP
## What is the POP username and password?
username: cs155@dummymail.com
password: whitehat
## How many emails are in the user’s mailbox?
5
## Give the contents of from, to, subject, and date for one email message.
From: hariny <harinym@stanford.edu>
To: cs155@dummymail.com
Subject: test message
Date: Fri, 23 Apr 2010 10:25:00 -0700
## What email client (application) and operating system is this person using to send and receive email?
Client: Thunderbird 2.0.0.23
OS: Windows
c4science · Help