Sunteți pe pagina 1din 1

I have a PCAP file and I need you to:

1. Write a Python program to analyse the global header of the PCAP file, and
provide the following information:
a. The length of the global header
b. The magic number and the endianness of the PCAP file
c. The major and minor version numbers of the file format
d. The SnapLength
e. The data link type

2. The first protocol frame captured in the PCAP file is a DHCP frame, which
contains a lot of basic information of the captured communication. Write a
Python program to analyse this DHCP frame and provide the following
information:
a. The timestamp indicating when this packet was captured
b. The actual GMT time corresponding to this timestamp
c. The length of this DHCP frame
d. The source and destination MAC addresses of the captured
communication
e. The source and destination IP addresses of the captured
communication
f. The name of the host PC

3. The user of the host PC tried to access some suspected website whose
domain name ends with .top. Use Python (with the help of Regular
Expression) to find the susceptible website.

4. Before the user got infected/attacked, they used a popular search engine
(not Google) to search some information. Use Python to find out which
search engine and which keywords they used to do such searches. Which
website did the search engine recommend and the user actually access?

5. Based on what you have achieved so far, expand your Python code to a
more generic tool to identify more potential security threats.

S-ar putea să vă placă și