Description
Packet Capture and Analysis
There are a variety of tools, many of them freeware, that have packet capture and analysis components. In years past, the use of encryption on the internal network was infrequent, and access to a packet analyzer had security implications. In older versions of Windows, even passwords being transmitted across the network were sent in clear text, leaving them at high risk to an unauthorized user of a sniffer hanging off the trusted network. As more and more regulations provide incentives for organizations that encrypt data, and with IPSec a native function as part of modern operating systems, the use of packet analyzers has become more complicated. This technology can be very helpful to network administrators who need to troubleshoot problems as well as to information security professionals seeking to understand traffic that travels across the network.
Lab
Complete the Toolwire lab. When submitting your assignment, attach the two screen prints you were asked to capture as part of the lab to this assignment to document successful completion of the lab.
Paper
Use the study materials and engage in any additional research needed to fill in knowledge gaps. Write a 2–3-page paper that covers the following topics:
Evaluate the tools that are available for packet capture and analysis.
Select specific tools to be used for packet capture and analysis.
Engage in hands-on activities involving packet capture and analysis in the virtual lab.
Explore the access and usage controls that are necessary to ensure packet capture and analysis tools are used appropriately.