LinuxCBT Packet Capture: Analysis Edition

Tuesday, December 30, 2008, 2:04
Study Guide
309 views
Add a comment

LinuxCBT Packet Capture: Analysis Edition
encompasses: 1. Packet Capture and Analysis Security featuring Ethereal®.

System Requirements: Windows NT/2000/XP/2003/Vista
Duration: 8 hours/16 Videos on 1-DVD

LinuxCBT Packet | Capture | Analysis Edition is unparalleled in content, depth and expertise. It entails 8-hours, or 1-day of classroom training. LinuxCBT Packet | Capture | Analysis Edition prepares you or your organization for successfully securing GNU/Linux & Open Source-based solutions. As a by-product, many of the covered concepts, utilities and tricks are applicable to heterogeneous computing environments, ensuring your coverage of the fundamentals of securing corporate infrastructures.

Let LinuxCBT Packet | Capture | Analysis Edition cost-effectively sharpen your Packet Capture and Analysis Security skills

Recommended Prerequisites for:

* Any LinuxCBT Operating System Course (Classic/EL-4/SUSE/Debian Editions)
o Open mind & determination to master Linux and related open-source applications
o Basic understanding of networking concepts
o Access to a PC to follow the exercises

Packet Capture Analysis Security - Module 1

# Introduction - Topology - Features

QUOTE
* Discuss course outline
* Explore system configuration
* Identify key network interfaces to be used for captures
* Identify connected interfaces on Cisco Switch
* Explore network topology - IPv4 & IPv6
* Identify Ethereal installation
* Enumerate and discuss key Ethereal features

#
# Ethereal Graphical User Interface (GUI)

QUOTE
* Identify installation footprint
* Differentiate between promiscuous and non-promiscuous modes
* Configure X.org to permit non-privileged user to write output to screen
* Launch Ethereal GUI
* Identify the primary GUI components /Packet List | Packet Details | Packet Bytes/
* Discuss defaults
* Explore key menu items

#
# TCPDump | WinDump - Packet Capturing for /Linux|Unix|Windows/

QUOTE
* Discuss defaults, features and applications
* Use TCPDump on Linux to capture packets
* Log traffic using default PCAP/TCPDump format
* Discuss Berkeley Packet Filters (BPFs)
* Capture and log specific packets using BPFs for analysis with Ethereal
* Connect to Windows 2003 Server using Remote Desktop (RDesktop) utility
* Install WinDump and WinPCAP on Windows 2003 Server
* Identify available network interfaces using WinDump
* Capture and log packets using WinDump
* Capture and log specific packets using BPFs with WinDump for analysis with Ethereal
* Upload captures to Linux system for analysis in Ethereal

Donwload Free Certbible, The Most Realistic Practice Questions and Answers,Help You Pass any Exams

#
# Snort NIDS Packet Capturing & Logging

QUOTE
* Discuss Snort NIDS’s features
* Confirm prerequisites - /PCRE|LibPCAP|GCC|Make/
* Download and Import Snort G/PGP key and MD5SUM for Snort NIDS
* Download, verify, compile and install Snort NIDS
* Discuss BPF directional, type, and protocol qualifiers
* Identify clear-text based network applications and define appropriate BPFs
* Execute Snort NIDS in sniffer mode with BPFs enabled to match interesting traffic
* Log to the active pseudo-terminal console and examine the packet flows
* Combine BPF qualifiers to increase packet-matching capabilities
* Use logical operators to define more flexible BPFs
* Create captures for further analysis with Ethereal

#
# Sun Snoop Packet Capturing & Logging

QUOTE
* Connect to Solaris 10 system and prepare to use Snoop
* Draw parallels to TCPDump
* Enumerate key features
* Sniff and log generic traffic
* Sniff and log specific traffic using filters
* Sniff using Snoop, HTTP and FTP traffic
* Save filters for analysis by Ethereal
* Snoop various Solaris interfaces for interesting traffic

More Information -
CODE
http://www.linuxcbt.com/products_linuxcbt_PackCapAnal_edition.php

Download-
CODE
http://rapidshare.com/files/174290444/lcpa-ag.part01.rar
http://rapidshare.com/files/174298511/lcpa-ag.part02.rar
http://rapidshare.com/files/174305772/lcpa-ag.part03.rar
http://rapidshare.com/files/174896195/lcpa-ag.part04.rar
http://rapidshare.com/files/174903154/lcpa-ag.part05.rar
http://rapidshare.com/files/175065438/lcpa-ag.part06.rar
http://rapidshare.com/files/175068447/lcpa-ag.part07.rar
http://rapidshare.com/files/175071797/lcpa-ag.part08.rar
http://rapidshare.com/files/175072611/lcpa-ag.part09.rar

Password -
CODE
ForumW

Enjoy!!