{"id":552,"date":"2026-10-16T00:08:21","date_gmt":"2026-10-16T00:08:21","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/?p=552"},"modified":"2026-10-16T00:08:21","modified_gmt":"2026-10-16T00:08:21","slug":"assignment-3-sword-vs-shield","status":"publish","type":"post","link":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/2026\/10\/16\/assignment-3-sword-vs-shield\/","title":{"rendered":"Assignment #3 Sword vs Shield"},"content":{"rendered":"\n<p>Ahmed Kargbo<\/p>\n\n\n\n<p>CYSE 301<\/p>\n\n\n\n<p>Sword vs Shield<\/p>\n\n\n\n<p>Task A:&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1010\" height=\"252\" src=\"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-content\/uploads\/sites\/35723\/2026\/10\/image-14.png\" alt=\"\" class=\"wp-image-555\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1023\" height=\"513\" src=\"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-content\/uploads\/sites\/35723\/2026\/10\/image-17.png\" alt=\"\" class=\"wp-image-558\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"546\" height=\"488\" src=\"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-content\/uploads\/sites\/35723\/2026\/10\/image-15.png\" alt=\"\" class=\"wp-image-556\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1022\" height=\"492\" src=\"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-content\/uploads\/sites\/35723\/2026\/10\/image-16.png\" alt=\"\" class=\"wp-image-557\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"591\" height=\"450\" src=\"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-content\/uploads\/sites\/35723\/2026\/10\/image-13.png\" alt=\"\" class=\"wp-image-554\" \/><\/figure>\n\n\n\n<p>Open ports: tcp 21, tcp 80, tcp 135, tcp 445<\/p>\n\n\n\n<p>Eval:&nbsp;<\/p>\n\n\n\n<p>After running Wireshark in the Internal Kali VM while External Kali was scanning the network, several findings can be observed in the traffic pattern. The scanning started with a few ARP packets where the External Kali VM queried the subnet for live hosts. Afterwards an ICMP packet was produced. I assumed that this was during the Nmap scanning of active virtual machines and that it was working to detect what active devices were in the network. There were a high number of DNS packets that appeared as standard queries during the Nmap\u2019s scanning of services. The main communication that can be seen is between 192.168.10.10 and 192.168.10.2. The Protocols that have been seen on the network are DNS, TCP, and ARP. 192.168.10.2 source port was 53 while the port for 192.168.10.10 often varied from 38000 to 59000.&nbsp;<\/p>\n\n\n\n<p>Task B:&nbsp;<\/p>\n\n\n\n<ol>\n<li><\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Rule #<\/td><td>Interface&nbsp;<\/td><td>Action<\/td><td>Source IP<\/td><td>Dest IP<\/td><td>Protocol<\/td><\/tr><tr><td>3<\/td><td>WAN<\/td><td>Block&nbsp;<\/td><td>192.168.217.3<\/td><td>192.168.10.10<\/td><td>IPv4 ICMP&nbsp;<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"532\" height=\"48\" src=\"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-content\/uploads\/sites\/35723\/2026\/10\/image-12.png\" alt=\"\" class=\"wp-image-553\" \/><\/figure>\n\n\n\n<ol start=\"2\">\n<li><\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Rule#<\/td><td>interface<\/td><td>Action<\/td><td>Source IP<\/td><td>Dest IP<\/td><td>Protocol<\/td><\/tr><tr><td>2<\/td><td>WAN<\/td><td>Block&nbsp;<\/td><td>192.168.217.3<\/td><td>&#8211;<\/td><td>IPv4 ICMP<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ol start=\"3\">\n<li><\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Rule#<\/td><td>interface<\/td><td>Action<\/td><td>Source IP<\/td><td>Dest IP<\/td><td>Protocol<\/td><\/tr><tr><td>2<\/td><td>LAN<\/td><td>Block&nbsp;<\/td><td>192.168.10.9<\/td><td>192.168.217.3<\/td><td>IPv4 TCP 21<\/td><\/tr><tr><td>3<\/td><td>LAN<\/td><td>Pass<\/td><td>192.168.10.11<\/td><td>192.168.217.3<\/td><td>IPv4 TCP 21<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul>\n<li>Blocking ICMP improves security by reducing network visibility from lurkers&nbsp;<\/li>\n\n\n\n<li>Blocked ICMP leads to failed path discovery which equals to network stalling and bottlenecks&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>Comparing: In Task A., there were no restrictions set in the firewall rules other than blocking ICMP traffic. The difference is that ALL traffic is blocked except FTP from Kali to LAN. The only one that works now is FTP and if you test pings of SSH for example, it will be blocked and not work.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ahmed Kargbo CYSE 301 Sword vs Shield Task A:&nbsp; Open ports: tcp 21, tcp 80, tcp 135, tcp 445 Eval:&nbsp; After running Wireshark in the Internal Kali VM while External Kali was scanning the network, several findings can be observed in the traffic pattern. The scanning started with a few ARP packets where the External&#8230; <\/p>\n<div class=\"link-more\"><a href=\"https:\/\/sites.wp.odu.edu\/ahmedkar1\/2026\/10\/16\/assignment-3-sword-vs-shield\/\">Read More<\/a><\/div>\n","protected":false},"author":28578,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wds_primary_category":0},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/posts\/552"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/users\/28578"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/comments?post=552"}],"version-history":[{"count":1,"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/posts\/552\/revisions"}],"predecessor-version":[{"id":559,"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/posts\/552\/revisions\/559"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/media?parent=552"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/categories?post=552"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/ahmedkar1\/wp-json\/wp\/v2\/tags?post=552"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}