{"id":322,"date":"2026-10-10T17:38:25","date_gmt":"2026-10-10T17:38:25","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/?page_id=322"},"modified":"2026-10-10T18:12:55","modified_gmt":"2026-10-10T18:12:55","slug":"traffic-tracing-and-sniffing","status":"publish","type":"page","link":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/traffic-tracing-and-sniffing\/","title":{"rendered":"Traffic Tracing and Sniffing"},"content":{"rendered":"\n<p>This assignment focused on network traffic tracing and analysis using Wireshark.  I captured and filtered network packets to examine the information being transmitted across a network and explored how unencrypted protocols can expose sensitive information, such as login credentials.  This artifact demonstrates my ability to analyze network traffic and recognize potential security risks coming from insecure communication protocols.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Task A:<br>Question 1: 140 packets captured total.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"303\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-1.png\" alt=\"\" class=\"wp-image-323\" \/><\/figure>\n\n\n\n<p>Question 2: 40 ICMP packets captured.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"432\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-2.png\" alt=\"\" class=\"wp-image-324\" \/><\/figure>\n\n\n\n<p>Question 3: Source IP: 192.168.10.18&nbsp; Destination IP: 192.168.217.3&nbsp; Sequence Number: 4<\/p>\n\n\n\n<p>Data Length: 40 bytes, the frame length is 98 bytes&nbsp;&nbsp; Response Time: 5.807<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"397\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-4.png\" alt=\"\" class=\"wp-image-327\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"399\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-6.png\" alt=\"\" class=\"wp-image-328\" \/><\/figure>\n\n\n\n<p>Question 4: 96 DNS packets displayed<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"623\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-30.png\" alt=\"\" class=\"wp-image-362\" \/><\/figure>\n\n\n\n<p>Question 5:&nbsp;&nbsp; Domain Name: Mozilla&nbsp; Source IP &amp; Port Number: 192.168.217.3:46733&nbsp;&nbsp; Destination IP &amp; Port Number: 192.168.217.2:53<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"398\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-5.png\" alt=\"\" class=\"wp-image-326\" \/><\/figure>\n\n\n\n<p>Question 6: Source IP and Port Number: 192.168.217.2:53&nbsp;&nbsp; Destination IP and Port Number: 192.168.217.3:46733&nbsp;&nbsp; The message stated that the request was refused, stating server is not an authority for domain.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"623\" height=\"399\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-3.png\" alt=\"\" class=\"wp-image-325\" \/><\/figure>\n\n\n\n<p>Task B:<\/p>\n\n\n\n<p>Step 1A: Used ICMP filter in wireshark to display ICMP traffic.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"395\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-7.png\" alt=\"\" class=\"wp-image-329\" \/><\/figure>\n\n\n\n<p>Step 1B: Used \u201cip.src\u201d \u201cip.dst\u201d \u201cicmp\u201d filters to filter out ICMP request from external kali VM to Ubuntu VM<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"363\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-9.png\" alt=\"\" class=\"wp-image-331\" \/><\/figure>\n\n\n\n<p>Step 2A:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"654\" height=\"518\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-8.png\" alt=\"\" class=\"wp-image-330\" \/><\/figure>\n\n\n\n<p>Step 2B: I filtered for FTP traffic where I saw the request for password. From there you can see the return password being put in.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"623\" height=\"395\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-10.png\" alt=\"\" class=\"wp-image-332\" \/><\/figure>\n\n\n\n<p>Step 2C: The highlighted packets show my username packet first, password packet second, and the login request being incorrect last.<br><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"620\" src=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-content\/uploads\/sites\/41532\/2026\/10\/image-31.png\" alt=\"\" class=\"wp-image-363\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>This assignment focused on network traffic tracing and analysis using Wireshark. I captured and filtered network packets to examine the information being transmitted across a network and explored how unencrypted protocols can expose sensitive information, such as login credentials. This artifact demonstrates my ability to analyze network traffic and recognize potential security risks coming from&#8230; <\/p>\n<div class=\"link-more\"><a href=\"https:\/\/sites.wp.odu.edu\/nicholasrossler\/traffic-tracing-and-sniffing\/\">Read More<\/a><\/div>\n","protected":false},"author":31330,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-json\/wp\/v2\/pages\/322"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-json\/wp\/v2\/users\/31330"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-json\/wp\/v2\/comments?post=322"}],"version-history":[{"count":2,"href":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-json\/wp\/v2\/pages\/322\/revisions"}],"predecessor-version":[{"id":364,"href":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-json\/wp\/v2\/pages\/322\/revisions\/364"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/nicholasrossler\/wp-json\/wp\/v2\/media?parent=322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}