Intranet Security Using A LAN Packet Sniffer to Monitor Traffic

Abstract

This paper was designed to provide Intranet traffic monitoring by sniffing the packets at the local Area Network (LAN) server end to provide security and control. It was implemented using five computer systems configured with static Internet Protocol (IP) addresses used in monitoring the IP traffic on the network by capturing and analyzing live packets from various sources and destinations in the network. The LAN was deployed on windows 8 with a D-link 16-port switch, category 6 Ethernet cable and other LAN devices. The IP traffics were captured and analyzed using Wireshark Version 2.0.3. Four network instructions were used in the analysis of the IP traffic and the results displayed the IP and Media Access Control (MAC) address sources and destinations of the frames, Ethernet, IP addresses, User Datagram Protocol (UDP) and Hypertext Transfer Protocol (HTTP). The outcome can aid network administrators to control Intranet access and provide security.

Untitled

“…This section discusses the related work of various authors. Henry & Agana [3] monitored the Intranet traffic by sniffing the packets at the Local Area Network (LAN) server end to provide security and control. They analyzed the IP and MAC address sources and destinations of the frames, Ethernet, UDP, and HTTP protocols and concluded that these can assist network administrators to make informed decisions on possible threats that the network can be exposed to.…”

“…Active sniffers can send data in the network and can be detected by other systems through different techniques whereas passive sniffers only collect data, but cannot be detected. Wireshark is a passive network sniffer [3]. Moreover, the structure of a packet sniffer consists of two parts: the packet analyzer which works on the application layer protocol, and the packet capture (pcap) which captures packets from all other layers [4].…”

Pengenalan Pola Serangan pada Internet of Thing (IoT) Menggunakan Support Vector Mechine (SVM) dengan Tiga Kernel

“…Sedangan menurut [30] informasi yang didapat dari sniffing paket dapat digunakan oleh seorang administrator untuk mengidentifikasi paket yang aneh dan juga untuk menjaga transmis data pada jaringan agar tetap efisien. Penelitian [31] melakukan sniffing paket dengan parameter Media Access Control (MAC) Address sumber dan tujuan, Ethernet Addresses, Ip Addresses User Datagram Protocol (UDP) dan Hypertext Transfer Protocol (HTTP), sedangkan penelitian yang dilakukan oleh [32] Jumlah user yang mengakses intenet, bandwidth serta besar paket yang digunakan Merujuk pada penelitian sebelumnya, penelitian ini juga menghasilkan dataset dengan cara sniffing paket dengan menghasil 16 atribut yang terdiri dari waktu, protokol, IP sumber dan tujuan, port Sumber dan tujuan, ACK, SEQ, WIN, Flags, TTL, IP Length, IP_Ceksum, IP_ID, IP_OFF, TCP/UDP. Untuk proses sniffing paket penelitian ini tersaji pada gambar 8, dimana komputer yang didefiniskan sebagai capture paket data harus terlebih dahulu ini mendefenisikan interface yang digunakan, dan output menghasilkan "file.pcap".…”

e-commerce cybersecurity vulnerability, http protocol case

“…Wireshark es uno de los analizadores de paquetes de código abierto más populares. Originalmente se llamaba Ethereal, pero en mayo de 2006 el proyecto pasó a llamarse Wireshark por cuestiones de marca [14].…”