Write a program to recognize port scanning on a specific host. Recognize the sca

Question

Write a program to recognize port scanning on a specific host. Recognize the scan by analyzing the host’s trace file and/or the TCP dump file. Output the range of ports scanned and the duration of the scan. Describe the scan; was it sent at regular intervals, for example? What type of scan occurred? What was the time interval?

Extend the program to recognize a port scan in real-time? Capture the packets associated with the scan. Measure the performance of the program. Produce an output log for the program, which contains information about the captured packets.

Explanation / Answer

Here the decription is for both the projects :-

5. If u detect a port scan, display the number of ports scanned, originatting IP address, destination IP, and list all the destination port address.

Designing details :-

If we have three linux machines to work on your port scan detector.

129.119.115.71 - curly.seas.smu.edu

129.119.115.72 - moe.seas.smu.edu

129.119.115.73 - larry.seas.smu.edu

And we dont have permission to directly login to any of these machines.

we 1st need TELNET to one of the UNIX machines available on campus and then use rlogin.

Reference from -

http://www.cve.org/

http://www.cert.org/

Related Questions

Navigate

• Browse (All)
• Browse W
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.