Wednesday, September 9, 2009
Group16_QuadMasters:Remote Login
1. Software download
2. Internet connection
3. Secure desktop sharing network
For remote login to work, both the host computer and all remote users have to download and install the same desktop sharing software. Desktop sharing software typically includes two distinct programs:
1. The desktop sharing client that runs on the host computer
2. A viewer program that allows the remote user to view the contents of the host computer's desktop in a resizable window
Group8_Vintageboys:TCPdump
It allows us to view entire ethernet frame or other link layer and if required print the frame header. By default, tcp dump prints the packets at the IP layer.
TCPdump generally helps in solving a variety of problems and analysts say that the number of server based problems that could be solved by using TCPdump is limitless since it prints detailed information about network traffic, helps in debug denial and during service attacks. If a network is flooded and all other attempts to determine the source or destination of the traffic fail, tcpdump will show you the source address, destination address, and type of traffic involved.
Thursday, September 3, 2009
MKN_Folks...SOS Need Ur help!
Well, to say the least, I think Iam waaaaaaaay too short-sighted as well as did not foresee the avalance of information you folks would collect and post! Maybe under-estimated the energy and enthusiasm inherent in your present chronological age, dear students! I ADMIT :-) Tuesday, September 1, 2009
Group12_chaarMusafirs:how does internet works?
Group12_ChaarMusafirs : Protocol Stack and addressing
Linksys WRT45ABG
Nmap:
group06_Bandwidth Brothers : Transmission Media
Group05_Illuminati:Transmission Media
Our project will discuss some of the most common network transmission media, such as coaxial cable, shielded twisted-pair cable, and unshielded twisted-pair cable. We will also learn about network fiber-optic cable and wireless communications.
GROUP3_AMAK: Network protocol analysis
Network protocols defines a language of rules and conventions for communication between network devices.
List of Protocols with examples of each : -
1 Layer 1 protocols (Physical Layer)
- ADSL Asymmetric digital subscriber line
- ISDN Integrated Services Digital Network
2 Layer 2 protocols (Data Link Layer)
- Ethernet
- IEEE 802.11
- IEEE 802.16
Layer 3 protocols (Network Layer)
- IPv4 Internet Protocol version 4
- IPv6 Internet Protocol version 6
Layer 4 protocols (Transport Layer)
- TCP Transmission Control Protocol
- UDP User Datagram Protocol
Layer 5 protocols (Session Layer)
- NCP NetWare Core Protocol
- NFS Network File System
Layer 7 protocols (Application Layer)
- FTP, File Transfer Protocol
- HTTP, HyperText Transfer Protocol
- IMAP, Internet Message Access Protocol
- POP3 Post Office Protocol Version 3
- Telnet, a remote terminal access protocol
- SOAP, Simple Object Access Protocol
What is Network Protocol Analysis and Protocol Analyzer?
The packet analyzer (also known as a network protocol) is computer software or computer hardware that can intercept and log traffic passing over a digital network or part of a network.
Network protocol analysis is a process for a program or a device to decode network protocol headers and trailers to understand the data and information inside the packet encapsulated by the protocol. To conduct protocol analysis, packets must be captured at real time for line speed analysis or later analysis. Such program or device is called a Protocol Analyzer.
The uses of network analysers :
- Analyze network problems
- Detect network intrusion attempts
- Gain information for effecting a network intrusion
- Monitor network usage
- Gather and report network statistics
- Filter suspect content from network traffic
- Spy on other network users and collect sensitive information such as passwords
- Debug client/server communications
- Debug network protocol implementations
Notable Network analysis applications : -
- dSniff
- Microsoft Network Monitor
- Wireshark (formerly known as Ethereal)
- Snoop (part of Solaris)
- OPNET Technologies ACE Analyst
Group13_Avani:Protocol stack and addressing
The Open System Interconnection Reference Model (OSI Reference Model or OSI Model) is an abstract description for layered communications and computer network protocol design. It is a prescribed hierarchy of software layers, starting from the application layer at the top to the physical layer at the bottom. The stack resides in each client and server.
LAYER -FUNCTION
7. Application -Network process to application
6. Presentation -Data representation and encryption
5. Session -Interhost communication
4. Transport -End-to-end connections and reliability
3. Network -Path determination and logical addressing
2. Data link -Physical addressing
1. Physical -Media, signal and binary transmission
A client application sends data down its protocol stack, passing through each of the protocols and interfaces. At the receiving side, the data packets traverse a similar stack of protocols and programs, this time in reverse. Starting at the physical layer, the packet passed through each successive layer until it reaches the top of the stack at the relevant application process. At each layer, the information appended by the different protocols is examined so that the host can forward the packet to its final destination. For the host to accomplish this, both the client and the host need to run the same program at each level.
To deliver data between two Internet hosts, it is necessary to move data across the network to the correct host, and within that host to the correct user or process. One of the schemes used by TCP/IP to accomplish these tasks is protocol stack addressing which deliver data to the correct host.
Specification used for multiple protocol stack addressing are:
• Media Access Control (MAC) driver: This is a device driver written by the vendors of the NIC that directly interfaces with the NIC hardware.
• Upper-Level Protocol driver
• Protocol manager program
To avoid confusion with MAC addresses, which are machine or station addresses, the term IP address will be used to designate this kind of address.Since the network and data link layer use different addressing schemes, some system is needed to convert or map the IP addresses to the MAC addresses. Transport-layer services and user processes use IP addresses to identify hosts, but packets that go out on the network need MAC addresses. The Address Resolution Protocol (ARP) is used to convert the 32-bit IP address of a host into its 48-bit MAC address. When a hosts wants to map an IP address to a MAC address, it broadcasts an ARP request on the network, asking for the host using the IP address to respond. The host that sees its own IP address in the request returns its MAC address to the sender. With a MAC address, the sending host can transmit a packet on the Ethernet and know that the receiving host will recognise it.
Group3_AMAK: How internet works?
As we know that the internet is a global network of computers, each computer must have a unique address in the form of nnn.nnn.nnn.nnn where nnn ranges between 0-255. This unique address is known as IP address. If you connect to internet through an Internet Service Provider(ISP), you are assigned a temporary IP address for the session. If you connect to the internet through LAN(Local Area Network) you might be assigned a permanent IP address or a temporary one from DHCP(Dynamic Host Configuration Protocol) server.
Once the computer is connected to the internet and we want to communicate with the other computers, the message must be translated from alphabetic text to electronic signals and is sent over the medium through which it is connected. The receiving computer translates it back into alphabetic text and this is achieved through the use of protocol stack.The protocol stack used on the internet is referred to as TCP/IP protocol stack.
The protocol stack consists of layers that have different functions:
1.)Application Protocols layer: it is the protocol which is specific to the applications such as WWW,FTP,E-Mail.etc.
2.)Transmission Control Protocol Layer: directs packets to a specific application on a computer using a port number.
3.)Internet Protocol Layer: it directs packets to a specific computer using IP address.
4.)Hardware Layer: Converts binary packet data into network signals and back.
The data to be transmitted works its way downward the stack. The data to be transmitted is broken into smaller chunks of data known as packets.Each packet is assigned a port number.Port numbers are necessary because we need to determine the program on the computer which requires the information.From the TCP layer the packets proceed to the IP layer where they are assigned a destinatin IP address. Now that the packet has the port number and the IP address it proceeds to the hardware layer where it becomes ready to be sent over the internet. The packets work their way upwards in the protocol stack at the receiving computer. When the data reaches the top of the stack the data is reassembled in its original form.
The DNS is a distributed database which keeps track of computer's names and their corresponding IP addresses on the Internet. Many computers connected to the Internet host part of the DNS database and the software that allows others to access it. These computers are known as DNS servers. No DNS server contains the entire database; they only contain a subset of it. If a DNS server does not contain the domain name requested by another computer, the DNS server re-directs the requesting computer to another DNS server.
Group4_Newcreation:Network Protocal Analysis
Network protocols include mechanisms for devices to identify and make connections with each other, as well as formatting rules that specify how data is packaged into messages sent and received. Some protocols also support message acknowledgement and data compression designed for reliable and/or high-performance network communication. Hundreds of different computer network protocols have been developed each designed for specific purposes and environments.
Internet Protocols:
The Internet Protocol family contains a set of related (and among the most widely used network protocols. Besides Internet Protocol (IP) itself, higher-level protocols like TCP, UDP, HTTP and FTP all integrate with IP to provide additional capabilities. Similarly, lower-level Internet Protocols like ARP and ICMP also co-exist with IP. These higher level protocols interact more closely with applications like Web browsers while lower-level protocols interact with network adapters and other computer hardware.
How Network Protocols Are Implemented:
Modern operating systems like Microsoft Windows contain built-in services or daemons that implement support for some network protocols. Applications like Web browsers contain software libraries that support the high level protocols necessary for that application to function. For some lower level TCP/IP and routing protocols, support is implemented in directly hardware (silicon chipsets) for improved performance.
Group05_Illuminati:How Internet Works?
Each computer connected to the Internet must have a unique address. This address is known as an IP (Internet Protocol) address. Every computer needs one to communicate on the Internet and it is usually built into the computer's operating system. The Internet uses a protocol stack referred to as the TCP/IP protocol stack because of the two major communication protocols used.The Internet backbone is made up of many large networks which interconnect with each other. These large networks are known as Network Service Providers or NSPs.These networks peer with each other to exchange packet traffic. Each NSP is required to connect to three Network Access Points or NAPs. At the NAPs, packet traffic may jump from one NSP's backbone to another NSP's backbone. NSPs also interconnect at Metropolitian Area Networks or MAEs. MAEs serve the same purpose as the NAPs but are privately owned. NAPs were the original Internet interconnect points. Both NAPs and MAEs are referred to as Internet Exchange Points or IXs. NSPs also sell bandwidth to smaller networks, such as ISPs and smaller bandwidth providers.The ISP maintains a pool of modems for their dial-in customers. This is managed by some form of computer (usually a dedicated one) which controls data flow from the modem pool to a backbone or dedicated line router. This setup may be referred to as a port server, as it 'serves' access to the network. Billing and usage information is usually collected here as well. No computer knows where any of the other computers are, and packets do not get sent to every computer. The information used to get packets to their destinations are contained in routing tables kept by each router connected to the Internet.. A router is usually connected between networks to route packets between them. Each router knows about it's sub-networks and which IP addresses they use. When a packet arrives at a router, the router examines the IP address put there by the IP protocol layer on the originating computer. The router checks it's routing table. If the network containing the IP address is found, the packet is sent to that network.After your packets traverse the phone network and your ISP's local equipment, they are routed onto the ISP's backbone or a backbone the ISP buys bandwidth from. From here the packets will usually journey through several routers and over several backbones, dedicated lines, and other networks until they find their destination,
Group18_awesum4sum: Undersatnding Computer Networks
Group8_VintageBoys:TCPDump
TCP Dump allows you to examine the header or content of each packet flowing over an interface or data link. To begin monitoring, select the desired interface from the "Monitor interface" popup and press "Start".
TCP Dump in IPNetMonitorX is a simple User Interface to the underlying unix "tcpdump" facility. Unix tcpdump has many options allowing you to specify in detail what packets you want to capture including protocols, interfaces, and link layer headers. The Options field accepts standard tcpdump options ("-n -p -t" for example to show numeric addresses, do not set promiscuous mode, and no time stamps).
Naturally you can run tcpdump directly from a terminal window if desired. The reason to incorporate TCP Dump in IPNetMonitorX is simple user convenience.
While TCP Dump is well suited to capturing packet headers and protocol information, it is less ideal for viewing the actual TCP data flow between a client and server. For this purpose, you can "Use TCP Flow" instead of TCP Dump. tcpflow is an open source utility distributed under GNU .
http://sustworks.com/site/prod_ipmx_help/html/TCPDumpHelp.html

tcpdump is used on platforms like ethereal by network professionals for troubleshooting, analysis, software and protocol development. It has all of the standard features you would expect in a protocol analyzer, and several features not seen in any other product. Its open source licence allows people in the networking community to add enhancements. It runs on all popular computing platforms, including Unix, Linux, and Windows.although the windows version is enhanced with ethereal modern day network analyzers like wireshark are more popular and have made it redundant.
abridged from-http://www.ethereal.com/
parisparfait.typepad.com
Group 10 _Fosters:understanding on computer networks


the general types of computer networks are
Connections can be either wired or wireless (eg :bluetooth) depending upon our convenience.They can be intra connected using wires, hubs , routers and various different hardware components .
group9_dead lock: IP utilities/ tcpdump
IP/TCP three layers:-
* IP - its responsible for moving packet of data from node to node. IP forwards each packets based on a four byte destination address( IP number). IP operates on gateway machine that move data from department to organization to region and then around the world.
* TCP(transmission control protocol) - its responsible for verifying correct delivery of data from client to server. data can be lost in the intermediate network. TCP adds support to detect errors or lost data and to trigger retransmission until the data is correctly and completely received.
* Sockets - its a name given to the packages of subroutines that provide access to TCP/IP on most systems.
group7_rothman:Transmission media
There are 2 basic categories of Transmission Media:
1. Guided
2. Unguided
Guided Transmission Media uses a "cabling" system that guides the data signals along a specific path. The data signals are bound by the "cabling" system. Guided Media is also known as Bound Media. Cabling is meant in a generic sense in the previous sentences and is not meant to be interpreted as copper wire cabling only.
There 4 basic types of Guided Media:
Open Wire
Twisted Pair
Coaxial Cable
Optical Fiber
Unguided Transmission Media consists of a means for the data signals to travel but nothing to guide them along a specific path. The data signals are not bound to a cabling media and as such are often called Unbound Media. The three guided media commonly used for transmission are twisted-pair,coaxial and fiber optic cable.
Unguided media,transmission and reception are achieved by means of an antenna.
The various types of waves used for wireless transmission are:
Terrestrial microwave
Satellite microwave
Broadcast radio
Infrared
Wireless propagation is through one of the following routers:
-Ground wave
-Sky wave
-Light of sight
Group 10_Fosters:IP/TCP
TCP/IP defines the rule computers must follow to communicate with each other over the internet. It is the protocol suite that drives the Internet. Specifically, TCP/IP handles network communications between network nodes (computers, or nodes, connected to the net).The suite is actually composed of several protocols including IP which handles the movement of data between host computers, TCP manages the movement of data between applications.
About IP
IP is for communication between computers.It is a "connection-less" communication protocol. IP does not occupy the communication line between two computers. IP reduces the need for network lines. Each line can be used for communication between many different computers at the same time.With IP, messages (or other data) are broken up into small independent "packets" and sent between computers via the Internet.
IP is responsible for "routing" each packet to the correct destination.When an IP packet is sent from a computer, it arrives at an IP router. The IP router is responsible for "routing" the packet to the correct destination, directly or via another router.
About TCP
TCP is for communication between applications.If one application wants to communicate with another via TCP, it sends a communication request. This request must be sent to an exact address. After a "handshake" between the two applications, TCP will set up a "full-duplex" communication between the two applications.The "full-duplex" communication will occupy the communication line between the two computers until it is closed by one of the two applications.
Group16_QuadMasters:Remote Login
In the late 1980s, as graphical, window-oriented user interfaces became popular, protocols were developed to allow remote windowing operations, much as earlier protocols allowed remote terminal operations. Although conceptually similar, the operation of such windowing protocols is markedly different.
Let's say we are preparing a huge PowerPoint presentation for a meeting on Friday. All of the PowerPoint files and PDFs and images that you want to use in your presentation are saved on the hard drive of your work computer.Thursday rolls around and you wake up with a nasty stomach virus.You don't feel well enough to go to the office, but you need to finish that presentation. Here's where remote login can help.
In simple words Remote Login means to access other computers on the network or on the other network by the use of telnet or rlogin command.In other words we can also say that Remote Login means to access native computer from the other computer on the network when you are connected to the internet.
Remote login, however, uses simple desktop sharing software to give you a "remote control" for accessing your computer and all of its software and hard drive files from any Internet-connected device anywhere in the world.
Remote login will only work if the host computer is powered on, connected to the Internet and running the desktop sharing software
Common tools used are:Telnet,SSH(secure shell),Putty,etc
group19_angels : http proxy server
We will host a proxy server both in Linux/Windows and for the demonstration purpose, we will host a proxy server in our home router and computer, configure a dynamic DNS (through dyndns.org) to connect to it.
Our tool of choice is Squid:


