20240303_10_KrasnobabtsevArtem

.docx

School

University of Cincinnati, Main Campus *

*We aren’t endorsed by this school

Course

4076C

Subject

Electrical Engineering

Date

Apr 3, 2024

Type

docx

Pages

3

Uploaded by SuperLeopard4063

Report
IT3075C: Network Monitoring & IPS Artem Krasnobabtsev Assignment 10: The Bro/Zeek Platform 1. In a Word (docx) document, please provide the following: a. Take a screen capture after having used the "zeek-cut" (bro-cut has been depreciated - if you upgraded) command on any log file that contains information, such as: ssl.log, http.log, conn.log, for example, that displays: i. timestamp, ii. unique id, iii. source host, iv. source port, v. destination host, vi. destination port, and vii. method You can follow the commands for bro below: sudo su wireshark (capture network traffic” from ens160 internet source and save the pcapng file giving a name (brotest) on a Desktop folder such as “Bro) cd /Desktop/Bro bro -C -r brotest.pcapng apt install bro apt install bro-aux ls cat ssl.log | bro-cut -d ts uid id.orig_h id.orig_p id.resp_h method 2. What information was displayed
IT3075C: Network Monitoring & IPS Artem Krasnobabtsev Assignment 10: The Bro/Zeek Platform cat: ss1.log: No such file or directory root@student-virtual-machine:/home/student/Desktop/Bro# cat ssl.log | bro-cut -d ts uid id.origh id.org_p id.resp_h method cat: ss1.log: No such file or directory root@student-virtual-machine:/home/student/Desktop/Bro# bro --version bro version 2.4.1 root@student-virtual-machine:/home/student/Desktop/Bro# bro -C -r brotest.pcapngroot@st udent-virtual-machine:/home/student/Desktop/Bro# ls brotest.pcapng dns.log packet_filter.log weird.log conn.log files.log ss1.log x509.10g root@student-virtual-machine:/home/student/Desktop/Bro# cat ssl.log | bro-cut -d ts uid id.origh id.org_p id.resp_h method 3. What command would you use to see the version of Zeek or Bro you are running? Hint: bro --version zeek -v or bro -v a. Share a screen capture having run this command.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help