Someone from the outside world (10.1.2.3) attempts to open a connection from port 5150 on a remote host to the Web proxy server on port 8080 on one of your local hosts (172.16.3.4), in order to carry out an attack. Typical packets are as follows: Scenario Direction 3 4 In Src Addr Dest Addr Protocol Dest Port Action 10.1.2.3 172.16.3.4 TCP Out 172.16.3.4 10.1.2.3 Will the attack succeed? Give details. TCP 8080 5150 ? ?

Someone from the outside world (10.1.2.3) attempts to open a connection from port 5150 on a remote host to the Web proxy server on port 8080 on one of your local hosts (172.16.3.4), in order to carry out an attack. Typical packets are as follows: Scenario Direction 3 4 In Src Addr Dest Addr Protocol Dest Port Action 10.1.2.3 172.16.3.4 TCP Out 172.16.3.4 10.1.2.3 Will the attack succeed? Give details. TCP 8080 5150 ? ?

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

SMTP (Simple Mail Transfer Protocol) is the standard protocol for transferring mail between hosts. A TCP connection is set up between a user agent and a server program. The server listens on TCP port 25 for incoming connection requests. The user end of the connection is on a TCP port number above 1023. You have defined the packet filter rule set shown in the table below. These rules permit and/or deny inbound and outbound traffic between the user agent and the mail server. Describe the purpose of each packet filter rule in the table. Rule Direction Source Address Destination Address Protocol Destination Port Action A2 In External Internal TCP 25 Permit B2 Out Internal External TCP > 1023 Permit C2 Out Internal External TCP 25 Permit D2 In External Internal TCP > 1023 Permit E2 Either Any Any Any Any Deny
You have just configured a DNS server. Your security team mandates that you cannot use the root hint servers for external lookups. Instead, all external lookups must go through the OpenDNS servers 208.67.220.220 and 208.67.222.222. What mechanism in the DNS server setup lets you specify a specific DNS server to query for external lookups ?
One connection may send multiple packets between two hosts. Please break down cargo processing times. Is it expected that one delay would last a certain amount of time while the other may be adjusted?
Three-way handshake is used by a TCP client and a TCP server to establish a connection, as illustrated below: 1st: client:port1 -> server:port2, SYN 2nd: server:port2 -> client:port1, SYNACK 3rd: client:port1 -> server:port2, ACK When this client is performing scanning attacks, it will generated a large number of failed connections. In each failed connection, the three-way handshake fails to complete. People commonly use SYN together with the absence of its corresponding SYNACK in this same TCP session to identify whether this connection is failed. By investigating the failed connections, an engineer finds that in legitimate/benign cases, if the server does not return SYNACK to the client, the client will not send the ACK packet after SYNACK (e.g., the 3rd packet above). Therefore, this engineer suggests that we can count the failed connections based on the following rules without considering SYNACK: If a client:port1 sends…
True or False 1. After fast retransmit is invoked, fast recovery cuts the slow start period in half 2. A host sends a segment with a sequence number 35 and a payload of 5 Bytes. The ACK number in that segment is 40 3. TCP segments can only be lost when router queues overflow. Please explain if possible， Thank you!
Your host has IP address 172.16.1.1. Someone tries to send e-mail from a remote host with IP address 192.168.3.4. If successful, this will generate an SMTP dialogue, consisting of SMTP commands and mail, between the remote user and the SMTP server on your host. Assume that a user on your host tries to send packets for this scenario as shown: Scenario Direction Src Addr Dest Addr Protocol Dest Port Action 1 In 192.168.3.4 172.16.1.1 TCP 25 ? 2 Out 172.16.1.1 192.168.3.4 TCP 1234 ? Rule table: Rule Direction Src Addr Dest Addr Protocol Dest Port Action A In External Internal TCP 25 Permit B Out Internal External TCP > 1023 Permit C Out Internal External TCP 25 Permit D In External Internal TCP > 1023 Permit E Either Any Any Any Any Deny Indicate which packets are permitted or denied, and which rule is used in each case.
Write an access list that denies IP traffic from host 152.5.35.83, permits IP traffic from host 104.2.64.34 and all hosts on networks 185.25.0.0/16, and denies all other IP traffic. Invoke your access list inbound on interface S0/1.
There are events from different web server logs (see below). What can you tell about each row? What is happening in each row? What might be interesting in case of incident investigation? timestamp="09/Mar/2016:11:14:34 +0300" client_ip="73.9.84.166" user_agent="Debian APT-HTTP/1.3 (0.8.16~exp12ubuntu10.26)" url="/precise-security/stable/amd64/Packages.bz2"[09/Mar/2016:11:14:35 +0300] wiki-api.company-realm.ru 25.255.240.122 "GET /_api/frontend/.is_readonly?=&__uid=1120000000006167 HTTP/1.1" 200 "-" "-" "ivanovaa" "companyuid=5986251411438764783" - 717 0.022 0.022[09/Mar/2016:11:14:35 +0300] fml.company-realm.ru 202a:6b8:b010:2048:0:d0c0:5:12 "GET /rest/v2/call/collectPoolFromQueriesRatings/32b86116-e409-11e5-bdc7-0025909427cc?ticket=3201127 HTTP/1.1" 414 "-" "Apache CXF 3.0.4" "-"[09/Mar/2016:11:14:35 +0300] 127.0.0.1:443 127.0.0.1 "GET /ping HTTP/1.0" 200 "-" "KeepAliveClient" "-" "companyuid=-" - 273 0.146 0.146[09/Mar/2016:11:14:34 +0300] st.company-realm.ru 127.0.0.1 "GET…
2.2-7 A detailed Look at an HTTP GET (3). Again, suppose a client is sending an HTTP GET request message to a web server, gaia.cs.umass.edu. Suppose the client-to-server HTTP GET message is the following (same as in previous problem): GET /kurose_ross_sandbox/interactive/quotation2.htm HTTP/1.1 Host: gaia.cs.umass.edu Accept: text/plain, text/html, text/xml, image/jpeg, image/gif, audio/mpeg, audio/mp4, video/wmv, video/mp4, Accept-Language: en-us, en-gb;q=0.1, en;q=0.7, fr, fr-ch, da, de, fi If-Modified-Since: Wed, 09 Sep 2020 16:06:01 -0700 User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebkit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11 Does the client have a cached copy of the object being requested? [Note: you can find additional questions similar to this here.] O Yes, because this is a conditional GET, as evidenced by the If-Modified-Since field. O No, because a client would not request an object if it had that object in its cache. O There's not enough…
In this problem we investigate whether either UDP or TCP provides a degree of end-point authentication. a. Consider a server that receives a request within a UDP packet and responds to that request within a UDP packet (for example, as done by a DNS server). If a client with IP address X spoofs its address with address Y, where will the server send its response? b. Suppose a server receives a SYN with IP source address Y, and after responding with a SYNACK, receives an ACK with IP source address Y with the correct acknowledgment number. Assuming the server chooses a random initial sequence number and there is no "man-in-the-middle," can the server be certain that the client is indeed at Y (and not at some other address X that is spoofing Y)?
Please written by computer source Write a Snort rule to detect a connection attempt on the telnet server which has an IP address 192.168.32.129 and generate alerts for packets with content ‘Telnet!’ directed to the server.
The packets listed below were received by your network's stateful firewall, and they are shown in the following table in random order. The IP addresses of two hosts in your LAN, IP1 and IP2, and two external hosts, IP3 and IP4, are assumed to be IP1 and IP2, respectively. Indicate the number of established sessions and the number of half-formed sessions by evaluating these packets. established sessions. Packet Direction Pa1 Pa2 Pa3 Pa4 Pa5 раб Pa7 Pa8 Pa9 out Out in Out In in out out In Source IP IP1 IP2 IP3 IP2 IP4 IP4 IP2 IP1 IP4 Dest. IP IP3 IP4 IP1 IP4 O None of them IP2 IP2 IP4 IP3 IP2 Source Dest. Port Port 23 X 25 23 25 y y 80 X n y X y 25 25 n 23 80 SYN 1 1 1 0 1 0 1 0 1 ACK 0 1 1 1 0 1 1 1 0 O The number of established sessions=2 & The number of half established sessions = 1 The number of established sessions=0 & The number of half established sessions - 3 O The number of established sessions 2 & The number of half established sessions = 2 O The number of established…