Advanced security and network forensics: network forensics.

Buchanan, William J

Abstract

3 NETWORK FORENSICS
3.1 Objectives
3.2 Introduction
3.3 The key protocols
3.4 Ethernet, IP and TCP headers
3.5 TCP connection
3.6 ARP
3.7 SYN
3.8 Application Layer Analysis - FTP
3.9 ICMP
3.10 DNS
3.11 Port scan
3.12 SYN flood
3.13 Spoofed addresses
3.14 Application Layer Analysis - HTTP
HTTP messages
3.15 Network logs on hosts
3.16 Tripwire
3.17 Tutorial

Citation

Buchanan, W. J. (2011). Advanced security and network forensics: network forensics. [Educational toolkit]. Edinburgh Napier University

• Other Type: Teaching Resource
• Publication Date: Jan 25, 2011
• Deposit Date: Jan 25, 2011
• Publicly Available Date: Jan 25, 2011
• Peer Reviewed: Not Peer Reviewed
• Keywords: Network forensics; network protocols; application protocols; file transfer; tripwire; host trace
• Public URL: http://researchrepository.napier.ac.uk/id/eprint/4148