Project Report on
Download 2.35 Mb.
|
- Navigate this page:
- 4.2.1 Installing Packet Excalibur
- 4.2.2 Installing Ethereal
- 4.3 Installation on Host Target
- 4.3.1 Installing Packet Excalibur WinPcap
4.2 Installation on AttackerHost Attacker is the second server and will be the host where attacks will be generated. It will have a packet generator program called Packet Excalibur along with WinPcap and Ethereal to monitor our sent packets and make sure that our packet generator is sending the desired attack packets. 4.2.1 Installing Packet ExcaliburWhat is Packet Excalibur? A multi-platform freeware, graphical and scriptable network packet engine with extensible text based protocol descriptions. In our project we need to assemble and generate specific attacks. Each network packet of these attacks should be crafted and customized properly to evaluate snort effectiveness as an intrusion detection system. This wonderful tool will not only help us to create the desired attack packets but also will generate the crafted traffic and place it on the wire with the desired delay and repetition time. All of our machines are windows based and this software runs on windows, for Unix platforms tcp-replay would be the best choice. Installing Packet Excalibur You need to download Packet Excalibur Windows installer version 1.0.2 from http://www.securitybugware.org/excalibur/PacketExcalibur_1.0.2_win32.exe . Double click on the downloaded file to start the installation. Click next on the welcoming screen (Fig. 4.2.1) and click next to accept the software agreement. 
Fig. 4.2.1 Welcome Screen of Packet Excalibur Click next on the information window (Fig. 4.2.2) to start the installation. 
Fig. 4.2.2 Information Window of Packet Excalibur 
Note: The Packet Excalibur runs with the older version of WinPcap 3.0a.It will install WinPcap 3.0a4 automatically. If a version of WinPcap prior to 3.0a4 is already installed on your system, close this installer and uninstall WinPcap. Then run the installation once again. Click next on the choose installation folder and accept the default location (Fig. 4.2.3). 
Fig. 4.2.3 Destination Location of Packet Excalibur Click Next twice to start the installation. 
Fig. 4.2.4 Competing Installation of Packet Excalibur Once the Packet Excalibur finishes it will prompt you to install WinPcap 3.0.4a. Click finish to install it, which is shown in Fig. 4.2.4. Click next to start WinPcap installation process WinPcap 3.0a4 is straight forward. Accept the default things. For more information refer to section 4.1.1 Installing WinPcap 3.1. 4.2.2 Installing EtherealWhy to install Ethereal on Host Attacker? We need Ethereal during the process of crafting the attacks packets to capture the sending packets and make sure that they are constructed in the way we wanted. Download Ethereal ethereal-setup-0.10.14.exe or any latest version from Ethereal website http://www.ethereal.com/download.html. Refer to section 4.1.2 for installation. Do not install WinPcap which comes with Ethereal since it might make Packet Excalibur not functioning. 
Note: Don’t install WinPcap embedded with Ethereal installation. The Packet Excalibur runs with the older version of WinPcap 3.0a. It is not compatible with the newer version WinPcap 3.1 which comes integrated in Ethereal 10.14. 4.3 Installation on Host TargetHost Target is the third server and will be the host which the attacker want to intrude. In the project we will use 10 different attacks. All of these attacks packets are originated from the external attacker host except 1 attack packet that will be originated from the internal Target host toward the attacker host. This Host will have the same installation done on server 2 “ host Attacker”. 4.3.1 Installing Packet Excalibur & WinPcap4.3.2 Installing Ethereal4.3.3 Internet ServicesWe can install web, Internet Information Services (IIS), FTP, and SMTP servers on this host. These services represent the attacker interests and will help us to simulate the 10 attacks scenario. Our attacks cover web, FTP, and SMTP servers. To install these services Click on start menu, Settings, control panel. Click on add/remove software. Click on Add/remove windows component (Fig. 4.3.1). 
Fig. 4.3.1 Add/Remove Windows Component Click the chick box of Internet Information Services(IIS) Click details and select all the check boxes on the list. Click ok. Click next. Click finish. After this process your server will have a running services on ports 80 (HTTP), port 25 (SMTP) and port 21(FTP).
Note: The previous installation procedures are for this specific project. Real world running servers should not have all these services running on the same machine for security and performance issues. In our project we are not taking inconsideration these aspects and these installation processes should not be refer to for installation out side the scope of this project. Directory: courses courses -> Algorithms for Register Allocation Andrew Pardoe courses -> Ieor 4600 Mixed-Integer Rounding Inequalities courses -> San José State University Social Science/Psychology Psych 175, Management Psychology, Section 1, Spring 2014 courses -> Kennan's Telegram (Excerpt) courses -> The university of british columbia courses -> A hurricane track density function and empirical orthogonal function approach to predicting seasonal hurricane activity in the Atlantic Basin Elinor Keith April 17, 2007 Abstract courses -> Cover page need figure & title by Proposed Table of Contents courses -> Objectives courses -> Dr. Jeff Masters' WunderBlog Download 2.35 Mb. Share with your friends:
|