Examine the packet capture below. What can be determined based on the packet information?

The correct answer is C. The packet is source routed through the host at 10.0.1.1.. This data is an example of a source routed packet which is being forced through the host at 10.0.1.1. The command hping3 74.125.226.112 -I eth0 --ssrr 10.0.1.1 was used to create the packet. As a result, the host is not being scanned and the packet length describes the size of th

Reconnaissance, Scanning, and Enumeration

Question

Exhibit

Options

AThe host 74.125.226.112 is being scanned as the source port keeps changing.
BThe packets are an invalid length of 62 bits.
CThe packet is source routed through the host at 10.0.1.1.
DThe data contained in the packet is encrypted.

How the community answered

(16 responses)

A
25% (4)
B
6% (1)
C
56% (9)
D
13% (2)

Explanation

This data is an example of a source routed packet which is being forced through the host at 10.0.1.1. The command hping3 74.125.226.112 -I eth0 --ssrr 10.0.1.1 was used to create the packet. As a result, the host is not being scanned and the packet length describes the size of the frame captured by wireshark and is 62 bytes or 496 bits. The hex data that is displayed in the example is only of the header for the packet and does not describe the payload or any other encrypted medium.

Topics

#source routing#packet analysis#IP options#network forensics

Community Discussion

No community discussion yet for this question.

Full GCIH Practice