Packet Captures

From Network Security Wiki
Jump to navigation Jump to search

Various Pcap files for studies are as follows:


PCAP files

Common packet captures files used across the site and for studies are below:

VPN Captures

Packet Type Description Page Link
ScreenOS Site to Site VPN Main Mode VPN negotiations (FW1 is Responder; FW2 is Initiator) VPN Lab, Debug
Dialup VPN Aggressive mode Dailup VPN VPN Lab, Debug
Aggressive Mode VPN
Dailup Xauth IP VPN Aggressive mode Dailup VPN with XAuth IP Assignment VPN Lab, Debug
Dailup Xauth IP VPN Aggressive mode Dailup VPN with XAuth User login VPN Lab, Debug
NAT Traversal NAT Traversal on Cisco Routers VPN Lab, Debug
Manual Key VPN Manual Key or Static VPN captures Manual Key VPN

FTP-TFTP

Packet Type Description Page Link
Active Mode FTP FTP in Active Mode Active FTP
Passive Mode FTP FTP in Passive Mode Passive FTP
TFTP RRQ TFTP Read Request TFTP
TFTP WRQ TFTP Write Request TFTP

Routing Protocols

Packet Type Description Page Link
BGP BGP
eBGP BGP
BGP Notification BGP
BGP MD5 BGP
OSPF OSPF
OSPF MD5 OSPF
OSPF LSAs OSPF
OSPF LSA Route Add Delete Add - #101; Delete - #130 OSPF
OSPF over GRE Tunnel OSPF
EIGRP Neighbors EIGRP
EIGRP adjacency EIGRP
EIGRP goodbye EIGRP
EIGRPv2 adjacency EIGRP
RIPv1
RIPv2

ARP

Packet Type Description Page Link
ARP ARP
ARP Storm ARP
Gratuitous ARP ARP
Gratuitous ARP HSRP ARP
RARP Request ARP

DNS-DHCP

Packet Type Description Page Link
DNS Capture Contains TXT, MX, LOC, PTR, A, AAAA, Any, NS, SRV queries DNS
DHCP All packets broadcast implementation DHCP
DHCP 2 Unicast packets implementation DHCP
DHCP Inter VLAN DHCP
Dhcp-auth DHCP

HTTP - HTTPS

Packet Type Description Page Link
HTTP Sack Used HTTP
SSL Sack Used SSL


Misc Captures

Packet Type Description Page Link
TCP SACK SACK(frame #31), Timestamp TCP/IP
Smtp
Teardrop
Telnet
Port Scan
Traceroute Traceroute
Path MTU Fragmentation Needed message in packet #6 Path MTU Discovery
NAT Ping Packet with & without NAT
IP Fragmentation
SNMP
SIP
GRE Encapsulated Ping
RADIUS
DTP
Slammer Worm
GLBP election
HDLC
HSRP
HSRP election
HSRP failover
Hsrp-and-ospf-in-LAN
RADIUS2 Using Access-Challenge (EAP)
SSHv2
TACACS+
Bittorrent
IPv6
Vnc-sample
Blaster Worm
OS Fingerprinting
STP
MySQL
ICMP ICMP








blog comments powered by Disqus