Module 4: Sniffing and Evasion Flashcards
1
Q
What is sniffing
A
intercepting traffic on the network/ eavesdropping
2
Q
IPv4 loopback address
A
127.0.0.1
3
Q
IPv6 loopback address
A
::1/128
4
Q
SMTP
A
Simple Mail Transport Protocol port 25
5
Q
FTP
A
File Transfer Protocol
Port 20 & 21
6
Q
TFTP
A
Trivial File Tranfer Protocol
Port 69
7
Q
Telnet
A
Port 23
8
Q
ARP
A
Address Resolution Protocol
9
Q
What is Port Mirroring
A
configuring the switch to copy data out of the attacker’s port. Cisco call this SPAN
10
Q
MAC Address table flooding
A
send multiple ARPS into the network switch from fake MAC addresses. Legitamate entries are dropped off the tail as the list grows
11
Q
What is Snort
A
an open-source NIDS