Network traffic analysis in Cybersecurity - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to capture network packets using a common tool.

Cybersecurity

tcpdump -i [1]

Drag options to blanks, or click blank then click option'

A192.168.1.1

Bfile.txt

Ceth0

Dport 80

Attempts:

3 left

💡 Hint

Common Mistakes

Using a filename instead of an interface.

Using an IP address where interface name is required.

The tcpdump command uses -i to specify the network interface, such as eth0.

2fill in blank

medium

Complete the command to filter captured traffic by HTTP port.

Cybersecurity

tcpdump port [1]

Drag options to blanks, or click blank then click option'

A53

B22

C443

D80

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing port 22 which is for SSH.

Choosing port 443 which is for HTTPS.

HTTP traffic commonly uses port 80.

3fill in blank

hard

Fix the error in the command to save captured packets to a file.

Cybersecurity

tcpdump -w [1]

Drag options to blanks, or click blank then click option'

Acapture.pcap

Bcapture.txt

Ccapture.log

Dcapture.csv

Attempts:

3 left

💡 Hint

Common Mistakes

Using .txt or .log which are not valid capture formats.

Using .csv which is not suitable for packet data.

The -w option saves packets in pcap format, so the file should have a .pcap extension.

4fill in blank

hard

Fill both blanks to create a filter for TCP traffic from a specific IP.

Cybersecurity

tcpdump tcp and src [1] and dst port [2]

Drag options to blanks, or click blank then click option'

A192.168.0.10

B22

C80

Dudp

Attempts:

3 left

💡 Hint

Common Mistakes

Using UDP instead of TCP in the filter.

Mixing source IP and port numbers incorrectly.

This command filters TCP packets from source IP 192.168.0.10 to destination port 80, which is common for HTTP.

5fill in blank

hard

Fill all three blanks to create a dictionary comprehension that maps IPs to packet sizes for packets larger than 100 bytes.

Cybersecurity

packet_counts = [1]: [2] for [3] in packets if len([3].data) > 100

Drag options to blanks, or click blank then click option'

Apkt.src_ip

Bpkt.size

Cpkt

Dpkt.dest_ip

Attempts:

3 left

💡 Hint

Common Mistakes

Using destination IP instead of source IP as key.

Using wrong variable names causing errors.

This comprehension creates a dictionary where keys are source IPs (pkt.src_ip) and values are packet sizes (pkt.size) for packets larger than 100 bytes, iterating over each packet as pkt.