Computer Science Assignment: Network Analysis Tools and Commands

This assignment provides solutions to a computer science homework focusing on network analysis and related tools. It includes answers to questions on various topics, such as using the MTR command, configuring DHCP settings, and using the Netstat utility on a Windows system. The assignment also covers the open-source network forensic analysis tool Wireshark, explaining how to filter for FTP traffic and password attempts. Additionally, it lists a bibliography with relevant resources. The assignment covers a range of topics and tools, including network commands, packet capturing, and forensic analysis. The student has provided solutions to key questions covering the usage of several network utilities and tools, including the syntax and applications of the tools and commands such as MTR, Netstat, and Wireshark.

Running head: COMPUTER SCIENCE
Computer science
Name of the Student
Name of the University
Author’s Note

1
COMPUTER SCIENCE
Question 1
What is the syntax to send 50 ICMP ECHO requests to the host labgw.tc4.space using the mtr
program?
Answer to question 1:
mtr –r -c 50 labgw.tc4.space
Question 2
On a Windows system, what is the option to renew the DHCP-assigned addresses for all of the
device’s network interfaces? Hint: Remember that for Windows the command switch (option),
may use a forward slash (/), instead of a rather than a hyphen (-)?
Answer to question 2:
Ipconfig /renew
Question 3
What is the syntax (on a Windows system) to show the network statistics about each packet
transmitted by a host, separated according to protocol type (IP, TCP, UDP, or ICMP) with a list
of routing table information? Hint: this command requires some hyphen (-) based options (also
called flags, or switches).
Answer to question 3:
Netstat -A
Question 4
What is the name of a Windows utility similar to mtr?

2
COMPUTER SCIENCE
Answer to question 4:
Traceroute is the windows utility that is similar to mtr
Question 5
What is the syntax to redirect the stdout and stderr of the "cat foo > bar" command to the bar file
without stdout or stderr displaying anything to the screen?
Answer to question 5:
Cat foo & > bar
Question 6
_________________ is an open source Network Forensic Analysis Tool (NFAT) for Windows
(but also works in Linux / Mac OS X / FreeBSD). This tool can be used as a passive network
sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open
ports etc. without putting any traffic on the network. This tool can also parse PCAP files for off-
line analysis and to regenerate/reassemble transmitted files and certificates from PCAP files.
Answer to question 6:
Wireshark is the open source network forensic analysis tool
Question 7
What would be a Wireshark filter to search for FTP traffic with password attempts?
Answer to question 7:
ftp.request.command ==USER || ftp.request.command==PASS

3
COMPUTER SCIENCE
Bibliography
Both, D. (2018). Use Commonsense Naming. In The Linux Philosophy for SysAdmins (pp. 247-
256). Apress, Berkeley, CA.
Heo, K., Lee, W., Pashakhanloo, P., & Naik, M. (2018, October). Effective program debloating
via reinforcement learning. In Proceedings of the 2018 ACM SIGSAC Conference on
Computer and Communications Security (pp. 380-394). ACM.