Installing Carnivore PE

Carnivore is a surveillance tool for data networks. At the heart of the project is CarnivorePE, a software application that listens to all Internet traffic (email, web surfing, etc.) on a specific local network. Next, CarnivorePE serves this data stream to interfaces called "clients." These clients are designed to animate, diagnose, or interpret the network traffic in various ways. Use CarnivorePE to run Carnivore clients from your own desktop, or use it to make your own clients.

Apllication found at this location:
http://www.r-s-g.org/carnivore/
to download:
Download CarnivorePE v2.2.1 for WinXP [829 k]

Requirements for Windows XP version
Requires Java version 1.5
Requires WinPcap

here is the Library location:
Download Carnivore Library for Processing Version 2.2.1 [709 k]

Class Notes

Tool to sniff and hack the switches and routres:
Cain & Abel

a softwre that runs on the new routers and switches which is working as IDS
DRAGON

Class Notes

IPChains and IPTables----- exc 242-244 and 266-268

class notes

starting slide 23
end slide: 28

DMZ
bastion hosts
application gateways

Handson Lab 242-245

ipchains -- iptables

Class notes

packet tracer : Solarwinds
stop at slide 23

discuessing the case study:

due date : 5th April for all of the cases

Case 1: Pretend that the classroom network is a self-contained network. You wish to draft a security policy that maintains security for all devices and users in the network. Make a list of all needed equipment and software to implement this policy.

example: --
client securing desktop (physical security - workstation - OS - antivirus - firewall)
server ( NOS - centrlized Antivirus - group policy -
switch (physical - vlan - config / pass - trunking
cables: physical - conduits - ohs regulations - type of cables
routers: physical - configuration (password 2 levels console /remote - ACL)\
firewall (H/W): Location - physical - environment
topolgy: perimeter - physical access (smart cards /biometric) - type of cables and connecters (specific adaptors - documentation of security policies - UPS - backup strategy - configure IPC

Case 2:
Devise (draft) a company policy regarding removable media (storage needs) that both provides employees with the functionality they need to best get their job done yet does not compromise the security of company data. Be sure to include media disposal in the policy.

removable media

http://infosyssec.org/

Case 3:
Find out more about security options on desktop switches. Use the Cisco 2950 series as an example. Go to the Cisco web site and find the documentation for this switch. Read the documentation and list as many different security features as you can find – explain each feature as you list it as it pertains to securing a network.


Case 4:
Look up the documentation for Cisco 2950 switches at http://cisco.com/en/US/products/hw/switches/index.html and explain how to configure a SPAN port. List any considerations you should take when configuring SPAN.
Case 5:


Research some of the security options for the BIND program. You can start with http://www.isc.org/products/BIND/. Make a short report that includes the best practices for configuring BIND for optimal security.

installing and setting the ENDIAN FW

LAb 367 setting up IPv6

installing IPv6

cmd