Network Troubleshooting/Protocol Analyzer Tools

Wireshark is the most popular network troubleshooting tool - protocol analyzer as they call themselves. It is free and open source. It can be used for network analysis, troubleshooting, protocol analysis and education. 

What is DHCP?

DHCP stands for Dynamic Host Control Protocol. In order to describe DHCP we need to first describe BOOTP, which it evolved from. BOOTP protocol was used for assigning IP addresses to diskless workstations. It was not a dynamic protocol, i.e. it was not assigning the IP addresses dynamically. It was pulling the addresses from a static BOOTP file which was maintained by the network administrator. Unlike the BOOTP, DHCP helps you to assign the IP addresses dynamically to the network computers or any devices that needs IP address to connect to the internet. The IP addresses delivered by the DHCP are delivered from a pool which the network administrator created on the DHCP server. These IP addresses can be assigned permanently or temporarily. DHCP removes a great part of the drudgery that would be included in manual assignments of IP addresses. As well as the specific DHCP appliances, most network operating systems provide DHCP service.

What is DNS?

DNS stands for Domain Name System. It helps correlating a user-friendly name to IP address. If DNS was not present, we should be memorizing the IP address of each host – which is impossible. DNS converts IP addresses to easy to remember texts – which we call hostnames. When you type this text into a web browser or if you try to send an e-mail, this request is relayed to a name server which looks up for the IP address of the web server.

How Does DNS Work?

DNS Based Attacks

Each and every day we are seeing new types of attacks. Throughout the experiences in customer networks, there are multiple kinds of attacks and we need to treat them differently.

The Volumetric or DDoS attacks:

  • DNS reflection
  • DNS amplification
  • TCP/UDP/ICMP floods
  • NXDOMAIN attack
  • Phantom domain attack
  • Random subdomain attack
  • Domain lockup attack

DNS Based Attacks:

How to Send Commands to the CISCO Router via SNMP

Requirements

1- First create a community and grant Read&Write rights to this community.

en
conf t
snmp-server community community-name rw
copy running-config startup-config

2- Configure tftp, ftp etc services on the server which will be sending the commands.
3- Create a directory including the file containing the commands to be sent.

Method

Using FreeRadius To Update and Proxy Requests

FreeRADIUS is a modular, high performance free RADIUS suite developed and distributed under the GNU General Public License, version 2, and is free for download and use. The FreeRADIUS Suite includes a RADIUS server, a BSD-licensed RADIUS client library, a PAM library, an Apache module, and numerous additional RADIUS related utilities and development libraries. This is the description in Wikipedia.