Activity 8.2: tcpdump – Capture and Analysis Practice
This activity will go through the usage of the tcpdump Linux network utility. You will use your Kali machine, with internet access, for this exercise. You will practice with the tcpdump tool and gain skills for basic network traffic analysis.
Scenario: Your organization has noticed unusual activity on the network, particularly involving HTTP traffic. Your task is to capture this traffic and analyze it to identify any suspicious activity by following these steps:
- Open a terminal on your Kali machine.
- Use tcpdump to capture HTTP traffic and save it to a file. You will need to navigate to some websites to generate traffic.
- After you have started the capture, open Firefox and navigate around to a few different sites to generate HTTP traffic.
- Let the capture run for a few minutes to gather sufficient data, then stop it (Ctrl + C).
- Analyze the captured data with tcpdump.
- Identify the IP addresses...
