https://asecuritysite.com/cyberdata/ch06

1. Network
Forensics and
Protocols
“From bits to information”

2. Outline
• The Core Protocols.
• ARP.
• SYN.
• FTP.
• ICMP.
• DNS.
• Port Scans.
• SYN Floods.
• Application Layer.

3. The Core
Protocols
“From bits to information”

4. Data Encapsulation

5. Ethernet, IP
and TCP

6. Three-way
handshake

7. ARP
“From bits to information”

8. ARP

9. ARP

10. SYN
“From bits to information”

11. SYN

12. SYN

13. FTP
“From bits to information”

14. FTP

15. FTP

16. FTP

17. ICMP
“From bits to information”

18. ICMP

19. DNS
“From bits to information”

20. DNS

21. Port Scans
“From bits to information”

22. Port Scans

23. Port Scans

24. Port Scans

25. SYN Flood
“From bits to information”

26. SYN Flood

27. Application Layer
“From bits to information”

28. Application Layer (HTTP)

29. Network
Forensics and
Protocols
“From bits to information”