|
page:
<<
1
2
3
4
5
6
7
8
9
10
>>
of 1 pages
|
< previous page | next page >
|
| Nov 22, 2007 @ 3:30 AM |
catching hackers
|
|
ToucherinSparks
Posts: 6,701
|
Maybe some of you hackers can help me out. We have someone(s) that are attacking our networks, and they are using some old tricks like IP spoofing and address masking. I can trap and trace them back to the origin IP address, but it takes too long using the sniffer software. Anyone know any good shortcuts? We'd like to catch these guys while they are still online.
|
|
  |
|
| Nov 22, 2007 @ 3:39 PM |
catching hackers |
|
SunBabe
Posts: 12,251
|
LOL, I can only imagine the "challenges" when you work for a university full of smartazz kids. 
|
| |
|
| Nov 22, 2007 @ 6:44 PM |
catching hackers
|
|
sealacamp
Posts: 3,154
|
If you have the IP address you can use the command prompt and the trace route function. If it is not an invalid IP address trace route can find the origin of any IP address very quickly. There is also a function that can trace the hops and their IP addresses using the command prompt, otherwise known as a DOS window.
S
|
|
| |
|
| Nov 23, 2007 @ 12:00 AM |
catching hackers |
|
_CQ_
Posts: 85
|
Trace Route (tracert) is the way one would detect the hops back to an IP address.
Here is a link to a program I have found useful.
http://www.d3tr.com/
|
| |
|
| Dec 9, 2007 @ 5:09 PM |
catching hackers
|
|
mystery2u888
Posts: 6,230
|
 good info............  
|
|
| |
|
| Dec 21, 2007 @ 3:27 PM |
catching hackers |
|
jay_m_h1
Posts: 25
|
What Sniffing software are you using , Shouldn't take no time if you have good software , its live and shows you not only what there doing what there looking at and downloading and where there accessing and from where
Some free ones Below AnalogX recomended
http://netsecurity.about.com/cs/hackertools/a/aafreepacsniff.htm
But for the Professional Suite you need
http://www.wildpackets.com/products/overview
But its obvious your attackers are a little knowledgeable and are Spoofing there address and Proberly using proxy servers in that case its going to take alot of work to track and find them
The first thing you need to do is get all the info you can on them
Click Start then Click Run type cmd hit enter
now type netstat /a to show Listing to all incoming connections
https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/netstat.mspx?mfr=true
ipconfig /all
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ipconfig.mspx?mfr=true
use tracert once you have gathered all the Information you can
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/tracert.mspx?mfr=true
http://centralops.net/asp/co/Traceroute.vbs.asp
http://www.tracert.org/traceroute/
http://support.microsoft.com/kb/314868
Nbtstat
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/nbtstat.mspx?mfr=true
Forgive me Im about to be rude if you work for a School as a Admin you should know these basic commands and how to obtain simple Information
But if your a home User I apologize
Networking 101
http://kb.iu.edu/data/acfh.html
Sence your not Advance enough to track them your Best bet is to stop them
Stop the Ip Spoofing
1. Use authentication based on key exchange between the machines on your network; something like IPsec will significantly cut down on the risk of spoofing.
2. Use an access control list to deny private IP addresses on your downstream interface.
3. Implement filtering of both inbound and outbound traffic.
4. Configure your routers and switches if they support such configuration, to reject packets originating from outside your local network that claim to originate from within.
5. Enable encryption sessions on your router so that trusted hosts that are outside your network can securely communicate with your local hosts.
A good Book to read
http://books.google.com/books?id=aykZtEhl6GMC&pg=PA198&lpg=PA198&dq=prevent+ip+spoofing&source=web&ots=DTJQiyiMY9&sig=194aguWgqKVedj2fJAD_JHRGgak
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/mod_icn/fwsm/fwsm_3_1/fwsm_cfg/protct_f.pdf
And more links to help on Network Prevention
http://www.google.com/search?hl=en&client=firefox-a&rls=com.google%3Aen-US%3Aofficial&q=Preventing+Network+Attacks&btnG=Search
And test your own security see what holes are open
https://www.grc.com/x/ne.dll?bh0bkyd2 Aka ShieldsUp
http://www.symantec.com/norton/sygate/index.jsp Aka Nortons
http://www.alken.nl/online-security-check.htm
use Professional Firewall software like Blackice
http://www.iss.net/blackice/
http://www.grc.com/lt/leaktest.htm
Tutorial on network Intrusion Detection
http://www.windowsecurity.com/whitepapers/FAQ_Network_Intrusion_Detection_Systems_.html
Thats All I'm Sharing
The rest your going have to learn on your Own
Good Luck
http://network-tools.com/ 
|
| |
|
|
|
|
|
page:
<<
1
2
3
4
5
6
7
8
9
10
>>
of 1 pages
|
< previous page | next page >
|