Introduction: After assiduously reading and meticulously scrutinizing the quintessential details of the practical, this practical indeed acquainted me with intriguing and profound knowledge on how to exploit the versatile and robust Wire shark protocol analyzer to capture and examine a plethora of network packets accompanied by the ability to intercept and view network traffic which facilitates the expiation (correction) of address connection errors to establish optimal connectivity in the client and server communication interface in tandem with resolving, alleviating and troubleshooting the increase of multitudinous and perplexing networking conundrums (problems). In addition, this practical also enables us to assimilate a wide array of techniques on how to dissect important information that is being encased within each packet which enables you to covertly view secretive and confidential information such as passwords or usernames that a particular user has typed in a login interface of a certain website which might pose an imminent risk to the user as it might have dire and unbridled ramifications for the victim. Furthermore, it also succinctly accentuates the dire consequences that would ensue from the contravening of the wiretap act in tandem with the valid and justifiable exceptions that would not be regarded as flouting the Wiretapping act.
Body:
First and foremost, the Wire shark protocol analyzer serves as an imperative tool for inspecting and scrutinizing data packets but also delineates the process of the transfer of packets from one computer to another when a particular computer initiates and inputs a ping command with the IP address of the latter computer being concatenated to it. When this command is being executed in the command prompt, the first computer would render an ARP request in the form of a Broadcast (specified under the destination column) which implies that the message is being transmitted and disseminated to a numerous number of computer being situated within the bridge network coupled with the Query (Q) which prompts all the computers within the network about who has the IP address requested. The purpose of the ARP is to map the associated IP address that is being prompted by the first computer to the destination Mac address pertaining to the host computer that is entitled to that IP address being requested. Subsequently, the second computer would respond to the prompted command by sending an ARP request that would entail its Mac Address which is the most crucial facets that must be embedded in the cache of the sender’s computer that is pivotal to the success of transmitting messages to that recipient’s device.
Subsequently, through delving and dissecting deeply and thoroughly into the specifications and details of each packet, we could identify that the first line in the second text field area represents a laconic and brief description of the packet itself accompanied by the data link layer, network layer and the transport layer accompanied by the genuine data encapsulated inside the packet. Firstly, the IP layer is related to the mobility and transmission of data and messages between networks accompanied by testing its connectivity which encompasses the Source and Mac address, the header length of 20 bytes which depicts that it is a minimum header length and the differentiated service header which purpose is to succor the organization in categorizing in order to facilitate the transmission network traffic and introduce impeccable quality of service into modern IP networks. Subsequently, the transport layer is where the applications establish a port connection medium as a means for facilitating communication. Under this section, it contains the source and destination ports that represents the sender’s port number and the destined port where the sender’s packet is being directed to respectively accompanied by sequence and acknowledgement numbers which are assigned to each byte sent and to identify the relapse of data being transmitted respectively. Moreover, the other details which are of paramount importance are the checksum which is utilized for identifying errors that occur in the header or data. Finally, the data component enables you to see the type of data being transmitted over the network which comprises of several unique applications such as the Secure Shell (SSH) which has the propensity of encrypting data, reinforcing user authentication and compressing data in transit to ensure integrity protection where passwords and usernames are encrypted which means they are difficult to decipher. However, the rlogin commands implies that passwords were unencrypted which implies that the data is being sent in the form of plaintext and is considered legible but unsafe.
Apart from packet inspection, the Network Interface Card (NIC) embedded in the wire shark protocol analyzer is also must be attuned to the promiscuous mode which implies that the Wire Shark protocol analyzer could be accustomed to capture and process all data packets percolating through your network regardless of its intended destination which can be accomplished by pressing the start button that would cause the screen to perpetually and unremittingly list a continuous stream of network packet traffic being experienced within your network and the network activity of your computer regardless whether it is on your local or external computer. To expedite the processing of packets traffic, you could make the network a bustling hive of activity through surfing the internet or executing the ping commands to initiate and test a communication with various computers within your network boundary/vicinity. Moreover, the most intriguing concept is that when we access an application and enter confidential authentication particulars either through a website or the command prompt, we would be able to divulge and view these details through right clicking the packet before clicking on the options list navigation called “Follow TCP stream” in order to reveal these sensitive login information which might be a risky gambit to be caught red-handed viewing it in front of security law enforcement officers.
Privacy issues and laws of wiretapping:
Last but not least, to enable one to become more cognizant and aware about the consequences of wiretapping worldwide, the wiretapping act takes any form of wiretapping seriously and tends to express rebuke over these unscrupulous activities as it would result in the infringement of personal privacy. The wiretapping act elaborates lucidly that that it is illicit to intentionally covertly or surreptitiously intrude and intercept, divulge or exploit the contents of any forms of communication regardless whether they are wire, oral or electronic is being deemed as a dishonest and ignominious act which should be strictly prohibited. Moreover, if they are repeat offenders, they could be subjected to harsh punishments or even liable for perjury charges as you are being considered as a malefactor of committing an act of transgression.
To expound it in greater detail, “wire” communications involves the use of cabling or various forms of wires to establish a connection between the point of residence and reception but it must entail a human voice. Subsequently, “Electronic” communication means is the type of communication that embodies the usage of pictures or words without the need for any forms of communication. Lastly, “oral” communications implies that messages must be interpreted or conveyed to another audience in a verbal manner in anticipation that the entire enclosed conversation would not be abruptly and frivolously intercepted. Furthermore, the Electronic Communications and Privacy Act (ECPA) announced serve as a medium for email messages by protecting it and circumvent it from being transparent and conspicuous(visible) to third parties.
However, there a 2 exceptions that would not apply to this act such as when the service provider is conducting their designated routines such as overhauling equipment or reinforcing its network to ensure its indemnity is firmly sustained accompanied with the issue of search warrants by law enforcement officers in their quest to extradite wiretapping suspects thus enabling them to make it their prerogative to intercept the network to gather information about their notorious wiretapping intentions. Moreover, law enforcement officers can also listen and tap into networks if a government official gave a unanimous assent to identify the culprits who are caught red handed for committing the act of wiretapping.
Conclusion:
All in all, after assessing the key priorities and objectives of this practical, I began to become more immersed in the study of packets as it explicates (analyzes) the techniques on how to use Wire Shark protocol analyzer to collect numerous IP packets and inspect the intrinsic features that are being embedded within the packet and so that one could exploit the use of packets to provide a remedy for detection and to revamp several errors entailing the manipulation of original data content using the Cyclic Redundancy Check process that would ensure that the message content in the packet remains genuine and authentic but not fabricated and distorted. Moreover, this practical also apprised and exhorted us not to throw caution to the wind and that one should exercise thorough discretion over any forms of committing wiretapping locally and abroad as it could tarnish and have a pernicious effect on the reputation of others which is also regarded as an infringement and violation of the privacy and security thus causing the victim to agonize over it and become traumatized that would cause him or her to embark of an act of class action lawsuit or litigation for being as a malefactor of felony(internet and cybercrime) of the wiretap act