Securing Router Logins with SSH
Securing Router Logins with SSHThis is a walk through to help new students learn how to configure a more secure login with a router and utilize SSH.
Checking Router Bin file
This is a check to ensure that the router you are using is going to run SSH.
- Step 1
Issue the command show flash, to check and see if K9 is in the bin file
Basic Operation of Wireshark
This will cover opening and running Wireshark in a virtual machine to capture packets.
- Step 1
First open Wireshark by double clicking on the icon.
- Step 2
Click on the Capture Options on the left side of the window, will give you a screen that looks like this.
- Step 3
Click on the drop arrow button on the top right of the window and select the VMware network adapter.
- Step 4
Click on the Start button. You are now capturing packets!!!
- Step 5
To stop a capture click on the red x button on the top left side on the capture window.
Examining Capture Data
In this section we will be showing you how to capture protocols and where to locate the important values given by the use of wireshark.
Color Code
- YELLOW: Indicates the MAC Address of both the destination and source.
- GREEN: Indicates the NIC Manufacturer of both the destination and source.
- RED: Indicates the NIC Serial Number of both the destination and source.
- BLUE: Indicates the Frame Type of the packet.
- PINK: Indicates the IPv4 of both the destination and source.
- NOTE: The the Preamble and the FCS are NOT shown on wireshark.
FTP
HTTP
ARP
DNS
ICMP
Creating a Shortcut to Auto Run Wireshark
In this section we will be showing you how to create a new desktop icon to auto start your wireshark and have it select the correct network adapter and start capturing by simply double clicking the new icon.
- Step 1
Right click the Wireshark icon and click copy.
- Step 2
Right click on the desktop and click paste.
- Step 3
Right click the new icon and rename "Wireshark Auto Start"
- Step 4
Open Wireshark and click on the Capture Options go to the pull down as previously mentioned and select the VMware network adapter, open the window fully to see the path and select everything after the after the : you should have this selected \Device\NPF_{numbers} as seen in the picture.
- Step 5
Right click and click properties on the NEW Wireshark icon, and add this to the end of the target line -k -i
- NOTE: You need to have a space before the -k and after the -i.
- Step 6
Now after the -i "and the space" paste the \Device\NPF_[numbers} to the target line as shown in the picture.
- Step 7
Click on the Ok button and now you can simply double click the new icon to start Wireshark and select your network adapter and begin capture with one click of the button. Enjoy!!!