메뉴 닫기

Microsoft Network Monitor 소켓모니터링

다운로드사이트
첨부파일(압축)
Network Monitor (Netmon)는 네트워크 프로토콜 트래픽 분석 유틸리티입니다. Network Monitor 3.1 을 사용해서 네트워크 프로토콜을 수집하는 몇 가지 방법을 정리하였습니다.

Netmon 2.x와 3.x의 가장 큰 변화는 캡쳐 필터링이라고 생각합니다. 캡쳐 필터링 옵션 변화에 따른 패킷 수집 방법을 사례 별로 아주 기본적인 테스트를 해 봅니다. 
일반적으로 Netmon 트래픽을 수집하기 위해서는 Client와 Server 측에서 함께 로그 수집을 해야 문제 해결을 위한 보다 정확한 데이터를 얻을 수 있습니다.
아래 그림은 Netmon 3.1 인터페이스입니다. Catpure Filter 제어, Frame Summary, Frame Details, Hex Details 값을 바로 확인할 수 있습니다.
Capture Filter 에 Filter 구문을 작성한 뒤 반드시 Verify, Apply 하여 체크 및 필터를 적용해야 합니다.

사용자 삽입 이미지




[환경] Server : 192.168.0.100
Client : 192.168.0.133

Case 1. 특정 Source IP Address(192.168.0.133) 에서 유입되는 Packet 확인

IPv4.SourceAddress == 192.168.0.133

Client 에서 Server 로 터미널 서비스 접속을 시도 하였습니다.

사용자 삽입 이미지


Case 2. TCP Source Port 가 3389인 frame 확인

Tcp.Port == 3389

Client 에서 Server 로 터미널 서비스 접속을 시도 하였습니다.

사용자 삽입 이미지


Case 3. 3389 port Packet은 캡쳐하지 않음

Tcp.Port != 3389

터미널 서비스 3389 포트 커넥션을 시도 하였으나 아래 그림과 같이 캡쳐되지 않습니다.

사용자 삽입 이미지



Case 4. ARP Packet 찾기

ARP
사용자 삽입 이미지


Case 5. Source Port 1096, Destination Port 3389 과 일치하는 Packet

Tcp.SrcPort == 1096 AND Tcp.DstPort == 3389
사용자 삽입 이미지

Case 6. Command 명령을 이용한 Packet 수집

C:\Program Files\Microsoft Network Monitor 3\> nmcap /network * /capture /File client.cap:10M

모든 패킷을 수집하는 명령입니다. 수집이 완료되면 Ctrl + C 를 입력하여 수집을 중지합니다.

사용자 삽입 이미지

 
자, 수집을 하셨으니 이제 분석을 해야겠죠? 누가하죠? 어떻게?…. What?
약은 약사에게 패킷 분석은 전문 분석 엔지니어에게 ^^
 

38 Comments

  1. new g

    A person essentially help to make seriously articles I’d state.

    This is the very first time I frequented your web page and thus far?
    I surprised with the research you made to make this particular
    post extraordinary. Magnificent job!

  2. https://tinyurl.com/rsacwgxy g

    I know this if off topic but I’m looking into starting my own blog and was
    wondering what all is required to get setup? I’m assuming having a blog like yours would cost a pretty penny?
    I’m not very web savvy so I’m not 100% certain. Any tips or
    advice would be greatly appreciated. Appreciate it

  3. http://www.circumcisioncomplex.com

    I am really enjoying the theme/design of your blog.
    Do you ever run into any internet browser compatibility problems?

    A few of my blog visitors have complained about my blog not working
    correctly in Explorer but looks great in Opera.
    Do you have any suggestions to help fix this issue?

  4. Magdalen Goodrick

    I simply want to tell you that I am just newbie to blogs and actually enjoyed this blog. Likely I’m going to bookmark your blog post . You actually have perfect writings. Appreciate it for revealing your blog.

  5. generic viagra

    The next time I review a blog site, I really hope that it doesn’t dissatisfy me as high as this. I indicate, I recognize it was my option to check out, but I actually thought youd have something interesting to state. All I hear is a lot of whining about something that you can repair if you werent too busy searching for attention.

  6. cbd hemp oil

    Hi there! Someone in my Myspace group shared this site with us so I came to give it a look. I’m definitely loving the information. I’m bookmarking and will be tweeting this to my followers! Outstanding blog and wonderful style and design.

  7. cbd price for anorexic dogs

    There are some fascinating points in this article yet I don?t recognize if I see all of them center to heart. There is some credibility yet I will certainly take hold point of view until I check into it additionally. Good write-up, many thanks and also we desire a lot more! Contributed to FeedBurner as well

  8. web hosting

    hi!,I love your writing so much! share we be in contact extra about your post on AOL?
    I require an expert on this space to resolve my problem.
    Maybe that’s you! Taking a look forward to see you.

  9. cbd capsules

    This is the ideal blog for anybody that wants to learn about this subject. You recognize a lot its almost difficult to argue with you (not that I really would want?HaHa). You certainly put a brand-new spin on a subject thats been written about for many years. Excellent stuff, just wonderful!

  10. look at here now

    Aw, this was an actually wonderful article. In suggestion I wish to put in composing like this in addition? taking time and also real effort to make a very good post? however what can I state? I postpone alot as well as by no means seem to obtain something done.

  11. here

    I?d have to contact you below. Which is not something I typically do! I enjoy reading an article that will certainly make individuals think. Also, many thanks for permitting me to comment!

  12. cheap flight

    Simply want to say your article is as astonishing. The clearness
    on your publish is just cool and i could suppose you are knowledgeable in this subject.
    Well with your permission allow me to grasp your feed
    to keep updated with approaching post. Thank you 1,000,000 and please
    carry on the rewarding work.

  13. Clicking Here

    I was extremely happy to locate this web-site. I wanted to many thanks for your time for this remarkable read!! I most definitely appreciating every bit of it as well as I have you bookmarked to take a look at new stuff you article.

댓글 남기기

이메일은 공개되지 않습니다.