CNET 321 LAB 1 week 3 January-April 2022 PDF

Preview

Summary

CNET 321 LAB 1 week 1 January-April 2022. Submitted by Anonymous....

Description

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018

CODE of PRACTICE: The software tools employed in these labs are entirely for educational purposes only. By signing this declaration the student agrees to the use of these tools as instructional aids only. Furthermore, the student solemnly agrees that they would: NOT either intentionally or maliciously interferes with the college network infrastructure in any form or shape. It is mandatory to fill out the details below: Station # 326-

Date: January 12, 2022

Student Name Hassan Khan

Student # 301000313

Time: from: to:

IP Address of your station: 10.28.45.19

©IqbalKhan/SETAS/CNET321/labs/lab1

page#1

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018

Aims & Objectives: This is the first set of labs, aimed at Network Discovery Tools. At the end of this lab students should be able to: 1- Learn how to configure / use :  Port scan tool- pscan12 and/or IP Scanner tool 2- Configure and explore a MIB Browser tool. Background: We shall start with application(s) and tool(s) that help us DISCOVER devices by scanning for IP addresses as well as TCP ports or their path on the network. There are two primary categories: 1. IP Address Scanner and (2) TCP Port Scanners Network scanner is an IP scanner for network analysis that will allow you to see all network computers in several seconds. It can scan an unlimited number of IP address ranges or computers from a list. It scans computers not only for NetBIOS resources, but also for running FTP and web services. It is possible to check access right to resources during the scan process. Network scanner works really fast due to multi-thread scanning when every computer is scanned independently. You can change the number of computers scanned simultaneously. You can export the scan results to html, txt or xml. A port scanner is a software application designed to probe a server or host for open ports. This is often used by administrators to verify security policies of their networks and by attackers to identify running services on a host with the view to compromise it. A port scan or portscan can be defined as a process that sends client requests to a range of server port addresses on a host, with the goal of finding an active port. While not a nefarious process in and of itself, it is one used by hackers to probe target machine services with the aim of exploiting a known vulnerability of that service, however the majority of uses of a port scan are not attacks and are simple probes to determine services available on a remote machine. To portsweep is to scan multiple hosts for a specific listening port. The latter is typically used to search for a specific service, for example, an SQL-based computer worm may portsweep looking for hosts listening on TCP port 1433. There are quite a few IP Scanners/ TCP Port Scanners available for Windows as free shareware on the web although these were originally written for Unix/Linux systems.

MIB Browser:

©IqbalKhan/SETAS/CNET321/labs/lab1

page#2

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018 We shall also configure and explore the MIB browser. The framework for network Management is given by SMI –structure of management information, which defines MIB- management information base and either of the protocols:  - SNMP simple network management protocol Or  CMIP- common management information protocol MIBs are named according to the organizational chart below, which prescribes a hierarchical structure.

©IqbalKhan/SETAS/CNET321/labs/lab1

page#3

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018

Part-a: PORT SCAN TOOL- pscan12 The following application discovers devices on a given subnet. In addition it also discovers and lists the ports that are being used on a particular device. Search on the internet and download and install the tool pscan1.2 or higher (free shareware)

1- First find and write down the IP address of your station. In the ‘select IP’ box, enter the IP address of your station.  Uncheck the ‘Use range’ box, and click ‘SCAN’  Search the output, and list below which of the ports on your station are open - port 135 - port 139 - port 443 - port 445 - port 902 - port 912 2- Check the box ‘Use range’, keep the default setting and click ‘SCAN’

©IqbalKhan/SETAS/CNET321/labs/lab1

page#4

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018

 

If your classroom VLAN has multiple segments, you can check ‘Use Group of ranges’, fill out (segment) ranges and retry SCAN. The program uses TCP port # 1-66 as default. However, you can include any other ports by checking in ‘Select ports range’ box, and giving the additional port numbers

3- In the ‘select IP’ box, enter the IP address of the DHCP server you are connected to. Uncheck the ‘Use range’ box, and click ‘SCAN’ Search the output and list below which of the ports on DHCP are open/ close [Did DHCP server cooperated with this request ?] o port 135 o port 139 o port 443 o port 445



Using resources on the internet, in case of each of the following TCP port numbers, find out what services/ protocol/ apps these ports are used by: o Port# 5 – RJE (Remote Job Entry) o Port#20,21 – FTP o Port#22 – SSH o Port#23 - Telnet o Port# 53 – DNS o Port#135 – EPMAP , Microsoft RPC Locator Service

©IqbalKhan/SETAS/CNET321/labs/lab1

page#5

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018 o Port#139 – NetBIOS o Port#161,162 - SNMP o Port#445 – SMB file sharing o Port#1025 – blackjack

Part-B: MIB Browsers There are several MIB browsers available for use in Unix/Linux or MS Windows systems. Note: for many of these MIB browsers, you may need to make sure that the workstation has Java SDK 7 installed.  SnmpB: A graphical open source MIB browser for Windows, MacOSX and Linux. Check: http://sourceforge.net/projects/snmpb/



Download and install SnmpB: A graphical open source MIB browser for Windows, MacOSX and Linux. Check: http://sourceforge.net/projects/snmpb/

©IqbalKhan/SETAS/CNET321/labs/lab1

page#6

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018

The menu bar at the top let you browse sub-menus such as: Tree: shows the MIB tree. You can expand by clicking on the grey horizontal triangle to the let of the icon.

©IqbalKhan/SETAS/CNET321/labs/lab1

page#7

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018

Module: shows what MIB modules are available [in the left window]. We can load any module by highlighting and clicking the forward arrow between the two windows. The new module will appear in the right side windows under ‘Loaded MIB Modules’. Similarly we can remove MIB Modules by highlighting and clicking on the backward arrow.

Select Discovery menu and click on the radio button Discover.

©IqbalKhan/SETAS/CNET321/labs/lab1

page#8

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018

We can also fill up relevant IP networks details in from address and to address boxes and Discover. In this window we can also choose SNMP version [v1, vv2c or v3], on the top right side of the window by checking proper box. We can browse the other Menu items on bar Traps, Graphs, and Log.

Task-1: Verify the following Groups/Nodes and their respective members and their OIDs.

name Internet

OID 1.3.6.1

directory 1.3.6.1.1 mgmt. 1.3.6.1.2 experimental 1.3.6.1.3 private 1.3.6.1.4

mib-2 name system 1.3.6.1.2.1.1 interfaces 1.3.6.1.2.1.2

©IqbalKhan/SETAS/CNET321/labs/lab1

OID

Any comments No No

page#9

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018 ip 1.3.6.1.2.1.4

No

icmp 1.3.6.1.2.1.5

No

tcp 1.3.6.1.2.1.6

No

udp 1.3.6.1.2.1.7

No

egp 1.3.6.1.2.1.8

No

cmot 1.3.6.1.2.1.9

No

transmission 1.3.6.1.2.1.10

No

snmp 1.3.6.1.2.1.11

No

Interfaces name ifNumber

OID 1.3.6.1.2.1.2.1

No

ifTable

1.3.6.1.2.1.2.2

No

ifEntry

1.3.6.1.2.1.2.2.1

No

ifIndex 1.3.6.1.2.1.2.2.1.1

No

ifDescr 1.3.6.1.2.1.2.2.1.2

No

ifType 1.3.6.1.2.1.2.2.1.3

No

ifMtu 1.3.6.1.2.1.2.2.1.4

No

ifSpeed 1.3.6.1.2.1.2.2.1.5

No

ifPhysAddress 1.3.6.1.2.1.2.2.1.6

No

ifAdminStatus 1.3.6.1.2.1.2.2.1.7

No

ifOperStatus 1.3.6.1.2.1.2.2.1.8

No

ifLastChange 1.3.6.1.2.1.2.2.1.9

No

©IqbalKhan/SETAS/CNET321/labs/lab1

page#10

CNET321-LAB #1 NETWORK MANAGEMENT Fall 2018 ifInOctets 1.3.6.1.2.1.2.2.1.10

No

ifInUncastPkts 1.3.6.1.2.1.2.2.1.11

No

Appendix-A: Route discovery: Ping program/application is used to test end-to-end reachability. If ping fails, the tool does not provide a manager with the location of the problem. It could be that the failure occurs near the source computer or element, near the destination computer, or somewhere in between. Therefore, to debug a reachability problem, a manager must discover the path from the source to the destination. Of course a manager can learn a route by manually examining the IP routing table in each network element along the path. Unfortunately, a manual process is both time-consuming and error prone. Thus, instead of a manual process, most managers use a route discovery tool to trace paths automatically. A typical route discovery tool is an application program that runs on a host or router, and uses probes to discover the path to a specified destination. One of the most popular route discovery tools is an application program known as traceroute that uses a series of probes with successively higher hop counts to find and list all routes along a path to a destination. Note: to hide their internal network architecture, some ISP’s configure routers to ignore traceroute probes. Thus, traceroute may not be able to discover the addresses of some routers along a path. Although traceroute was originally built to work with UNIX, versions are now available for most operating systems. For example, the Windows operating system used tracert. Traceroute can be obtained from: http://traceroute.org Task: Select the PC that is connected to the College ITD network. Try the Windows versions of tracert command on some known URL addresses and answer the questions for each: Example 1: tracert www.centennielcollege.ca Did the destination was traceable? Yes

No

How much time in milliseconds (ms) it took?...