流量分析練習-2014-11-16-traffic-analysis-exercise.pcap

pcap包來自https://www.malware-traffic-analysis.net/2014/11/16/index.html 問題與回答 LEVEL 1 QUESTIONS: 1)     What is the IP address of the Windows VM that gets infected? 通過查詢語句「bootp」or「udp.port==67」查詢到了DHCP

>>阅读原文<<