Cpre530 PA III Isaac C Klein

07/26/2019

In order to test SMTP, IMAP, POP, and HTTP, I opened a separate terminal to manually open up their
port as follows: (SMTP:25, IMAP:143, POP:110, HTTP:80)

student@kali-student:~$ telnet bones.ee.iastate.edu 25

Trying 129.186.215.41...
telnet: Unable to connect to remote host: Connection timed out
student@kali-student:~$ telnet bones.ee.iastate.edu 143
Trying 129.186.215.41...
telnet: Unable to connect to remote host: Connection timed out
student@kali-student:~$ telnet bones.ee.iastate.edu 110
Trying 129.186.215.41...
telnet: Unable to connect to remote host: Connection timed out
student@kali-student:~$ telnet iastate.edu 80
Trying 129.186.235.2...
Trying 2610:130:101:113::2...
telnet: Unable to connect to remote host: Network is unreachable

Unfortunately, on the VM I couldn’t quite connect to any of them so I got some static (possibly encrypted)
data for output. However, I was able to trigger the ports showing they are connected fine.

********************************************

SMTP – Port 25
********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 19532
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 20954
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:D7:29
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 34876
DEST-PORT-NUM = 25
SEQ-NUM = B2:C7:C8:CC
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
Cpre530 PA III Isaac C Klein
07/26/2019
WINDOW-SIZE = 29200
CHECKSUM = 9C:B4
URGENT-PTR = 0
OPTIONS:
02:04:05:B4:04:
02:08:0A:20:AA:
AA:29:00:00:00:
00:01:03:03:07:
00:00:00:00:F0:
2A:3B:5D:6D:91:
BA:08:42:00:00:
00:42:00:00:00:

DESTINATION PORT => 25 SMTP

*****PAYLOAD*****
)*;]mBB
***END-PAYLOAD***

Total: PACKS = 52, IPS = 52, ARPS = 0, ICMPS = 0, TCPS = 48, UDPS = 4
DNSS = 2, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 1, POPS = 0, IMAPS = 0, HTTPS = 0, HTTPSS = 0

********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 54931
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 51090
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:D7:29
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 34726
DEST-PORT-NUM = 25
SEQ-NUM = B0:4C:64:03
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
CHECKSUM = 9C:B4
Cpre530 PA III Isaac C Klein
07/26/2019
URGENT-PTR = 0
OPTIONS:
02:04:05:B4:04:
02:08:0A:20:97:
66:6A:00:00:00:
00:01:03:03:07:
C0:00:00:00:01:
26:3B:5D:E1:29:
78:1F:69:00:00:
00:69:00:00:00:

DESTINATION PORT => 25 SMTP

*****PAYLOAD*****
fj&;])xii
***END-PAYLOAD***

Total: PACKS = 35, IPS = 35, ARPS = 0, ICMPS = 0, TCPS = 25, UDPS = 10
DNSS = 4, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 2, POPS = 0, IMAPS = 0, HTTPS = 0, HTTPSS = 0

********************************************

IMAP – Port 143

********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 40419
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 67
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:D7:29
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 44368
DEST-PORT-NUM = 143
SEQ-NUM = 43:6D:DD:59
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
Cpre530 PA III Isaac C Klein
07/26/2019
CHECKSUM = 9C:B4
URGENT-PTR = 0
OPTIONS:
02:04:05:B4:04:
02:08:0A:20:AD:
9B:12:00:00:00:
00:01:03:03:07:
98:00:00:00:B1:
2B:3B:5D:45:75:
F8:03:42:00:00:
00:42:00:00:00:

DESTINATION PORT => 143 IMAP

*****PAYLOAD*****
+;]EuBB
***END-PAYLOAD***

Total: PACKS = 23, IPS = 23, ARPS = 0, ICMPS = 0, TCPS = 18, UDPS = 5
DNSS = 2, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 0, POPS = 0, IMAPS = 1, HTTPS = 0, HTTPSS = 0

********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 40420
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 66
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:D7:29
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 44368
DEST-PORT-NUM = 143
SEQ-NUM = 43:6D:DD:59
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
CHECKSUM = 9C:B4
URGENT-PTR = 0
Cpre530 PA III Isaac C Klein
07/26/2019
OPTIONS:
02:04:05:B4:04:
02:08:0A:20:AD:
9F:07:00:00:00:
00:01:03:03:07:
00:00:00:00:B2:
2B:3B:5D:C5:F4:
12:21:5A:00:00:
00:5A:00:00:00:

DESTINATION PORT => 143 IMAP

*****PAYLOAD*****
+;]!ZZ
***END-PAYLOAD***

Total: PACKS = 26, IPS = 26, ARPS = 0, ICMPS = 0, TCPS = 21, UDPS = 5
DNSS = 2, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 0, POPS = 0, IMAPS = 2, HTTPS = 0, HTTPSS = 0

********************************************

POP – Port 110

********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 40678
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 65343
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:D7:29
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 41886
DEST-PORT-NUM = 110
SEQ-NUM = 09:8C:55:A8
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
CHECKSUM = 9C:B4
Cpre530 PA III Isaac C Klein
07/26/2019
URGENT-PTR = 0
OPTIONS:
02:04:05:B4:04:
02:08:0A:20:AF:
C5:60:00:00:00:
00:01:03:03:07:
00:00:00:00:00:
00:00:00:00:00:
00:00:00:00:00:
00:00:00:00:00:

DESTINATION PORT => 110 POP

*****PAYLOAD*****
`
***END-PAYLOAD***

Total: PACKS = 18, IPS = 16, ARPS = 2, ICMPS = 0, TCPS = 5, UDPS = 11

DNSS = 4, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 0, POPS = 1, IMAPS = 0, HTTPS = 0, HTTPSS = 0,
FTPS = 0, SSHS = 0, TELNETS = 0

********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 40679
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 65342
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:D7:29
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 41886
DEST-PORT-NUM = 110
SEQ-NUM = 09:8C:55:A8
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
CHECKSUM = 9C:B4
URGENT-PTR = 0
OPTIONS:
Cpre530 PA III Isaac C Klein
07/26/2019
02:04:05:B4:04:
02:08:0A:20:AF:
C9:67:00:00:00:
00:01:03:03:07:
98:00:00:00:40:
2C:3B:5D:15:3A:
17:1D:3C:00:00:
00:3C:00:00:00:

DESTINATION PORT => 110 POP

*****PAYLOAD*****
g@,;]:<<
***END-PAYLOAD***

Total: PACKS = 19, IPS = 17, ARPS = 2, ICMPS = 0, TCPS = 6, UDPS = 11

DNSS = 4, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 0, POPS = 2, IMAPS = 0, HTTPS = 0, HTTPSS = 0

********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 40680
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 65341
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:D7:29
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 41886
DEST-PORT-NUM = 110
SEQ-NUM = 09:8C:55:A8
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
CHECKSUM = 9C:B4
URGENT-PTR = 0
OPTIONS:
02:04:05:B4:04:
02:08:0A:20:AF:
D1:47:00:00:00:
Cpre530 PA III Isaac C Klein
07/26/2019
00:01:03:03:07:
00:00:00:00:00:
00:00:00:00:00:
00:00:00:00:00:
00:00:00:00:00:

DESTINATION PORT => 110 POP

*****PAYLOAD*****
G
***END-PAYLOAD***

Total: PACKS = 28, IPS = 18, ARPS = 10, ICMPS = 0, TCPS = 7, UDPS = 11
DNSS = 4, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 0, POPS = 3, IMAPS = 0, HTTPS = 0, HTTPSS = 0

********************************************

HTTP – Port 80
********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 40283
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 60657
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:EB:02
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 36286
DEST-PORT-NUM = 80
SEQ-NUM = 80:25:3B:C3
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
CHECKSUM = B0:8D
URGENT-PTR = 0
OPTIONS:
Cpre530 PA III Isaac C Klein
07/26/2019
02:04:05:B4:04:
02:08:0A:79:37:
CA:83:00:00:00:
00:01:03:03:07:
C0:00:00:00:1F:
2D:3B:5D:9A:4E:
0D:1B:69:00:00:
00:69:00:00:00:

DESTINATION PORT => 80 HTTP

*****PAYLOAD*****
y7
***END-PAYLOAD***

Total: PACKS = 49, IPS = 45, ARPS = 4, ICMPS = 0, TCPS = 34, UDPS = 11
DNSS = 4, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 0, POPS = 0, IMAPS = 0, HTTPS = 1, HTTPSS = 0

********************************************

DEST ADDR = 00:00:0C:31:01:AA:

SRC ADDR = 00:50:56:86:06:D3:
ETH TYPE = 0800 -> IP
VER = 4X, HDR-LEN = 5
SERVICE = 16
PAY-LEN = 60
IDENTIFIER = 40284
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 60656
SRC-IP-ADDR => 40:27:03:7B
DES-IP-ADDR => 81:BA:EB:02
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = 36286
DEST-PORT-NUM = 80
SEQ-NUM = 80:25:3B:C3
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
CHECKSUM = B0:8D
URGENT-PTR = 0
OPTIONS:
02:04:05:B4:04:
02:08:0A:79:37:
CE:81:00:00:00:
Cpre530 PA III Isaac C Klein
07/26/2019
00:01:03:03:07:
98:00:00:00:20:
2D:3B:5D:7C:98:
BD:10:42:00:00:
00:42:00:00:00:

DESTINATION PORT => 80 HTTP

*****PAYLOAD*****
y7
***END-PAYLOAD***

Total: PACKS = 84, IPS = 80, ARPS = 4, ICMPS = 0, TCPS = 69, UDPS = 11
DNSS = 4, DHCPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0
SMTPS = 0, POPS = 0, IMAPS = 0, HTTPS = 2, HTTPSS = 0

I then let each command run to timeout printing only the payload for that port as a test.

SHMT - Port 25
Cpre530 PA III Isaac C Klein
07/26/2019

IMAP – Port 143

POP – Port 110

HTTP – Port 80
Cpre530 PA III Isaac C Klein
07/26/2019

//ADDED VARIABLES
int Num_Of_Packets = 0;
int Num_Of_ARPS = 0;
int Num_Of_IPS = 0;
int Num_Of_ECTPS = 0;
int Num_Of_ATAS = 0;
int Num_Of_TKIPS = 0;
int Num_Of_ICMPS = 0;
int Num_Of_TCPS = 0;
int Num_Of_UDPS = 0;
int Num_Of_DNSS = 0;
int Num_Of_DHCPS = 0;
int Num_Of_FTPS = 0;
int Num_Of_SSHS = 0;
int Num_Of_TELNETS = 0;
int Num_Of_SMTPS = 0;
int Num_Of_HTTPS = 0;
int Num_Of_HTTPSS = 0;
int Num_Of_POPS = 0;
int Num_Of_IMAPS = 0;

/* routine is executed on exit */

void program_ending(int signo)
{
struct pcap_stat stat;
if (pd != NULL && pcap_file(pd) == NULL) {
(void)fflush(stdout);
putc('\n', stderr);
if (pcap_stats(pd, &stat) < 0)
(void)fprintf(stderr, "pcap_stats: %s\n",
pcap_geterr(pd));
else {
(void)fprintf(stderr, "%d packets received by filter\n",
stat.ps_recv);
(void)fprintf(stderr, "%d packets dropped by kernel\n",
stat.ps_drop);
(void)fprintf(stderr, "\nTotal: PACKS = %d, IPS = %d, ARPS = %d, ICMPS
= %d, TCPS = %d, UDPS = %d\n DNSS = %d, DHCPS = %d, ECTPS = %d, ATAS = %d, TKIPS
= %d\n SMTPS = %d, POPS = %d, IMAPS = %d, HTTPS = %d, HTTPSS = %d,\n FTPS = %d,
SSHS = %d, TELNETS = %d,\n", Num_Of_Packets, Num_Of_IPS, Num_Of_ARPS, Num_Of_ICMPS,
Num_Of_TCPS, Num_Of_UDPS, Num_Of_DNSS, Num_Of_DHCPS, Num_Of_ECTPS,
Cpre530 PA III Isaac C Klein
07/26/2019

Num_Of_ATAS, Num_Of_TKIPS, Num_Of_SMTPS, Num_Of_POPS, Num_Of_IMAPS,

Num_Of_HTTPS, Num_Of_HTTPSS, Num_Of_FTPS, Num_Of_SSHS, Num_Of_TELNETS);
}
}
exit(0);
}

void raw_print(u_char *user, const struct pcap_pkthdr *h, const u_char *p)
{
u_int length = h->len;
u_int caplen = h->caplen;
uint16_t e_type;
Num_Of_Packets += 1;
printf("********************************************\n\n");
printf("DEST ADDR = %02X:%02X:%02X:%02X:%02X:%02X:\n",
p[0],p[1],p[2],p[3],p[4],p[5]);
printf("SRC ADDR = %02X:%02X:%02X:%02X:%02X:%02X:\n",
p[6],p[7],p[8],p[9],p[10],p[11]);
e_type = p[12]*256 + p[13];
printf("ETH TYPE = %04X ", e_type);
if (e_type == 0x800) {
printf(" -> IP\n");
Num_Of_IPS += 1;
int Icmp = 0;
int Tcp = 0;
int Udp = 0;
int PayLen;
//Take the left 4 bits and shift them to the right to one value.
printf("VER = %dX, ", p[14] >> 4);
//Take only the right 4 bits.
printf("HDR-LEN = %d\n", 0x0F & p[14]);
printf("SERVICE = %d\n", p[15]);
//Take the right 4 bits and add them to the left 8 bits, shifted 4 to the left.
PayLen = p[17] + (p[16] << 8);
printf("PAY-LEN = %d\n", PayLen);
printf("IDENTIFIER = %d\n", p[19] + (p[18] << 8));
//Left most bit anded and shifted to bit 1, middle anded and shifted to bit 1,
right anded and shifted to bit 1.
printf("FLAGS = %d %d %d\n", (p[20] & 0x80) >> 7, (p[20] & 0x40) >> 6, (p[20] &
0x20) >> 5);
printf("OFFSET = %d\n", ((p[20] & 0x1F) << 8) + (p[21]));
Cpre530 PA III Isaac C Klein
07/26/2019

printf("TTL = %d\n", p[22]);

printf("PROTOCOL = %d ", p[23]);
if (p[23] == 1) { printf("-> ICMP"); Icmp = 1; Num_Of_ICMPS += 1; }
if (p[23] == 6) { printf("-> TCP"); Tcp = 1; Num_Of_TCPS += 1;}
if (p[23] == 17) { printf("-> UDP"); Udp = 1; Num_Of_UDPS += 1; }
printf("\n");
printf("CHECKSUM = %d\n", p[25] + (p[24] << 8));
printf("SRC-IP-ADDR => %02X:%02X:%02X:%02X\n", p[26], p[27], p[28], p[29]);
printf("DES-IP-ADDR => %02X:%02X:%02X:%02X\n", p[30], p[31], p[32], p[33]);
printf("DATA-LEN = %d\n", length);
if (Icmp) {
printf("\n");
printf("ICMP HEADER\n");
printf("TYPE= %d ",p[34]);
if (p[34] == 8) { printf("-> ECHO-REQUEST");}
if (p[34] == 0) { printf("-> ECHO-REPLY");}
if (p[34] == 13) { printf("-> TS-REQUEST");}
if (p[34] == 14) { printf("-> TS-REPLY");}
if (p[34] == 11) { printf("-> TIME-EXCEEDED");}
if (p[34] == 5) { printf("-> REDIRECTION");}
if (p[34] == 3) { printf("-> DEST-UNREACH");}
printf("\n");
printf("CODE = %02X\n", p[35]);
printf("CHECKSUM = %02X:%02X\n", p[36], p[37]);
printf("PARAMETER = %02X:%02X:%02X:%02X\n",
p[38],p[39],p[40],p[41]);
printf("INFORMATION
= %02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X\n", p[42], p[43], p[44], p[45], p[46], p[47],
p[48], p[49]);
}
if (Tcp) {
printf("\n");
printf("TCP HEADER\n");
int SrcPrt, DesPrt;
SrcPrt = p[35] + (p[34] << 8);
DesPrt = p[37] + (p[36] << 8);
printf("SRC-PORT-NUM = %d\n", SrcPrt);
printf("DEST-PORT-NUM = %d\n", DesPrt);
printf("SEQ-NUM = %02X:%02X:%02X:%02X\n", p[38], p[39], p[40],
p[41]);
Cpre530 PA III Isaac C Klein
07/26/2019

printf("ACKNOW-NUM = %02X:%02X:%02X:%02X\n", p[42], p[43], p[44],

p[45]);
printf("HDR-LEN = %d\n", (p[46] & 0xF0) >> 4);
int Urg = (p[47] & 0x20) >> 5;
int Ack = (p[47] & 0x10) >> 4;
int Psh = (p[47] & 0x8) >> 3;
int Rst = (p[47] & 0x4) >> 2;
int Syn = (p[47] & 0x2) >> 1;
int Fin = (p[47] & 0x1);
printf("FLAGS = %d %d %d %d %d %d", Urg, Ack, Psh, Rst, Syn, Fin );
if (Urg) { printf(" -> URG");}
if (Ack) { printf(" -> ACK");}
if (Psh) { printf(" -> PSH");}
if (Rst) { printf(" -> RST");}
if (Syn) { printf(" -> SYN");}
if (Fin) { printf(" -> FIN");}
printf("\n");
printf("WINDOW-SIZE = %d\n", p[49] + (p[48] << 8));
printf("CHECKSUM = %02X:%02X\n", p[50], p[51]);
printf("URGENT-PTR = %d\n", p[53] + (p[52] << 8));
printf("OPTIONS:\n");
int i, j;
for (i = 0; i < 8; i += 1) {
for (j = 1; j < 6; j += 1) {
printf("%02X:", p[53 + i*5 + j]);
}
printf("\n");
}
if (DesPrt == 20 || SrcPrt == 20) {
printf("\nDESTINATION PORT => %d FTP-DATA\n", DesPrt);
Num_Of_FTPS += 1;
}
if (DesPrt == 22 || SrcPrt == 22) {
printf("\nDESTINATION PORT => %d SSH\n", DesPrt);
Num_Of_SSHS += 1;
}
if (DesPrt == 25 || SrcPrt == 25) {
printf("\nDESTINATION PORT => %d SMTP\n", DesPrt);
Num_Of_SMTPS += 1;
}
Cpre530 PA III Isaac C Klein
07/26/2019

if (DesPrt == 80 || SrcPrt == 80) {

printf("\nDESTINATION PORT => %d HTTP\n", DesPrt);
Num_Of_HTTPS += 1;
}
if (DesPrt == 143 || SrcPrt == 143) {
printf("\nDESTINATION PORT => %d IMAP\n", DesPrt);
Num_Of_IMAPS += 1;
}
if (DesPrt == 21 || SrcPrt == 21) {
printf("\nDESTINATION PORT => %d FTP-CONTROL\n", DesPrt);
Num_Of_FTPS += 1;
}
if (DesPrt == 23 || SrcPrt == 23) {
printf("\nDESTINATION PORT => %d TELNET\n", DesPrt);
Num_Of_TELNETS += 1;
}
if (DesPrt == 53 || SrcPrt == 53) {
printf("\nDESTINATION PORT => %d DNS\n", DesPrt);
}
if (DesPrt == 110 || SrcPrt == 110) {
printf("\nDESTINATION PORT => %d POP\n", DesPrt);
Num_Of_POPS += 1;
}
if (DesPrt == 443 || SrcPrt == 443) {
printf("\nDESTINATION PORT => %d HTTPS\n", DesPrt);
Num_Of_HTTPS += 1;
}
if (DesPrt == 25 || SrcPrt == 25 || DesPrt == 110 || SrcPrt == 110 ||
DesPrt == 143 || SrcPrt == 143 || DesPrt == 80 || SrcPrt == 80) {
printf("\n*****PAYLOAD*****\n");
int pay;
for (pay = 54; pay < caplen; pay += 1) {
if (isprint((char)p[pay])) { printf("%c", (char)p[pay]); }
}
printf("\n***END-PAYLOAD***\n");
}
printf("\n");
}
if (Udp) {
printf("\n");
printf("UDP HEADER\n");
Cpre530 PA III Isaac C Klein
07/26/2019

printf("SRC-PORT-NUM = %02X:%02X\n", p[34], p[35]);

printf("DEST-PORT-NUM = %02X:%02X\n", p[36], p[37]);
int DestPort = p[37] + (p[36] << 8);
printf("DESTINATION PORT = %d ", DestPort);
if (DestPort == 53) { printf("-> DNS"); Num_Of_DNSS += 1; }
if (DestPort == 67 || DestPort == 68) { printf("-> DHCP"); Num_Of_DHCPS
+= 1; }
printf("\n");
printf("UDP-LEN = %d\n", p[39] + (p[38] << 8));
printf("CHECKSUM = %02X:%02X\n", p[39], p[40]);
}
}
else if (e_type == 0x806) {
printf(" -> ARP\n");
Num_Of_ARPS += 1;
printf("HW-TYPE = %02X%02X\n", p[14], p[15]);
printf("PROTO-TYPE = %02X%02X\n", p[16],p[17]);
printf("HW-LEN = %d\n", p[18]);
printf("PROTO-LEN = %d\n", p[19]);
int oper = p[21] + (p[20] << 8);
printf("OPERATION = %d ", oper);
if (oper == 1) { printf("-> REQUEST"); }
if (oper == 2) { printf("-> REPLY"); }
printf("\n");
printf("SENDER-HW-ADDR => %02X:%02X:%02X:%02X:%02X:%02X\n", p[22],
p[23], p[24], p[25], p[26], p[27]);
printf("SENDER-PROTO-ADDR => %02X:%02X:%02X:%02X\n", p[28], p[29], p[30],
p[31]);
printf("TARGET-HW-ADDR => %02X:%02X:%02X:%02X:%02X:%02X\n", p[32],
p[33], p[34], p[35], p[36], p[37]);
printf("TARGET-PROTO-ADDR => %02X:%02X:%02X:%02X\n", p[38], p[39], p[40],
p[41]);
}
else if (e_type == 0x9000) {
printf(" -> ECTP\n");
Num_Of_ECTPS += 1;
}
else if (e_type == 0x2452) {
printf(" -> TKIP\n");
Num_Of_TKIPS += 1;
}
Cpre530 PA III Isaac C Klein
07/26/2019

else if (e_type == 0x88A2) {

printf(" -> ATA\n");
Num_Of_ATAS += 1;
}
else {
printf("\n");
}
printf("\nTotal: PACKS = %d, IPS = %d, ARPS = %d, ICMPS = %d, TCPS = %d, UDPS = %d\n
DNSS = %d, DHCPS = %d, ECTPS = %d, ATAS = %d, TKIPS = %d\n SMTPS = %d, POPS = %d,
IMAPS = %d, HTTPS = %d, HTTPSS = %d,\n FTPS = %d, SSHS = %d, TELNETS = %d,\n",
Num_Of_Packets, Num_Of_IPS, Num_Of_ARPS, Num_Of_ICMPS, Num_Of_TCPS,
Num_Of_UDPS, Num_Of_DNSS, Num_Of_DHCPS, Num_Of_ECTPS, Num_Of_ATAS,
Num_Of_TKIPS, Num_Of_SMTPS, Num_Of_POPS, Num_Of_IMAPS, Num_Of_HTTPS,
Num_Of_HTTPSS, Num_Of_FTPS, Num_Of_SSHS, Num_Of_TELNETS);
//printf("\n");
//default_print(p, caplen);
putchar('\n');
}