Question

Select one network scanning software tool (there is a list in your required reading slides) and explain in detail how it works and how detects network vulnerabilities.

Provide the site where you obtained your information and include that in your assignment write-up.

Answer 1

Explanation in detail on how the "Wireshark" network scanning software tool works and how it detects network vulnerabilities:
* Wireshark works by downloading, installing, and running the software on a Windows, Linux, and Mac OS x Operating Systems (OSs) computers and servers.
* It also responsible for network protocol analyzing function.
* The software tool scans data vulnerabilities on a live (production) network and environment that is between an active client and a server.
* It shows the network traffic along the way in its scanning and detection trail.
* It even lets the user or an administrator follow the network stream.
* It displays the stream construction of TCP sessions.
* It rapidly scans the network for issues, and even scans the issues themselves rapidly, letting the users or administrators know about the future influence of possible or potential network attacks.
* The tool prepares a system stands on a network and yet without losing its performance due to network attacks.
* It overcomes network issues.
* The tool helps networks from intrusions through their loopholes.
* It lets the users or administrators see what is happening on their network at a microscopic level.
* It works both, as a network monitor and a security tool.
* It runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD, and many other OSs.
* It uses its other online tools such as Editor Modeline Generator, IPv4 and IPv6 Connectivity Test, OUI Lookup Tool, String-Matching Capture Filter Generator, and WPA PSK Generator, for scanning, analyzing, and detecting purposes.
* It uses its bug tracker utility, facility or feature to search for and identify a known vulnerability.
* Wireshark tool sniffs and analyzes your network traffic and examines the packet's detailed contents in the /etc/snort/tcpdump.log* files.
* Wireshark tool collects the traffic being sent over the network, analyzes, and troubleshoots the issues.
* Wireshark tool, thus monitors network traffic and captures the same.
* It does live "silent portscanning", to find out which ports are open, thus vulnerable for attacks.
* It provides metrics and pre-defined insights to identify and/or resolve problems in a fast manner.
* It analyzes network traffic in real-time.
* It troubleshoots issues on a given network.
* It also troubleshoots Wi-Fi networks.
* It gathers information.
* It monitors packet flow.
* It checks every data packet sent over a network.
* It inspects a network deeply monitoring it constantly trying to detect network anomalies and security threats.
* It scans for vulnerabilities for free.
* It analyzes security events and troubleshoots network security device issues.
* It is also used as a forensic tool.
* It summarizes the information about all the network devices and their associated traffic.
* It uses pcap to capture packets.
* It even sorts and filters the collected data.
* Wireshark allows users to put Network Interface Controllers (NICs) into promiscuous mode to capture all the traffic visible on the interface that also includes unicast traffic not sent to the NIC's MAC address.
* It captures low-level package data.
* It parses and displays the fields, including their meanings.
* It also filters wireless connections.