流量分析练习-2014-11-16-traffic-analysis-exercise.pcap

pcap包来自https://www.malware-traffic-analysis.net/2014/11/16/index.html 问题与回答 LEVEL 1 QUESTIONS: 1)     What is the IP address of the Windows VM that gets infected? 通过查询语句“bootp”or“udp.port==67”查询到了DHCP

>>阅读原文<<