Data link layer - Revision history

Khalats at 02:03, 23 March 2008

2008-03-23T02:03:12Z

← Older revision		Revision as of 02:03, 23 March 2008
Line 13:		Line 13:
	'''A way to defense:'''		'''A way to defense:'''

-	1. ~~read only routing table~~: ~~preferred method~~	+	The best way to protect against MAC spoofing is for an intelligent WLAN system to automatically detect MAC spoofing attacks and exclude offending machines from attaching to the WLAN. This is done in several ways:

-	2.	+	Detection and Containment - One way to prevent MAC spoofing attacks is to flag any occurrence in which the manufacturer name of a detected WLAN adapter differs from the known OUI (Organizationally Unique Identifier) for that equipment. Once detected, an intelligent WLAN system can prevent the known attacker from connecting to any nearby APs or any APs located throughout the entire WLAN.

Khalats at 01:55, 23 March 2008

2008-03-23T01:55:30Z

← Older revision		Revision as of 01:55, 23 March 2008
Line 6:		Line 6:
	'''An example of an attack:'''		'''An example of an attack:'''

-	~~attack: it is the easiest, & can only be done on local network~~	+	Media Access Control (MAC) Address spoofing:
-		+
-	~~1. APR poisoning~~	+
-		+
-		+
-	~~2.Switch's routing table looks like this:~~	+
-	~~mcaddress ip~~	+
-	~~..blah...blah.. ..192.168....~~	+
-	~~....blah blah.. ....192.168.1..~~	+
-		+
-	~~the pirate will fill the routing table with mc IDs saying you are all of them.~~ (~~is is called~~ spoofing)	+

		+	MAC spoofing attacks involve the use of a known MAC address of another host to attempt to make the target switch forward frames destined for the remote host to the network attacker. By sending a single frame with the other host's source Ethernet address, the network attacker overwrites the CAM table entry so that the switch forwards packets destined for the host to the network attacker. Until the host sends traffic it will not receive any traffic. When the host sends out traffic, the CAM table entry is rewritten once more so that it moves back to the original port.

Khalats at 01:51, 23 March 2008

2008-03-23T01:51:08Z

← Older revision		Revision as of 01:51, 23 March 2008
Line 1:		Line 1:
-	'''Description:'''The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol suite, because IP can run over a variety of different link layers. The processes of transmitting packets on a given link layer and receiving packets from a given link layer can be controlled both in the software device driver for the network card, as well as on firmware or specialist chipsets. These will perform data link functions such as adding a packet header to prepare it for transmission, then actually transmit the frame over a physical medium.	+	'''Description:''' The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol suite, because IP can run over a variety of different link layers. The processes of transmitting packets on a given link layer and receiving packets from a given link layer can be controlled both in the software device driver for the network card, as well as on firmware or specialist chipsets. These will perform data link functions such as adding a packet header to prepare it for transmission, then actually transmit the frame over a physical medium.

	For Internet access over a dial-up modem, IP packets are usually transmitted using PPP. For broadband Internet access such as ADSL or cable modems, PPPoE is often used. On a local wired network, Ethernet is usually used, and on local wireless networks, IEEE 802.11 is usually used. For wide-area networks, either PPP over T-carrier or E-carrier lines, Frame relay, ATM, or packet over SONET/SDH (POS) are often used.		For Internet access over a dial-up modem, IP packets are usually transmitted using PPP. For broadband Internet access such as ADSL or cable modems, PPPoE is often used. On a local wired network, Ethernet is usually used, and on local wireless networks, IEEE 802.11 is usually used. For wide-area networks, either PPP over T-carrier or E-carrier lines, Frame relay, ATM, or packet over SONET/SDH (POS) are often used.
Line 5:		Line 5:

	'''An example of an attack:'''		'''An example of an attack:'''
		+
	attack: it is the easiest, & can only be done on local network		attack: it is the easiest, & can only be done on local network

Khalats at 01:50, 23 March 2008

2008-03-23T01:50:53Z

← Older revision		Revision as of 01:50, 23 March 2008
Line 1:		Line 1:
-	'''~~description~~:'''The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol suite, because IP can run over a variety of different link layers. The processes of transmitting packets on a given link layer and receiving packets from a given link layer can be controlled both in the software device driver for the network card, as well as on firmware or specialist chipsets. These will perform data link functions such as adding a packet header to prepare it for transmission, then actually transmit the frame over a physical medium.	+	'''Description:'''The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol suite, because IP can run over a variety of different link layers. The processes of transmitting packets on a given link layer and receiving packets from a given link layer can be controlled both in the software device driver for the network card, as well as on firmware or specialist chipsets. These will perform data link functions such as adding a packet header to prepare it for transmission, then actually transmit the frame over a physical medium.

	For Internet access over a dial-up modem, IP packets are usually transmitted using PPP. For broadband Internet access such as ADSL or cable modems, PPPoE is often used. On a local wired network, Ethernet is usually used, and on local wireless networks, IEEE 802.11 is usually used. For wide-area networks, either PPP over T-carrier or E-carrier lines, Frame relay, ATM, or packet over SONET/SDH (POS) are often used.		For Internet access over a dial-up modem, IP packets are usually transmitted using PPP. For broadband Internet access such as ADSL or cable modems, PPPoE is often used. On a local wired network, Ethernet is usually used, and on local wireless networks, IEEE 802.11 is usually used. For wide-area networks, either PPP over T-carrier or E-carrier lines, Frame relay, ATM, or packet over SONET/SDH (POS) are often used.
		+

	'''An example of an attack:'''		'''An example of an attack:'''
Line 15:		Line 16:

	the pirate will fill the routing table with mc IDs saying you are all of them. (is is called spoofing)		the pirate will fill the routing table with mc IDs saying you are all of them. (is is called spoofing)
		+

Khalats at 01:50, 23 March 2008

2008-03-23T01:50:34Z

← Older revision		Revision as of 01:50, 23 March 2008
Line 1:		Line 1:
-	'''~~Data link layer~~'''	+	'''description:'''The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol suite, because IP can run over a variety of different link layers. The processes of transmitting packets on a given link layer and receiving packets from a given link layer can be controlled both in the software device driver for the network card, as well as on firmware or specialist chipsets. These will perform data link functions such as adding a packet header to prepare it for transmission, then actually transmit the frame over a physical medium.
-		+
-	~~''description'':~~	+
-	The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol suite, because IP can run over a variety of different link layers. The processes of transmitting packets on a given link layer and receiving packets from a given link layer can be controlled both in the software device driver for the network card, as well as on firmware or specialist chipsets. These will perform data link functions such as adding a packet header to prepare it for transmission, then actually transmit the frame over a physical medium.	+

	For Internet access over a dial-up modem, IP packets are usually transmitted using PPP. For broadband Internet access such as ADSL or cable modems, PPPoE is often used. On a local wired network, Ethernet is usually used, and on local wireless networks, IEEE 802.11 is usually used. For wide-area networks, either PPP over T-carrier or E-carrier lines, Frame relay, ATM, or packet over SONET/SDH (POS) are often used.		For Internet access over a dial-up modem, IP packets are usually transmitted using PPP. For broadband Internet access such as ADSL or cable modems, PPPoE is often used. On a local wired network, Ethernet is usually used, and on local wireless networks, IEEE 802.11 is usually used. For wide-area networks, either PPP over T-carrier or E-carrier lines, Frame relay, ATM, or packet over SONET/SDH (POS) are often used.

		+	'''An example of an attack:'''
	attack: it is the easiest, & can only be done on local network		attack: it is the easiest, & can only be done on local network

Line 19:		Line 17:


-	defense:	+	'''A way to defense:'''

	1. read only routing table: preferred method		1. read only routing table: preferred method

	2.		2.

Khalats: New page: '''Data link layer''' ''description'': The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol...

2008-03-23T01:12:35Z

New page: '''Data link layer''' ''description'': The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol...

New page

'''Data link layer'''

''description'':
The link layer, which is the method used to move packets from the network layer on two different hosts, is not really part of the Internet protocol suite, because IP can run over a variety of different link layers. The processes of transmitting packets on a given link layer and receiving packets from a given link layer can be controlled both in the software device driver for the network card, as well as on firmware or specialist chipsets. These will perform data link functions such as adding a packet header to prepare it for transmission, then actually transmit the frame over a physical medium.

For Internet access over a dial-up modem, IP packets are usually transmitted using PPP. For broadband Internet access such as ADSL or cable modems, PPPoE is often used. On a local wired network, Ethernet is usually used, and on local wireless networks, IEEE 802.11 is usually used. For wide-area networks, either PPP over T-carrier or E-carrier lines, Frame relay, ATM, or packet over SONET/SDH (POS) are often used.

attack: it is the easiest, & can only be done on local network

1. APR poisoning

2.Switch's routing table looks like this:
mcaddress ip
..blah...blah.. ..192.168....
....blah blah.. ....192.168.1..

the pirate will fill the routing table with mc IDs saying you are all of them. (is is called spoofing)

defense:

1. read only routing table: preferred method

2.