2-11Àå

Size: px

Start display at page:

Download "2-11Àå"

정학 초
5 years ago
Views:

1 Chapter 11 script kiddies , script kiddies..,

2 1 TCP/IP., TCP/IP. IP IP..,. IP. TCP/IP TCP( UDP) , IP, IP,,. (, ). 216

3 Chapter 11 IP. IP ( ).... A B. B IP, A. IP, ( ).. (well known services),., 80 HTTP. netstat netstat, netstat. TCP/IP. Tere Parnell Christopher Null Network Administrators Reference(Osborne /McGraw-Hill, 1998).. TCP/IP. TCP/IP ( ) W. Richard Stevens TCP/IP Illustrated (Addison-Wesley, 1994~96). TCP/IP. Volume1 : The Protocols, IP. TCP/IP, Stevens BSD 217

4 Volume 2 : The Implementation ( Volume2, )., Craig Hunt TCP/IP Network Administration (O Reilly &Associates, 1998). Stevens Volume1 ( ). O Reilly & Associates, D.Brent Chapman Building Internet Firewalls(2000x). Cheswick Bellovin(AT&T ) Firewalls and Internet Security(Addison-Wesley, 1994). 2.., 80.. netstat.. 218

5 Chapter 11 netstat.. /root]# netstat -natu Active Internet connections (servers and established) ProtoRecv-QSend-Q Local Address Foreign Address State tcp : :80 CLOSE_WAIT tcp : :80 CLOSE_WAIT tcp : :21 CLOSE_WAIT tcp : :1052 ESTABLISHED tcp : :6000 ESTABLISHED [root@ford /root]# netstat.. TCP(-t) UDP(-u) (-a). (-n) IP (DNS). netstat TCP UDP. Recv Q(receive queue). Send Q., 5, 6. (Local Address) IP. IP IP. IP. netstat IP, PPP (IP ). 219

6 5, Foreign Address :*. IP. 6. netstat man, LISTEN ESTABLISHED. LISTEN. ESTABLISHED.... /etc/services. (, portmapper ). portmapper. netstat -p.., BASH.,.., netstat X ( 6000) netstat 220

7 Chapter xinetd /etc/xinetd disable Yes. inetd /etc/inetd.conf. #. xinetd inetd 9. /etc/inetd.conf inetd HUP xinetd SIGUSR2.. /root]# /etc/rc.d/init.d/xinetd reload inetd.. /etc/rc.d rc*.d 221

8 ( 7 ). S X.. ps PID kill., portmap. [root@ford /root]# ps auxw grep portmap bin ? S Jul08 0:00 portmap root pts/0 S 01:55 0:00 grep portmap [root@ford /root]# kill 255 netstat syslogd..., syslogd -r. syslogd -r. 222

9 Chapter 11.. Telnet. disable = yes [root@ford /] # /etc/init.d/xinetd restart. telnetd. telnet SSH. HTTPS SPOP SSL.,

10 .., Telnet Telnet. Network World PC Week syslog. syslog. syslog...., crackerboy.nothing better to do.net,... Perl... script kiddies

11 Chapter 11 /etc/syslog.conf syslog (514).. DOS PC Telix DOS ( DOS minicom., ). COM1 /dev/ttys0 COM2 /dev/ttys1 /etc/syslog.conf. DOS.. DOS. DOS. DOS (. ). swatch MRTG(Multi Router Traffic Grapher )

12 COPS(Computer Oracle and Password System). SetUID,,. COPS COPS cron (cron 9 ).. ftp://ftp.cert.org/pub/tools COPS. TripWire.. (backdoor) (time bomb). TripWire MD5 (checksum). MD5. TripWire. MD5. TripWire. RPM. RPM.,. telnetd, login, /bin/ls, bash, last, syslog. script kiddy. 226

13 Chapter 11 SATAN(System Administrators Tool for Analyzing Networks) SATAN Dan Farmer. SATAN... SATAN. SATAN SATAN. COPS SATAN ftp://ftp.cert.org/pub/tools. 227

14 228

PowerPoint 프레젠테이션

PowerPoint 프레젠테이션 (Host) set up : Linux Backend RS-232, Ethernet, parallel(jtag) Host terminal Target terminal : monitor (Minicom) JTAG Cross compiler Boot loader Pentium Redhat 9.0 Serial port Serial cross cable Ethernet