ISSC457_Lab4_LastName_FirstName2.doc

ISSC457Week 5 Lab 4

Name: _________________________Date: _____________

Fill in your name above, put your full response below the question, save the file using the file naming convention: “ISSC457_Lab4_LastName_FirstName.doc” where LastName is your last name and FirstName is your first name, then return this document for grading.

Hardware/Software Setup Required

VisualRoute 13.1 (available at

McAfee Visual Trace (available at )

Problem Description

When investigating Internet crimes, sometimes you need to trace the connection back to a particular URL of IP address. In this lab, you will compare two tracing tools, VisualRoute and McAfee Visual Trace, and learn how to use them when tracing a network path across the Internet.

Estimated completion time: 60 minutes.

Outcome

Report the main characteristics of each tracing tool.

Validation/Evaluation

· Are the characteristics for both tools similar?

· Do both tools display similar information?

· What other options or commands are offered by each tool when examining a particular node?

Lab Solution

1. Install VisualRoute and McAfee Visual Trace on your computer and start McAfee VisualTrace.

image1.png

2. We want to trace the network path from our computer to the EC-Council Web site. Therefore, write as the target value:

image2.png

3. Click Go to start the tracing.

image3.png

4. VisualTrace displays the resulting network path along with additional information.

image4.png

Note: The trace result may vary depending on your geographical location. The results presented here are only used as an example.

5. In this case, the network path consists of three nodes. For each node, VisualTrace offers additional information divided into four categories: Summary, Registrant, Network, and Timing.

image5.png

6. The Summary tab displays information such as the name, IP address, location, and network for the node.

image6.png

7. The next tab shows registrant information for the node.

image7.png

8. The Network tab displays WhoIs information for the current node.

image8.png

9. The final Timing tab displays ping results for the node.

image9.png

10. Finally, right-click on any node on the Map view and choose External Applications for additional options, including connect via FTP, ping, and telnet the host.

image10.png

11. In addition to Map view, VisualTrace also offers a List view and a Node view.

image11.png

image12.png

12. Now, we will repeat the same experiment but this time using VisualRoute to compare the results and options with those offered by McAfee Visual Trace. Start VisualRoute.

image13.png

13. We will trace the network path from My Computer to . So, select My Computer for the Trace field, for the to field, and 80 for the port.

image14.png

14. Click the green arrow next to the port field to start the tracing.

image15.png

15. VisualRoute displays the tracing information using several views. image16.png

16. The top panel shows a map view of the network path.

image17.png

17. The next panel shows a Route Graph view.

image18.png

18. The next panel contains the OmniPath view.

image19.png

19. The bottom panel displays a Table view of the nodes in the network path. This table displays additional information including the location, time zone, the average round-trip time, graph, and network for each node in the path.

image20.png

20. Notice that VisualRoute shows many more nodes in the path than McAfee Visual Trace.

21. Now, on the Route Graph or OmniPath view, move your mouse over any of the nodes. VisualRoute displays an information summary for that node.

image21.png

22. Right-click on the node to execute some commands for that node, including network and domain whois, traceroute, and HTTP and FTP port probe.

image22.png

23. Try any of the previous commands. For example, select the HTTP Port Probe option to probe HTTP ports for a particular node.

image23.png

24. In addition, select the Network whois option to display the whois information for the node.

image24.png

25. Select the Domain whois option to display the registrant information for the node.

image25.png

26. Also observe the firewall icon on the network path in the OmniPath view.

image26.png

27. Close all windows.