[cs615asa] Homework 3 Question
Jan Schaumann
jschauma at stevens.edu
Sat Mar 9 14:03:21 EST 2019
Thomas L Pyle <tpyle at stevens.edu> wrote:
> How annotated are the tcpdump and snoop dumps supposed to be? As there
> are a lot of packets that are basically identical.
Your annotations should explain the packets you've captured. You need
not write something about every single packet, but each packet included
should be part of what you're explaining. For example, remove any
DNS lookup traffic that might be interspersed with your traceroute
packets.
It's fine to summarize multiple packets by saying something like "these
ten packets show the same destination with incremental TTLs"; it's not
reasonable to say "somehwere in these 5000 lines there are the
traceroute packets".
Use your best judgement.
-Jan
More information about the cs615asa
mailing list