Okay so now we have to spoofing programs running in parallel with just spoofing each of their devices.
That is the attack machine.
And that out there.
So the next thing we need to do is we need to check how can we captured packets to do this.
We will use wires shock in the first part of this series.
We will use wired shock.
Then we will write code to capture to capture these packets manually but for now we will use workshop
to see how these packets so often too.
So as you can see at the moment this virus shark is capturing each and everything that is going over
the network.
But what I want to do is I want to capture packets that are just flowing from my victim machine.
That is my windows machine so to do this what I have to do is I will try to say DCP sorry IP dot source
equals equals 2 1 9 2 8 1 6 8 0 about 30.
So what this filter will do is that it will only capture those packets that are over generating from
a Windows machine.
So no it will not filter back is that it will filter out packages that are going to make the machine
are originating from make any machine.
So now we have this and then we need to do is we need to perform some operation on our windows machine
so that we can capture these packets here.
So I'm going over to my windows machine and then I'm going to open the browser
okay.
So let's access Google dot com.
So now I have performed some operation on my windows machine.
If I go over to my colleague machine you will see that
I do not have any captured packets.
This is because all the packages the packets are not originating from my windows machine but since I
am on my machine these packages would be originating from my colleague machine.
So what I have to do is I need to ECP or let's do it like this.
Go to Windows machine
hear this out.
Now I will try to bring Google back home from here.
So I will by thing w w w dot google dot com.
So it will send four packets to the Google dot com and this Google dot com somebody will reply.
So I'm just going to copy this address of this Google symbol and then I'm going over to my coding machine
and now I'm going to write IP dot source quotes equals to this IP address are IP Dot.
Destination equals to this IP address.
So whatever packages are originating from this server of going to the server will be captured here.
So as you can see that now I've captured different things.
So this ping originated from my windows machine which is here.
So you know they're here.
So this originated from my windows machine and it went to Google survive similarly These are the same
requests that went from my calling machine to the Google server.
And then the Google server replied with these packages to my windows machine.
So as you can see that I sent out four packages and I received four packages.
You can simply say that
that's this.
So now I'm on the accessing the review request from the Google machine.
So now you can see we can capture the packages and If I clip all of these packages you can see that
I can check out the content of these packages.
For example let's say I go to Eton and then they check I can check that which is the internet protocol
here.
And then you can see the source and destination.
So this is this package as alienated from the windows machine.
It went out to the Google server and then it contained to various other fields for example time to live.
It was a quest stating this package does not deliver but it was still sent from this Windows machine.
So this is how you can capture packages in next lecture when you try to build up on them.
That will be similar to why shot and then we will try to capture packets through our own program and
we won't rely on this virus shock.