Welcome back to the VTC course on why Asharq in the previous video we reviewed a network troubleshooting
process.
In this video we will review how to use by shock for System Administration.
Most of us have heard system administrators asking if there is something wrong with the network and
network administrators would usually reply that the problem is within the system using why Ash-Har can
stop this back and forward blame showing who is at fault and who should fix it.
Modern networks use DCP IP and Evernote Ethernet is a protocol that works without pretty much any fuss
whatsoever.
There are however a long list of problems which involve system drivers operating systems system updates
multiple configurations applications networks which is and the list goes on and on a system administrator
should use a tool which can detect whether the network is working from the ozone layer to perspective
or from an infinite perspective when a sys admin problem occurs.
The first step should be to verify that the system is actually receiving the network packets the most
basic packet is the ARP packet the packet is sent.
When a computer wants to communicate with another computer on the same subnet it has an IP address for
that computer but doesn't have a mac address an op request is broadcast onto the F.A. segment asking
Who has the IP address or which Mac has this IP address knowing that ARP traffic is necessary for normal
network traffic.
Why Asia can be used to check if this traffic exists on the network.
There are conditions of up which indicate specific problems.
If there is no ARP traffic from the system on the network either you are not capturing the traffic correctly
or there are driver or OS issues preventing network communication if the system is issuing up requests.
But there is no response from the computer system.
It may actually not be on the network in this case.
You will want to make sure that the system is on the correct lan.
It is as easy as plugging the system into the correct network point.
If however the system is receiving ARP requests and sending IP traffic on the network but then not receiving
a response which you have verified with you why Ashok sniffer then there may be a firewall or driver
issue with the computer system once you have verified that you can see the network you will then need
to troubleshoot both systems on the network which can connect to the application because most network
applications are TTP based testing is confined to applications using that protocol for this example.
We use a web server operating on port 80 remember the TTP protocol relies on a freeway handshake before
exchanging any data the handshake itself can cause problems with an application using wire shock to
dissect DCP packets.
We are able to locate application problems in the next video.
We will review the use of wire shock for system security.