MENU

  • rferl.org
  • joesonic.com
  • 17jago.com
  • makeyoursuccesseasy.com
  • buscalo.com
  • unfallchirurgie.usz.ch
  • hideout.7am.fi
  • shopathomenews.com
  • sound-horizon.net
  • roligajulklappstips.se
  • offi.com
  • mamagirl.com
  • babelfish.org
  • sabic-ip.com
  • postitroma.it
  • deblocage-officiel.com
  • travelinformationbarcelona.com
  • thaiseoservices.com
  • avatare-messenger.com
  • hiphop-instrumentals.com

    • last data update: 2011/10/17, 12:43

    Website loading time

    during the test: 1.66 s

    cable connection (average): 1.74 s

    DSL connection (average): 1.81 s

    modem (average): 5.88 s

    HTTP headers

    HTTP/1.1 301 Moved Permanently

    Date: Mon, 17 Oct 2011 19:43:36 GMT

    Server: Apache

    Location: http://www.forensicswiki.org/

    Vary: Accept-Encoding

    Content-Length: 237

    Connection: close

    Content-Type: text/html; charset=iso-8859-1

    HTTP/1.1 301 Moved Permanently

    Date: Mon, 17 Oct 2011 19:43:37 GMT

    Server: Apache

    Vary: Accept-Encoding,Cookie

    Expires: Thu, 01 Jan 1970 00:00:00 GMT

    Cache-Control: private, must-revalidate, max-age=0

    Last-Modified: Mon, 17 Oct 2011 19:43:37 GMT

    Location: http://www.forensicswiki.org/wiki/Main_Page

    Content-Length: 0

    Connection: close

    Content-Type: text/html; charset=utf-8

    HTTP/1.1 200 OK

    Date: Mon, 17 Oct 2011 19:43:37 GMT

    Server: Apache

    Content-language: en

    Vary: Accept-Encoding,Cookie

    Expires: Thu, 01 Jan 1970 00:00:00 GMT

    Cache-Control: private, must-revalidate, max-age=0

    Last-Modified: Sun, 16 Oct 2011 20:44:39 GMT

    Connection: close

    Content-Type: text/html; charset=utf-8

    Information about DNS servers

    forensicswiki.orgA69.163.129.236IN14400
    forensicswiki.orgSOAns1.dreamhost.comhostmaster.dreamhost.com200908260016298 1800 1814400 14400 IN 14400
    forensicswiki.orgNSns3.dreamhost.comIN14400
    forensicswiki.orgNSns2.dreamhost.comIN14400
    forensicswiki.orgNSns1.dreamhost.comIN14400

    Received from the first DNS server

    Request to the server "forensicswiki.org"
    You used the following DNS server:
    DNS Name: ns3.dreamhost.com
    DNS Server Address: 66.33.216.216#53
    DNS server aliases:

    HEADER opcode: REQUEST, status: NOERROR, id: 45718
    flag: qr aa rd REQUEST: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 3

    REQUEST SECTION:
    forensicswiki.org. IN ANY

    ANSWER SECTION:
    forensicswiki.org. 14400 IN NS ns1.dreamhost.com.
    forensicswiki.org. 14400 IN SOA ns1.dreamhost.com. hostmaster.dreamhost.com. 2009082600 16298 1800 1814400 14400
    forensicswiki.org. 14400 IN NS ns3.dreamhost.com.
    forensicswiki.org. 14400 IN NS ns2.dreamhost.com.
    forensicswiki.org. 14400 IN A 69.163.129.236

    SECTION NOTES:
    ns3.dreamhost.com. 14400 IN A 66.33.216.216
    ns1.dreamhost.com. 14400 IN A 66.33.206.206
    ns2.dreamhost.com. 14400 IN A 208.96.10.221

    Received 213 bytes from address 66.33.216.216#53 in 76 ms

    Received from the second DNS server

    Request to the server "forensicswiki.org"
    You used the following DNS server:
    DNS Name: ns2.dreamhost.com
    DNS Server Address: 208.96.10.221#53
    DNS server aliases:

    HEADER opcode: REQUEST, status: NOERROR, id: 8603
    flag: qr aa rd REQUEST: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 3

    REQUEST SECTION:
    forensicswiki.org. IN ANY

    ANSWER SECTION:
    forensicswiki.org. 14400 IN NS ns3.dreamhost.com.
    forensicswiki.org. 14400 IN NS ns2.dreamhost.com.
    forensicswiki.org. 14400 IN SOA ns1.dreamhost.com. hostmaster.dreamhost.com. 2009082600 16298 1800 1814400 14400
    forensicswiki.org. 14400 IN NS ns1.dreamhost.com.
    forensicswiki.org. 14400 IN A 69.163.129.236

    SECTION NOTES:
    ns1.dreamhost.com. 14400 IN A 66.33.206.206
    ns2.dreamhost.com. 14400 IN A 208.96.10.221
    ns3.dreamhost.com. 14400 IN A 66.33.216.216

    Received 213 bytes from address 208.96.10.221#53 in 83 ms

    Subdomains (the first 50)

    Typos (misspells)

    dorensicswiki.org
    corensicswiki.org
    vorensicswiki.org
    gorensicswiki.org
    torensicswiki.org
    rorensicswiki.org
    firensicswiki.org
    fkrensicswiki.org
    flrensicswiki.org
    fprensicswiki.org
    f0rensicswiki.org
    f9rensicswiki.org
    foeensicswiki.org
    fodensicswiki.org
    fofensicswiki.org
    fotensicswiki.org
    fo5ensicswiki.org
    fo4ensicswiki.org
    forwnsicswiki.org
    forsnsicswiki.org
    fordnsicswiki.org
    forrnsicswiki.org
    for4nsicswiki.org
    for3nsicswiki.org
    forebsicswiki.org
    foremsicswiki.org
    forejsicswiki.org
    forehsicswiki.org
    forenaicswiki.org
    forenzicswiki.org
    forenxicswiki.org
    forendicswiki.org
    foreneicswiki.org
    forenwicswiki.org
    forensucswiki.org
    forensjcswiki.org
    forenskcswiki.org    		forensocswiki.org
    forens9cswiki.org
    forens8cswiki.org
    forensixswiki.org
    forensivswiki.org
    forensifswiki.org
    forensidswiki.org
    forensicawiki.org
    forensiczwiki.org
    forensicxwiki.org
    forensicdwiki.org
    forensicewiki.org
    forensicwwiki.org
    forensicsqiki.org
    forensicsaiki.org
    forensicssiki.org
    forensicseiki.org
    forensics3iki.org
    forensics2iki.org
    forensicswuki.org
    forensicswjki.org
    forensicswkki.org
    forensicswoki.org
    forensicsw9ki.org
    forensicsw8ki.org
    forensicswiji.org
    forensicswimi.org
    forensicswili.org
    forensicswioi.org
    forensicswiii.org
    forensicswiku.org
    forensicswikj.org
    forensicswikk.org
    forensicswiko.org
    forensicswik9.org
    forensicswik8.org
    orensicswiki.org    		frensicswiki.org
    foensicswiki.org
    fornsicswiki.org
    foresicswiki.org
    forenicswiki.org
    forenscswiki.org
    forensiswiki.org
    forensicwiki.org
    forensicsiki.org
    forensicswki.org
    forensicswii.org
    forensicswik.org
    ofrensicswiki.org
    froensicswiki.org
    foernsicswiki.org
    fornesicswiki.org
    foresnicswiki.org
    foreniscswiki.org
    forensciswiki.org
    forensiscwiki.org
    forensicwsiki.org
    forensicsiwki.org
    forensicswkii.org
    forensicswiik.org
    fforensicswiki.org
    foorensicswiki.org
    forrensicswiki.org
    foreensicswiki.org
    forennsicswiki.org
    forenssicswiki.org
    forensiicswiki.org
    forensiccswiki.org
    forensicsswiki.org
    forensicswwiki.org
    forensicswiiki.org
    forensicswikki.org
    forensicswikii.org

    Location

    IP: 69.163.129.236

    continent: NA, country: United States (USA), city: Brea

    Website value

    rank in the traffic statistics:

    There is not enough data to estimate website value.

    Basic information

    website build using CSS

    code weight: 29.56 KB

    text per all code ratio: 18 %

    title: Main Page - Forensics Wiki

    description:

    keywords:

    encoding: utf-8

    language: en

    Website code analysis

    one word phrases repeated minimum three times

    PhraseQuantity
    and6
    the6
    of5
    is3
    Forensics3

    two word phrases repeated minimum three times

    three word phrases repeated minimum three times

    B tags

    Forensics Wiki

    WIKI MAINTENANCE NOTE: We have re-installed mediawiki. New anti-spam measures and account re-confirmation software is in effect. Please let us know if you have problems on the Contact Form

    Forensic Carving of Network Packets and Associated Data Structures

    Digital Investigation 8,2011BibtexAuthor :

    Title :

    In :

    Address :

    Date :

    File Analysis

    File Formats

    Forensic file formats

    File Systems

    Cryptographic File Systems

    Hardware

    Busses

    Media

    Personal Digital Devices

    Other Devices

    Write Blockers

    Recovering data

    Metadata:

    Legal issues:

    Further information:

    Disk Imaging

    Data Recovery

    Disk Analysis

    Live CDs

    Metadata Extraction

    Network Forensics

    Anti-Forensics

    Other Tools

    You can help!

    U tags

    I tags

    Robert Beverly, Simson Garfinkel, Gregory Cardwell

    Using validated carving techniques, we show that popular operating systems (eg Windows, Linux, and OSX) frequently have residual IP packets, Ethernet frames, and associated data structures present in system memory from long-terminated network traffic. Such information is useful for many forensic purposes including establishment of prior connection activity and services used; identification of other systems present on the system's LAN or WLAN; geolocation of the host computer system; and cross-drive analysis. We show that network structures can also be recovered from memory that is persisted onto a mass storage medium during the course of system swapping or hibernation. We present our network carving techniques, algorithms and tools, and validate these against both purpose-built memory images and a readily available forensic corpora. These techniques are valuable to both forensics tasks, particularly in analyzing mobile devices, and to cyber-security objectives such as malware analysis.

    images

    file namealternative text
    poweredby_mediawiki_88x31.pngPowered by MediaWiki
    somerights.pngCreative Commons Attribution-ShareAlike 2.5 (for content created after March 19th, 2006)

    headers

    H1

    Main Page

    H2

    Featured Forensic Research

    Featured Article

    Topics

    Tools

    Categories

    H3

    Featured Forensic Research

    Featured Article

    Topics

    Tools

    Categories

    H4

    H5

    Views

    Personal tools

    Navigation:

    About forensicswiki.org:

    Search

    Toolbox

    H6

    internal links

    addressanchor text
    #column-onenavigation
    #searchInputsearch
    /wiki/Digital_forensicsdigital forensics
    /wiki/Special:AllPages720
    /wiki/Computer_forensicscomputer forensics
    /wiki/Toolstools
    /wiki/Techniquestechniques
    /w/index.php?title=Investigator&action=edit&redlink=1investigators
    /wiki/Paperspapers
    /wiki/Peoplepeople
    /wiki/Organizationsorganizations
    /wiki/Conferencesconferences
    /wiki/Journalsjournals
    /wiki/Reportsreports
    /wiki/Contact_FormContact Form
    javascript:bibpopup(@article{beverly:ipcarving, author = "Robert Beverly and Simson Garfinkel and Gregory Cardwell", journal = "Digital Investigation", publisher="Elsevier", booktitle = {Proc. of the Eleventh Annual DFRWS Conference}, title = "Forensic Carving of Network Packets and Associated Data Structures", volume=8 year = 2011, abstract="Using validated carving techniques, we show that popular operating systems (eg Windows, Linux, and OSX) frequently have residual IP packets, Ethernet frames, and associated data structures present in system memory from long-terminated network traffic. Such information is useful for many forensic purposes including establishment of prior connection activity and services used; identification of other systems present on the system's LAN or WLAN; geolocation of the host computer system; and cross-drive analysis. We show that network structures can also be recovered from memory that is persisted onto a mass storage medium during the course of system swapping or hibernation. We present our network carving techniques, algorithms and tools, and validate these against both purpose-built memory images and a readily available forensic corpora. These techniques are valuable to both forensics tasks, particularly in analyzing mobile devices, and to cyber-security objectives such as malware analysis."}')">BibtexAuthor
    /wiki/Past_Selected_ArticlesPast Selected Articles
    /wiki/Forensic_Linux_Live_CD_issuesForensic Linux Live CD issues
    /wiki/Forensic_Linux_Live_CD_issuesRead More...
    /wiki/File_AnalysisFile Analysis
    /wiki/Category:File_FormatsFile Formats
    /wiki/PDFPDF
    /wiki/DOCDOC
    /wiki/DOCXDOCX
    /wiki/JPEGJPEG
    /wiki/GIFGIF
    /wiki/BMPBMP
    /wiki/LNKLNK
    /wiki/MP3MP3
    /wiki/AACAAC
    /wiki/Thumbs.dbThumbs.db
    /wiki/Forensic_file_formatsForensic file formats
    /wiki/AFFAFF
    /wiki/Gfzipgfzip
    /wiki/Sgzipsgzip
    /wiki/File_SystemsFile Systems
    /wiki/FATFAT
    /wiki/NTFSNTFS
    /wiki/Ext2ext2
    /wiki/Ext3ext3
    /wiki/Ufsufs
    /wiki/Ffsffs
    /wiki/Reiserfsreiserfs
    /wiki/File_Systems#Cryptographic_File_SystemsCryptographic File Systems
    /wiki/File_VaultFile Vault
    /wiki/EFSEFS
    /w/index.php?title=CFS&action=edit&redlink=1CFS
    /w/index.php?title=NCryptfs&action=edit&redlink=1NCryptfs
    /w/index.php?title=TCFS&action=edit&redlink=1TCFS
    /w/index.php?title=SFS&action=edit&redlink=1SFS
    /w/index.php?title=Hardware&action=edit&redlink=1Hardware
    /wiki/BusBusses
    /wiki/IDEIDE
    /wiki/SCSISCSI
    /wiki/FirewireFirewire
    /wiki/USBUSB
    /wiki/Data_storage_mediaMedia
    /wiki/RAMRAM
    /wiki/Hard_DriveHard Drives
    /w/index.php?title=Memory_Card&action=edit&redlink=1Memory Cards
    /w/index.php?title=SmartCard&action=edit&redlink=1SmartCards
    /wiki/RFIDRFID
    /wiki/Personal_Digital_DevicesPersonal Digital Devices
    /wiki/PDAsPDAs
    /wiki/CellphonesCellphones
    /wiki/SmartPhonesSmartPhones
    /wiki/Audio_DevicesAudio Devices
    /w/index.php?title=Other_Devices&action=edit&redlink=1Other Devices
    /wiki/PrintersPrinters
    /w/index.php?title=Scanners&action=edit&redlink=1Scanners
    /wiki/Write_BlockersWrite Blockers
    /wiki/Recovering_bad_databad data
    /wiki/Recovering_deleted_datadeleted data
    /wiki/Recovering_Overwritten_Dataoverwritten data
    /wiki/Sanitization_StandardsSanitization Standards
    /wiki/EncryptionEncryption
    /wiki/GPSGPS
    /wiki/Forensic_corporaForensic Corpora
    /wiki/Network_forensicsNetwork forensics
    /wiki/OS_fingerprintingOS fingerprinting
    /wiki/Hidden_channelsHidden channels
    /wiki/Proxy_serverProxy servers
    /wiki/SteganographySteganography
    /wiki/SteganalysisSteganalysis
    /wiki/MetadataMetadata
    /wiki/MAC_timesMAC times
    /wiki/ACLsACLs
    /wiki/Email_HeadersEmail Headers
    /wiki/ExifExif
    /wiki/ID3ID3
    /w/index.php?title=OLE-2&action=edit&redlink=1OLE-2
    /wiki/Legal_issuesLegal issues
    /wiki/CaselawCase law
    /wiki/BooksBooks
    /wiki/PapersPapers
    /wiki/ReportsReports
    /wiki/JournalsJournals
    /wiki/WebsitesWebsites
    /wiki/BlogsBlogs
    /wiki/Mailing_listsMailing lists
    /wiki/OrganizationsOrganizations
    /wiki/VendorsVendors
    /wiki/ConferencesConferences
    /wiki/ToolsTools
    /wiki/Category:Disk_ImagingDisk Imaging
    /wiki/Dddd
    /wiki/Dc3dddc3dd
    /wiki/Dcfldddcfldd
    /wiki/Dd_rescuedd_rescue
    /w/index.php?title=Sdd&action=edit&redlink=1sdd
    /wiki/Aimageaimage
    /wiki/BlackbagBlackbag
    /wiki/Tools:Data_RecoveryData Recovery
    /wiki/Tools#Disk_Analysis_ToolsDisk Analysis
    /wiki/EnCaseEnCase
    /wiki/SMARTSMART
    /wiki/SleuthkitSleuthkit
    /wiki/Foremostforemost
    /wiki/ScalpelScalpel
    /wiki/Frag_findfrag_find
    /wiki/Tools#Forensics_Live_CDsLive CDs
    /wiki/DEFT_LinuxDEFT Linux
    /wiki/HelixHelix
    /wiki/Helix3_ProPro
    /wiki/FCCU_Gnu/Linux_Boot_CDFCCU Gnu/Linux Boot CD
    /wiki/Knoppix_STDKnoppix STD
    /wiki/Tools:Document_Metadata_ExtractionMetadata Extraction
    /w/index.php?title=WvWare&action=edit&redlink=1wvWare
    /wiki/Jheadjhead
    /wiki/Hachoir hachoir-metadata
    /wiki/Tools:File_AnalysisFile Analysis
    /wiki/Filefile
    /w/index.php?title=Ldd&action=edit&redlink=1ldd
    /w/index.php?title=Ltrace&action=edit&redlink=1ltrace
    /w/index.php?title=Strace&action=edit&redlink=1strace
    /wiki/Stringsstrings
    /wiki/Tools:Network_ForensicsNetwork Forensics
    /w/index.php?title=Snort&action=edit&redlink=1Snort
    /wiki/WiresharkWireshark
    /wiki/KismetKismet
    /wiki/NetworkMinerNetworkMiner
    /wiki/Category:Anti-forensics_toolsAnti-Forensics
    /wiki/SlackerSlacker
    /wiki/TimestompTimestomp
    /w/index.php?title=Wipe&action=edit&redlink=1wipe
    /w/index.php?title=Shred&action=edit&redlink=1shred
    /wiki/Tools#Other_ToolsOther Tools
    /w/index.php?title=Biew&action=edit&redlink=1biew
    /w/index.php?title=Hexdump&action=edit&redlink=1hexdump
    /w/index.php?title=Category:Top-Level&action=edit&redlink=1Categories
    /w/index.php?title=Category:Top-Level&action=edit&redlink=1categories
    /wiki/Category:ToolsTools
    /wiki/Category:Disk_file_systemsDisk file systems
    /wiki/Category:File_FormatsFile Formats
    /wiki/Category:HowtosHowtos
    /wiki/Category:LicensesLicenses
    /wiki/Category:Operating_systemsOperating systems
    /wiki/Category:PeoplePeople
    /wiki/Category:BibliographiesBibliographies
    /wiki/Category:Articles_that_need_to_be_expandedarticles that need to be expanded
    http://www.forensicswiki.org/wiki/Main_Pagehttp://www.forensicswiki.org/wiki/Main_Page
    /wiki/Main_PagePage
    /wiki/Talk:Main_PageDiscussion
    /w/index.php?title=Main_Page&action=editView source
    /w/index.php?title=Main_Page&action=historyHistory
    /w/index.php?title=Special:UserLogin&returnto=Main_PageLog in
    /wiki/Main_Page
    /wiki/Main_PageMain Page
    /wiki/Category:Top-LevelCategories
    /wiki/Special:RecentChangesRecent changes
    /wiki/Special:RandomRandom page
    /wiki/Special:WhatLinksHere/Main_PageWhat links here
    /wiki/Special:RecentChangesLinked/Main_PageRelated changes
    /wiki/Special:SpecialPagesSpecial pages
    /w/index.php?title=Main_Page&printable=yesPrintable version
    /w/index.php?title=Main_Page&oldid=11977Permanent link
    /wiki/Forensics_Wiki:CopyrightsCreative Commons Attribution-ShareAlike 2.5 (for content created after March 19th, 2006)
    /wiki/Forensics_Wiki:Privacy_policyPrivacy policy
    /wiki/Forensics_Wiki:AboutAbout Forensics Wiki
    /wiki/Forensics_Wiki:General_disclaimerDisclaimers

    external links

    addressanchor text
    http://creativecommons.org/licenses/by-sa/2.5/Creative Commons
    http://en.wikipedia.org/wiki/Wikiwiki
    http://www.mediawiki.org/Powered by MediaWiki