تحليل الحزم - كتاب الأمن السيبراني - الصف 12 - الفصل 1 - المملكة العربية السعودية

تمعن في لوحة قائمة الحزمة التي تعرض نتائج الفحص، وسيمكنك ملاحظة أن ملف الفحص يحتوي على حزم نصف مراسلات بين أجهزة المستخدمين (العملاء) والخوادم المركزية. --- SECTION: شكل 2.14: المخرجات التفصيلية للوحة تفاصيل الحزمة --- شكل 2.14: المخرجات التفصيلية للوحة تفاصيل الحزمة في الحزمة رقم 2، يكون عنوان بروتوكول الإنترنت للمصدر (Source IP) 199.0.0.154، وعنوان بروتوكول الإنترنت للوجهة (Destination IP) 199.0.0.46، ويرسل جهاز المستقبل حزمة باستخدام بروتوكول التحكم بالنقل (TCP) الخاص بالمرسل عبر المنفذ 3389 كمنفذ المصدر (منفذ المرسل)، والمنفذ 51549 كمنفذ الوجهة (منفذ المتلقي). وزارة التعليم 75 2025 - 1447 --- VISUAL CONTEXT --- **FIGURE**: Scan_results.pcapng - Network Packet Analyzer Description: A screenshot of a network packet analysis software interface, titled 'Scan_results.pcapng', featuring a menu bar with 'File Edit View Go Capture Analyze Statistics Telephony Wireless Tools Help'. It shows three main panels: a packet list, packet details, and packet bytes. At the top of the packet list, a filter bar with 'Apply a display filter <Ctrl/>' is visible. A status bar at the bottom indicates 'Packets: 14387 - Displayed: 14387 (100.0%) Profile: Default'. The packet list displays captured network traffic with columns for packet number, time, source IP, destination IP, protocol, length, and information. The packet details panel provides a hierarchical view of the selected packet (Frame 2), breaking down its components by protocol layer (Ethernet II, IPv4, TCP) and showing specific field values. The packet bytes panel shows the raw hexadecimal and ASCII data of the selected packet. Context: This visual demonstrates the output of a network packet analyzer, illustrating how network communication data is captured, organized, and presented for detailed inspection of protocols, addresses, and data content. **TABLE**: Packet List Table Description: A table embedded within the network analyzer screenshot, showing a list of captured network packets with their corresponding details. Table Structure: Headers: No. | Time | Source | Destination | Protocol | Length | Info Rows: Row 1: 1 | 0.000000 | 199.0.0.46 | 199.0.0.154 | TLSv1.2 | 97 | Application Data Row 2: 2 | 0.000074 | 199.0.0.154 | 199.0.0.46 | TCP | 54 | 3389 → 51549 [ACK] Seq=1 Ack=44 Win=63846 Len=0 Row 3: 3 | 0.005153 | 199.0.0.46 | 199.0.0.154 | TLSv1.2 | 196 | Application Data Row 4: 4 | 0.016036 | 199.0.0.154 | 199.0.0.46 | TLSv1.2 | 104 | Application Data Row 5: 5 | 0.032026 | 199.0.0.46 | 199.0.0.154 | TLSv1.2 | 104 | Application Data Row 6: 6 | 0.032106 | 199.0.0.154 | 199.0.0.46 | TCP | 54 | 3389 → 51549 [ACK] Seq=143 Ack=144 Win=63746 Len=0 Row 7: 7 | 0.048186 | 199.0.0.46 | 199.0.0.154 | TLSv1.2 | 196 | Application Data Data: The table lists 7 packets, showing their number, timestamp, source IP address, destination IP address, protocol (TLSv1.2 or TCP), length, and a summary of the information. Packet 2 and 6 are TCP acknowledgment packets, while others are TLSv1.2 application data. Context: This table provides a summary view of individual network packets, allowing users to quickly identify source/destination, protocol, and basic information for each captured frame. **TEXT_BLOCK**: Packet Details for Frame 2 Description: A detailed, hierarchical breakdown of the selected network packet (Frame 2) within the analyzer's interface, showing information from the Ethernet, IP, and TCP layers. Context: This section provides granular detail about the structure and content of a single network packet, essential for understanding how different protocols contribute to data transmission and for troubleshooting network issues. **TEXT_BLOCK**: Packet Bytes for Frame 2 Description: The raw hexadecimal and partially visible ASCII representation of the data contained within Frame 2, as shown in the network analyzer's interface. Context: This raw data view is crucial for low-level analysis, allowing examination of the exact bits and bytes transmitted, which can be vital for security analysis or protocol development. **DIAGRAM**: Key Packet Fields Identification Description: A diagram with blue callout boxes and lines pointing from specific columns in the packet list table to descriptive labels in Arabic, highlighting key fields such as Source IP, Destination IP, TCP Protocol, Source Port, and Destination Port. Key Values: عنوان IP المصدر, عنوان IP الوجهة, بروتوكول TCP للمرسل, منفذ المصدر, منفذ الوجهة Context: This diagram visually aids in understanding the mapping between the data presented in the packet list and their corresponding conceptual labels, reinforcing the identification of critical network packet components.