This is my Lab, but I still need help with question 1 and the last one

Thanks

The figure below shows packet traffic statistics sorted by count. For the top 3 hosts(192.168.1.92, 66,94,238,147, and 146.185.246.147), communicating with subject host(192.168.1.98).

1. Summarize the nature of traffic for each one of those 3 hosts.

The next figure shows top TCP ports (in terms of packet count). Show applications typically used in the top (10 ports) ----- DONE

3389 -

Microsoft Terminal Server (RDP) officially registered as Windows Based Terminal (WBT)

1339 - kjtsiteserver

1321 - PIP

1326 - WIMSIC

1418 - Timbuktu Service 2 Port

1379 - Integrity Solutions

1327 - Ultrex

1328 echoServer /

135 - Port 135 is used by Messenger Service / Secefa

1448 - OpenConnect License Manager

8 of the packets are shown to be NONE (not TCP or UDP) find those packets and show what they are used for - DONE

IGMPv3 supports applications that explicitly signal sources from which they want to receive traffic.

With IGMPv3, receivers signal membership to a multicast host group in the following two modes:

INCLUDE modeIn this mode, the receiver announces membership to a host group and provides

a list of IP addresses (the INCLUDE list) from which it wants to receive traffic.

EXCLUDE modeIn this mode, the receiver announces membership to a host group and provides

a list of IP addresses (the EXCLUDE list) from which it does not want to receive traffic. This

indicates that the host wants to receive traffic only from other sources whose IP addresses are not

listed in the EXCLUDE list. To receive traffic from all sources, like in the case of the Internet

Standard Multicast (ISM) service model, a host expresses EXCLUDE mode membership with an

empty EXCLUDE list.

NEED HELP WITH THIS ONE

Are there any security threats or problems in this traffic ? Explain