Category: Unicorn tutorials

DNS translates domain names to IPs. A **recursive DNS query** involves a DNS server querying other servers to resolve a domain if it…

The *Exploitation phase* involves attackers leveraging vulnerabilities to gain access. Examples include Operation Aurora using IE vulnerabilities and ARP cache poisoning for MITM…

The *TCP checksum error* often arises due to NIC checksum offloading. Protocol analyzers display errors since they can’t access the NIC-processed checksums.

Discover the Sasser worm, a 2004 virus exploiting Windows’ LSASS vulnerability, affecting systems by scanning IPs and installing malicious processes.

Name lookup, or name resolution, converts complex addresses (e.g., MAC/IP) into readable names. It eases identification but can fail due to server or…

TCP conversation analysis, a key Unicorn feature, helps identify client, server, or network issues by analyzing TCP packets, delays, and retransmissions.

Packet size distribution helps analyze traffic patterns. Large packets (39%) indicate data transfer, while small ones (36%) reflect protocol control.

A **Switching loop** occurs when multiple Layer 2 paths exist, causing broadcast storms and network disruption. STP resolves loops by creating a logical…

Understanding network congestion: Learn how excessive data traffic affects service quality, causing delays and packet loss, and how to diagnose issues efficiently.

DNS translates human-friendly domain names to IP addresses necessary for online communication. To diagnose Web access issues: ping the web host and ping…