Using AWS to get a tcpdump to view in wireshark

Subscribers:
1,220
Published on ● Video Link: https://www.youtube.com/watch?v=xqHy2xZjuZ0



Duration: 8:30
838 views
8


Linking out to extra resources if you need a greater understanding.
https://www.w3schools.com/bootstrap/

AWS UserData - https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/user-data.html
* Installs Apache - httpd on linux ec2
* Sets up access for ec2-user
AWS Security Group - https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html

My userdata script for this lab. No guarantee I will keep the file around that the wget grabs.

#!/bin/bash
yum install -y httpd
systemctl start httpd
systemctl enable httpd
usermod -a -G apache ec2-user
chown -R ec2-user:apache /var/www
chmod 2775 /var/www
find /var/www -type d -exec chmod 2775 {} \;
find /var/www -type f -exec chmod 0664 {} \;
wget -O /var/www/html/index.html https://mywebbucket-it240.s3.amazonaws.com/BSindex.html

Linux tcpdump command I used
sudo tcpdump -i any -s 65535 -w mydump.pcap

I have other videos on scp... Here is part of the command I used. -i points to the private key I use for these videos.
scp -i /home/jstrain/.ssh/Linux2022 ec2-user@...

wireshark right click on an item and you can follow it. We did follow http...