Link

Malware-Traffic-Analysis.net - 2020-06-12 - Traffic analysis exercise - Frank-n-Ted (What's going on?)

Local systems

Network

10.6.12.1

10.6.12.12

Endpoint 1

dhcp

Option: (50) Requested IP Address (10.6.12.157)

Client MAC address: Intel_68:42:d3 (00:11:75:68:42:d3)

Host Name: DESKTOP-86J4BX

kerberos.CNameString and ip.src==10.6.12.157 and ip.dst == 10.6.12.12

CNameString: ted.brokowski

Endpoint 2

dhcp

Option: (50) Requested IP Address (10.6.12.203)

Client MAC address: IntelCor_6d:fc:e2 (84:3a:4b:6d:fc:e2)

Host Name: LAPTOP-5WKHX9YG

kerberos.CNameString and ip.src==10.6.12.203 and ip.dst == 10.6.12.12