Index_I

---

I

IANA (Internet Assigned Numbers Authority), 303, 368, 440

ICF (Internet Connection Firewall), 410

ICMP (Internet Control Message Protocol), 555-556

ICMP echo requests, 96, 420

ICMP errors, 14

ICMP headers, 782-785

ICMP messages, 69-70, 426, 429

ICMP packets, 421-422, 783-785

ICMP Ping traffic, 76-77

ICMP pings, 77, 80, 278

ICMP requests, 278

ICMP sockets, 110

ICMP traffic, 275-279, 430, 555-556

icmpsic program, 555-556

ICQ networks, 272

IDE interface, 627

identd, 74-75

Idle scans, 72

IDS (intrusion detection systems), 163-164, 499, 511

IE (Internet Explorer), 731-732

IE History, 730-735, 741-742

IIS (Internet Information Server), 150, 163-164

IMAP (Internet Message Access Protocol), 191

inetd (inet daemon), 189-190

ingress filters, 451

Initialization Vector (IV), 530

install.sh script, 342-343

Internet. See also Web

activity reconstruction, 711-742

America Online, 720-724

e-mail. See e-mail

IE History, 730-735, 741-742

Microsoft Outlook, 714-715

Microsoft Outlook Express, 712-714, 736-737

Netscape Navigator/Communicator, 715-719, 738-739

Unix mailboxes, 724-726, 740-741

Internet Assigned Numbers Authority (IANA), 303, 368, 440

Internet Connection Firewall (ICF), 410

Internet Control Messaging Protocol. See ICMP

Internet Explorer. See IE

Internet Information Server (IIS), 150, 163-164

Internet Message Access Protocol (IMAP), 191

Internet Protocol. See IP

Internet Security Scanner (ISS), 333-341

Internet worms, 121

Interprocess Communications (IPC), 132-133

intrusion detection systems (IDS), 163-164, 499, 511

IP addresses

filters, 465

forensic analysis, 710

fping utility, 424

gping utility, 425-426

Netcat and, 7-8

source, 73

spoofing, 17-18

whois servers, 412-416

IP-based sniffing, 497

IP headers, 109, 781

IP packets, 426, 562-567. See also packets

IP stacks, 552-559

IPC (Interprocess Communications), 132-133

IPC$ shares, 113-114, 128, 132-140, 146

ipchains, 374-383

IpEye scanner, 100-101

ipfilter tool, 403

IPFW packet filtering system, 393-403

IPsec port, 451

IPSec tunnels, 451

iptables, 383-393

iptest program, 559-561

IRC networks, 272

isic program, 552-554

ISIC tool suite, 552-559

ISS (Internet Security Scanner), 333-341

ISS Policies, 333

IV (Initialization Vector), 530

---