ABNORMAL TRAFFIC ANALYSIS USING WIRESHARK (CASE STUDY: SISTER.UMMETRO.AC.ID)

Abstract

Information technology that is increasingly developing requires a security mechanism that can guarantee confidentiality, integrity, and availability. one of the existing information technologies within Muhammadiyah Metro University, namely SISTER (Integrated Resource Information System) SISTER is an application that is used to fill in the portfolios of educators in Indonesia. SISTER is installed in each tertiary institution, the SISTER problem for university administrators is that this system does not give root access to university administrators so if there is an abnormality in the application it will make it difficult for administrators to block access from attackers, for this reason, this research will analyze the traffic that is on SISTER and see abnormal activity using the Wireshark tool so that if there is abnormal activity on the SISTER network it can be blocked on the internet network side through the router, this research will also test penetration testing on SISTER using the HPING3 tool to find out whether Wireshark can detect attacks which are conducted. The results of this study are an analysis of abnormal activity at SISTER Muhammadiyah University Metro and anticipating using a firewall, the result is that Wireshark can detect HPING3 attacks and the attacker's IP address can be blocked with a firewall.