大家分享一下答案吧，真心帮lab转行的人(非汉语人士)问的，我不是这方面的，谢谢
，包子随后
1. How can you modify the ngrep to include all IP addresses?
2. Review the traffic between the web server and the IP address. Review the
requests and determine what was requested.
3. There is a payload that was uploaded to the web server. Apply a display
filter to filter only for POST headers that were sent to the web server.
Analyze the details of the header and identify the file that was uploaded to
the web server.
4. create three Snort rules to detect the activity.
