Start up your web browser and clear the browser's cache memory (Use the following website if you don't know how to do this), but do not access any site after clearing the cache. ?
Open Wireshark and start capturing.
Now, go back to your browser, and access one of your favorite web sites.
Stop capturing and save the captured file.
Enter http in lowercase in the filter box, and press enter.
Take a screenshot of full Wireshark window, and insert it here.
Find a packet showing an HTTP "GET" request. Answer the following questions about that packet.
Is the frame an outgoing or an incoming frame??
What tells you that this is an outgoing frame?
What is the source IP address of the network-layer header in the frame?
What is the destination IP address of the network-layer header in the frame?
What is the total number of bytes in the whole frame? (Hint: bytes on wire)
What is the number of bytes in the Ethernet (data-link layer) header? (Hint: Look at the status bar)?899
What is the number of bytes in the IP header??
What is the number of bytes in the TCP header??
What are the total bytes in the message (at the application layer)?
How many layers of the TCP/IP protocol stack are involved in this communication? (Hint: Don't forget the layer that Wireshark doesn't show)
1.3.8 Assignment part 2
Start up your web browser and clear the browser's cache memory but do not access any site yet.
Open Wireshark and start capturing.
Find the IP address of your machine, and share that IP with a neighbor, and get their IP address
Ping your neighbor's machine by IP address.
Stop capturing and save the captured file.
Enter arp in lowercase in the filter box.
Take a screenshot of full Wireshark window, and insert it here.
Answer the following questions about the first packet of type ARP.
Is the frame an outgoing or an incoming frame??
How many layers of the TCP/IP protocol stack are involved in this communication? (Hint: You may need to use Google to find this answer)
What is the source IP address of the network-layer header in the frame?
What is the destination IP address of the network-layer header in the frame?
To what device on the network does the destination IP address above correspond? (Hint: you may need to use Google to research the ARP protocol) IPV4 10.21.50.145
What are the total bytes in the message?899 bytes
1.3.9 Assignment part 3
Open Wireshark and start capturing.
Go to a command prompt and enter the command "ping google.com"
Stop capturing and save the captured file.
Enter icmp in lowercase in the filter box. "ICMP echo" is the formal name for the ping command.
Take a screenshot of full Wireshark window, and insert it here.
Answer the following questions about the first packet of type ICMP echo.
Is the frame an outgoing or an incoming frame??
How many layers of the TCP/IP protocol stack are involved in this communication?
What is the source IP address of the network-layer header in the frame?
What is the destination IP address of the network-layer header in the frame?
To what device on the network does the destination IP address above correspond?
What are the total bytes in the message?