March 12, 2013
Objective: See what’s going on in a network using Wireshark
- Command Prompt
Notes and Observations:
- We “sniffed” out HTTPs,DNS’,ICMPs, ARP & DHCPs
Diagrams, flowcharts, and figures:
Fig 1: A pair, request and response, ARP frames
What protocols are encapsulated in the DNS query?
- UDP, IP
Which of these protocols is a transport layer protocol?
What protocols are encapsulated in the ICMP frame? What do the ICMP initials mean?
- IP, ICMP(Internet Control Message Protocol)
Approx. how many frames did it take to download the web page for HTTP?
- 36 frames
List the different protocols that are used…
- IP, TCP, HTTP
What protocol headers do you see, and what are three field names in each header in the first frame carrying a HTTP GET request packet?
- IP – Defferentiated Services Field, Flags, Header checksum
- TCP – flags, checksum, [SEQ/ACK analysis]
- HTTP – GET/aggregator/cached/tea/center UA – Mozilla/5.0 (compatible;MSIE 9.0; windows NT 6.1; Trident/5.0)\r\n
The type of web server being accessed in the first HTTP Response frame header…
I didn’t understand this lab at all, so I can’t really conclude anything from the above information. The only reason I was able to get these answers was all due to my partner I was working with. I felt the lab to be really confusing and a bunch of new information that all went over my head.