Wireshark Assignment, Exercises of Network security

Assignment about Wireshark. There are about 5 questions

Typology: Exercises

2020/2021

Uploaded on 07/09/2021

pkhokhali
pkhokhali 🇳🇵

5

(1)

18 documents

1 / 3

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
1. List 3 different protocols that appear in the protocol column in the unfiltered packet-listing window.
A: The three different protocols that appear in the protocol column in the unfiltered packet-listing window are:
TCP
UDP
HTTP
2. How long did it take from when the HTTP GET message was sent until the HTTP OK reply was received?
A:
If we look at the frame section of the GET request we see that the time the packet arrived is
08:27:27.001732000
The same section for the HTTP OK shows an arrival time of 08:27:27.006338000
The difference of these 2 times gives .006338000- .001732000= 0.004606 seconds
3.What is the Internet address of the gaia.cs.umass.edu (also known as wwwnet.cs.umass.edu)?
A: If we look at the IP section of the GET request, the source and destination are
shown
The source is the local machine’s address and the destination is the web server’s
public
My (local machine’s) address = 192.168.0.110
IP address 128.119.245.12 = gaia.cs.umass.edu
pf3

Partial preview of the text

Download Wireshark Assignment and more Exercises Network security in PDF only on Docsity!

  1. List 3 different protocols that appear in the protocol column in the unfiltered packet-listing window. A: The three different protocols that appear in the protocol column in the unfiltered packet-listing window are:  TCP  UDP  HTTP
  2. How long did it take from when the HTTP GET message was sent until the HTTP OK reply was received? A: If we look at the frame section of the GET request we see that the time the packet arrived is 08:27:27. The same section for the HTTP OK shows an arrival time of 08:27:27. The difference of these 2 times gives .006338000- .001732000= 0.004606 seconds 3.What is the Internet address of the gaia.cs.umass.edu (also known as wwwnet.cs.umass.edu)?

A: If we look at the IP section of the GET request, the source and destination are

shown

The source is the local machine’s address and the destination is the web server’s

public

My (local machine’s) address = 192.168.0.

IP address 128.119.245.12 = gaia.cs.umass.edu

  1. Print the two HTTP messages (GET and OK) referred to in question 2 above. To do so, select Print from the Wireshark File command menu, and select the “Selected Packet Only” and “Print as displayed” radial buttons, and then click OK. HTTP GET Message HTTP OK message