Wireshark Lab

Wireshark Lab

  • Submitted By: jbush4
  • Date Submitted: 10/01/2015 3:02 PM
  • Category: Technology
  • Words: 477
  • Page: 2

Deliverables Part A
You should answer the following questions:

1. What is the IP address of your host? What is the IP address of the destination host?

Source: 192.168.32.128 Destination: 173.194.205.99

2. Why is it that an ICMP packet does not have source and destination port numbers?

It doesn’t have a place for it, and it’s not needed. – it’s only in a datagram. The protocol would need to be TCP or UDP to have a port. It only communicates on the network level. The type and code shows the message received

3. Examine one of the ping request packets sent by your host. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?

Type: 8
Code: 0
Fields: Total Time to Live, and also the below
Checksum: 2 bytes
Sequence #: 2 bytes
Identifier: 2 bytes

4. Examine the corresponding ping reply packet. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?

Type: 0
Code: 0
Fields: Total Time to Live, and also the below
Checksum: 2 bytes
Sequence #: 2 bytes
Identifier: 2 bytes











Deliverables PartB
You should answer the following questions:

5. What is the IP address of your host? What is the IP address of the target destination host?

Source: 192.168.32.128 Destination: 173.194.205.99

6. If ICMP sent UDP packets instead (as in Unix/Linux), would the IP protocol number still be 01 for the probe packets? If not, what would it be?

No I believe it would be 11

7. Examine the ICMP echo packet in your screenshot. Is this different from the ICMP ping query packets in the first half of this lab? If yes, how so?

It has the same fields as the ping.

8. Examine the ICMP error packet in your screenshot. It has more fields than the ICMP echo packet. What is included in those fields?

It shows the first 8 bytes of...

Similar Essays