版权说明:本文档由用户提供并上传,收益归属内容提供方,若内容存在侵权,请进行举报或认领
文档简介
1、实验一 ethernet and arp一、实验目的1.加强对以太网帧格式的理解;2.理解arp协议的工作原理。二、实验环境1.pc机一台;2.wireshark软件。三、实验内容1. capturing and analyzing ethernet frames2. the address resolution protocol四、实验步骤及思考(一)capturing and analyzing ethernet frameshttp get message(1)based on the contents of the ethernet frame containing the http
2、get message1. what is the 48-bit ethernet address of your computer?answer:the 48-bit ethernet address of my computer is:c8:0a:a9:db:9b:f3the ethernet address of my computer2. what is the 48-bit destination address in the ethernet frame? is this the ethernet address of ? (hint: the a
3、nswer is no). what device has this as its ethernet address?note: this is an important question, and one that students sometimes get wrong. re-read pages 468-469 in the text and make sure you understand the answer here.answer:1)the 48-bit destination address in the ethernet frame is:00:23:89:8d:50:71
4、the destination address in the ethernet frame2)this is not the ethernet address of .3)it is the address of my linksys router, whick is the link used to get off the subnet. 3.give the hexadecimal value for the two-byte frame type field. what do the bit(s) whose value is 1 mean within
5、 the flag field? answer:1)the hexadecimal value for the two-byte frame type field is:ox0800the hexadecimal value for the two-byte frame type field2) the value is 1 within the flag field means the fragment has not been fragmented.flag4.how many bytes from the very start of the ethernet frame does the
6、 ascii “g” in “get” appear in the ethernet frame?answer:1)the ascii “g” appears 54 bytes from the very start of the ethernet frame.2)calculation process as follows:there are 14 bytes of ethernet frame,20 bytes of ip header and 20 bytes of tcp header before http data is encountered.5. what is the hex
7、adecimal value of the crc field in this ethernet frame? answer:1)there is no crc field.2)because the crc calculated before the wireshark packet sniffer start up.no crc(2)based on the contents of the ethernet frame containing the first byte of the http response message6. what is the value of the ethe
8、rnet source address? is this the address of your computer, or of (hint: the answer is no). what device has this as its ethernet address?answer:1)the value of the ethernet source address is: 00:23:89:8d:50:71http response message2)this is neither the address of your computer,northe
9、address of .3)it is the address of my linksys router,which is the link used to get onto my subnet.7. what is the destination address in the ethernet frame? is this the ethernet address of your computer?answer:1)the destination address in the ethernet frame is:c8:0a:a9:db:9b:f32)it i
10、s the address of my computer. (the 48-bit ethernet address of my computer is:c8:0a:a9:db:9b:f3)8. give the hexadecimal value for the two-byte frame type field. what do the bit(s) whose value is 1 mean within the flag field?answer:1)the hexadecimal value for the two-byte frame type field is: 0x0800.2
11、)the value is 1 within the flag field means the fragment has not been fragmented.flag field9. how many bytes from the very start of the ethernet frame does the ascii “o” in “ok” (i.e., the http response code) appear in the ethernet frame?answer:1)the ascii “o” appears 54 bytes from the very start of
12、 the ethernet frame.2)calculation process as follows:there are 14 bytes of ethernet frame,20 bytes of ip header and 20 bytes of tcp header before http data is encountered.10. what is the hexadecimal value of the crc field in this ethernet frame?answer:1)there is no crc field.2)the reason:because the
13、 crc calculated before the wireshark packet sniffer start up.(二)the address resolution protocol(1)arp caching11. write down the contents of your computers arp cache. what is the meaning of each column value?answer: 1)the internet address column contains the ip address,.2)the physical address column
14、contains the mac address, and the type indicates the protocol type.3)observing arp in action12. what are the hexadecimal values for the source and destination addresses in the ethernet frame containing the arp request message?answer:1)the hexadecimal values for the source addresses in the ethernet f
15、rame containing the arp request message is: 00:23:89:8d:50:712)the destination addresses in the ethernet frame containing the arp request message is: ff:ff:ff:ff:ff:ff13. give the hexadecimal value for the two-byte ethernet frame type field. what do the bit(s) whose value is 1 mean within the flag f
16、ield?answer:the hexadecimal value for the two-byte ethernet frame type field is:0x0806.14. download the arp specification from /innotes/std/std37.txt. a readable, detailed discussion of arp is also at http:/www.erg.abdn.ac.uk/users/gorry/course/inet-pages/arp.html.a) how many
17、bytes from the very beginning of the ethernet frame does the arp opcode field begin?answer:the arp opcode field begins 20 bytes from the very beginning of the ethernet frame.b) what is the value of the opcode field within the arp-payload part of the ethernet frame in which an arp request is made?ans
18、wer:the hex value for opcode field withing the arp-payload of the request is 1.c) does the arp message contain the ip address of the sender? answer:yes, the arp message containg the ip address 05 for the sender.d) where in the arp request does the “question” appear the ethernet address of
19、 the machine whose corresponding ip address is being queried?answer:the field “target mac address” is set to 00:00:00:00:00:00 to question the machine whose corresponding ip address (05) is being queried.15. now find the arp reply that was sent in response to the arp request.a) how many b
20、ytes from the very beginning of the ethernet frame does the arp opcode field begin?answer:the arp opcode field begins 20 bytes from the very beginning of the ethernet frame.b) what is the value of the opcode field within the arp-payload part of the ethernet frame in which an arp response is made?ans
21、wer:the hex value for opcode field withing the arp-payload part of the ethernet frame is 2 c) where in the arp message does the “answer” to the earlier arp request appear the ip address of the machine having the ethernet address whose corresponding ip address is being queried?answer:the answer to th
22、e earlier arp request appears in the”sender mac address” field, which contains the ethernet address 00:d0:59:a9:3d:68 for the sender with ip address .16. what are the hexadecimal values for the source and destination addresses in the ethernet frame containing the arp reply message?answer:
23、the hex value for the source address is 00:06:25:da:af:73 and for the destination is 00:d0:59:a9:3d:68 .17. open the ethernet-ethereal-trace-1 trace file in/wireshark-labs/wireshark-traces.zip. the first and second arp packets in this trace correspond to an arp request sent by the computer running wireshark, and t
温馨提示
- 1. 本站所有资源如无特殊说明,都需要本地电脑安装OFFICE2007和PDF阅读器。图纸软件为CAD,CAXA,PROE,UG,SolidWorks等.压缩文件请下载最新的WinRAR软件解压。
- 2. 本站的文档不包含任何第三方提供的附件图纸等,如果需要附件,请联系上传者。文件的所有权益归上传用户所有。
- 3. 本站RAR压缩包中若带图纸,网页内容里面会有图纸预览,若没有图纸预览就没有图纸。
- 4. 未经权益所有人同意不得将文件中的内容挪作商业或盈利用途。
- 5. 人人文库网仅提供信息存储空间,仅对用户上传内容的表现方式做保护处理,对用户上传分享的文档内容本身不做任何修改或编辑,并不能对任何下载内容负责。
- 6. 下载文件中如有侵权或不适当内容,请与我们联系,我们立即纠正。
- 7. 本站不保证下载资源的准确性、安全性和完整性, 同时也不承担用户因使用这些下载资源对自己和他人造成任何形式的伤害或损失。
最新文档
- 部编版一年级语文下册识字5《动物儿歌》教学课件
- 实习报告应该怎么写
- 初中中考备考实施方案
- 2024年房子租赁协议模板(四篇)
- 2024年车辆买卖合同格式范本(4篇)
- 考试考生笔试须知
- 2024年汽车抵押贷款合同参考样本(二篇)
- 2024年小商品供货合同范本(二篇)
- 2024年大米购销合同专业版(二篇)
- 2024年科技公司分销合作协议范文(二篇)
- 语文丨百师联盟2024届高三5月信息押题卷(一)语文试卷及答案
- HYT 107-2017 卷式反渗透膜元件测试方法
- 虚拟现实技术及应用智慧树知到期末考试答案2024年
- 公司治理视角下的康美药业财务舞弊案例研究
- 华师大版数学八年级下册-《分式的乘除》教学课件
- 奔驰汽车简介
- 四川省高等教育自学考试自考毕业生登记表001汇编
- 交警辅警培训
- 贷款业务审计
- 分数、百分数应用题的复习ppt课件.ppt
- CK0630数控车床电气系统的安装与调试毕业论文.doc
评论
0/150
提交评论