数据包捕获实验报告

1、数据包捕获实验报告信息学院计算机网络技术2013级131班实验时间姓名：学号：实验名称：Wireshark抓包实验实验成绩：一、实验目的1、掌握Wireshark软件的使用2、掌握Wireshark执行基本的协议数据单元(pdu)捕获3、掌握Wireshark捕获,嗅探文件的传输协议(FTP)密码二、实验仪器设备及软件计算机,Wireshark软件三、实验方案安装好Wireshark软件,而且必须连接到有效的网络，如以太网网络,且在Wireshark运行下, 通过Wireshark捕获，嗅探(FTP)密码。四、实验步骤1、启动软件，要开始捕获数据，首先要选择捕获菜单中的选项，2、必须将Wire

2、shark设置为监控的正确的接口。3、将Wireshark设置为在混杂的模式下捕获数据。4、单击开始按钮5、捕获的数据PDU可以保存在文件中。6、 PingPDU的捕获在确定实验拓扑和配置正确后，启动软件，按照上文概述中的说明 设置 Capture Options (捕获选项)，“Capture Filter” 输入：host ,按 “start” 开始捕获过程。如果Wireshark的数据包列表窗格没有信息，就在计算机的命令行运行 Pingl,这样就可以捕获到Ping的数据包。(2)检查数据包列表窗格。通过 Wireshark捕获、嗅探FTP密码(1)启动Wireshark,选择Captur

3、e (捕获)菜单中的Options (选项)。五、实验结果CCapturing from 以太网File Edit View Go Capture Analyze Statistics Telephony Tools 案d i口诵髯 i q争磅品受iFilter:(SVN Rev 51934 from /trunk-1.10)Internals Help巴国明舞|回Expression. Clear Apply Save10.1.133,19610.1.133,196TCP TCP60 60707 ACK Seq=l Ack=929 110.1.133,19610.1.133,196TCP T

4、CP60 60707 ACK Seq=l Ack=929 1378 /1.1 200 OK (text/html)60 60707 FIN, ACK Seq=325 ATCP54 60707 ACK Seq=929 Ack=32TCP54 60707 FIN, ACK Seq=929 ATCP60 60707 ACK Seq=326 Ack=93OICQ81 OICQ Protocol181 30. 8253620 183. 60. 56.172OICQ89 OICQ Protocol182 33. 7615530 Zhongxin_f e:d4 :ecQuantaco_c4 :2d:acEA

5、POL66 Key183 33. 7623960 Quanr aco_c4 :2d: acNearest78 Key00000010002000300040 nncn917 od U 11502, o 5 o o 7 A o 3 o o 2 n c o o o CL a od Ob d o 9 9 4 k 24 eb 1 o 4 0 0 9 e-7 c o 4 5 9 1of a7 o o 1 a a l eb 4 34 h 9 6 c 3 2 c 8 0 5 a 3 c o o 8 8 6 co If 9 2z% o of 9 6 5 a12fk 4 o 8 3d1 o c o 7b 7 o

6、 3 o 9 5 8 8 1 4d 0 3 4 e 1 n 1 c 5 5 24 8 3 3 0 8 0 d 7 2 3 9 3b od1 L 4 4 7 c c n odbb 6 5do 64 c cf 7b cf5.WE. 60707 ACK seq=l Ack=611 iI 372 POST/gdt_stats.fcg?stkey=99BC29ClOICQ 121 OICQ Protocol184 36.0825530 183.60. 56.172OICQ 121 OICQ Protocol团 Frame 1: 121 bytes on wire (968 bits), 121 byte

7、s captured (968 bits) on interface 0 Ethernet II, Src: Zte_04:3d:81 (00:19:c6:04:3d:81), Dst: Quantaco_c4:2d:ac (08:9e:01:c4:2d:ac) i+i Internet Protocol version 4, Src: 183. 60. 56.172 (183. 60. 56.172) , Dst: 96 (96) User Datagram Protocol, Src Port: irdmi (8000), Dst Port: 59856 (59856)S oicq - I

8、M software, popular in china打以太问: File: C: Packets: 184 Displayed: 184 Profile: Default运行初始界面结果，接下来是这样的结果Capturing from 以太网 Wireshark 1.10.2 (SVN Rev 51934 from /trunk-1.10)Capturing from 以太网 Wireshark 1.10.2 (SVN Rev 51934 from /trunk-1.10)File Edit View Go Capture Analyze Statistics Telephony Tool

9、s Internals Help蕤I豳蠹髯0 I Q Q磅a番号I亘010d 0 已I 凶明器I 更Filter:v Expression. Clear Apply SaveNo.TimeSourceDestinationProtocolLengthInfo. U4DJ4U XU. X . L J J XyOLTOi . OU.X/ ZoxUCQ HTOTOCO1378121. 057519 183. 60. 56.172OICQ89oicq Protocol379126. 305003 fe80: :bcc3:ddll：5dOffO2:1:2DHCPV6150Solicit XID： 0 x

10、b931fa CID： 0001001380130. 897009 Wi stronl_b8: ee:2e NearestEAPOL60Start381130. 903441 Wi stronl_b8: ee:2e NearestEAP60Response, Identity382130. 907250 Wistronl_b8:ee:2e NearestEAP60Response, MD5-challenge EAP (EAP-r383131.447262 0. 0. 0. 0IPv464CBT (7) ETHERNET FRAME CHECK SEQl384131.448508 Zhongx

11、i n_f e: d4 :ec BroadcastARP64Reserved opcode 0 ETHERNET frame385141.070546 fe80: : 7159: 5632:bO8ffO2:1:3LLMNR90Standard query 0 xdc42 A qwoqteaf 1386LLMNR70Standard query 0 xdc42 A qwoqteaf 1387141.072195 fe80: ：7159:5632:bO8ffO2:1:3LLMNR90Standard query 0 xc9d4 A 1nifwpnb1388141. 072197 fe80: : 7

12、159: 5632:bO8ffO2:1:3LLMNR90Standard query 0 xb93d A nqrohnddi389LLMNR70Standard query 0 xb93d A nqrohnddi390LLMNR70standard query 0 xc9d4 A 1nifwpnb391141.171145 fe80: :7159:5632:bO8ffO2：1：3LLMNR90standard query 0 xdc42 A qwoqteaf 1392LLMNR70standard query 0 xdc42 A qwoqteaf 1393141.173017 fe80: :

13、7159:5632：bO8ffO2：1：3LLMNR90Standard query 0 xb93d A nqrohnddi394LLMNR70Standard query 0 xb93d A nqrohnddi395141.173339 fe80: : 7159: 5632:bO8ffO2:1:3LLMNR90Standard query 0 xc9d4 a 1nifwpnb396LLMNR70standard query 0 xc9d4 A 1nifwpnb110.1.143. 255400 141. 833433 Wi stronl_b8: ee: 2eA1 AlQA -Pz%On - - 1 zMzaz- - z4 C-F-F - CBroadcastr -F4=n- r NBNS NBNSNBNS ARP NBNSI I nAkin92 Name query NB QWOQTEAFBNBNS NBNSNBNS ARP NBNSI I nAkin92 Name query NB nqrohnddra92 Name query NB LNIFWPNBOF92 Name query NB isatap OU z f* %A 4 l r6 m如上图所示，可看到很多捕获的数据。第一列是捕获数据的编号； 第二列 是捕获数据的相对时间，从开始捕获