Question: 1. In your VM, open Wireshark and start capturing traffic on enp0s3. Then open a terminal and type $ping (insert facebook web address here, right

1. In your VM, open Wireshark and start capturing traffic on enp0s3. Then open a terminal and type $ping (insert facebook web address here, right after $ping. Due to chegg guidelines, i cant post web addresses). When you get the very first response of the ping command, press Ctrl + C to stop the process and then stop the Wireshark traffic capture. In the Wireshark, locate a pair of the very first ICMP request and reply to answer the following: -Write the names of all protocol headers from lower layer to higher layer that are included in an ICMP request or reply packet:

-Observe the packets located immediately above the very first ICMP request/reply. What is displayed in the Protocol column of those packets? Why is it necessary to have such packets before the ICMP request/reply?

-Which of the following layer-4, or transport layer protocol is used with those packets before the ICMP request/reply?

- Observe a packet immediately before the first ICMP request/reply and observe the Destination field. Whose IP address do you think is displayed in that field?

-Click a DNS request located before the ICMP request/reply. What is the destination port number? What is the source port number?

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!