$1.$ What was the first connection made, to where, and via what protocol?

$15$:$40$:$19\mathrm{.}571032$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44389>192\mathrm{.}168\mathrm{.}2\mathrm{.}104\mathrm{.}22$: S $1273007928$:$1273007928(0)$ win $5840$

$15$:$40$:$19\mathrm{.}571720$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}104\mathrm{.}22>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44389$: S $1312754191$:$1312754191(0)$ ack $1273007929$ win $5792$

$15$:$40$:$19\mathrm{.}571812$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44389>192\mathrm{.}168\mathrm{.}2\mathrm{.}104\mathrm{.}22$: $.$ ack $1$ win $92$

$15$:$40$:$19\mathrm{.}604635$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}104\mathrm{.}22>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44389$: P $1$:$40(39)$ ack $1$ win $91$

$15$:$40$:$19\mathrm{.}611687$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44389>192\mathrm{.}168\mathrm{.}2\mathrm{.}104\mathrm{.}22$: $.$ ack $40$ win $92$

$15$:$40$:$19\mathrm{.}612844$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44389>192\mathrm{.}168\mathrm{.}2\mathrm{.}104\mathrm{.}22$: P $1$:$40(39)$ ack $40$ win $92$

$2.$ What website did the user visit? What port did it connect to$?$

$15$:$42$:$31\mathrm{.}063149$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}36182>192\mathrm{.}168\mathrm{.}2\mathrm{.}1\mathrm{.}53$: $64516+$ A$?$ google.com. $(28)$

$15$:$42$:$31\mathrm{.}080163$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}1\mathrm{.}53>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}36182$: $645166/0/0$ A $74\mathrm{.}125\mathrm{.}95\mathrm{.}103,[|$domain$]$

$15$:$42$:$31\mathrm{.}126128$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}60175>74\mathrm{.}125\mathrm{.}95\mathrm{.}103\mathrm{.}80$: S $3347203011$:$3347203011(0)$ win $5840$

$15$:$42$:$31\mathrm{.}151658$ IP $74\mathrm{.}125\mathrm{.}95\mathrm{.}103\mathrm{.}80>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}60175$: S $1961428039$:$1961428039(0)$ ack $3347203012$ win $5672$

$15$:$42$:$31\mathrm{.}151923$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}60175>74\mathrm{.}125\mathrm{.}95\mathrm{.}103\mathrm{.}80$: $.$ ack $1$ win $92$

$15$:$42$:$31\mathrm{.}152698$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}60175>74\mathrm{.}125\mathrm{.}95\mathrm{.}103\mathrm{.}80$: P $1$:$465(464)$ ack $1$ win $92$

$15$:$42$:$31\mathrm{.}185873$ IP $74\mathrm{.}125\mathrm{.}95\mathrm{.}103\mathrm{.}80>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}60175$: $.$ ack $465$ win $106$

$15$:$42$:$31\mathrm{.}186930$ IP $74\mathrm{.}125\mathrm{.}95\mathrm{.}103\mathrm{.}80>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}60175$: P $1$:$512(511)$ ack $465$ win $106$

$15$:$42$:$31\mathrm{.}186969$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}60175>74\mathrm{.}125\mathrm{.}95\mathrm{.}103\mathrm{.}80$: $.$ ack $512$ win $108$

$3.$ What is different about this connection to the same site? Explain what was different, and what this would mean to a security analyst performing packet captures.

$15$:$47$:$49\mathrm{.}273824$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}42937>192\mathrm{.}168\mathrm{.}2\mathrm{.}1\mathrm{.}53$: $30382+$ A$?$ www$.$google.com. $(32)$

$15$:$47$:$49\mathrm{.}292587$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}1\mathrm{.}53>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}42937$: $303827/0/0$ CNAME www$.$l$.$google.com.,$[|$domain$]$

$15$:$47$:$49\mathrm{.}293736$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44190>209\mathrm{.}85\mathrm{.}225\mathrm{.}104\mathrm{.}443$: S $4032272183$:$4032272183(0)$ win $5840$

$15$:$47$:$49\mathrm{.}320776$ IP $209\mathrm{.}85\mathrm{.}225\mathrm{.}104\mathrm{.}443>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44190$: S $901179054$:$901179054(0)$ ack $4032272184$ win $5672$

$15$:$47$:$49\mathrm{.}320842$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44190>209\mathrm{.}85\mathrm{.}225\mathrm{.}104\mathrm{.}443$: $.$ ack $1$ win $92$

$15$:$47$:$49\mathrm{.}321702$ IP $192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44190>209\mathrm{.}85\mathrm{.}225\mathrm{.}104\mathrm{.}443$: P $1$:$164(163)$ ack $1$ win $92$

$15$:$47$:$49\mathrm{.}351569$ IP $209\mathrm{.}85\mathrm{.}225\mathrm{.}104\mathrm{.}443>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44190$: $.$ ack $164$ win $106$

$15$:$47$:$49\mathrm{.}352940$ IP $209\mathrm{.}85\mathrm{.}225\mathrm{.}104\mathrm{.}443>192\mathrm{.}168\mathrm{.}2\mathrm{.}62\mathrm{.}44190$

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer

Step: 1 Unlock

Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock

Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!

Q:

In March 2022, Serengeti exercised an ISO that had been granted by his employer, Thunder Corporation, in December 2019. Serengeti acquired 5,000 shares of Thunder stock for the exercise price of $65...

Q:

Exercise 2 Edit and send TCP packets using the protocol editor This exercise takes host A and B as a group, host C and D as a group, and host E and F as a group. The group of host A and B is taken as...

Q:

please answer the questions throughout the code: A Date Server and Client The server DateServer.java package edu.lmu.cs.networking; import java.io.IOException; import java.io.PrintWriter; import...

Q:

Who is the customer? What is the customer's business? How does the customer make money? What are the primary costs for the company? What disruptions are facing the industry or customer? What are the...

Q:

BASED ON THE PARAGRAPHS BELOW ABOUT RELIAQUEST ANSWER THESE QUESTIONS PLS Who is the customer? What is the customer's business? How does the customer make money? What are the primary costs for the...

Q:

Project 10-4: Troubleshoot Subnetting a Small Network Recall that a subnet or broadcast domain is bound by routers. You can use hosts on a small network to demonstrate some of the problems that might...

Q:

Chapter 8 Routing 1. On a TCP/IP network, a router determines where an incoming packet should go by looking at the packets __________. A. destination MAC addresses B. destination IP addresses C....

Q:

Java questions over networking package edu.lmu.cs.networking; import java.io.IOException; import java.io.PrintWriter; import java.net.ServerSocket; import java.net.Socket; import java.util.Date; /**...

Q:

Question 5: (The answers were filled up by my professor, but he did not explain it step by step how he got that answer, it's just a straight answer with no explaination. I would appreciate it if you...

Q:

IN C LANGUAGE PLEASE Part 1: is a basic echo server-client where the server takes in a port number and the client takes in a port number and ip address. Overview: In this part, you will extend the...

Q:

1 . Which of the following are NOT Application layer protocols ( More than one protocol applies ) ? a . ICMP ( Internet Control Message Protocol ) b . TCP ( Transmission Control Protocol ) c . DHCP (...

Q:

How do the matching principle and conservatism enter into the accounting for contingencies?

Q:

Agree or disagree with this statement: Landline and mobile-phone surveys are essentially the same and can be used in the same situations with the same results.

Q:

Summarize the key functions of an operating system, including program creation, execution, I / O device access, file management, system access, error detection, and accounting.

Previous Question Next Question