Hands$-$On Project $3-2$ Examining an IPv$6$ Packet Header with Wireshark

TIME REQUIRED: $20$ minutes

OBJECTIVE: Learn to use Wireshark to examine the fields in an IPv$6$ header.

DESCRIPTION: This project shows you how to capture packets on a network, select a specific packet, and examine the IPv$6$ header data for the packet. You may alternately open the ch$03\_$IPv$6$Fields.pcapng file $($available from the Student Companion Web site$)$ in Wireshark rather than capturing data and skip to Step $8.$ You will use the IPv$6-$only display filter that you created using Wireshark in Hands$-$On Project $1-6.$

$1.$

Start Wireshark.

$2.$

Click Capture on the menu bar, and then click Options.

$3.$

Select the network interface for your computer and click Start.

$4.$

Open a command prompt window. $($Use the Start menu search box or the Search box on the task bar. Type cmd and then press Enter $.)$

$5.$

Ping the IPv$6$ address of a computer on your local network.

Note

If you don$$t know the IPv$6$ address of a host on your network, ask your instructor.

$6.$

Type exit and press Enter in the command prompt window to close it$.$

$7.$

In Wireshark, click Capture on the menu bar and then click Stop $($or click the Stop icon on the toolbar$).$

$8.$

To use the Wireshark IPv$6-$only display filter, type ipv$6$ in the Filter toolbar under the menu bar, select ipv$6$ or icmpv$6$ or dhcpv$6,$ and then click the right$-$facing arrow at the end of the toolbar. The example in Figure $3-22$ shows only IPv$6,$ ICMPv$6,$ and DHCPv$6$ traffic.

Figure $3-22$

Details

Applying a Wireshark filter

$9.$

Click on any IPv$6$ address in the packet list pane $($the upper pane$).$

$10.$

In the packet details pane $($the middle pane$),$ expand Internet Protocol Version $6,$ as shown in Figure $3-23.$ Notice that the Version field shows Version $6$

$($

$0110$

$=$

Version

$$

$6$

$)$

$.$

Figure $3-23$

Details

Examining an IPv$6$ packet header in Wireshark

$11.$

Expand the Traffic Class field and examine the contents, as shown in Figure $3-24.$ Collapse the selection when you$$re finished.

Figure $3-24$

Details

Examining the Traffic Class field in an IPv$6$ header

$12.$

Examine the contents in the remaining fields in the IPv$6$ header, including Payload length, Next header, Hop limit$,$ Source, and Destination.

$13.$

Collapse the Internet Protocol Version $6$ section.

$14.$

If you captured packets during this project, click File, then click Save As$.$ Using the $$Save in$$ drop$-$down list at the top of the dialog box, navigate to a folder on your computer where you can save a data file. Enter ch$03\_$IPv$6$Fields in the File name field. Select Wireshark$/...-$pcapng from the $$Save as type$$ drop$-$down list to save it in the $.$pcapng format. Click Save.

$15.$

Close Wireshark.

$*$ PLEASE DISREGUARD ANSWERING THE QUESTIONS THAT ARE NOT OF THE FOLLOWING : ANSWER QUESTION $8,$ QUESTION $10,$ QUESTION $11.$To answer these questions, you need screen shots and notes to answer the following questions:

question $8-$Screenshot the main Wireshark window displaying the filter toolbar

question $10-$Screenshot the main Wireshark window displaying the IPv$6$ packet header.

question $11-$Screenshot of of the main Wireshark window displaying the Traffic class field in an IPv$6$ header.