Question: Hello chegg team support , I subscriped only for this assigment so please help me with it and If it isnt clear can I send
Hello chegg team support I subscriped only for this assigment so please help me with it and If it isnt clear can I send you the file instead of a text?this assigment includes screen shots & I also want you to explain how can I do it step by step..Thanks
Lab Assignment
Objectives
Part : Prepare Wireshark to Capture Packets
Part : Capture, Locate, and Examine Packets
Required Resources
PC Windows or with a command prompt access, Internet access, and Wireshark installed
Part : Prepare Wireshark to Capture Packets
In Part you will start the Wireshark program and select the appropriate interface to begin capturing packets.
Step : Retrieve the PC interface addresses.
For this Assignment, you need to retrieve your PCs IP address and its network interface card NIC physical address, also called the MAC address.
a Open a command prompt window, type ipconfig all and press Enter.
Include a ScreenShot of the result
b Write down the IP and MAC addresses associated with the selected Ethernet adapter. That is the source address to look for when examining captured packets.
The PC host IP address:
The PC host MAC address:
Step : Start Wireshark and select the appropriate interface.
a Click the Windows Start button. In the popup menu, doubleclick Wireshark.
b After Wireshark starts, click Interface List.
c In the Wireshark: Capture Interfaces window, click the check the box next to the interface that is connected to your LAN.
Part : Capture, Locate, and Examine Packets
Step : Capture the data.
a Click the Start button to start the data capture.
b Navigate to
wwwkfu.edu.sa
Minimize the browser and return to Wireshark. Stop the data capture.
The capture window is now active. Locate the Source, Destination,
The capture window is now active. Locate the Source, Destination, and Protocol columns.
Include a ScreenShot of the resulted captuerd packets
Step : Locate appropriate packets for the web session.
If the computer was recently started and there has been no activity in accessing the Internet, you can see the entire process in the captured output, including the Address Resolution Protocol ARP Domain Name System DNS and the TCP threeway handshake. If the PC already had an ARP entry for the default gateway; therefore, it started with the DNS query to resolve
wwwgoogle.com.
a Using the filter shows the DNS query from the PC to the DNS server, which is attempting to resolve the domain name
wwwkfu.com to the IP address of the web server. The PC must have the IP address before it can send the first packet to the web server.
Include the Screenshot of the DNS captured packets What is the IP address of the DNS server that the computer queried?
b Find the appropriate packet for the start of your TCP threeway handshake, you can use the filter tcp
What is the IP address of the KFU web server?
Include the Screenshot of the TCP captured packets
Step : Examine the information within packets including IP addresses, TCP port numbers, and TCP control flags.
Include the Screenshot of the first request TCP packet information
a What is the TCP source port number?
b How would you classify the source port?
c What is the TCP destination port number?
d How would you classify the destination port?
e Which flag or flags is set?
f What is the relative sequence number set to
Include the Screenshot of the Second replay TCP packet information
Include the Screenshot of the first request TCP packet information
a What is the TCP source port number?
b How would you classify the source port?
c What is the TCP destination port number?
d How would you classify the destination port?
e Which flag or flags is set?
f What is the relative sequence number set to
Include the Screenshot of the Second replay TCP packet information
a What are the values of the source and destination ports?
b Which flags are set?
c What are the relative sequence and acknowledgement numbers set to
d
a Examine the third and final packet of the handshake. Include the Screenshot of the Third replay TCP packet information
Which flag or flags is set?
Reflection
There are hundreds of filters available in Wireshark. A large network could have numerous filters and many different types of traffic. List three filters that might be useful to a network administrator?
What other ways could Wireshark be used in a production network?
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
