Question: Look at captures no . 2 0 and 2 2 . ( You can use the Go link at the top of the Wireshark screen
Look at captures no and You can use the Go link at the top of the Wireshark screen to quickly go to a specific capture Both packets are ICMP traffic but there are subtle differences between them. Compare the timetolive and data field sizes in the two packets. What differences do you see?
Do a little Internet research to discover which operating systems use the specific values in their ping commands. What operating system generated the echo request in capture
Review packet no and beyond, what do you think is taking place here?
Look at capture What is suspicious about the flag settings in this packet?
What is the IP address of the host being targeted?
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
