计网实验basic packet analysis by wiredhark

《计网实验basic packet analysis by wiredhark》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、Test2.BasicPacketanalysisbyWiredharkTheWiresharkpacketanalyserisusedtocaptureandshowthecontrolinformationanddatastoredinpacketstransmittedonanetwork.Inordertostartcapturingpacketdatatransmittedoverthenetworkyouneedtospecifyaninterfaceonwhichyouwanttocaptureinformation.1.Onthemenubar,clickonthec

2、aptureoptioninthemainWiresharkmenuandthenselecttheinterfaces.Thischoicewillletyoutoassignanetworkadapterforcapturingdatapacketstransmittedoverthenetwork.SelectanetworkinterfacethatcanbeusedfordatacollectionandclickthecorrespondingStartbutton.(SuchinterfacewillhaveanIPaddresscorrespondingtothene

3、tworksegmentwasthedatayouareinterestedinoriginates).ThedatathathavebeencollectedduringthecapturewillbeshownintheWiresharkapplicationwindow.Toterminatea'capturesession'clickontheStopbutton.1.Theapplicationwindowisdividedinto3panes.Thetoppaneshowarowofinformationforeachpackedcaptured(includingase

4、quencenumber,capturetime,sourceanddestinationaddress,theprotocolusedandinformationcolumnaboutthepurposeforeachcapturedpacket).Note:sourceanddestinationaddressescouldbeIP,MACorportaddresses(dependingontheprotocolusedbythepacket).(Theorder(ascending/descending)ofthecontentineachcolumncanbechanged

5、byclickingontheHeading)2.Thecenterpanedisplaystheprotocolsassociatedbytheselectedpacket.3.Thebottompanedisplaysthehexadecimalrepresentationofdatacontainedintheselectedpacketontheleftandacharacterbasedversionofsameinformationontheright.Exercise1.1.Startacapturesessionandobservethemiddlepaneforaf

6、ewminutes.2.Openabrowserandenterhttp://www.sciencedirect.com/intothebrowseraddressbarandpressEnter.3.OncethesciencedirectpagedisplayedclicktheclosebuttononthebrowserandStoptheWiresharkcapture.PacketFilterThedatacapturedcouldbethousandsofpackets.Inordertofocusjustonthosepacketswhicharerelevantto

7、theproblem,wecanuseWiresharkfilteringutility.WiresharkdisplayfilterscanbecreatedbytypingthekeywordintotheFiltertextbox.ForexampleifyouwanttoseeonlythosepacketswhichcontainTCPprotocol,typeTCPintheFiltertextboxandWiresharkwillhideal