计算机网络tcp协议分析实验报告

《计算机网络tcp协议分析实验报告》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、江西师范大学计算机信息工程学院学生实验报告专业姓名学号—日期课程名称实验室名称实验名称TCP协议分析指导教师成绩实验目的：1•掌握TCP协议的首部格式2.讨论TCP协议的序号确认机制3.掌握TCP协议的流量控制机制4.学会协议分析软件发送自定义数据包的方法实验步骤：1•捕获TCP协议数据包2.分析数据包实验分析：实验分析:123.911330192.1M.1.100121.14.11.200TCPbb4928b>httpLSYNJSeq=OWin=«192Len=VMSS=14bUWS=4SACK.PERM：133.

2、947870121.14.11.200192.168.1.100TCP66http>49286[SYN,ACK]Seq=0Ack=lWin=5840Len=0MSS4452SACI143.948010192.168.1.100121.14.11.200TCP5449286>http[ACK]Seq=lAck=lWin=66792Len=0153.948179192.168.1.100121.14.11.200HTTP238GET/sp/c2U6aG9tZQ==/?u=02789127901048388BFD25D7A

3、6618009^ey=3&*163.984743121.14.U.200192.168.1.100TCP60http>49286[ACK]Seq=lAck=185Win=6912Len=0173.985926121.14.11.200192.168.1.100HTTP249HTTP/1.1200OK(text/plain)183.999506192.168.1.100220.181.125.169TCP5449285>http[RST,ACK]Seq=lAck=lWin=0Len=0244.042210192.168

4、.1.100220.181.125.169TCP6649287>http[SYN]Seq=OWin=8192Len=0MSS4460$256SACICPEI314.050160192.168.1.100220.181.125.169TCP6649288>http[SYN]Seq=OWin=8192Len=0MSS4460WS=256SACICPEI324.051610192.168.1.100220.181.175.169TCP6649289>httnfSYNlSpn=0Win=819?Ipn4)MSS=1460WS

5、=?56SACKPFI分析一:曰Flags:0x02(SYN)=Reserved:Notset=Nonce:Notset=CongestionWindowReduced(CWR):Notset=ECN-Echo:Notset—=Acknowledgemen£>:NotsetPush:Nutr^se_eset:Notset=Syn:000.…00...0..0.□引[Expertset(Chat/Sequenc&^

6、izevalue:8192[Calculatedwindowsize:8192]®Checksum:0xd5a7[validationdisabled]ftOptions:(12bytes)ACK=0和SYN二1表示啦了第一次连接s0x10□(Cset0..0(ACK)=Acknowledgemenr:tiird.iibinibbionvuiitruirrulucui,2>rcrurl.i气y/ou丿,Mblrurl.iilSourceport:49286(49286)Destinationport:http(80)

7、[Streamindex:2]cenumber:1HeaFlags:000.knowledgementnumber:ativesequencenumber)(relativeacknumber)ACK二1表示确认帧0sizevalue:Windowsize:66792[Windowsizescalingfactor:4]Checksum:0x9336[validationdisabled]rSFO/ACK刁na1vsis1010•0・=Reserved:Notset=Nonce:Notset=CongestionWi

8、ndowReduced=ECN-Echo:Notsetset=Push:NotsetReset:Notset=5yn:Notset该帧为纯确认帧，故序列号为上一帧的确认号（±）传输窗口的大小控制流□Flags：0X14(RST,ACK)000...0・・・・00・・…0.・・1=Reserved:Notset=Nonce:Notset=Cong