wireshark抓包实验之tcp(陕师大)

《wireshark抓包实验之tcp(陕师大)》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、实验六WiresharkLab:TCP一、实验目的1.通过wireshark抓包理解应用层TCP协议。二、实验器材1.PC机电脑一台。2.Wireshark软件。三、实验内容1．依照WiresharkLab提供的实验步骤完成实验。2．回答实验中的问题。四、实验操作实践与步骤2.AfirstlookatthecapturedtraceSourceIPaddress：129.168.1.1021.WhatistheIPaddressandTCPportnumberusedbytheclientcomputer(source)thatistransferringthefil

2、etogaia.cs.umass.edu?Toanswerthisquestion,it’sprobablyeasiesttoselectanHTTPmessageandexplorethedetailsoftheTCPpacketusedtocarrythisHTTPmessage,usingthe“detailsoftheselectedpacketheaderwindow”SourceTCPportnumber：1161DestinationIPaddress：128.119.245.122.WhatistheIPaddressofgaia.cs.umass.e

3、du?OnwhatportnumberisitsendingandreceivingTCPsegmentsforthisconnection?DestinationTCPportnumber：80Ifyouhavebeenabletocreateyourowntrace,answerthefollowingquestion:3.WhatistheIPaddressandTCPportnumberusedbyyourclientcomputer(source)totransferthefiletogaia.cs.umass.edu?3.TCPBasics4.(1)Wha

4、tisthesequencenumberoftheTCPSYNsegmentthatisusedtoinitiatetheTCPconnectionbetweentheclientcomputerandgaia.cs.umass.edu?(2)WhatisitinthesegmentthatidentifiesthesegmentasaSYNsegment?(1)SYNsequencenumber=0(2)WhatisintheredregionofthefigureaboveidentifiesthesegmentasaSYNsegment.5.(1)Whatist

5、hesequencenumberoftheSYNACKsegmentsentbygaia.cs.umass.edutotheclientcomputerinreplytotheSYN?(2)WhatisthevalueoftheACKnowledgementfieldintheSYNACKsegment?Howdidgaia.cs.umass.edudeterminethatvalue?WhatisitinthesegmentthatidentifiesthesegmentasaSYNACKsegment?(1)SYNACKsequencenumber=0,ACKno

6、wledgement=1(2)ACKnowledgementvalue=initiatesequencenumberoftheTCPSYNsegment+1(3)WhatisintheredregionofthefigureaboveidentifiesthesegmentasaSYNsegment.6.WhatisthesequencenumberoftheTCPsegmentcontainingtheHTTPPOSTcommand?NotethatinordertofindthePOSTcommand,you’llneedtodigintothepacketcon

7、tentfieldatthebottomoftheWiresharkwindow,lookingforasegmentwitha“POST”withinitsDATAfield.ThesequencenumberoftheTCPsegmentcontainingtheHTTPPOSTcommandis1.7.ConsidertheTCPsegmentcontainingtheHTTPPOSTasthefirstsegmentintheTCPconnection.(1)Whatarethesequencenumbersofthefirstsixsegm