资源描述：
《抓包分析实验》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。
1、实验一一、实验目的使用抓包工具理解TCP连接建立过程的中三次握手和释放过程四次挥手。二、实验过程(1)、关闭其他无关软件；(2)、打开Wireshark抓包软件;(3)、配置Wireshark软件设置，选择网卡，并用搜狗浏览器访问qq.com,开始抓包，然后登陆邮箱，成功登录后，关闭浏览器并停止抓包。三、实验结果⑴、分析抓到的包得到由DNS返回到本机(虚拟机的IP为192.168.128.128)的IP有五个,QQ邮箱的返回本虚拟机的IP为113.108.7.1980TimeSourceDestinationP
2、rotocolInfo0.000000192.168.128.128192.168.128.2DNS2.Ho.v1DNS192.168.128.128.108.7.198113.108.7.198192.168.128.12850.04295660.048399192.168.128.128192.168.128.128113.108.7.198113.108.7.198TCPTCPTCPSSLV2StandardqueryAssl.ptlogin2・qi屈nEfiaaGg国泄制灿回j咖hcarrius-rsh
3、ell>https[5YN]se«https>carrius-rshell[SYN,ACicarrius-rshell>https[ack]se«clientHelloHi
4、+Queries±1Answers+1Authoritativenameservers-iAdditionalrecordsrofile：Default...5&•…ssi.ptlog■in2.qq.com08170AOao6CZ-5oof1Q4co6o020co7oo86oA80141厂o887oA88600-1632707680^800
5、A6d7£5ae76co1933n5lb76Aooo33Ao8oooAbo641A20007A8OJ4O1「9o<3o7Co9522Alb3ooA9aoo2-12ooo3Acdo2ecoC8O6A00009✓-oo8o6A00000010002000300040AACAFile："C：DocumentsandSettingshj...Packets：975Displayed：975Marked：0(£ns-te11.qq.com:typeA,classIN,addr101.226.66.18田ns-tel
6、l・qq・com:A,classIN,addr124.115.14.22田ns-tel2.qq.com:^ypeA,classIN,addr124.115.14.26+ns-tel2・qq.com:typmA,classIN,addr183.60.3.202(2)、TCP建立连接三次握手的过程如下：①首先从本机发往QQ邮箱目标IP—个TPC报文(N0.3),SYN二］,seq二0,Len二0；报文信息如T：FileEditViewGoCaptureAnalyzeStatisticsTelephonyToolsM
7、«lp値aIQQ®門■13盟畀ITime10.00000020.004278Source192.168.128.128Destination192.168.128.2192.168.128.128ProtocolDNSDNSInfo30.031015192.168.128.128113.108・7.198TCPStandardqueryAssl.ptlogTn2.qq.comseandardqueryresponseA113.108.7•:50.04295660.048399192.168.128.128192
8、.168.128.128113・108・7.198113.108.7.198TCPSSLV2https>carrius-rshell[syn,ACK]setcarrius-rshell>https[ACK]seq=lA(dierrtHello0123oooooooo•0・....0..…0.…•0—UJZ—IMUUQUJ=urgent:Notset=Acknowledgement:Notset=Push:notset=Reset:Notset0=Fin:notsetWindowsize:64240c634oof
9、o006208908OboGobo2010e4oo6fd8e8ac63495002006053cfoo7aooofb8ol230080019coooeo4ldb^95652300080045008080716c000070ga04020rofile：Default0Syn(tcp.flags.syn.)?1bytePackets：975Displayed：975Marked:NO.3①
