ip,ppp,arp协议分析实验报告.doc

《ip,ppp,arp协议分析实验报告.doc》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、实验一IP协议、PPP协议、ARP协议抓包分析1、实验目的1)利用抓包工具实时抓包，分析ip协议报文格式2)利用抓包工具实时抓包，分析PPP协议在链路建立和终止两个阶段的工作过程3)利用抓包工具实时抓包，分析ARP请求、ARP应答分组结构2、实验环境局域网环境或联网的单机，抓包工具3、实验步骤1)IP协议抓包启动抓包工具，开始报文捕获，捕获IP的数据包，停止捕获报文，进行报文分析，并回答如下问题。(1)请说明你是如何获得IP的捕获文件，并附上捕获的截图。答：打开ethereal软件设置好相应的数据后开始报文的捕获，打开某个网站

2、然后等待出现浏览器的网页后停止数据包的捕获，会有很多的协议，我们再filter一栏中填入ip则只显示ip协议信息。1.1-EtherealFileEditviewQoCaptureAnalyzeStatisticsyelpx购◎回。冷旬春盘[HjS㊆氏钱門8[SSXTimeSource222.205.97.115No.・10.000000O.125OOO125.220.196.207Destination125.220.196.207222.205.97.115125.220.196.207125.220.196.207Pro

3、tocolInfo317188114・228・42・4441.185547222.205.97.11551.230469125.220.196.207114.228.42.441.333008125.220.196.207222.205.97.115tcp[tcpsegmentofareassembledpdu]TCP1825>2098[ACK]Seq-0Ack-1024win-46537Len-0TCP[TCPsegmentofareassembledpdu]TCP[TCPsegmemofareassembledpdu]TC

4、P2041>49579[ack]seq=0Ack=1024win=64511Len=0TCP1825>2098[ACK]Seq=0Ack=2048win»46409Len»0TCP82.429688125.220.196.207113.57.184.2dnsStandardquery~AsecurlTy.1e.sogou.com92.432617113.57.184.2125.220.196.207DNSStandardqueryresponseCnaj-iesecurixy.sogou.comCNAMEc102.432617

5、125.220.196.207123.125.125.86TCP2421>http[SYN]Seq=0Len=0F1SS=1440WS=3112.449219222.205.97.115125.220.196.207TCP[TCPsegmentofareassembledPDU]122.454102123.125.125.86125.220.196.207TCPhttp>2421[SYN,ACK]Seq=0Ack=lWin=5840Len=0MSS=14132.454102125.220.196.207123.125.125.

6、86TCP2421>http[ACK]Seq=lAck=lw1n=372296Len=0142.454102125.220.196.207123.125.125.86TCP[TCPsegmentofareassembledPDU]2.454102125.220.196.207123.125.125.86HTTPPOST/qHTTP/1.1(application/x-ww-form-ur1encoded)125.220.196.207123.125.125.86123.125.125.86125.220.196.207123.

7、125.125.86■»Frame7(66bytesonwire,66bytescaptured)internetProtocol,Src:125.220.196.207(125.220.196.207),Dst:211.142.22.19(211.142.22.19)+TransmissioncontrolProtocoltsrcPort:2420(2420),dstPort:http(80).seq:0.Len:0version:4Headerlength:20bytes土Different1axedServicesFie

8、ld:0x00(DSCP0x00:Default;ECN：0x00)TotalLength:52identification:0x5660(22112)SEFlags:0x04(Don'tFra^nent)Fragmentoffset:0Timetolive:64Protoc