wireshark抓包实验之TCP(陕师大).doc

《wireshark抓包实验之TCP(陕师大).doc》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、实验六WiresharkLab:TCP一、实验目的1.通过wireshark抓包理解应用层TCP协议。二、实验器材1.PC机电脑一台。2.Wireshark软件。三、实验内容1．依照WiresharkLab提供的实验步骤完成实验。2．回答实验中的问题。四、实验操作实践与步骤2.AfirstlookatthecapturedtraceSourceIPaddress：129.168.1.1021.WhatistheIPaddressandTCPportnumberusedbytheclientcomputer(source)thatistransferringthefiletogai

2、a.cs.umass.edu?Toanswerthisquestion,it’sprobablyeasiesttoselectanHTTPmessageandexplorethedetailsoftheTCPpacketusedtocarrythisHTTPmessage,usingthe“detailsoftheselectedpacketheaderwindow”SourceTCPportnumber：1161DestinationIPaddress：128.119.245.122.WhatistheIPaddressofgaia.cs.umass.edu?Onwhatpor

3、tnumberisitsendingandreceivingTCPsegmentsforthisconnection?DestinationTCPportnumber：80Ifyouhavebeenabletocreateyourowntrace,answerthefollowingquestion:3.WhatistheIPaddressandTCPportnumberusedbyyourclientcomputer(source)totransferthefiletogaia.cs.umass.edu?3.TCPBasics4.(1)Whatisthesequencenumb

4、eroftheTCPSYNsegmentthatisusedtoinitiatetheTCPconnectionbetweentheclientcomputerandgaia.cs.umass.edu?(2)WhatisitinthesegmentthatidentifiesthesegmentasaSYNsegment?(1)SYNsequencenumber=0(2)WhatisintheredregionofthefigureaboveidentifiesthesegmentasaSYNsegment.5.(1)WhatisthesequencenumberoftheSYN

5、ACKsegmentsentbygaia.cs.umass.edutotheclientcomputerinreplytotheSYN?(2)WhatisthevalueoftheACKnowledgementfieldintheSYNACKsegment?Howdidgaia.cs.umass.edudeterminethatvalue?WhatisitinthesegmentthatidentifiesthesegmentasaSYNACKsegment?(1)SYNACKsequencenumber=0,ACKnowledgement=1(2)ACKnowledgement

6、value=initiatesequencenumberoftheTCPSYNsegment+1(3)WhatisintheredregionofthefigureaboveidentifiesthesegmentasaSYNsegment.6.WhatisthesequencenumberoftheTCPsegmentcontainingtheHTTPPOSTcommand?NotethatinordertofindthePOSTcommand,you’llneedtodigintothepacketcontentfieldatthebottomoftheWiresharkwi

7、ndow,lookingforasegmentwitha“POST”withinitsDATAfield.ThesequencenumberoftheTCPsegmentcontainingtheHTTPPOSTcommandis1.7.ConsidertheTCPsegmentcontainingtheHTTPPOSTasthefirstsegmentintheTCPconnection.(1)Whatarethesequencenumbersofthefirstsixsegm