Name: / DSI# / Date

NETW240 Week 7 Linux Wireshark Lab Report

Use the ifconfig command to verify your IP address and subnet mask. Make a note of the interface (eth0 or eth1). Use the route command to determine the default gateway. Record this information in the table below.

IP Address / Subnet Mask / Default Gateway

Select an ARP frame labeled Who has ##.##.##.##? where ##.##.##.## is the default gateway address recorded on page 1. Make the Ethereal Application window full screen if it isn’t already full screen.

From the information in your captured frame, answer the question below.

What is the MAC (physical) address of the host requesting the MAC address of the default gateway (router)?

Select an ARP reply that contains the label “##.##.##.## is at xx:xx:xx:xx:xx:xx, where ##.##.##.## is the default gateway IP address.

From the information contained in the ARP reply,
write down the MAC address of the default gateway.

Expand the details of a DHCP ACK frame and answer the questions below.

DHCP client UDP port # / DHCP server UDP port #
Client IP address / DHCP server IP address
Router IP address / DNS sever IP address
DHCP lease time


Capture the HTTP frame. Answer all of the questions found below based on the details of your captured HTTP frame.

What is the MAC address of the default gateway?
What field in the IP header determines the transport
layer protocol that handles the contents of the packet?
What is the window size indicated for the segment?
What is the sequence number for the segment?
What is the acknowledgement number for the segment?
What field in the TCP header contains a well-known port number that maps to the application that will handle the segment data stream?

Wireshark_LabDocument.doc 6 Revision Date: 1111

ARP REQUEST PACKET CAPTURE

Capture the Wireshark ARP Request Packet details from the Element-K desktop and paste this image into the text box provided below.


ARP REPLY PACKET CAPTURE

Capture the Wireshark ARP Reply Packet details from the Element-K desktop and paste this image into the text box provided below.


DHCP ACKNOWLEDGE PACKET CAPTURE

Capture the Wireshark DHCP ACK Packet details from the Element-K desktop and paste this image into the text box provided below.


HTTP PACKET CAPTURE

Capture the Wireshark HTTP Packet details from the Element-K desktop and paste this image into the text box provided below.

Wireshark_LabDocument.doc 6 Revision Date: 1111