Scribd
Upload
3 views

Questions

Uploaded by

athabbuy
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
3 views

Questions

Uploaded by

athabbuy
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 14

Wireshark Lab:

IP v8.0
Questions
Supplement to Computer Networking: A Top-Down
Approach, 8th ed., J.F. Kurose and K.W. Ross

“Tell me and I forget. Show me and I remember. Involve me


and I understand.” Chinese proverb

© 2005-2020, J.F Kurose and K.W. Ross, All Rights Reserved

Fig. 1 ICMP Echo Request message IP information

1. What is the IP address of your computer?

2. Within the IP packet header, what is the value in the upper layer protocol field?
ICMP

3. How many bytes are in the IP header? 20 byte


How many bytes are in the payload of the IP datagram? Total length- header
length= payload length (which is in this case 64)

Explain how you determined the number of payload bytes.

‫الي باالزرق بتركز عليه في الكويز‬


4. Has this IP datagram been fragmented? Explain how you determined whether or not
the datagram has been fragmented.
NO, because its written(not set) plus theres only 0
5. Which fields in the IP datagram always change from one datagram to the next
within this series of ICMP messages sent by your computer?
Identification, time to live, header checksum

‫السورس والدستنيشن مايتغيرون النهم نفس الموقع‬


6. Which fields stay constant? ? Source, destination, version, header length

Which of the fields must stay constant? Source ip, des ip, Ipv4,header length ‫نفس‬
‫إجابة الي فوق‬
Which fields must change? Identification, checksum, time to live Why?
7. Describe the pattern you see in the values in the Identification field of the IP
datagram
Increasing by one
Fig. 2 ICMP TTL exceeded reply, IP information

8. What is the value in the Identification field and the TTL field?
Time to live: 1
Identification: 13008
9. Do these values remain unchanged for all of the ICMP TTL-exceeded replies sent
to your computer by the nearest (first hop) router? Why?
No, because the identification must be unique
But sometimes the two packets does have the same identification
because they was one large packet but they got separated * ‫صار لهم‬
‫فراقمنتيشن‬
‫عشان اذا جء يسوي انكبسوليشن يعرف انهم نفس البكت ويجمعهم‬
Fig. 3 ICMP Echo Request pkt size = 2000, first fragment

10. Find the first ICMP Echo Request message that was sent by your computer after
you changed the Packet Size in pingplotter to be 2000.
Has that message been fragmented across more than one IP datagram?
Yes, because in the replied massge the don’t fragment is set also its’s written that
theres 2 ipv4 fragments
11. Print out the first fragment of the fragmented IP datagram. What information in
the IP header indicates that the datagram been fragmented? What information in
the IP header indicates whether this is the first fragment versus a latter fragment?
How long is this IP datagram? Total length= 1500
‫في المور فرقمنتس اذا هي ست معناها فيه بكتس تحتها فرقمنتد بعد بس اذا هي نوت‬
‫ست معناها هذي البكت هي اخر بكت فرقمنتد‬
‫والدونت فرقمنتد تدل على ان البكت هذي قسمت اذا هي واحد او ست معناها قسمت‬
‫اذا صفر معناها ماقسمت‬
Fig. 4 ICMP Echo Request pkt size = 2000, second fragment

12. Print out the second fragment of the fragmented IP datagram. What information in
the IP header indicates that this is not the first datagram fragment? Are the more
fragments? How can you tell?

13. What fields change in the IP header between the first and second fragment?
Header checksum, total length, flags
Fig. 5 ICMP Echo Request pkt size = 3500, first fragment

14. How many fragments were created from the original datagram?

15. What fields change in the IP header among the fragments?

You might also like