TranHoangPhucDat Lab2b
TranHoangPhucDat Lab2b
HỒ CHÍ MINH
TRƯỜNG ĐẠI HỌC BÁCH KHOA
KHOA KHOA HỌC VÀ KỸ THUẬT MÁY TÍNH
BÁO CÁO
MẠNG MÁY TÍNH THỰC HÀNH (CO3094)
LAB 2b
Trường Đại Học Bách Khoa Tp. Hồ Chí Minh
Khoa Khoa Học và Kỹ Thuật Máy TÍnh
Lab_2b_Wireshark_DNS_v8.0
1. Question 1
Question: Run nslookup to obtain the IP address of a Web server in Asia.
What is the IP address of that server?
Answer: The IP adress is 113.161.119.157
2. Question 2
Question: Run nslookup to determine the authoritative DNS servers for a
university in Europe.
Answer: This webpage http://www.cam.ac.uk is a webpage for Cambridge
University in England . The authoritative DNS server is primary.dns.cam.ac.uk.
3. Question 3
Question: Run nslookup so that one of the DNS servers obtained in
Question 2 is queried for the mail servers for Yahoo! mail. What is its IP
address?
Answer: IP address is 180.222.114.12
4. Question 4
Question: Locate the DNS query and response messages. Are then sent
over UDP or TCP? 192.168.186.219
Answer: The DNS query and response messages are sent over UDP.
5. Question 5
Question: What is the destination port for the DNS query message? What
is the source port of DNS response message?
Answer:
Destination port for the DNS query message: 53
Source port of DNS response message: 52458
6. Question 6
Question: To what IP address is the DNS query message sent? Use
ipconfig to determine the IP address of your local DNS server. Are these two
IP addresses the same?
Answer: The DNS query was sent to IP address 192.168.168.173, is the
same IP address as that of my local DNS server.
7. Question 7
Question: Examine the DNS query message. What “Type” of DNS query
is it? Does the query message contain any “answers”?
Answer: The query message was a type A query, but the message did not
contain any “answers.”
8. Question 8
Question: Examine the DNS response message. How many “answers” are
provided? What do each of these answers contain?
Answer: There are 2 answers provided.
9. Question 9
Question: Consider the subsequent TCP SYN packet sent by your host.
Does the destination IP address of the SYN packet correspond to any of the IP
addresses provided in the DNS response message?
Answer: Yes it does.
10. Question 10
Question: This web page contains images. Before retrieving each image,
does your host issue new DNS queries?
Answer: No, there were no new queries before retrieving images.
11. Question 11
Question: What is the destination port for the DNS query message? What
is the source port of DNS response message?
Answer: Destination port: 53. Source port: 58542.
12. Question 12
Question: To what IP address is the DNS query message sent? Is this the
IP address of your default local DNS server?
Answer: The DNS query message is sent to IP address 192.168.168.173,
the same address as my default local DNS server.
13. Question 13
Question: Examine the DNS query message. What “Type” of DNS query
is it? Does the query message contain any “answers”?
Answer: The DNS query message is a type A query, not containing any
answers.
14. Question 14
Question: Examine the DNS response message. How many “answers” are
provided? What do each of these answers contain?
Answer: The response message contains 3 answers.
15. Question 15
Question: Provide a screenshot.
Answer: Screenshot in question 13 and 14.
16. Question 16
Question: To what IP address is the DNS query message sent? Is this the
IP address of your default local DNS server?
Answer: The query is sent to 192.168.168.173, the same IP address as that
of my default local DNS server.
17. Question 17
Question: Examine the DNS query message. What “Type” of DNS query
is it? Does the query message contain any “answers”?
Answer: The DNS query is a type “NS”. The query message did not
contain any answers
18. Question 18
Question: Examine the DNS response message. What MIT nameservers
does the response message provide? Does this response message also provide
the IP addresses of the MIT namesers?
Answer: The response message provides 8 MIT nameservers:
eur5.akam.net, use5.akam.net, ns1-37.akam.net, asia1.akam.net, use2.akam.net,
asia2.akam.net, ns1-173.akam.net, usw2.akam.net. This response message
didn’t provide the IP addresses of the MIT namesers.
19. Question 19
Question: Provide a screenshot
Answer: Screenshot in Question 17 and 18.
20. Question 20
Question: To what IP address is the DNS query message sent? Is this the
IP address of your default local DNS server? If not, what does the IP address
correspond to?
Answer: The query is sent to 18.0.72.3, no this is the IP of the
bitsy.mit.edu server.
21. Question 21
Question: Examine the DNS query message. What “Type” of DNS query
is it? Does the query message contain any “answers”?
Answer: The DNS query is a type A. The query message did not contain
any answers.
22. Question 22
Question: Examine the DNS response message. How many “answers” are
provided? What does each of these answers contain?
Answer: The DNS query is a type A. The query message did not contain
any answers.
23. Question 23
Question: Provide a screenshot.
Answer: