Tutorial 3 - REFerence
Tutorial 3 - REFerence
Special broadcast MAC address - ff:ff:ff:ff:ff:ff that means "all devices on the local network."
Type of ARP
1. Proxy ARP:
2. Gratuitous ARP:
Gratuitous ARP (Address Resolution Protocol) is a type of ARP message that serves two main
purposes:
Address Conflict Detection: When a device is configured with an IP address, it sends a
gratuitous ARP to ensure that no other device on the network is using the same IP address. If
another device is using the same IP address, it will reply, indicating a conflict.
Updating ARP Tables: Gratuitous ARP can also be used to inform other devices on the network
of the sender's IP-to-MAC address mapping. This is useful when a device's MAC address has
changed (e.g., due to a network interface card replacement) or when there is a need to refresh
the ARP entries in other devices' ARP tables.
3. Reverse ARP (RARP):
4. Inverse ARP (InARP)
IPv4 Fields
Version: Indicates the IP version, which is IPv4 in this case.
Header Length: Specifies the length of the IP header. If the header length is 20
bytes, which is equivalent to 5 * 4 bytes.
Differentiated Services Field: used for quality of service and congestion control.
Here, both fields are set to their default values.
Total Length:
The total length of the IP packet, including both the header and the data payload.
Identification
A unique identifier for the packet, used in fragmentation and reassembly.
Flags
The flags field is used for fragmentation control.
Fragment Offset:
Indicates the position of this fragment in the original packet. Since it is 0, this
packet is not fragmented.
Time to Live:
The TTL (Time to Live) value, initially set by the sender and decremented by each router. When
TTL reaches 0, the packet is discarded to prevent it from looping indefinitely.
TTL stands for Time to Live in IPv4. It is a field in the IP header that specifies the maximum
number of hops (or router passes) a packet can take before being discarded. The TTL field helps
prevent packets from endlessly circulating in the network if there is a routing loop.
How it Works:
• Initial Value: When an IP packet is created, the sender sets the TTL value, which is
usually a default value like 64 or 128.
• Decrementing: Each time the packet passes through a router, the router decrements
the TTL value by 1.
• Expiration: If the TTL value reaches 0 before the packet reaches its destination, the
packet is discarded, and the router that discards the packet typically sends an ICMP
(Internet Control Message Protocol) "Time Exceeded" message back to the sender.
Protocol:
Indicates the protocol used in the data portion of the IP packet. If it is ICMP
(Internet Control Message Protocol), protocol number 1.
Header Checksum:
A checksum for the IP header to ensure data integrity.
Source Address:
The IP address of the sending device.
Destination Address:
The IP address of the receiving device.
ICMP Fields
Type:
The ICMP type field. Type 0 indicates an Echo Reply, which is a response to an
Echo Request (ping).
Code: 0
The ICMP code field. For Echo Reply, the code is always 0.
Checksum:
A checksum for the ICMP message to ensure data integrity.
Identifier (BE):
A unique identifier used to match requests with replies. BE (Big Endian) and LE
(Little Endian) refer to different byte orders.
Sequence Number (BE):)
A sequence number used to track the order of packets. BE and LE refer to
different byte orders.
Request frame:
Indicates that this is a response to the first request frame, and the response time
is 1.006 milliseconds.
Data
The payload data of the ICMP message. In this case, it consists of 32 bytes of data: