Scribd
Upload
3 views

ac4

The document outlines a series of observations and details regarding a web client interaction with a web server, including information about layers in the OSI model, IP addresses, and port numbers. It highlights the successful establishment of a TCP connection and the DNS query details. Additionally, it lists various event types and summarizes the captured PDU information.

Uploaded by

christina6634neu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
3 views

ac4

The document outlines a series of observations and details regarding a web client interaction with a web server, including information about layers in the OSI model, IP addresses, and port numbers. It highlights the successful establishment of a TCP connection and the DNS query details. Additionally, it lists various event types and summarizes the captured PDU information.

Uploaded by

christina6634neu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

1. Look at the Web Client web browser page. Did anything change?

The webpage displays “Web Server” and “You have successfully accessed the home page for Web Server.”

2. What information is listed in the numbered steps directly below the In Layers and Out Layers boxes for Layer 7?

The HTTP client sends an HTTP request to the server.

3. What is the Dst Port value for Layer 4 under the Out Layers column?

Dst Port: 80

4. What is the Dest. IP value for Layer 3 under the Out Layers column?

Dest. IP: 192.168.1.254

5. What information is displayed at Layer 2 under the Out Layers column?

Layer 2: Ethernet II Header

0060.47CA.4DEE >> 0001.96A9.401D

The next-hop IP address is a unicast. The ARP process looks it up in the ARP table.

The next-hop IP address is in the ARP table. The ARP process sets the frame's destination

MAC address to the one found in the table.

The device encapsulates the PDU into an Ethernet frame.

6. What is the common information listed under the IP section of PDU Details as compared to the information listed under the

OSI Model tab? With which layer is it associated?

SRC IP: 192.168.1.1,

DST IP: 192.168.1.254

Associated with Layer 3.

7. What is the common information listed under the TCP section of PDU Details, as compared to the information listed under

the OSI Model tab, and with which layer is it associated?

SOURCE PORT:1034, DESTINATION PORT:80. It is Layer 4.

8. What is the Host listed under the HTTP section of the PDU Details? What layer would this information be associated with

under the OSI Model tab?

The Host is www.osi.local. This belongs to Layer 7.

9. Comparing the information displayed in the In Layers column with that of the Out Layers column, what are the major

differences?

The source port and destination port are switched; the source IP and the destination IP are switched. The direction of ethernet is switched.
10. How many tabs are displayed with this event? Explain.

Two tabs. Because it is the last HTTP event.

11. What additional Event Types are displayed?

Event List Filters - Visible Events

ARP, BGP, Bluetooth, CAPWAP, CDP, DHCP, DHCPv6, DNS, DTP, EAPOL, EIGRP, EIGRPv6, FTP, H.323, HSRP, HSRPv6, HTTP,

HTTPS, ICMP, ICMPv6, IPsec, ISAKMP, IoT, IoT TCP, LACP, LLDP, Meraki, NDP, NETFLOW, NTP, OSPF, OSPFv6, PaGP, POP3, PPP,

PPPoED, PTP, RADIUS, REP, RIP, RIPng, RTP, SCCP, SMTP, SNMP, SSH, STP, SYSLOG, TACACS, TCP, TFTP, Telnet, UDP, USB,

VTP.

12. What information is listed in the NAME field: in the DNS QUERY section?

www.osi.local

13. At which device was the PDU captured?

The PDU was captured at Web Client.

14. What is the value listed next to ADDRESS: in the DNS ANSWER section of the Inbound PDU Details?

192.168.1.100

15. In the numbered list directly below the In Layers and Out Layers, what is the information displayed under items 4 and 5?

The TCP connection is successful. And the device sets the connection state to ESTABLISHED.

16. What is the purpose of this event, based on the information provided in the last item in the list (should be item 4)?

This TCP event indicates that the connection is closed.

17. What port is the Web Server listening on for a DNS request?

1034

You might also like