‫‪HTTP - TCP in Wireshark tool‬‬

‫‪sec‬‬ ‫‪name‬‬

‫‪5‬‬ ‫نهى احمد محمد السيد‬

‫‪5‬‬ ‫منه هللا عبد الرحيم محمد عبد الفتاح‬

‫‪4‬‬ ‫محمد السيد عبدالمعبود ابراهيم‬

‫‪4‬‬ ‫محمد اشرف محمود محمود‬

‫‪3‬‬ ‫عمرو ياسر صابر طه‬

 HTTP Task
Q1) Is your browser running HTTP version 1.0 or 1.1? , What version of HTTP is the server running?

Ans: 1-our browser running http version 1.1

2-server running http version 1.1

Q2) What languages (if any) does your browser indicate that it can accept to the server?
Ans: Accept-Language: en-US, en

1
Q3) What is the IP address of your computer? Of the gaia.cs.umass.edu server?
Ans: Computer IP: 192.168.1.15
Server IP: 128.119.245.12

Q4) What is the status code returned from the server to your browser?
Ans: 200 OK

Q5) When was the HTML file that you are retrieving last modified at the server?
Ans: Last-Modified: Thu, 05 Dec 2024 19:38:04 GMT\r\n

Q6) How many bytes of content are being returned to your browser?
Ans: 128 Bytes

Q7) By inspecting the raw data in the packet content window, do you see any headers within
the data that are not displayed in the packet-listing window? If so, name one?
No see any headers within the data that are not displayed in the packet-listing window? If
so, name one.
All the headers are in raw data.

2
Q8) How many HTTP GET request messages did your browser send? To which
Internet addresses were these GET requests sent?

Ans: 3 GET requests. But it can consider it 4 if We took it into consideration the Icon

First: 128.119.245.12

Second: 128.119.245.12

Third: 178.79.137.164

Fourth: 128.119.245.12 (favicon)

Q9) Can you tell whether your browser downloaded the two images serially, or whether they
were downloaded from the two web sites in parallel?

The browser downloaded the two images serially,

according to the GET request of each image, the first one at time
2.740485 , the second after it at time 2.9745197

3
 TCP Task
Q1) What is the IP address and TCP port number used by the client computer (source) that is
transferring the file to gaia.cs.umass.edu?
Ans: IP address: 192.168.1.102
Source Port: 1161

Q2) What is the IP address of gaia.cs.umass.edu? On what port number is it sending and
receiving TCP segments for this connection?
Ans: IP address: 128.119.245.12
It is apper in previous screenshot
Destination Port: 80

Q4) What is the sequence number of the TCP SYN segment that is used to initiate the TCP
connection between the client computer and gaia.cs.umass.edu? What is it in the segment that
identifies the segment as a SYN segment?

Ans: Sequence number = 0

The segment that identifies the segment as a SYN segment is the one at which SYN = 1

4
 Q5) What is the sequence number of the SYNACK segment sent by gaia.cs.umass.edu to the
client computer in reply to the SYN? What is the value of the Acknowledgement field in the
SYNACK segment? How did gaia.cs.umass.edu determine that value? What is it in the
segment that identifies the segment as a SYNACK segment?
Ans: Sequence number = 0
Value of acknowledgement field = 1
The server adds 1 to the initial sequence number of SYN segment form the client
computer making it (0 + 1 = 1)

Q6) What is the sequence number of the TCP segment containing the HTTP POST command?

Q7) What is the sequence number of the TCP segment containing the HTTP POST command?

The segment numbers are 4, 5, 7, 8, 10, 11

Sequence Segment time Ack time Estimated

Segment RTT
number sent received RTT
Segment 1 1 0.026477 0.053937 0.02746 0.02746
Segment 2 566 0.041737 0.077294 0.035557 0.02847
Segment 3 2026 0.054026 0.124085 0.070059 0.03367
Segment 4 3486 0.054690 0.169118 0.11443 0.04376
Segment 5 4946 0.077405 0.217299 0.13989 0.05577
Segment 6 6406 0.078157 0.267802 0.18694 0.07216

5
Estimated RTT was calculated according to the formula:
Current EstimatedRTT = 0.875 * previous EstimatedRTT + 0.125 * SampleRTT
Segment 1 estimated RTT = segment 1 RTT = 0.02746
Segment 2 estimated RTT = 0.875 * 0.02746 + 0.125 * 0.035557 = 0.02847
Segment 3 estimated RTT = 0.875 * 0.02847 + 0.125 * 0.070059 = 0.03367
Segment 4 estimated RTT = 0.875 * 0.03367 + 0.125 * 0.11443 = 0.043765
Segment 5 estimated RTT = 0.875 * 0.04376 + 0.125 * 0.13989 = 0.05577
Segment 6 estimated RTT = 0.875 * 0.05577 + 0.125 * 0.18694 = 0.07216

Q8) What is the length of each of the first six TCP segments?
First segment = 565 bytes Each of next five followed segments = 1460 bytes

Q9)What is the minimum amount of available buffer space advertised at the received for the
entire trace?
Ans: minimum amount of available buffer space advertised at the receiver = 5840
until it reaches the maximum receiver buffer size of 62780 bytes.
According to the trace, the send

6
Q10) Are there any retransmitted segments in the trace file? What did you check for (in
the trace) in order to answer this question?
no, there's no retransmitted segments. - we check the sequence number of the sender, and we
notice it's increasing without repeat.
Also, the ack number of the receiver, and it's increasing without repeat.

Q11) How much data does the receiver typically acknowledge in an ACK? Can you
identify cases where the receiver is ACKing every other received segment?

acknowledged sequence
Acknowledge acknowledged data
number
Ack1 566 566
Ack2 2026 1460
Ack3 3486 1460
Ack4 4946 1460
Ack5 6406 1460
Ack6 7866 1460

ACKing every other segment. For example, segment of No. 80 acknowledged data with 2920
bytes = 1460*2 bytes.

Q12) What is the throughput (bytes transferred per unit time) for the TCP connection?
Explain how you calculated this value.

First TCP segment is 1 byte. The last one is 164091 bytes. Total
data=164091-1=164090 bytes Transmission time for first segment=
0.026477 secs Transmission time for last segment= 5.455830 secs
Difference=5.4294 secs Throughput=164090/5.4294=30.222 KByte/sec.