Consider the Wircshark output below for a portion of an SSL session.
a. Is Wireshark packet 112 sent by the client or server?
b. What is the server's IP address and port number?
c. Assuming no loss and no retransmissions, what will be the sequence number of the next TCP segment sent by the client?
d. How many SSL records does Wireshark packet 112 contain?

e. Does packet 112 contain a Master Secret or an Encrypted Master Secret or neither?
f. Assuming that the handshake type field is I byte and each length field is 3 bytes, what are the values of the first and last bytes of the Master Secret (or Encrypted Master Secret)?
g. The client encrypted handshake message takes into account how many SSL records?
h. The server encrypted hand shake message takes into account how many SSL records?

Transcribed Image Text:

sltrace Ethereal Etes Expression... Cler Apply rotocol Info L3 Certificate, Server Hello pone Time Source 675.194.220 S5LVZt Hello 106 21.803705 128,238.38.16 108 21.830201 216.75.194.220 128.238.38.162 SSLV3 server Hello, 111 21.853520 216.75.19.220 126. 238. 38.162 113 21.945667 218 75 194.20 28.239.38.162SSL3 change cipher speEncrypted Handshake Hessage 112954189 128.22.38.62 316.75.194.220 Agplieation pata Frame ǐ12 (258 bytes on wtre. 258 bytes captured) Ethernet II, Src:Ibn10:60:99 (0009:6b:10:6:99, Dst: A11-HSRP-rOUters 00 (00:00:0c:07:ac:00) s Internet Protocol Src: 128. 238,38.162 (128.238. 38.162), DSt: 216.75.194.220 (216.75.194.220) s Transmisston contral erotocol, sre pert: 2271 (22713, DSt FOrt: hEtps (43), seq 79, Ack: 2785. Len: 204 Secure Socket Layer SSLVS Record Layer: Handshake Protocol: cltent key Exchangn Content Type: Handshake (22) version SSL 3.0 C0x0300) Length: 232 Handshake Typet cHent Key Excnange (18 Length: 128 a ssLv3 Record Layer: change Ciphar Spec Protocol: Change cipher Spec content Type: change cipher spec 20 version: SSL 3.0 Cox0300) Length: Change cipher Spec nessage 5SLV3 Record Layer: nandshake Protocol: Encrypted Handshake nessage Content Type: Handshake (22) vierston SSL 3.0 (0x0300) Length: 56 Handshate Protocol: Encrypted Handshake tessage 030 fd If c2 d, 00 00 16 03 ao oo s- 050 060 070 o80 090 0a0 0b0 odo 7a 41 48 15 4f 10 4b ef Oc do 5b c4 44 a8 ZH.OPK.L.D.