Each line in the packet list contains the encapsulated messages, segments, packets, frames. Line 4 has been selected. It is expanded in the detail pane. You can see the encapsulated components.

Wireshark Image 1

I.What is the IP destination ip address?

II.It is an acknowledgement packet; what is its acknowledgement number?

III.Looking at the detail Ethernet frame, what is the destination MAC/EUI-48 address?

I.Looking at the TCP detail, what is the destination port number?

WS002pcapng [Wireshark 2.0.2 (v2.0.2-0-ga16e22e from master-2.0)] Eile Edit Yiew Go Capture Analyze Statistics Telephony Iools Internals Help FA EE, Q a a Filter Expression..Clear Apply Save No. Time 1 0.000000 172.20.72.56 20.007541 172.20.71.122 3 0.024611 172.20.74.74 4 0.035507 10.0.0.48 5 0.037690 172.20.70.221 6 0.05 3747 172.20.73.143 Destination Broadcas t Broadcast 239.255.255.250 SSDP 139 M-SEARCH HTTP/1.1 172.20.72.203 172.20.95.255 239.255.255.250 Protocol Length Info ARP ARP Source 60 Who has 172.20.66.187? Tel1 172.20.72.56 60 who has 172.20.64.1? Tell 172.20.71.122 TCP NBNS 60 62287ms -wbt-server [ACK] Seq-1 Ack-1 win-5298 Len-0 92 Name query NB WPAD SSDP 139 M-SEARCHHTTP/1.1 e Frame 4: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0 Ethernet II, Src: 172.20.64.1 C30:f7:0d:b8:69:ff), Dst: 172.20.72.203 Cf8:bc:12:a9:3f:be) e Internet Protocol Version 4, Src: 1nicholls. pace.edu (10.0.0.48), Dst: 172.20.72.203 (172.20.72.203) a Transmission Control Protocol, Src Port: 62287 (62287), Dst Port: ms -wot-server (3389), Seq: 1, Ack: 1, Len: 0 000 f8 bc 12 a9 3f be 30 f7 Od b8 69 ff 08 00 45 00 0010 0 0 0020 0030 28 68 d3 40 00 7e 06 94 ed Oa 00 00 30 ac 14. (h..~ 0 0 48 cb f3 4f Od 3d ce 36c5 f5 67 97 ab cf 50 10H..0.-.6..q...P 14 b2 f3 f2 00 00 00 00 00 00 00 00 Frame (frame), 60 bytes Packets: 41144 . Displayed: 41144 (100.0%) . Load time: 0:00.298 Profile: Default WS002pcapng [Wireshark 2.0.2 (v2.0.2-0-ga16e22e from master-2.0)] Eile Edit Yiew Go Capture Analyze Statistics Telephony Iools Internals Help FA EE, Q a a Filter Expression..Clear Apply Save No. Time 1 0.000000 172.20.72.56 20.007541 172.20.71.122 3 0.024611 172.20.74.74 4 0.035507 10.0.0.48 5 0.037690 172.20.70.221 6 0.05 3747 172.20.73.143 Destination Broadcas t Broadcast 239.255.255.250 SSDP 139 M-SEARCH HTTP/1.1 172.20.72.203 172.20.95.255 239.255.255.250 Protocol Length Info ARP ARP Source 60 Who has 172.20.66.187? Tel1 172.20.72.56 60 who has 172.20.64.1? Tell 172.20.71.122 TCP NBNS 60 62287ms -wbt-server [ACK] Seq-1 Ack-1 win-5298 Len-0 92 Name query NB WPAD SSDP 139 M-SEARCHHTTP/1.1 e Frame 4: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0 Ethernet II, Src: 172.20.64.1 C30:f7:0d:b8:69:ff), Dst: 172.20.72.203 Cf8:bc:12:a9:3f:be) e Internet Protocol Version 4, Src: 1nicholls. pace.edu (10.0.0.48), Dst: 172.20.72.203 (172.20.72.203) a Transmission Control Protocol, Src Port: 62287 (62287), Dst Port: ms -wot-server (3389), Seq: 1, Ack: 1, Len: 0 000 f8 bc 12 a9 3f be 30 f7 Od b8 69 ff 08 00 45 00 0010 0 0 0020 0030 28 68 d3 40 00 7e 06 94 ed Oa 00 00 30 ac 14. (h..~ 0 0 48 cb f3 4f Od 3d ce 36c5 f5 67 97 ab cf 50 10H..0.-.6..q...P 14 b2 f3 f2 00 00 00 00 00 00 00 00 Frame (frame), 60 bytes Packets: 41144 . Displayed: 41144 (100.0%) . Load time: 0:00.298 Profile: Default