Exercise 6 : Open File exercice6.pcap using Wiresharlk

FILE LINK: https://www.dropbox.com/s/won1nta1n3dve0b/exercice6.pcap?dl=0

The TCP/IP network does not know how to route using names, such as www.google.com. It only knows how to route using IP addresses. Therefore, a common name (CNAME), such as www.google.com must be translated to an IP address, like 216.109.117.106 before your computer can request a web page.

1. What is the cname of this web site? 2. How many packets/frames does it take to receive the web page (the answer to the first http get request only)? 3. What is happening in packets 26 and 27? Does every component of a web page have to come from the same server? 4. In packet 37 we see another DNS query, this time for us.i1.yimg.com. Why does the client need to ask for this IP address? Didnt we just get this address in packet 26? 5. Does this web site use compression? Does it use cookies? 6. Examine packet 139. It is one segment of a PDU that is reassembled with several other segments in packet 160. Look at packets 141, 142, and 143. Are these three packets also part of packet 160?