HTTP_Sample

1. Examine the details in the first packet. What transport layer protocol is being used?
2. What is the first packets destination port number? What is the significance, if any, of this port number?
3. What is the first packets source port number? What is the significance, if any, of this port number?
4. Examine the first 3 packets. What transport layer flags are set and what does this sequence of packets represent in terms of a connection-oriented messaging session?

This is wireshark. I also need the significance of port numbers. Thanks

Apply a display filter ... No. Time Source Destination Protocol Length Info 1 0.000000 145.254.160.237 65. 208.228.223 TCP 62 3372 80 [SYN] Seq=0 Win=8760 Len=0 MSS=1460 SACK_PERM=1 20.911310 65.208.228.223 145.254.160.237 TCP 62 80 + 3372 (SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1380 SACK_PERM=1 30.911310 145.254.160.237 65.208.228.223 TCP 54 3372 + 80 [ACK] Seq=1 Ack=1 Win=9660 Len- 4 0.911310 145.254.160.237 65. 208.228.223 HTTP 533 GET /download.html HTTP/1.1 5 1.472116 65. 208. 228.223 145.254.160.237 TCP 54 80 + 3372 [ACK] Seq=1 Ack=480 Win=6432 Len=0 6 1.682419 65.208.228.223 145.254.160.237 TCP 1434 80 + 3372 [ACK] Seq=1 Ack=480 Win=6432 Len=1380 (TCP segment of a reassembled PDU] 7 1.812606 145.254.160.237 65.208.228.223 TCP 54 3372 80 [ACK] Seq=480 Ack=1381 Win=9660 Len=0 8 1.812606 65.208.228.223 145.254.160.237 TCP 1434 80 3372 [ACK] Seq=1381 Ack=480 Win=6432 Len=1380 (TCP segment of a reassembled PDU] 9 2.012894 145.254.160.237 65.208.228.223 TCP 54 3372 80 [ACK] Seq=480 Ack=2761 Win=9660 Len=0 10 2.443513 65.208.228.223 145.254.160.237 TCP 1434 80 3372 [ACK] Seq=2761 Ack=480 Win=6432 Len=1380 (TCP segment of a reassembled PDU] 11 2.553672 65. 208.228.223 145.254.160.237 TCP 1434 80 3372 [PSH, ACK] Seq=4141 Ack=480 Win=6432 Len=1380 (TCP segment of a reassembled PDU] 12 2.553672 145.254.160.237 65.208.228.223 TCP 54 3372 80 [ACK] Seq=480 Ack=5521 Win=9660 Len=0 13 2.553672 145.254.160.237 145.253.2.203 DNS 89 Standard query 6x0023 A pagead2.googlesyndication.com 14 2.633787 65.208.228.223 145.254.160.237 TCP 1434 80 + 3372 [ACK] Seq=5521 Ack=480 Win=6432 Len=1380 (TCP segment of a reassembled PDU] 15 2.814046 145.254.160.237 65. 208.228.223 TCP 54 3372 80 [ACK] Seq=480 Ack=6901 Win=9660 Len=0 16 2.894161 65.208.228.223 145.254.160.237 TCP 1434 80 + 3372 [ACK] Seq=6901 Ack=480 Win=6432 Len=1380 (TCP segment of a reassembled PDU] 172 914190 145 2532 203 145.254. 160 237 DNS 188 Standard query response ax0023 A nagead2.googlesyndication com CNAME nagead2 google com CNAME nagead google akadns net A 216 239 59 104 A 216 239 59 99 A ? A > Frame 1: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) > Ethernet II, Src: Xerox_00:00:00 00:00:01:00:00:00), Dst: fe:ff:20:00:01:00 (fe:ff:20:00:01:00) > Internet Protocol Version 4, Src: 145.254.160.237, Dst: 65.208.228.223 > Transmission Control Protocol, Src Port: 3372, Dst Port: 80, Seq: , Len: 0 ...E A 0000 fe ff 20 00 01 00 00 e0 01 00 00 00 08 00 45 00 0010 00 30 of 41 40 00 80 06 91 eb 91 fe ao ed 41 do 0020 e4 df Od 2c 00 50 38 af fe 13 00 00 00 00 70 02 0030 22 38 c3 Oc 00 00 02 04 05 b4 01 01 04 02 0.A@ P8 "8 p