Question
I used the command ping l 300 134.71.177.148 and then captured some frames with Wireshark. (a) Some of my frames look like this: Which shows
I used the command "ping l 300 134.71.177.148" and then captured some frames with Wireshark.
(a) Some of my frames look like this: Which shows a length of 342 bytes of ping l 300 and also in the middle panel and bottom panel, you can see
Here 0x148 in bytes 16 and 17 is equal to decimal 256 + 4*16 + 8 = 328.
So you see that with ping l 300, you get 328 decimal (=0x0148) in IP header, but 342 bytes as interpreted by Wireshark. Why 300 appears as 328 in IP header and 342 in the frame line (top panel) and also middle panel? Explain!
(b)Based on this, deduce the minimum ICMP frame length that you can see in Wireshark. What will be in bytes 16 and 17 or IP total length field?
(c) Can you run ping l 70000 134.71.177.148? Why?
(d) Now run ping l 3000 134.71.177.148 (number after l is 3,000, or three thousands). What do you see in Wireshark. Based on the same reasoning as in Q1, do you expect total length to be 3,028 in decimal and Wireshark says the length is 3,042? If not, why? Explain.
(e) Is it possible to have IP frame with 3 or more fragments? If so, what ping command would you use? (hint: use ping l
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started