No. Time Source Destination Protocol 1 0.000000 192.168.23.55 100.168.0.4 TI Info 50678 > 23 [SYN) Seq=0 Win=32120 Len-O MSS-1460.. 23 > 50678 (SYN, ACK) Seq=0 Ack-1 Win-17376 Len=0 MSS-1448 50678 > 23 [ACK] Seq=1 Ack=1 Win32120 Leno... 2 0.001695 100.168.0.4 192.168.23.55 T1 3 0.001739 192.168.23.55 100.168.0.4 T1 4 5 0.013040 0.150243 192.168.23.55 100.168.0.4 100.168.0.4 192.168.23.55 A1 A1 6 0.150351 192.168.14.16 100.168.0.4 P1 7 ARP 8 0.150496 Barca_01:6e: bd Broadcast 0.151908 Porto_00:34:56 Silicom_01:6e: bd 0.152486 192.162.55.10 192.168.1.1 ARP 9 DNS 10 0.153265 192.168.1.1 192.162.55.10 DNS 11 0.154151 192.162.55.10 147.234.1.244 A2 12 147.234.1.244 192.162.55.10 A2 Al Data... Al Data... 50678 > A1 [ACK) Seq-28 Ack-4 Win32120 Leno. Who has 192.168.1.1? Tell 192.168.1.2 192.168.1.1 is at 00:30:54:00:34:56 Standard query Oxedd4 A ftp.ecitele.com Standard query response Oxedd4 CNAME ans.prime.com A 147.234.1.253 ghetto > 25 (SYN) Seq=0 Win=16384 Len-0 MSS-1460 .. 25 > ghetto (SYN, ACK) Seq=0 Ack-1 Win-25398 Len=0. ghetto > 25 (ACK) Seq-1 Ack-1 win-16932 Len=0 Standard query Oxbdd5 SRV_sip._udp.sip.cybercity.dk Request: REGISTER sipisip.fullamark.in Status: 401 Unauthorized (O bindings) Echo (ping) request (id=0x0200, seg(be/le)=2304/9 ttl=128) Echo (ping) reply (id=0x0200, seg(be/le) 2304/9 ttl=128) Echo (ping) request (id=0x0200, seg (be/le) =2560/10 ttl=128) Echo (ping) reply (id=0x0200, seg(be/le) 2304/9 ttl=128) 13 192.162.55.10 A2 0.154822 0.155600 0.156489 0.157157 0.157936 14 DNS 147.234.1.244 192.162.55.10 212.242.33.35 192.162.55.10 192.168.1.1 192.162.55.10 212.242.33.35 15 SIP 16 SIP 17 0.158714 192.162.55.10 192.168.1.1 NI 18 0.159493 192.168.1.1 192.162.55.10 NI 19 0.160211 192.162.55.10 192.168.1.1 N1 20 0.161087 192.168.1.1 192.162.55.10 NI No. Time Source Destination Protocol 1 0.000000 192.168.23.55 100.168.0.4 TI Info 50678 > 23 [SYN) Seq=0 Win=32120 Len-O MSS-1460.. 23 > 50678 (SYN, ACK) Seq=0 Ack-1 Win-17376 Len=0 MSS-1448 50678 > 23 [ACK] Seq=1 Ack=1 Win32120 Leno... 2 0.001695 100.168.0.4 192.168.23.55 T1 3 0.001739 192.168.23.55 100.168.0.4 T1 4 5 0.013040 0.150243 192.168.23.55 100.168.0.4 100.168.0.4 192.168.23.55 A1 A1 6 0.150351 192.168.14.16 100.168.0.4 P1 7 ARP 8 0.150496 Barca_01:6e: bd Broadcast 0.151908 Porto_00:34:56 Silicom_01:6e: bd 0.152486 192.162.55.10 192.168.1.1 ARP 9 DNS 10 0.153265 192.168.1.1 192.162.55.10 DNS 11 0.154151 192.162.55.10 147.234.1.244 A2 12 147.234.1.244 192.162.55.10 A2 Al Data... Al Data... 50678 > A1 [ACK) Seq-28 Ack-4 Win32120 Leno. Who has 192.168.1.1? Tell 192.168.1.2 192.168.1.1 is at 00:30:54:00:34:56 Standard query Oxedd4 A ftp.ecitele.com Standard query response Oxedd4 CNAME ans.prime.com A 147.234.1.253 ghetto > 25 (SYN) Seq=0 Win=16384 Len-0 MSS-1460 .. 25 > ghetto (SYN, ACK) Seq=0 Ack-1 Win-25398 Len=0. ghetto > 25 (ACK) Seq-1 Ack-1 win-16932 Len=0 Standard query Oxbdd5 SRV_sip._udp.sip.cybercity.dk Request: REGISTER sipisip.fullamark.in Status: 401 Unauthorized (O bindings) Echo (ping) request (id=0x0200, seg(be/le)=2304/9 ttl=128) Echo (ping) reply (id=0x0200, seg(be/le) 2304/9 ttl=128) Echo (ping) request (id=0x0200, seg (be/le) =2560/10 ttl=128) Echo (ping) reply (id=0x0200, seg(be/le) 2304/9 ttl=128) 13 192.162.55.10 A2 0.154822 0.155600 0.156489 0.157157 0.157936 14 DNS 147.234.1.244 192.162.55.10 212.242.33.35 192.162.55.10 192.168.1.1 192.162.55.10 212.242.33.35 15 SIP 16 SIP 17 0.158714 192.162.55.10 192.168.1.1 NI 18 0.159493 192.168.1.1 192.162.55.10 NI 19 0.160211 192.162.55.10 192.168.1.1 N1 20 0.161087 192.168.1.1 192.162.55.10 NI
