Question 2 (15 points) Given the following Wireshark packet trace, Frame 2: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) on interface 0 Ethernet II, Src: Elitegro_40:74:d2 (00:21:97:40:74:02), Dst: D- Link_cc:a3:ea (00:13:46:cc:a3:ea) Destination: D-Link cc:a3:ea (00:13:46:cc:a3:ea) Source: Elitegro_40:74:02 (00:21:97:40:74:d2) Type: IPv4 (Ox0800) Internet Protocol Version 4, Src: 192.168.0.113, Dst: 192.168.0.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CSO, ECN: Not-ECT) Total Length: 58 Identification: Ox2cf6 (11510) Flags: 0x00 Fragment offset: 0 Time to live: 128 Protocol: UDP (17) Header checksum: 0x8bfa [validation disabled] [Header checksum status: Unverified] Source: 192.168.0.113 Destination: 192.168.0.1 [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: 52502, Dst Port: 53 Source Port: 52502 Destination Port: 53 Length: 38 Checksum: Oxd6eb [unverified] [Checksum Status: Unverified] [Stream index: 0] Domain Name System (query) Transaction ID: Oxa570 Flags: 0x0100 Standard query Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries www.nmap.org: type A, class IN Name: www.nmap.org [Name Length: 12] [Label Count: 3] Type: A (Host Address) (1) class: IN (0x0001) Cont. Question 2 (10 points) Draw the Layer 2, Layer 3, Layer 4 and Application Layer packets of the Wireshark trace. You don't need to show all the details of the header fields, but make sure to show the sizes of headers and payload and when the total number of bytes (72 bytes on wire) came from. Question 2 (15 points) Given the following Wireshark packet trace, Frame 2: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) on interface 0 Ethernet II, Src: Elitegro_40:74:d2 (00:21:97:40:74:02), Dst: D- Link_cc:a3:ea (00:13:46:cc:a3:ea) Destination: D-Link cc:a3:ea (00:13:46:cc:a3:ea) Source: Elitegro_40:74:02 (00:21:97:40:74:d2) Type: IPv4 (Ox0800) Internet Protocol Version 4, Src: 192.168.0.113, Dst: 192.168.0.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CSO, ECN: Not-ECT) Total Length: 58 Identification: Ox2cf6 (11510) Flags: 0x00 Fragment offset: 0 Time to live: 128 Protocol: UDP (17) Header checksum: 0x8bfa [validation disabled] [Header checksum status: Unverified] Source: 192.168.0.113 Destination: 192.168.0.1 [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: 52502, Dst Port: 53 Source Port: 52502 Destination Port: 53 Length: 38 Checksum: Oxd6eb [unverified] [Checksum Status: Unverified] [Stream index: 0] Domain Name System (query) Transaction ID: Oxa570 Flags: 0x0100 Standard query Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries www.nmap.org: type A, class IN Name: www.nmap.org [Name Length: 12] [Label Count: 3] Type: A (Host Address) (1) class: IN (0x0001) Cont. Question 2 (10 points) Draw the Layer 2, Layer 3, Layer 4 and Application Layer packets of the Wireshark trace. You don't need to show all the details of the header fields, but make sure to show the sizes of headers and payload and when the total number of bytes (72 bytes on wire) came from
