Question: Same scenario - but digging into the Packet Bytes Pane of Wireshark. If we didn't have Wireshark installed on a host that we had

Same scenario - but digging into the "Packet Bytes Pane" of Wireshark. If we didn't have Wireshark installed on a host that we had compromised, we might have to use something with far fewer features like the tcpdump command, or some other really lightweight tool. This kind of tool may only be able to give us the raw output-without any kind of analysis to help us - which would essentially be just like the information we see in the Packet Bytes Pane. (Which starts with 0000 and a lot of ff ff ff...) We know the IP address of the host sending the ARP packet is 10.0.0.155, and we know it is in that list of bytes somewhere. So, using "Base 10 notation" at what "byte offset" can we find that IP address? A few things to keep in mind... Each row starts at an offset of "0" (zero) so the offset of the first "29" in the top row is 8, even though it is the 9th value. So, watch out for the dreaded "off by one" error. Also, keep in mind that the display is showing you the information in hexadecimal and not "Base 10" so you aren't going to see "155" displayed in there, you will have to convert it to hexadecimal first. (Note: Programmer mode in the Windows calculator can handle that conversion.) File Edit View Go Capture Analyze Statistics Telephony Wireless Tools Help Q Q Q Apply a display filter_. Time Source No. Destination Protocol DNS 192.168.179.133 192.168.179.1 50 47.058499727 51 47.583848694 00:00:29:10:0a:7b ff:ff:ff:ff:ff:ff ARP 52 50.591394849 00:00:29:1d:0a:7b ff:ff:ff:ff:ff:ff ARP 53 51.591794493 00:00:29:10:0a:7b ff:ff:ff:ff:ff:ff ARP 54 52.063859550 192.168.179.133 192.168.179.1 DNS 55 52.591445128 00:00:29:1d:0a:7b ff:ff:ff:ff:ff:ff ARP 56 55.596696205 00:00:29:1d:0a:7b ff:ff:ff:ff:ff:ff ARP 57 56.595802686 00:00:29:1d:0a:7b ff:ff:ff:ff:ff:ff ARP 58 57.070890507 192.168.179.133 192.168.179.1 DNS 59 57.595719095 00:0c:29:11:0a:7b ff:ff:ff:ff:ff:ff ARP 60 60.682046093 00:00:29:10:0a:7b ff:ff:ff:ff:ff:ff ARP 61 61.599700647 00:0c:29:1d:0a:7b fr:ff:ff:fr:ff:ff ARP 62 62.076318924 192.168.179.133 192.168.179.1 DNS Destination: ff:ff:ff:ff:ff:ff Address: ff:ff:ff:ff:ff:ff ......1. ...1.... Wireshark. Packet 52. eth0 Frame 52: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface e - Ethernet II, Src: 00:0c:29:1d:0a:7b, Dst: ff:ff:ff:ff:ff:ff Source: 00:0c:29:1d:0a:7b Address: 00:0c:29:1d:0a:7b ......0. Type: ARP (0x0806) Padding: 00000000000000000000000000000 = LG bit: Locally administered address (this is NOT the = IG bit: Group address (multicast/broadcast) Address Resolution Protocol (request) Hardware type: Ethernet (1) Protocol type: IPv4 (0x0800) Hardware size: 6 0000 ff ff ff ff ff ff 00 0c 0010 08 00 06 04 00 01 00 0c 0020 00 00 00 00 00 00 0a 00 0030 00 00 00 00 00 00 00 00 = LG bit: Globally unique address (factory default) = IG bit: Individual address (unicast) Protocol size: 4 Opcode: request (1) Sender MAC address: 00:0c:29:1d:0a:7b Sender IP address: 10.0.0.155 Length Info 81 Standard query 8x17a6 A WORKGROUP.localdomain 60 who has 10.0.8.1? Tell 10.0.0.155 60 Who has 10.0.0.1? Tell 10.0.0.155 60 Who has 10.0.0.1? Tell 10.0.0.155 81 Standard query 8x17a6 A WORKGROUP.localdomain 60 Who has 10.0.0.1? Tell 10.0.0.155 Target MAC address: 00:00:00:00:00:00 Target IP address: 10.0.0.1 60 Who has 10.0.0.1? Tell 10.0.0.155 60 who has 10.0.8.1? Tell 10.0.0.155 69 Standard query 8x9fb6 A WORKGROUP 60 Who has 10.0.0.17 Tell 10.0.0.155 60 Who has 10.0.0.1? Tell 10.0.0.155 60 Who has 10.0.0.1? Tell 10.0.0.155 69 Standard query 8x9fb6 A WORKGROUP 29 1d ea 7b 08 06 00 01 29 1d Ba 7b Ba 88 88 9b 00 01 00 00 00 00 00 00 00 00 00 00 )..(. j...

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer

Step: 1 Unlock blur-text-image

Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock

Step: 3 Unlock

Students Have Also Explored These Related Computer Network Questions!

what is meant by the production- oriented period in airline marketing? the sale oriented period? the consumer oriented period

Planning is one of the most important management functions in any business. A front office managers first step in planning should involve determine the departments goals. Planning also includes...

Design a Java class that represents a cache with a fixed size. It should support operations like add, retrieve, and remove, and it should evict the least recently used item when it reaches capacity.

Screen shot of the 4 panes you see when you run the dns.cap file in Wireshark. Question 4.3.1: In Packet No. 28, what is the Source Port of the UDP data? (Hint: What does UDP stand for?) Question...

help with project Wireshark Assignment 1. Overview Wireshark is an open source application freely available on the Internet that allows you to capture packets as they appear at the network adaptor...

1. (3.6 points) A company has been assigned a class B address. A subnet of this company has network address 182.36.161.0 and direct broadcast address 182.36.167.31. a) Based on the previous...

From the captured information, answer the following questions in the Lab Assignment 1: Part 1 Lab Report Sheet. 1. Using the hexdump, determine: a. IP version. b. Header length and number of bytes in...

INTRODUCING THE WIRESHARK NETWORK ANALYZER 1.1. Work description When diagnosing network problems and studying the behavior of network applications, traffic analysis data is an invaluable source of...

Hello I need help answering these 3 multi-part questions for Computer Network and Communications 1. From the command line interface (command window), ping 8.8.8.8 the Google website and include a...

Hello I need help answering these 4 multi-part questions for Information Security 1. This case pertains to a Lenovo Exploit in which the attacker creates a buffer in the memory containing exploit...

9) A mixture of 0.500moles H and 0.500moles 12 was placed in a 2.00L stainless flask at 430C. The equilibrium constant kc for the reaction H(g) + 12(g) 2HI(g)

If two different defendants are randomly selected, what is the probability that they both entered guilty pleas?

Solve each inequality for x . ( Enter your answers using interval notatio ( a ) l n ( x ) 0 ( b ) e x > 9

Futures and Options as Hedging Alternatives Companies seeking to hedge future purchases or revenue flows can often choose between futures contracts and option contracts. Sami Corp. projects...

At the beginning of the year, Morales Company had total assets of $800,000 and total liabilities of $500,000. (Treat each item independently.) (a) If total assets increased $150,000 during the year...

Crystal Mullinex owns and operates Crystal's Day Spa and Salon, Inc. She has decided to sell the business and retire. She has had discussions with a representative from a regional chain of day spas....

Use the basic accounting equation to answer these questions. (a) The liabilities of Lantz Company are $90,000 and the stockholders' equity is $230,000. What is the amount of Lantz Company's total...

Refer to the CVS annual report in the Supplement to Chapter 16 to answer the questions below. Keep in mind that every company, while following basic principles, adapts financial statements and...

How are a growing annuity and growing perpetuity similar?Group of answer choicesNeither has an endBoth have payments that increase by a constant amount over timeBoth have payments that increase at a...

Hong Kongs unequalled bridging role linking European firms with China presented itself as an ideal opportunity for former corporate banker Jennifer Chan. After founding Sinova Management Consultancy...

Identify the potential barriers (or obstacles) that face companies considering or expanding international marketing operations. Which are the most important and which are less important? Explain.

If not for Hong Kong, Sonya Madden believes she could never have made the quantum leap from investment banker to international fashion designer. Basing her business close to the supplies enabled the...

What can predict how much a motion picture will make? We have data on a number of recent releases that includes the US Gross (in $M), the Budget ($M), the Run Time (minutes), and the average number...

In the regression output for the movies of Exercise 3 In Exercise 3 a) What is the null hypothesis tested for the coefficient of Stars in this table? b) What is the f-statistic corresponding to this...

We saw in Chapter 7 that the calorie content of a breakfast cereal is linearly associated with its sugar content. Is that the whole story? Here's the output of a regression model that regresses...