The hexdump of the IP header will be highlighted in the packet byte lanes (bottom pane).

a. Determine the following fields within the IP header. On the printout, mark and label

each field with its appropriate field name:

i. The header length value. Also, indicate the number of bytes in the header.

ii. Service type.

iii. Time to Live.

iv. Total length of the packet.

v. Source IP address.

vi. Protocol type.

b. In the hexdump, why doesnt the IP packet start at byte 0? Explain clearly.

c. If the checksum field in the packet detail pane is marked correct, can we conclude

that the IP payload is not corrupt? Explain clearly.

d. Is the datagram fragmented? Explain clearly.

e. Does the source belong to one of the special addresses? If yes which one? If not

explain clearly.

f. How many bytes of data are in the IP payload?

Note: Part a should be annotated on the printout. Parts b through f need to be typed

Package info:

Hexdump: 45 00 00 2e 0a ff 00 00 6b 11 73 80 29 fa 65 6d 89 30 b8 a8

157 4.085231 41.250.101.189 137.48.184.168 UDP 60 60350 ? 48611 Len-18 Frame 157: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Encapsulation type: Ethernet (1) Arrival Time: Oct 7, 2813 16:00:04.723028000 Central Daylight Time [Time shift for this packet: ?.eeeeeeeee seconds] Epoch Time: 1381179604.723028000 seconds [Time delta from previous captured frame: 0.027146000 seconds] [Time delta from previous displayed frame: 8.82714660 seconds] Time since reference or first frame: 4.885231080 seconds] Frame Number 157 Frame Length: 60 bytes (480 bits) Capture Length: 6 bytes (480 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:udp:data] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet 11 , Src : Cisco-e6: ?7: ff (c4: 7d : 4f : e6: c7: ff), Dst: De 11-9e : 2e : fb (00: 13: 72: 9e : 2e : fb) Destination: Dell 9e:2e:fb (00:13:72:9e:2e:fb) Address: Dell_9e:2e:fb (00:13:72:9e:2e:fb) Source: Cisco e6:c7:ff (c4:7d:4f:e6:c7:ff) Address: Cisco-e6 : c7: ff (c4: 7d : 4f : e6 : c7: ff) .. ..0. -LG bit: Globally unique address (factory default) . . . . -IG bit: Individual address (unicast) Type: IPv4 (8xe8ee) 6180 Differentiated Services Field: ex00 (DSCP: CSe, ECN: Not-ECT) Internet Protocol Version 4, Src: 41.250.181.109, Dst: 137.48.184.168 - Version: 4 0101Header Length: 20 bytes (5) 8600 e.. - Differentiated Services Codepoint: Default (e) 00-Explicit Congestion Notification: Not ECN-Capable Transport () Total Length: 46 Identification: exeaff (2815) Flags: xee e. More fragments: Not set Fragment offset: 0 Time to live: 187 Protocol: UDP (17) Header checksum: 0x7380 [validation disabled] [Header checksum status: Unverified] Source: 41.250.101.109 Destination: 137.48.184.168 [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: 60350, Dst Port: 48611 Source Port: 66350 Destination Port: 48611 Length: 26 Checksum: xb614 [unverified] [Checksum Status: Unverified] [Stream index: 34] Data (18 bytes) Data: 4f58026bdeb5e055f7dbeSac2ald78f94b54 [Length 18] k.s.).em.e ..ox.k 0010 00 2e 0a ff 00 00 6b 11 73 80 29 fa 65 6d 89 30.. 0030 ee 55 f7 db e5 ac 2a 1d 78 f9 4b 54 157 4.085231 41.250.101.189 137.48.184.168 UDP 60 60350 ? 48611 Len-18 Frame 157: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Encapsulation type: Ethernet (1) Arrival Time: Oct 7, 2813 16:00:04.723028000 Central Daylight Time [Time shift for this packet: ?.eeeeeeeee seconds] Epoch Time: 1381179604.723028000 seconds [Time delta from previous captured frame: 0.027146000 seconds] [Time delta from previous displayed frame: 8.82714660 seconds] Time since reference or first frame: 4.885231080 seconds] Frame Number 157 Frame Length: 60 bytes (480 bits) Capture Length: 6 bytes (480 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:udp:data] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet 11 , Src : Cisco-e6: ?7: ff (c4: 7d : 4f : e6: c7: ff), Dst: De 11-9e : 2e : fb (00: 13: 72: 9e : 2e : fb) Destination: Dell 9e:2e:fb (00:13:72:9e:2e:fb) Address: Dell_9e:2e:fb (00:13:72:9e:2e:fb) Source: Cisco e6:c7:ff (c4:7d:4f:e6:c7:ff) Address: Cisco-e6 : c7: ff (c4: 7d : 4f : e6 : c7: ff) .. ..0. -LG bit: Globally unique address (factory default) . . . . -IG bit: Individual address (unicast) Type: IPv4 (8xe8ee) 6180 Differentiated Services Field: ex00 (DSCP: CSe, ECN: Not-ECT) Internet Protocol Version 4, Src: 41.250.181.109, Dst: 137.48.184.168 - Version: 4 0101Header Length: 20 bytes (5) 8600 e.. - Differentiated Services Codepoint: Default (e) 00-Explicit Congestion Notification: Not ECN-Capable Transport () Total Length: 46 Identification: exeaff (2815) Flags: xee e. More fragments: Not set Fragment offset: 0 Time to live: 187 Protocol: UDP (17) Header checksum: 0x7380 [validation disabled] [Header checksum status: Unverified] Source: 41.250.101.109 Destination: 137.48.184.168 [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: 60350, Dst Port: 48611 Source Port: 66350 Destination Port: 48611 Length: 26 Checksum: xb614 [unverified] [Checksum Status: Unverified] [Stream index: 34] Data (18 bytes) Data: 4f58026bdeb5e055f7dbeSac2ald78f94b54 [Length 18] k.s.).em.e ..ox.k 0010 00 2e 0a ff 00 00 6b 11 73 80 29 fa 65 6d 89 30.. 0030 ee 55 f7 db e5 ac 2a 1d 78 f9 4b 54