To answer these questions, you will use Wireshark software - see class notes and 1/28 lecture on how to use this software. On January 27,

image text in transcribed

To answer these questions, you will use Wireshark software - see class notes and 1/28 lecture on how to use this software. On January 27, 2020 I used Wireshark on my office computer to capture 9 data packets that were sent and received by my Office Computer when I typed this URL into my Firefox browser: http://facweb.cdm.depaul.edu/brewsterames.html. I stored this captured packet data into file HW2-trace.pcap. Here's a diagram showing IP addresses of my office workstation, my default gateway and the facweb server. My Office Computer also exchanged packets with a DNS server (not shown in diagram). Facweb.cs.depaul.edu IP 140.192.36.128 My Office Computer IP 140.192.38.7 Default Gateway IP 140.192.38.1 00000000 IP Router DePaul Network Ethernet Switch HW2-trace.pcap File Edit View Go Capture Analyze Statistics Telephony Wireless Tools Help + No. Apply a display filter ... Time S ource 1 0.000000 140.192.38.7 2 0.001119 140.192.36.3 3 100.313430 140.192.38.7 4 100.314687 140.192.36.128 5 100.314717 140.192.38.7 6 100.314886 140.192.38.7 7 100.317654 140.192.36.128 8 100.318054 140.192.36.128 9 100.318087 140.192.38.7 Destination 140.192.36.3 140.192.38.7 140.192.36.128 140.192.38.7 140.192.36.128 140.192.36.128 140.192.38.7 140.192.38.7 140.192.36.128 Protocol DNS DNS TCP TCP TCP HTTP TCP HTTP TCP Length Info 81 Standard query Ox928f A facweb.cdm.depaul.edu 97 Standard query response @x928f A facweb.cdm.depaul.edu A 140.192.36.128 66 60990 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM=1 66 80 + 60990 [SYN, ACK] Seq=Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 54 60990 80 [ACK] Seq=1 Ack=1 Win=65536 Len=0 415 GET /brewsterames.html HTTP/1.1 1514 80 60990 [ACK] Seq=1 Ack=362 Win=65536 Len=1460 (TCP segment of a reassembled PDU] 889 HTTP/1.1 200 OK (text/html) 54 60990 - 80 [ACK] Seq=362 Ack=2296 Win=65536 Len=0 > Frame 2: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) > Ethernet II, Src: JuniperN_28:17:f0 (3c:94:d5:28:17:fo), Dst: Dell_ba:3e:00 (48:4d:7e:ba:3e:00) > Internet Protocol Version 4, Src: 140.192.36.3, Dst: 140.192.38.7 > User Datagram Protocol, Src Port: 53, Dst Port: 60805 > Domain Name System (response) 0000 48 4d 7e ba 3e 00 3c 94 d5 28 17 fo 08 00 45 00HM.>. Time S ource 1 0.000000 140.192.38.7 2 0.001119 140.192.36.3 3 100.313430 140.192.38.7 4 100.314687 140.192.36.128 5 100.314717 140.192.38.7 6 100.314886 140.192.38.7 7 100.317654 140.192.36.128 8 100.318054 140.192.36.128 9 100.318087 140.192.38.7 Destination 140.192.36.3 140.192.38.7 140.192.36.128 140.192.38.7 140.192.36.128 140.192.36.128 140.192.38.7 140.192.38.7 140.192.36.128 Protocol DNS DNS TCP TCP TCP HTTP TCP HTTP TCP Length Info 81 Standard query Ox928f A facweb.cdm.depaul.edu 97 Standard query response @x928f A facweb.cdm.depaul.edu A 140.192.36.128 66 60990 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM=1 66 80 + 60990 [SYN, ACK] Seq=Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 54 60990 80 [ACK] Seq=1 Ack=1 Win=65536 Len=0 415 GET /brewsterames.html HTTP/1.1 1514 80 60990 [ACK] Seq=1 Ack=362 Win=65536 Len=1460 (TCP segment of a reassembled PDU] 889 HTTP/1.1 200 OK (text/html) 54 60990 - 80 [ACK] Seq=362 Ack=2296 Win=65536 Len=0 > Frame 2: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) > Ethernet II, Src: JuniperN_28:17:f0 (3c:94:d5:28:17:fo), Dst: Dell_ba:3e:00 (48:4d:7e:ba:3e:00) > Internet Protocol Version 4, Src: 140.192.36.3, Dst: 140.192.38.7 > User Datagram Protocol, Src Port: 53, Dst Port: 60805 > Domain Name System (response) 0000 48 4d 7e ba 3e 00 3c 94 d5 28 17 fo 08 00 45 00HM.>.