Monday, April 23, 2012

Wireshark Lab 5: ICMP

(The ping command doesn't seem to be working. Every site I try to ping just returns "Request Timed Out". Here's a screenshot of a ping on Google timing out:
http://img706.imageshack.us/img706/7663/googletimeout.png )


1. Host IP: 149.152.37.45
Destination IP: 143.89.14.34

2. IMCP is a session-less protocol, therefore it doesn't use ports.

3. The ping request packet has "type: 8" and "code: 0". The other fields are: checksum(be), checksum(le), sequence number(le) and sequence number(be).

4. I can't answer this question since I wasn't able to get a response from any of the hosts I pinged.

(These questions were answered with the capture file provided by the book's authors.)

5. Host IP: 192.168.1.101
Destination IP: 138.96.146.2

6. Yes, it would.

7. No. They're the same.

8. The extra fields in the error packets seem to be extra copies of the IPv4 header.

9. They contain less information, and have different Time To Live values and identification values. They're different because the ICMP packets were actually received, and didn't get an error.

10. I can't answer this question, as tracert also causes a time out when I try to use it, like ping.

No comments:

Post a Comment