Question

fer that allows the Instructors sou can try. directly from 8.13 Deduce and explain the problem. 8.12 What is the limiting factor in the time required to transfer a hile using TFTP Note: The next three problems make use of Wireshark, a free packer sniffer the VON to capture traffic on a LAN A Wireshark projects package is part of the Instre Resource for this book. These exercises are additional mini-projects you ca Wireshark runs on a variety of operating systems, and can be downloaded directly fr the Wireshark Web site at www.wireshark.org. After starting a capture from Wireshark, start a TCP-based application like SSH.FTD or HTTP (Web browser). Can you determine the following from your capture? a. Source and destination layer 2 addresses (MAC) b. Source and destination layer 3 addresses (IP) c. Source and destination layer 4 addresses (port numbers) 8.14 Packet capture software or sniffers can be powerful management and security tools By using the filtering capability that is built in, you can trace traffic based on several different criteria and eliminate everything else. Use the filtering capability built into Wireshark to do the following: a. Capture only traffic coming from your computer's MAC address. b. Capture only traffic coming from your computer's IP address. c. Capture only UDP-based transmissions. 8.15 Figure 8.8 shows a few of the protocols that operate directly on top of IP. Ping is a program used to test connectivity between machines and is available on all operating systems. Which of the built-in protocols does Ping use and what does the payload data consist of? Hint: You can use Wireshark to help you determine the answers.

please I need help with problem 8.12 through 8.15

Answer 1

TFTP uses the stop and wait protocol, wherein it goes about 3 round trips from the client to server and back. For each of these round tripsz it can transfer a maximum of 512 bytes which acts as a limiting factor. This allows TFTP to transfer at a speed of 170000 bytes/sec or approx 170 KBps.

8.13. a. Yes, it is available in frame 2 details

b. Yes, it can be found in IP details

c. Yes, it can be found in TCP details

8.15. The ping command uses ICMP to test the reachability of a host. The payload of a ping command contains ASCII characters that tell us about a timestamp which indicates the time of packet transmission and a sequence number.

8.14 Pictures attached below
A Capturing from Wi-Fi (ether host AA-6B-7D-52-44-DD) File Edit View Go Capture Analyze Statistics Telephony Wireless Tools Help IO XC 92 T @ I source mac filter:aa:6b:7d:52:44:dd|| No. Time Source Destination Protocol Length Info 1 0.000000 2409:4055:283:83ad:... 2404: 6800:4002:80e:... TLSv1.2 113 Application Data 2 0.095957 2404: 6800:4002:80e:... 2409:4055:283:83ad:... TLSv1.2 113 Application Data 3 0.149510 2409:4055:283:83ad:... 2404:6800:4002:80e: ... TCP 74 55693 + 443 [ACK] Seq=40 Ack=40 Win=513 Len=0 4 1.873462 2409:4055:283:83ad:... 2404: 6800:4002:80f:... TLSv1.2 690 Application Data 5 1.946637 2404:6800:4002:80f:... 2409:4055:283:83ad:... TCP 74 443 – 55665 [ACK] Seq=1 Ack=617 Win=806 Len=0 6 1.956451 Xiaomico_f2:06:26 aa: 66:7d:52:44:dd ARP 42 Who has 192.168.43.184? Tell 192.168.43.1 7 1.956485 aa: 6b:7d:52:44:dd Xiaomico_f2:c6:25 ARP 42 192.168.43.184 is at aa: 6b:7d:52:44:dd 8 1.956902 144.76.78.144 192.168.43.184 TCP 54 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 9 1.956987 192.168.43.184 144.76.78.144 TCP 54 (TCP ACKed unseen segment] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 10 2.021945 2404: 6800:4002:80f:... 2409:4055:283:83ad:... TLSv1.2 144 Application Data 11 2.021947 2404:6800:4002:80f:... 2409:4055:283:83ad:... TLSv1.2 105 Application Data 12 2.022039 2409:4055:283:83ad:... 2404: 6800:4002:80f:... TCP 74 55665 + 443 [ACK] Seq=617 Ack=102 Win=515 Len=0 13 2.024644 2404: 6800:4002:80f:.. 2409:4055:283:83ad:. TLSv1.2 113 Application Data 14 2.024891 2409:4055:283:83ad:... 2404: 6800:4002:80f:... TLSv1.2 113 Application Data 15 2.068769 2404:6800:4002:80f:... 2409:4055:283:83ad:... TCP 74 443 + 55665 CACK] Seq=141 Ack=656 Win=806 Len=0 16 7.193623 2409:4055:283:83ad:... 2620:1ec:c11: :200 TCP 86 55694 – 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1440 WS=256 SACK_PERM=1 17 7.317181 2620:1ec:c11: :200 2409:4055:283:83ad:... TCP 86 443 + 55694 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1370 WS=256 SACK PERM=1 18 7.317302 2409:4055:283:83ad:... 2620: lec:c11: :200 TCP 74 55694 + 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0 19 7.317708 2409:4055:283:83ad:... 2620:1ec:c11::200 TLSv1.2 307 Client Hello 20 7.410945 2620: lec:c11: :200 2409:4055:283:83ad:... TCP 74 443 + 55694 [ACK] Seq=1 Ack=234 Win=262656 Len=0 21 7.411175 2620: lec:c11: :200 2409:4055:283:83ad:... TCP 1444 443 + 55694 [ACK] Seq=1 Ack=234 Win=262656 Len=1370 (TCP segment of a reassembled PDU] 22 7.411266 2409:4055:283:83ad:... 2620:lec:c11: :200 TCP 74 55694 + 443 [ACK] Seq=234 Ack=1371 Win=262144 Len=0 23 7.411637 2620:1ec:c11::200 2409:4055:283:83ad:... TCP 1444 443 – 55694 [ACK] Seq=1371 Ack=234 Win=262656 Len=1370 (TCP segment of a reassembled PDU] 24 7.411638 2620:1ec:c11::200 2409:4055:283:83ad:... TCP 1444 443 – 55694 [ACK] Seq=2741 Ack=234 Win=262656 Len=1370 (TCP segment of a reassembled PDU] 25 7 411692 2 429.4055.283.83ad. 2620.1er.c11..200 TCP 74 55694 + 443 TACK1 Seo=234 Ack=4111 Win=262144 Ten=0 (Protocols in frame: eth:ethertype: ipv6: tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: top] Ethernet II, Src: aa: 6b:7d:52:44:dd (aa:6b:7d:52:44:dd), Dst: Xiaomico_f2:06:2b (90:78:b2:f2:c6:2b) > Destination: Xiaomico f2:c6:2b (90:78:b2:f2:c6:2b) 2 c6 2b aa 6b7d 52 44 dd 86 dd 60 02 x...+.k >RD...

- 0 TCP A *Wi-Fi (ether host AA-6B-7D-52-44-DD) File Edit View Go Capture Analyze Statistics Telephony Wireless Tools Help LOO XE - - 9 7 1 Q @ I ip.addr==144.76.78.144|| No. Time Source Destination Protocol Length Info 8 1.956902 144.76.78.144 1 92.168.43.184 TCP 54 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 9 1.956987 192.168.43.184 144.76.78.144 TCP 54 (TCP ACKed unseen segment] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 169 12.253826 144.76.78.144 192.168.43.184 TCP 54 (TCP Dup ACK 8#1] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 170 12.253866 192.168.43.184 144.76.78.144 TCP 54 (TCP Dup ACK 9#1] (TCP ACked unseen segment] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 320 22.460661 144.76.78.144 192.168.43.184 54 (TCP Dup ACK 8#2] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 321 22.460783 192.168.43.184 144.76.78.144 54 (TCP Dup ACK 9#2] [TCP ACked unseen segment] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 335 32.766568 144.76.78.144 192.168.43.184 54 (TCP Dup ACK 8#3] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 336 32.766616 192.168.43.184 144.76.78.144 54 (TCP Dup ACK 9#3] (TCP ACked unseen segment] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 337 35.742510 192.168.43.184 144.76.78.144 TCP 55 (TCP Keep-Alive] [TCP ACked unseen segment] 55324 + 80 [ACK] Seq=0 Ack=2 Win=512 Len=1 338 36.249364 144.76.78.144 192.168.43.184 66 (TCP Previous segment not captured] 80 + 55324 [ACK] Seq=2 Ack=1 Win=501 Len=0 SLE=V SRE=1 342 46.136098 144.76.78.144 192.168.43.184 TCP 54 (TCP Keep-Alive] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 343 46.136206 192.168.43.184 144.76.78.144 54 (TCP Keep-Alive ACK] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 399 56.523811 144.76.78.144 192.168.43.184 TCP 54 (TCP Keep-Alive] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 400 56.523909 192.168.43.184 144.76.78.144 TCP 54 (TCP Keep-Alive ACK] 55324 + 80 [ACK] Seq=1 Ack=2 Wii 1008 66.723338 144.76.78.144 192.168.43.184 TCP 54 (TCP Keep-Alive] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 1009 66.723410 192.168.43.184 144.76.78.144 54 (TCP Keep-Alive ACK] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 3956 76.915476 144.76.78.144 192.168.43.184 54 (TCP Keep-Alive] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 3957 76.915530 192.168.43.184 144.76.78.144 54 (TCP Keep-Alive ACK] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 4710 80.256772 192.168.43.184 144.76.78.144 55 (TCP Keep-Alive] 55324 + 80 [ACK] Seq=0 Ack=2 Win=512 Len=1 4862 80.461751 144.76.78.144 192.168.43.184 TCP 66 (TCP Keep-Alive ACK] 80 + 55324 [ACK] Seq=2 Ack=1 Win=501 Len=0 SLE=0 SRE=1 7215 90.724698 144.76.78.144 192.168.43.184 TCP 54 (TCP Keep-Alive] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 7216 90.724779 192.168.43.184 144.76.78.144 TCP 54 (TCP Keep-Alive ACK] 55324 – 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 8614 100.913739 144.76.78.144 192.168.43.184 TCP 54 (TCP Keep-Alive] 80 + 55324 [ACK] Seq=1 Ack=1 Win=501 Len=0 8615 100.913803 192.168.43.184 144.76.78.144 TCP 54 (TCP Keep-Alive ACK] 55324 + 80 [ACK] Seq=1 Ack=2 Win=512 Len=0 TCP > Frame 8: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface \Device\NPF_{14AA512F-C384-4CAC-AC33-C71CC4CAEE78}, id o > Ethernet II, Src: XiaomiCo_f2:06:2b (90:78:52:f2:06:2b), Dst: aa: 6b:7d:52:44:dd (aa: 6b:7d:52:44:dd) Internet Protocol Version 4, Src: 144.76.78.144, Dst: 192.168.43.184 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5)

+ DNS A *Wi-Fi (ether host AA-6B-7D-52-44-DD) - 0 File Edit View Go Capture Analyze Statistics Telephony Wireless Tools Help IOO XC 9 2 T Q Q @ I udpl X No. Time Source Destination Protocol Length Info 229 13.236999 192.168.43.184 192.168.43.1 DNS 77 Standard query @x585e A t-ring.msedge.net 230 13.237924 192.168.43.184 192.168.43.1 DNS 77 Standard query exa4d9 AAAA t-ring.msedge.net 231 13.283177 192.168.43.1 192.168.43.184 DNS 144 Standard query response @x585e A t-ring.msedge.net CNAME t-ring.t-9999.t-msedge.net CNAME t-9999.t-msedge.net A... 232 13.294874 192.168.43.1 192.168.43.184 156 Standard query response exa4d9 AAAA t-ring.msedge.net CNAME t-ring.t-9999.t-msedge.net CNAME t-9999.t-msedge.ne... 339 44.393217 192.168.43.184 192.168.43.255 NBNS 92 Name query NB DESKTOP-1NOHFTR<lc> 340 45.156721 192.168.43.184 192.168.43.255 NBNS 92 Name query NB DESKTOP-1NOHFTR<10> 341 45.911153 192.168.43.184 192.168.43.255 NBNS 92 Name query NB DESKTOP-1NOHFTR<lc> 347 50.875604 192.168.43.184 192.168.43.1 DNS 74 Standard query @xd328 A www.google.com 349 50.932489 192.168.43.1 192.168.43.184 DNS 90 Standard query response Oxd328 A www.google.com A 172.217.167.36 350 50.934048 192.168.43.184 192.168.43.1 DNS 74 Standard query exf5f4 A www.google.com 351 50.938226 192.168.43.1 192.168.43.184 90 Standard query response Oxf5f4 A www.google.com A 172.217.167.36 401 57.074680 192.168.43.184 192.168.43.1 75 Standard query @x8513 A www.youtube.com 402 57.076040 192.168.43.184 192.168.43.1 DNS 75 Standard query Oxdfc7 AAAA www.youtube.com 405 57.133822 192.168.43.1 192.168.43.184 DNS 285 Standard query response ex8513 A www.youtube.com CNAME youtube-ui.l.google.com A 172.217.27.174 A 172.217.167.2... 406 57.143055 192.168.43.1 192.168.43.184 137 Standard query response @xdfc7 AAAA www.youtube.com CNAME youtube-ui.l.google.com AAAA 2404: 6800:4002:807:: 200e 407 57.149834 192.168.43.184 192.168.43.1 83 Standard query exe90e A youtube-ui.l.google.com 408 57.155384 192.168.43.1 192.168.43.184 259 Standard query response Oxe90e A youtube-ui.l.google.com A 172.217.167.206 A 172.217.166.14 A 172.217.167.14 A ... 409 57.156238 192.168.43.184 192.168.43.1 83 Standard query @x23e3 AAAA youtube-ui.l.google.com 412 57.162768 192.168.43.1 192.168.43.184 111 Standard query response @x23e3 AAAA youtube-ui.l.google.com AAAA 2404: 6800:4002:807:: 200e 421 58.459142 192.168.43.184 192.168.43.1 74 Standard query Ox5d58 AAAA www.google.com 424 58.512258 192.168.43.1 192.168.43.184 102 Standard query response @x5d58 AAAA www.google.com AAAA 2404: 6800:4002:806: :2004 425 58.513699 192.168.43.184 192.168.43.1 DNS 74 Standard query excb93 AAAA www.google.com 426 58.530759 192.168.43.1 192.168.43.184 DNS 102 Standard query response excb93 AAAA www.google.com AAAA 2404: 6800:4002:806:: 2004 550 64.757275 192.168.43.184 192.168.43.1 86 Standard query Ox0c21 A encrypted-tbn0.gstatic.com DNS DNS > Frame 229: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) on interface \Device\NPF_{14AA512F-C384-4CAC-AC33-C71CC4CAEE78}, id o > Ethernet II, Src: aa: 6b:7d:52:44:dd (aa:66:7d:52:44:dd), Dst: Xiaomico_f2:06:2b (90:78:52:42:06:26) Internet Protocol Version 4, Src: 192.168.43.184, Dst: 192.168.43.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5)