Question

For this task you need a viewer for Packet Captures in pcapformat. We recommend the tool WireEdit , which is freely usable and can be executed without installation on the institute computers ( download, unzip and run the archive for Ubuntu under Downloadswireedit ).
Alternatively, WireShark can be used to view Capture files (requires administrator privileges on the machine where the tool will be installed).

(a) Analyze the packages in the capture file http_post.pcap and answer the following questions:

• Which IP address and port number does the client have, which server?
• What is the full destination URL of the POST request?
• Specify at least one key-value pair to pass to the server during the POST request.
• How big is the HTML document returned to the client for the GET request, in total (in bytes)?

(b) Identify the TCP connection establishment and draw the appropriate expiration time diagram. Each packet should be labeled with its control flags and the relevant header fields (Seq. No., ACK no.).

Answer 1

Answer A
********
Which IP address and port number does the client have, which server?

Client ip : 172.16.16.128
Port no : 1989

Server ip : 69.163.176.56
port no: 80

What is the full destination URL of the POST request?

http://www.chrissanders.org

Specify at least one key-value pair to pass to the server during the POST request.

author=Chris+Sanders&email=chris%40chrissanders.org&url=http%3A%2F%2Fwww.chrissanders.org&comment=This+is+a+POST+test%21&submit=Submit+Comment&comment_post_ID=310&comment_parent=0

chris@chrissanders.org
This is a POST test

How big is the HTML document returned to the client for the GET request, in total (in bytes)?

1095 bytes