Question

Identify the latency of a host over the local network, it should typically be in milliseconds; • Use the tools tracepath, traceroute and ping to determine the route trip times of packets to a host • Install the above tools if not on your system already Q) Can you run the following commands and compare the resulting times to the host www.flinders.edu.au; $ tracepath www.flinders.edu.au $ traceroute www.flinders.edu.au $ ping -c 10 www.flinders.edu.au Q) Identify which hosts/routers create the largest latency Q) Do you see asymmetric routes, if so why might that be? Q) Using tcpdump or wireshark, what type of traffic do these programs generate?

Answer 1

Q) Can you run the following commands and compare the resulting times to the host www.flinders.edu.au;

$ tracepath www.flinders.edu.au
$ traceroute www.flinders.edu.au
$ ping -c 10 www.flinders.edu.au

kalinew [Running)- Oracle VM VirtualBox File MachineView Input Devices Help ApplicationsPlacesTerminal Sat 07:01 root@kali: File Edit View Search Terminal Help root@kali.-t tracepath www.flinders.edu.au 1?: [LOCALHOST 1: gateway 1: gateway 2: gateway 2: 150.129.54.65 pmtu 1500 6.093ms asymm 16 2.896ms asymm 127 2.767ms pmtu 1480 3.646ms 3 no reply 4: no reply 5 172.20.244.1 6 172.17.169.202 7: ix-ae-7-1333 thar1.1mh-sydney.as6453.net 8 : if-ae-7-2 . tha r1 . m3h-sydney . a56453 . net 9 7575.syd.equinix.com 10 et-0-3-0.pel.prka.sa.aarnet.net.au 11: ansθθ50θ6iac.ke ru . sa, vlan299.xe-5-9-4.pe1. prka . sa .aarnet .net .au 223.783msasymm 1 7 12 no reply 13 no reply 14: no reply 15 no reply 16: no reply 17: no reply 18 no reply 19: no reply 20: no reply 21: no reply 22: no reply 23: no reply 24: no reply 25: no reply 26: no reply 27: no reply 28 no reply 52.881ms 53.490ms asymm 10 265.076ms asymm 12 257.028ms asymm 12 213.966ms asymm 18 223.094ms asymm 16 ^ -1 4, ENİG 25/05/2019

kalinew [Running)- Oracle VM VirtualBox File MachineView Input Devices Help ApplicationsPlacesTerminal Sat 07:02 root@kali: File Edit View Search Terminal Help Too many hops: pmtu 1480 Resume: pmtu 1480 root@kali:-# traceroute www.flinders.edu.au traceroute to www.flinders.edu.au (129.96.88.52), 30 hops max, 60 byte packets 1 gateway (192.168.1.1) 1.473 ms 1.707 ms1.812 ms 2 150.129.54.65 (150.129.54.65) 3.796 ms 10.866 ms 10.473 ms 3 150.107.252.33 150.107.252.33) 10.924 ms 11.517 ms 11.281 ms 5 172.20.244.1 (172.20.244.1) 27.750 ms 27.502 ms 6 172.17.169.202 (172.17.169.202) 61.371 ms 67.708 ms 7 120.29.219.61 120.29.219.61) 277.452 ms 277.292 ms 269.486 ms 8 120.29.195.18 (120.29.195.18) 256.885 ms 258.788 ms 9 7575.syd.equinix.com (45.127.172.46) 216.721 ms 216.529 ms 10 et-0-3-0.pel.prka.sa.aarnet.net.au (113.197.15.42) 235.369 ms 235.291 ms 11 ans0e5006iac.keru.sa.vlan209.xe-5-0-4.pel.prka.sa.aarnet.net.au (138.44.192.37) 227.579 ms 229.573 ms 229.399 ms 12 13 14 15 16 17 18 19 2θ 21 23 24 25 26 27** 28 4:32 PM 脈di ENG 25/05/2019 U: 2.9 K

kalinew [Running)- Oracle VM VirtualBox File MachineView Input Devices Help Places ▼ Applications ▼ Terminal ▼ Sat 07:03 root@kali: File Edit View Search Terminal Help 16 t 17 18 19 21 23 24 25 26 * 27 28 29 30 * root@ka11:-$ ping -c 1θ www.flinders.edu.au PING www.flinders.edu.au (129.96.88.52) 56 (84) bytes of data 64 bytes from 129.96 . 88.52 (129.96 .88.52): icmp-seq=1 ttl=238 time-223 ms 64 bytes from 129.96.88.52 (129.96.88.52) icmp seq 2 ttl-238 time-224 ms 64 bytes from 129. 96. 88 . 52 ( 129. 96. 88. 52 ) : icmp. Seq-3 ttl-238 time-226 ms 64 bytes from 129.96.88.52 (129.96.88.52) icmp seq 4 ttl-238 time-224 ms 64 bytes from 129.96.88.52 (129.96.88.52): icmp_seq-5 ttl-238 time-224 ms 64 bytes from 129.96.88.52 (129.96.88.52) icmp seq 6 ttl-238 time-224 ms 64 bytes from 129.96.88.52 (129.96.88.52): icmp_seq-7 ttl-238 time-224 ms 64 bytes from 129.96.88.52 (129.96.88.52) icmp seq-8 ttl-238 time-224 ms 64 bytes from 129.96.88.52 (129.96.88.52): icmp_seq-9 ttl-238 time-224 ms 64 bytes from 129.96.88.52 (129.96.88.52) icmp seq 10 ttl-238 time-224 ms --www.flinders.edu.au ping statistics packets transmitted, 10 received , 0% packet loss, time 9013ms rtt min/avg/max/mdev223.310/224.652/226.731/0.996 ms root@kali 4) ENG 25/05/2019 )ENG 33 PM

Q) Identify which hosts/routers create the largest latency

ix-ae-7-1333.thar1.1mh-sydney.as6453.net took largest time

Q) Do you see asymmetric routes, if so why might that be?

to redirect the traffic and avoid congesions.

Q) Using tcpdump or wireshark, what type of traffic do these programs generate?

UDP ICMP & TCP

kalinew [Running) - Oracle VM VirtualBox File MachineView Input Devices Help ApplicationsPlaces Wireshark Sat 07:05 etho File Edit View So Capture Analyze Statistics TelephonyWireless Tools Hel,p y a display filter <Ctrl-s Expression. Source Destination Protocol Length Info TLSv1.2 221 Application Data TLSv1.2 100 Application Data O. ime 123 33. 732643770 192. 168-1. 1Θ8 2Θ8 . 89.12.87 124 33. 732651876 192. 168-1. 108 208.89.12.87 125 33 . 742875155 81. 148. 2Θ3. 138 192 . 168 . 1 . 1Θ8 167 6881 → 3Θ827 Len=65 UDP 126 33. 743034|θ4 192. 168. 1 , 108 81.148.203.138 110 30827-6881 Len 68 127 34 . O26570849 2Θ8 . 89. 12. 87 192.168 . 1.1Θ8 TCP 6θ 443 8557 [ACK] Seq-2626 Acke8Θ7 win-182Θ4 Len-e 60 443 8557 [ACK] Seq 2626 Ack 853 Win 18250 Len-0 1ΘΘ Application Data 128 34. θ26594929 298. 89. 12. 87 192.168.1.108 TCP 129 34 . 026684832 2Θ8 . 89. 12. 87 192 . 168 . 1 . 1Θ8 TLSv1.2 Frame 1: 143 bytes on wire (1144 bits), 143 bytes captured (1144 bits) on interface θ Ethernet II, Src: Cisco-Li_ de:97:8c (98:fc:11:d0:97:8c), Dst: HonHaiPr_18:7b:23 (b0:10:41:18:7b:23) Internet Protocol Version 4, Src: 147.148.251.127, Dst: 192.168.1.108 User Datagram Protocol, Src Port: 6881, Dst Port: 30827 Data (101 bytes) A {# 002θ θ! 6c 1a el 78 6b gesa 2e 7θ 64 31 За 61 64 32 1 xi .pd1.ad2 Ο γ wireshark-eth0.20190525070507-xv1VqB.pcapng Packets: 132 Displayed: 132 (100.0%) Profile: Default 4:35 PM 脈4.1 ENG 25/05/2019 U: 1.7 K

if you have any doubt then please ask me without any hesitation in the comment section below , if you like my answer then please thumbs up for the answer , before giving thumbs down please discuss the question it may possible that we may understand the question different way and we can edit and change the answers if you argue, thanks :)