I) Exercise One Open “Wireshark”, then use the “File” menu and the “Open” command to open the file “Exercise One.pcap”. You should see 26 packets listed. This set of packets describes a conversation’ between a user’s client and a central server. This entire conversation happens automatically, after a user types something and hits enter. Look at the packets to answer the following questions in relation to this conversation. In answering the following questions, use brief descriptions. For example, “In frame X, the client requests a web page, and in frame Y, the server delivers the content of the page.” What is the IP address of the client that initiates the conversation? a) Hint: See the accompanying document titled the “QuickStart Guide” – Look under the appendix describing “Hits Versus Page Views”. a) Use the first two packets to identify the server that is going to be contacted. List the common name, and three IP addresses that can be used for the server. b) What is happening in frames 3, 4, and 5? c) What is happening in frames 6 and 7? d) Ignore frame eight. However, for your information, frame eight is used to manage flow control. What is happening in frames nine and ten? How are these two frames related? e) f) What happens in packet 11? g) After the initial set of packets is received, the client sends out a new request in packet 12. This occurs automatically without any action by the user. Why does this occur? See the first “hint” to the left. Hint: a favicon.ico is a small graphic that can be used as an icon to identify a web page. In the following graphic the colorful “G” to the left is a favicon.ico h) What is occurring in packets 13 through 22′. i Explain what happens in packets 25 throug2 second “hint” to the left. In one sentence describe what the user was doing Reading email? Accessing a web page? FTP2 Other? j) ). Gl http://www.google.com
