Scribd Logo
Upload

Welcome to Scribd!

  • 16 views

    Ethernet and ARP - NGUYEN TIEN DAT

    Uploaded by

    Đạt Nguyễn
    The document discusses the analysis of Ethernet frames captured from a home network. It examines the Ethernet addresses, IP addresses, protocol types and other fields in the frames. Specifically: 1) It identifies the MAC addresses of the computer, router and other devices on the local network from the frame contents. 2) It determines the protocol (IPv4) from the frame type field and analyzes the IP and TCP header fields. 3) It locates the position of HTTP data within the frames based on analyzing the Ethernet, IP and TCP header lengths.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    Ethernet and ARP - NGUYEN TIEN DAT

    Uploaded by

    Đạt Nguyễn
    16 views5 pages
    The document discusses the analysis of Ethernet frames captured from a home network. It examines the Ethernet addresses, IP addresses, protocol types and other fields in the frames. Specifically: 1) It identifies the MAC addresses of the computer, router and other devices on the local network from the frame contents. 2) It determines the protocol (IPv4) from the frame type field and analyzes the IP and TCP header fields. 3) It locates the position of HTTP data within the frames based on analyzing the Ethernet, IP and TCP header lengths.

    Original Description:

    Ethernet and ARP

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document discusses the analysis of Ethernet frames captured from a home network. It examines the Ethernet addresses, IP addresses, protocol types and other fields in the frames. Specifically: 1) It identifies the MAC addresses of the computer, router and other devices on the local network from the frame contents. 2) It determines the protocol (IPv4) from the frame type field and analyzes the IP and TCP header fields. 3) It locates the position of HTTP data within the frames based on analyzing the Ethernet, IP and TCP header lengths.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    16 views5 pages

    Ethernet and ARP - NGUYEN TIEN DAT

    Uploaded by

    Đạt Nguyễn
    The document discusses the analysis of Ethernet frames captured from a home network. It examines the Ethernet addresses, IP addresses, protocol types and other fields in the frames. Specifically: 1) It identifies the MAC addresses of the computer, router and other devices on the local network from the frame contents. 2) It determines the protocol (IPv4) from the frame type field and analyzes the IP and TCP header fields. 3) It locates the position of HTTP data within the frames based on analyzing the Ethernet, IP and TCP header lengths.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    You are on page 1of 5

    NGUYEN TIEN DAT

    CO1203
    ETHERNET and ARP

    1. According to above screenshot (Figure 1), the Ethernet address of my computer is


    34:6f:24:e9:ff:83

    2. According to Figure 1, the destination address is 34:6f:24:e9:ff:83. This address is not the
    etherrnet address of gaia.cs.umass.edu, but it is the address of my TP link router (Gateway to Internet).

    3. According to the Figure 1, the hexadecimal value for the frame type field is Type: IP
    (0x0800). This is correspond to IP protocol.

    - The hexadecimal value of the Frame type field (2 bytes) is: (0x0800)
    - The corresponding upper layer protocol is: IPv4
    4. There are 52 bytes from the beginning to where the (GET) character appears in the Ethernet
    frame. First 14 bytes of Ethernet Frame, 20 bytes IP Header, 20 bytes TCP Header before start of HTTP.

    5. According to the Figure 2, the value of the Ethernet source address is a0:f3:c1:f8:6d:f9. This
    address is not the address of my computer or gaia.cs.umass.edu. This is the address of my router

    The source address 00:0c:41:45:90:a8 is neither the Ethernet address of


    gaia.cs.umass.edu nor the address of my computer. It is the address of my
    Linksys router, which is the link used to get onto my subnet
    The source address 00:0c:41:45:90:a8 is neither the Ethernet address of
    gaia.cs.umass.edu nor the address of my computer. It is the address of my
    Linksys router, which is the link used to get onto my subnet
    6. The source address 00:0c:41:45:90:a8 is neither the Ethernet address of gaia.cs.umass.edu
    nor the address of my computer. It is the address of my Linksys router, which is the link used to get onto
    my subnet

    7. The destination address 00:09:5b:61:8e:6d is the address of computer.

    8. The hex value for the Frame type field is 0x0800.

    9. The ASCII “O” appears 52 bytes from the start of the ethernet frame. Again, there are 14
    bytes of Ethernet frame, and then 20 bytes of IP header followed by 20 bytes of TCP header before the
    HTTP data is encountered
    10. The hex value for the CRC field is 0x 0d0a 0d0a.
    11. The hex value for the CRC field is 0x 0d0a 0d0a.

    The Internet Address column contains the IP address, the Physical Address
    column contains the MAC address, and the type indicates the protocol type.
    The Internet Address column contains the IP address, the Physical Address
    column contains the MAC address, and the type indicates the protocol type.
    The Internet Address column contains the IP address, the Physical Address
    column contains the MAC address, and the type indicates the protocol type.
    11. The Internet Address column contains the IP address, the Physical Address column contains
    the MAC address, and the type indicates the protocol type.
    12. - 20 bytes
    - 0x0001
    - Yes, according to the following figure, the IP address of the Sender IP address: 192.168.0.1
    - The target MAC address is 00:00:00:00:00:00, this broadcast will query the machine whose IP
    address is 192.168.0.1.

    13.
    - 20 bytes

    - 0x0002

    - Sender IP address: 192.168.0.100 and Sender MAC address: ee:b4:7f:18:f8:17 does the “answer”
    to the earlier ARP request.

    14. Source: ee:b4:7f:18:f8:17, Destination: Destination: cc:32:e5:c8:3b:d6.

    You might also like