資源描述:
《網(wǎng)絡(luò)層協(xié)議數(shù)據(jù)的捕獲》由會員上傳分享,免費在線閱讀,更多相關(guān)內(nèi)容在工程資料-天天文庫。
1、實驗報告實驗名稱網(wǎng)絡(luò)層協(xié)議數(shù)據(jù)的捕獲EJEfxSourceAddrest[222187223[17218.58.116][220.18111.98][17218.58116][172.18.58116]
2、De$tAddrett]Sarmary42(1721858116]HTTPRPort?2299[22218722342[1721858.116][2201811198][2201811198]TCPD-80S?2299TCPD?2492S-80TCPD?80S-2492HTTPCPort-2492
3、SYNccLLDDversion■4headerlength■zubytesTypeofservicea00Ethertyp?■0800(IP)a-IPHeader000sroutine00000000:00eO4cee33e200115datf8000800450085"]a00000010:05de£23100003806e67ddebbdf2aac12.茯18童kExpertXDecode/^MatrixAHmITobteAprotocol(M.ASMMto?/實驗時間2013-4-28實驗
4、地點A1-510指導教師實驗目的與耍求:1、掌握IP協(xié)議數(shù)據(jù)的捕獲與分析2、掌握ARP協(xié)議數(shù)據(jù)的捕獲與分析3、掌握ICMP協(xié)議數(shù)據(jù)的捕獲與分析實驗內(nèi)容1、IP協(xié)議數(shù)據(jù)的捕獲與分析2、ARP請求、響應的捕獲與分析3、Ping命令工作原理分析(ICMPEchoReply&ICMPEchoRequest)實驗步驟:根據(jù)實際捕獲過程填寫一、IP協(xié)議數(shù)據(jù)的捕獲與分析1、捕捉數(shù)據(jù)包,可以看到,ip數(shù)據(jù)包的版本為IPv4,首部長度為20字節(jié),如圖1-1所示:QSmf1:Decode,1/7751Ethernet
5、Fraaes圖1-12、typeofservice字段表示服務(wù)器類型,優(yōu)先權(quán)為普通優(yōu)先級,延遲要求、通信量要求和可靠性要求均為普通值,如圖1-2所示:r.trx燦I卜乂5?am嚴2221872234172.165811622018111982201811198TCPTCPTCP1TTTPRRxrt-2299GraphicsTtataL-z.二?mACK-4.?4tt4SS?UD-2492S-80SYNACK-12S8123401SD?80S?2492ACK,41046182"VCPoxt?24今2
6、GET-pv^xf?t<136v????■??■?O???■???■■99999■■?EthortypoT0800(IP)oderlength?20bytes?routine?norMldel?7?norMlthroughput?noraalreliability?ECTbit-transportprotocolwillignoretheCEbit?CEbit-nocongestion0000000000eO4cee00000010:05det231000000203a74005000000030
7、:00d7b200000040:b437bl29ne20011Sdaff80000003806?67ddebb08fbfecbOd255fd60000ef28799240b?c33dOf3f45乂fc“85”)EFl8■多"tP-?9fi■"吃lei?HSnif1:Decode,1/7751EthernetFeaaem口回岡Status[SourceAddrei?
8、De$tAddr£?
9、Summary8DB<(22218722342[172.1858116]HTTP[172.18.58.116]…
10、[220.181.11.98][172.18.58.116][1721858116][222.187.223.42[172.18.58.116][220.181.1198][220.1811198]HTTP■?■■■■■■.??■4*■TCP:TCP:TCPD-80S?2299D-2492S-80D-80S-2492CPort?249:vDecodeXkUlrixAHodTaiaieAProtocolCwtASUdtttcs/圖1-23.TotalLength字段表示整個IP數(shù)據(jù)包的大小,為150
11、0字節(jié),如圖1-3所示:HSnif1:Decode,1/7751EthernetFrases□IP:????0?■ECTbit一transportprotocolwii.a□IP.0■CEbit-nocongestion_±51IP:Totallength■QIP:Identification■62001QIP:Flags■OXv■■?a0000000000eO4cee33e20011Sdaff80008004500?SS?*00000010:05def23100003806e67