You should now see an Wireshark window that looks like:

To have Wireshark do this, select Analyze->Enabled Protocols. So let’s change Wireshark’s “listing of captured packets” window so that it shows information only about protocols below IP.

Since this lab is about Ethernet and ARP, we’re not interested in IP or higher-layer protocols. You should see a screen that looks something like this (where packet 4 in the screen shot below contains the HTTP GET message) First, find the packet numbers (the leftmost column in the upper Wireshark window) of the HTTP GET message that was sent from your computer to gaia.cs., as well as the beginning of the HTTP response message sent to your computer by gaia.cs. You can then use this trace file to answer the questions below. Once you have downloaded the trace, you can load it into Wireshark and view the trace using the File pull down menu, choosing Open, and then selecting the ethernet-ethereal-trace-1 trace file. The traces in this zip file were collected by Wireshark running on one of the author’s computers, while performing the steps indicated in the Wireshark lab. If you are unable to run Wireshark live on a computer, you can download the zip file and extract the file ethernet–ethereal-trace-1. References to figures and sections are for the 7 th edition of our text, Computer Networks, A Top-down Approach, 7 th ed., J.F.

Start up the Wireshark packet snifferĮnter the following URL into your browser Your browser should display the rather lengthy US Bill of Rights. For Internet Explorer, select Tools->Internet Options->Delete Files. To do this under Mozilla Firefox V3, select Tools->Clear Recent History and check the box for Cache. Do the following 2 :įirst, make sure your browser’s cache is empty. Let’s begin by capturing a set of Ethernet frames to study. RFC 826 ( ) contains the gory details of the ARP protocol, which is used by an IP device to determine the IP address of a remote interface whose Ethernet address is known.ġ. Before beginning this lab, you’ll probably want to review sections 6.4.1 (Link-layer addressing and ARP) and 6.4.2 (Ethernet) in the text 1. In this lab, we’ll investigate the Ethernet protocol and the ARP protocol.

Wireshark ip lab solutions