Project Phase 2

Deadline: Tuesday 11/4/2021 @ 23:59
[Total Mark for this Assignment is 5]

Computer Networks

IT210

College of Computing and Informatics

Project
10 Marks

Learning Outcome(s):

CLO2:Outline the physical layer & associated hardware and software integration.

CLO3:Recognize the layered approach for networking.

CLO4: Analyze & design Local and Wide Area Networks.

CLO5:Illustrate network protocols including Transport Control Protocol / Internet Protocol.

CLO6:Demonstrate protocol configuration, network-addressing schemes and analyze packet transmission.

I. Project objective:
In phase l of IT210 project, you searched about packet sniffers, how they work, and their importance in understanding internet routing. You learned that a packet sniffer is a piece of software that runs in parallel with the application whose packets needed to be analyzed, such as a browser. Using a packet sniffer, we can capture and analyze the packets at four layers: application, transport, network, and data-link.
The purpose of phase ll of IT210 project, is to get an in-depth knowledge of the networking concepts and protocols by using a packet-sniffer software that captures and analyzes the packets sent and received from our host.
II. Tools
A packet-sniffer software is needed to complete this project. For illustration purposes, a packet-sniffer software called Wireshark is used. For more information on Wireshark, please see the attached file (Wireshark Manual). Feel free to use any software you are comfortable with as long as it provides the same needed information to answer the project questions. Keep in mind that all your answers must be based on the packets you captured on your host, and that you must provide screenshots of them.
III. Project Description:
Read the following instructions. Then, answer all the questions
in text format and
support each answer with a screenshot
of the supporting captured information.

Instructions

Questions

1. Open your browser and clean cash history, but do not access any website yet.
2. Open your packet sniffer software (for instance, Wireshark) and start capturing.
3. Go back to your browser, access the following web site:
http://gaia.cs.umass.edu/wireshark-labs/INTRO-wireshark-file1.html
4. After the page is fully loaded and opened at your browser, go back to Wireshark and stop capturing.
5. Answer question 1.

Q1. List 3 different protocols that appear in the protocol column in the unfiltered packet-listing window.

6. Use the filter box to filter out all frames except if the source or the sink protocol is http.
7. Using the first frame with the source protocol http, answer the following question from 2 to 7:

Q2. What is the source and the destination IP addresses of the network-layer header in the frame? Is the frame an outgoing or an incoming frame?

8.

Q3. What is the total number of bytes in the whole frame?

9.

Q4. What is the number of bytes in the following:
– The Ethernet header (data-link layer header)?
– The IP header?
– The TCP header?
– The message (at the application layer)?

10.

Q5: Calculate the total number bytes of the Ethernet header, IP header, TCP header and the message. Is the total of them equal to the total number of bytes in the whole frame?

11. In the filter field of the Wireshark window type arp, and click enter.
12. From the packet list window, select the first ARP request packet.
13. From the packet detail pane, select the Address Resolution Protocol. Then answer the questions 6 and 10.

Q6. What is the hardware type and the protocol type?

14.

Q7. What is the value of the operation field. What is the meaning of this field?

Q8: what is hexadecimal values for the source and destination address in the Ethernet frame containing the ARP request message?

Q9: What is the type of the destination in the Ethernet frame containing the ARP request message (unicast, multicast, broadcast)?

Q10: Checking the packet byte pane, you will notice that the ARP request is followed by zero-bytes. How many 0s are there? Explain the reason for the existence of these 0s.

IV. Marking Criteria

Question

Answer in text format

support the answer with screenshot/s

total

Q1.

0.25

0.25

0.5

Q2.

0.25

0.25

0.5

Q3.

0.25

0.25

0.5

Q4:

0.25

0.25

0.5

Q5:

0.25

0.25

0.5

Q6.

0.25

0.25

0.5

Q7:

0.25

0.25

0.5

Q8:

0.25

0.25

0.5

Q9:

0.25

0.25

0.5

Q10:

0.25

0.25

0.5

Final Grade

5

Important Notes:

The number of students in each group: Same as Phase I

IT210_Project document:

a. The student must use the same file(IT210_Project_Phase_II x) to prepare his/her answer.
b. Prepare and upload both (PDF and DOC) version of this file.
c. Attach each answer with a screenshot of the necessary information that support your answer.

Answer

Note: Below is a sample answer to guide you on how to answer the questions properly and provide all information and evidence needed. Please note that your answer will be different because the addresses will definitely be different.

Q2 Sample Answer:
Using the first frame from the list of the captured frames with the source protocol HTTP, we can see in figure 1 in the packet list window the source and destination IP addresses of the network-layer header in the frame as follow:
-The source address of the first frame is: 192.168.100.51,
-The destination address of the first frame is: 128.119.245.12
Checking my network properties in figure 2, we can see that my host IP address is: 192.168.100.51, which matched the source address in the frame. Therefore, the first frame is an outgoing frame.

Figure 1

Figure 2