实验八实验八利用WireShark分析ARP协议
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
计算机网络实验报告
年级：姓名：学号：
实验日期：
实验名称：实验八利用WireShark分析ARP协议
一、实验目的
1、学会使用nslookup工具查询并分析Internet 域名信息或诊断DNS 服务器。学
会使用ipconfig工具进行分析。
2、会用wireshark分析DNS协议。对DNS协议有个全面的学习与了解。
二、实验器材
1、接入Internet的计算机主机；
2、抓包工具wireshark和截图工具snagit。
三、实验内容
1. What is the 48-bit Ethernet address of your computer?
2. What is the 48-bit destination address in the Ethernet frame? Is this the
Ethernet address of ? (Hint: the answer is no). What device has this as its Ethernet address? [Note: this is an important question, and one that students sometimes get wrong. Re-read pages 468-469 in the text and make sure you understand the answer here.
答：实验结果如下
3. Give the hexadecimal value for the two-byte Frame type field. What do
the bit(s) whose value is 1 mean within the flag field?
如上图所示，Type 字段的值是0x0800，代表IP协议
4. How many bytes from the very start of the Ethernet frame does the ASCII “G” in“GET” appear in the Ethernet frame?
答：实验结果如下
5. What is the hexadecimal value of the CRC field in this Ethernet frame?
无
6. What is the value of the Ethernet source address? Is this the address of your computer, or of (Hint: the answer is no). What device has this as its Ethernet address?
答：这个以太网地址既不是主机以太网地址，也不是目的主机以太网地址，实验结果如下
7. What is the destination address in the Ethernet frame? Is this the Ethernet address of your computer?
8. Give the hexadecimal value for the two-byte Frame type field. What do the bit(s) whose value is 1 mean within the flag field?
答：
9. How many bytes from the very start of the Ethernet frame does the ASCII “O” in“OK” (i.e., the HTTP response code) appear in the Ethernet frame?
答：以下比特没有出现在Ethernet frame中
10. What is the hexadecimal value of the CRC field in this Ethernet frame?
无
11. Write down the contents of your computer’s ARP cache. What is the meaning of each column value?
答：实验结果如下
12. What are the hexadecimal values for the source and destination addresses in the Ethernet frame containing the ARP request message?
答：实验结果如下
13. Give the hexadecimal value for the two-byte Ethernet Frame type field. What do the bit(s) whose value is 1 mean within the flag field?
答：实验结果如下
14. Download the ARP specification from ftp:///innotes/
std/std37.txt. A readable, detailed discussion of ARP is also at
/users/gorry/course/inet-pages/arp.html.
a) How many bytes from the very beginning of the Ethernet frame does the
ARP opcode field begin?