NOTE:
I was unable to run Wireshark live on my computer. Due to this, I downloaded the provided zip file and used the ethernet—etherreal-trace-1 file to answer the questions of this lab.
1) What is the 48-bit Ethernet address of your computer?
2) What is the 48-bit destination address in the Ethernet fame? Is this the Ethernet address of gaia.cs.umass.edu? What device has this as its Ethernet address?
3) Give the hexadecimal value for the two-byte Frame type field. What upper layer protocol does this correspond to?
4) How many bytes from the very start of the Ethernet frame does the ASCII “G” in “GET” appear in the Ethernet frame?
5) What is the value of the Ethernet source address? Is this the address of your computer, or of gaia.cs.umass.edu? What device has this as its Ethernet address?
6) What is the destination address in the Ethernet frame? Is this the Ethernet address of your computer?
.
7) Give the hexadecimal value for the two-byte Frame type field. What upper layer protocol does this correspond to?
.
8) How many bytes from the very start of the Ethernet frame does the ASCII “O” in “OK” appear in the Ethernet frame?
9) Write down the contents of your computer’s ARP cache. What is the meaning of each column value?
10) What are the hexadecimal values for the source and destination address in the Ethernet frame containing the ARP request message?
11) Give the hexadecimal value for the two-byte Ethernet Frame field. What upper layer protocol does this correspond to?
12)
A) How many bytes from the very beginning of the Ethernet frame does the ARP opcode field begin?
B) What is the value of the opcode field within the ARP-payload part of the Ethernet frame in which an ARP request is made?
C) Does the ARP message contain the IP address of the sender?
D) Where in the ARP request does the “question” appear - the Ethernet address of the machine whose corresponding IP address is being queried?
13) Now find the ARP reply that was sent in response to the ARP request.
A) How many bytes from the very beginning of the Ethernet frame does the ARP opcode field begin?
B) What is the value of the opcode field within the ARP-payload part of the Ethernet frame in which an ARP response is made?
C) Where in the ARP message does the “answer” to the earlier ARP request appear - the IP address of the machine having the Ethernet address whose corresponding IP address is being queried?
14) What is the hexadecimal values for the source and destination address in the Ethernet frame containing the ARP reply message?
15) Why is there no ARP reply (sent in response to the ARP request in packet 6) in the packet trace?
