7. The following two traces were captured by using a network protocol analyzer,

Question

7. The following two traces were captured by using a network protocol analyzer, Ethereal. These are Ethernet II frames. The printout includes the complete Ethernet II frame less the pre-amble (first 8 bytes) and the CRC (last 4 bytes).

a) What is the higher layer protocol data carried by these two frames?

b) Identify the MAC address of the two computers in the second frame.

c) Identify the source IP address and destination IP address in the second frame.

d) Identify the source port number and destination port number in the second frame.

e) Is the third-layer header correct in the third frame (checksum)?

Ethernet II/DIX Frame Preamble Destination Source Type 8 bytes Address Address 2 bytes 6 bytes 6 bytes Bit 0 14 16 19 Version IHL ECN Total Length Identification Fragment Offset Time to Live Protocol Header Checksum Source Address Destination Address Options Padding Figure 18.6 IPv4 Header Data 0-1500 bytes 31 Pad FCS 0-46 bytes 4 bytes

Explanation / Answer

a) the higher order protocol data in frame 1 is

00 14 5e 80.............5d e9

For frame 2

80 06 2b................ C1 50 10

b) destination computer Mac address- 4f fb c1 9a 08 00

Source Mac address - 45 00 00 28 45 5b

c) up addresses

Source = 06 5b 00 8f

Destination = 94 00 4f 60

d) Port address

Source = ae 32

Destination = 61 c1

Related Questions

Navigate

• Browse (All)
• Browse 7
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.