Summarize the data packet information within the scan list. \"Wi-Fi (tcp port ht

Question

Summarize the data packet information within the scan list.

"Wi-Fi (tcp port http) File Edit View Go Capture Analyze Statistics Telephony Wireless Tools Helip and I(tcp.stream Expression . + No. Time Destination Protocol Length Info 12 0.846271 192.168.1.73 23.45.146.108 HTTP 14 8.046818 192.168.1.73 23.45.146.108 HTTP 15 8.846871 192.168.1.73 23.45.146.108 HTTP 51 463.17 192.168.1.73 104.16.91.188 HTTP 53 463.2 184.16.91.188 192.168.1.73 HTTP 24 8.894003 23.45.146.108 192.168.1.73 HTTP 284 HTTP/1.1 200 OK 27 8.894087 23.45.146.108 192.168.1.73 HTTP 216 HTTP/1.1 200 OK 30 8.894812 23.45.146.188 192.168.1.73 HTTP 269 GET/singletile/sunnary/alias/experiencebyname/today?market-en-US&source-appxmanifest;åtenant-ampåvertical-news HTTP/1.1 271 GET /singletile/summary/alias/experienceby name/today ?market-en-us&source-appxmanifest;&tenant-amp;&ve;tical-sport s HTTP/ 1.1 272 GET/singletile/sunnary/alias/experiencebyname/taday?market-en-US&source-appxmanifest;&tenant-amp;åvertical-finance HTTP/1.1 287 GET /COMODORSACertificationAuthority.crl HTTP/1.1 546 HTTP/1.1 384 Not Modified 149 HTTP/1.1 288 OK Frame 12: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) on interface 8 Ethernet II, Src: Intelcor a6:38:5d (84:ef:18:a6:38:5d), Dst: ArrisGro 75:9b:80 (18:b8:1f:75:9b:88) Internet Protocol Version 4, Src: 192.168.1.73, Dst: 23.45.146.188 Transnission Control Protocol, Sre Port: 55576, Dst Port: 8, Seq: 1, Ack: 1, Len: 215 8 b8 1f 9b 80 84 ef 18 a6 38 5d 08 0 45 e8 0010 80 ff 12 46 40 08 Be 06 7c 28 c0 eB 01 49 17 2d 0020 92 6c d9 18 00 50 11 e8 d8 11 b9 79 f9 67 50 18 ·1 P. 03 81 80 b8 95 80 80 47 45 54 20 2f 73 69 6e 67 6c 8840 65 74 69 6c 65 2f 73 75 6 6d 61 72 79 2f 61 6c etile/su mmary/al 8858 69 61 73 2f 65 78 78 65 72 69 65 e 63 65 62 79 ias/expe rienceby 860 6e 61 6d 65 2f 74 6f 64 61 79 3f 6d 61 72 6b 65 name/tod ay?marke 878 74 3d 65 2d 55 53 26 73 6f 75 72 63 65 3d 61 teen-US& source-a 8880 79 70 78 6d 61 6e 69 66 65 73 74 26 74 65 6e 6 ppxmanif est&tena; 889e 6e 74 3d 61 6d 70 26 76 65 72 74 69 63 61 6c 3d nt-anpåv ertical 0a0 6e 65 77 73 20 48 54 54 5e 2f 31 2e 31 ed 8a 43 news HTT P/1.1..C 0be 6f 6e 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 78 2d onnectio n: Keep 88c8 41 6c 69 76 65 ed 8a 55 73 65 72 2d 41 67 65 6 Alive..U ser-Agen 8d0 74 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 57 4e 53 t: Micro soft-WNS 00e0 2f 31 38 2e 30 ed a 48 6f 73 74 3a 20 63 64 6e /10 .8..H ost: cdn 88fe 2e 63 6f 74 65 6e 74 2e 78 72 6f 64 2e 63 6d .cantent -prod.cn 0100 73 2e 6d 73 6e 2e 63 6f 6d 0d 8a ed 0a GE T /singl S.msn.com.. O wireshark 3101E807-2C9E-4818-8C4A-BAE8EA61BD96 20171008123803 14220 Pockets. S8 . Displayed: 8 (13.8%) Profie: Defaut ^d1) [ 12:53 PM 10/8/2017 Type here to search

Explanation / Answer

Here in our image, the tool used to capture the packets is Wireshark. It has many functions to capture and analyse the packets captured.

Here, the display filters are being implemented. To use the display filter, we have to set the condition on the filter option before starting the capture. The filter here is on http and 1, which alows only http packets. We use filters only when we are well aware of what type of output we are looking for. Filtering the packets makes it easier to analyse the output, as the amount of packets being captures reduces.

Secondly we can see for the first 3 packets, the host IP address as: 192.168.1.73, which is private IP address of class C and the destination address as: 23.45.146.108 is a public IP address.

We can see for the last 3 packets, the host IP address as: 23.45.146.108, which is private IP address of class C and the destination address as: 192.168.1.73 is a public IP address, i.e., the reply of the request sent by the host at IP address 192.168.1.73.

The forth packets represents the certification authentication for the response from the server at 23.45.146.108.

The dark grey row represents the source and destination MAC(Media Access Control) address or physical address, which is actually their NIC number,

The protocol mainly used here is HTTP, which highlighted with blue color.

Here, it can also be visualized that the source port number is 55576 and destination port number is 80.

The time of the pacet capture can also be seen on the left hand side, which in this case is: 30.0.094012

The number of bytes captured cal also be clearly seen from the output which is : 269 bytes.

THANK YOU

Related Questions

Navigate

• Browse (All)
• Browse S
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.