實驗7利用Wireshark分析ICMP協(xié)議

1、計算機(jī)網(wǎng)絡(luò)實驗報告年級： 姓名： 學(xué)號： 實驗日期： 實驗名稱：利用Wireshark分析ICMP協(xié)議 1、 實驗?zāi)康?. 利用wireshark分析ICMP協(xié)議，學(xué)習(xí)了解ICMP數(shù)據(jù)包。2. 學(xué)習(xí)ICMP報文段的各領(lǐng)域。2、 實驗器材3. 接入Internet的計算機(jī)主機(jī)；4. 抓包工具wireshark和截圖工具snagit。三、 實驗內(nèi)容11. What is the IP address of your host? What is the IP address of the destinationhost?答：the IP address of your host is 10.0.16

2、3.199，the IP address of the destination host is 143.89.14.34，實驗截圖如下2. Why is it that an ICMP packet does not have source and destination portnumbers?答：因為端口號是運輸層的，而icmp是包裝在ip數(shù)據(jù)報里，所以icmp包沒有源和目的端口號。3. Examine one of the ping request packets sent by your host. What are the ICMPtype and code numbers? Wha

3、t other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?答：the ICMP type ：8code numbers ： 0試驗截圖如下：the checksum,：0x4d4fsequence number ：12identifier fields：0x0001試驗截圖如下：4. Examine the corresponding ping reply packet. What are the ICMP type and

4、codenumbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields?答：實驗結(jié)果如下：5. What is the IP address of your host? What is the IP address of the targetdestination host?答：the IP address of your host isthe IP address of the target destina

5、tion host is 6If ICMP sent UDP packets instead (as in Unix/Linux), would the IP protocol number still be 01 for the probe packets? If not, what would it be?答：用的系統(tǒng)是windows系統(tǒng)7. Examine the ICMP echo packet in your screenshot. Is this different from the ICMP ping query packets in the first half of this

6、 lab? If yes, how so?答：不同試驗截圖如下：8. Examine the ICMP error packet in your screenshot. It has more fields than the ICMP echo packet. What is included in those fields?答：icmp error packet has more filds than the ICMP echo packet，這些字段包括：實驗截圖如下：9. Examine the last three ICMP packets received by the source

7、 host. How are these packets different from the ICMP error packets? Why are they different?答：最后三個接收的包截圖如下：10. Within the tracert measurements, is there a link whose delay is significantly longer than others? Refer to the screenshot in Figure 4, is there a link whose delay is significantly longer than others? On the basis of the router names, can you guess the location of the two routers on the end of this link?答：There is a link whose delay is significantly longer than others。Refer to the screenshot in Figure 4, there is a link whose delay