BO CO LAB 5 Ethernet and ARP

1. Capturing and analyzing Ethernet frames: - Xa cache ca trnh duyt. - Chy wireshark v nhp a ch sau vo trnh duyt : http://gaia.cs.umass.edu/wireshark-labs/HTTP-ethereal-lab-file3.html. - Tm gi tin HTTP GET c gi t my tnh.

HTTP GET message

1. 48 Bit a ch Ethernet ca my tnh ang dng: 16:fe:b5:9e:58:b4. 2. 48 bit a ch ch ca Ethernet frame: d8:5d:4c:f1:a9:64. y khng phi l a ch Ethernet ca gaia.cs.umass.edu. l a ch ca router Tp-LinkT ang dng ti nh. 3. Gi tr hex ca trng Frame type l : 0x0800 (IP) .

4. C 54 byte k t khi bt u Ethernet Fram n khi m ASCII G xut hin.Bao gm 14 Byte Ethernet frame, 20 byte IP header v 20 Byte TCP header. 5. Gi tr Hex ca trng CRC l: 0x8b6a.

HTTP response message 6. a ch Ethernet ngun l: d8:5d:4c:f1:a9:64. y khng phi l a ch ca my tnh ang dng cng nh gaia.cs.umass.edu. y l a Router Tp-LinkT ti nh. 7. a ch ch ca Ethernet frame l 16:fe:b5:9e:58:b4. y l a ch ca my tnh ang dng. 8.Gi tr hex ca 2 byte trng Frame type l: 0x0800.

9. C 54 byte k t khi bt u Ethernet Fram n khi m ASCII O xut hin.Bao gm 14 Byte Ethernet frame, 20 byte IP header v 20 Byte TCP header. Fram c 657 byte m k t O bt u t byte th 603. 10. Gi tr ca trng CRC l: 0xcfed. 2. The Address Resolution Protocol (RP):

11. - Ct Internet Address cha a ch IP. - Ct physical Address cha a ch MAC. - Ct Type cha thng tin v loi giao thc. * ARP request message - Xa ARP cache -Chy Wireshark v nhp a ch sau vo trnh duyt : http://gaia.cs.umass.edu/wireshark-labs/HTTP-wireshark-file3.html

ARP request message

12.Ethernet fram cha bn tin truy vn ARP: + a ch ngun: 00:1f:16:ea:c4:ad. + a ch ch: ff:ff:ff:ff:ff:ff. 13. Gi tr Hexa 2 byte ca trng Ethernet Frame type :0x0806. 14. - Trng ARP opcode bt u t byte th 20 t khi bt u Ethernet Fram. - Gi tr ca trng opcode trong ARP-payload: 0x0001. - Bn tin ARP c cha a ch IP:192.168.1.101 ca ngi gi. - Khi ARP request xut hin th trng Target MAC address c set 00:00:00:00:00:00 truy vn my tnh tng ng vi a ch IP 192.168.1.101.

ARP reply message

15. - Trng ARP opcode bt u byte 20 sau khi Ethernet Fram bt u. - Gi tr hexa trng opcode trong ARP-payload ca truy vn l 0x0002 (reply). - Bn tin tr li cho yu cu ARP trc c cha trng a ch MAC ca ngi gi: 16:fe:b5:9e:58:b4 tng ng vi IP:192.168.1.101. 16.Ethernet fram cha bn tin ARP reply: - a ch ngun: 16:fe:b5:9e:58:b4 - a ch ch: 00:1f:16:ea:c4:ad.

ethernet-ethereal-trace-1 17. Khng c ARP reply tr li li yu cu ARP trong gi tin 6 v chng ta khng c my tnh gi yu cu. ARP request c pht qung b nhng ARP reply c gi ti a ch gi yu cu.