ESCUELA SUPERIOR POLITECNICA DE CHIMBORAZO

FACULTAD DE INFORMATICA Y ELECTRONICA

ESC. DE INGENIERIA ELECTRONICA, CONTROL Y REDES
INDUSTRIALES
REDES DE COMPUTADORES
Lab #1 - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
T','-'.
Ob/#+&i0#s
Pa"& 11 Ca,&2"# an3 Ana-.4# L'+a- ICMP Da&a in !i"#s$a"%
Start and stop data capture of ping traffic to local hosts.
Locate the IP and MAC address information in captured PDUs.
Pa"& 51 Ca,&2"# an3 Ana-.4# R#6'&# ICMP Da&a in !i"#s$a"%
Start and stop data capture of ping traffic to remote hosts.
Locate the IP and MAC address information in captured PDUs.
Explain wh MAC addresses for remote hosts are different than the MAC addresses of local hosts.
Page 1 of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
Pa"& 11 Ca,&2"# an3 Ana-.4# L'+a- ICMP Da&a in !i"#s$a"%
In Part ! of this la"# ou will ping another PC on the LA$ and capture ICMP re%uests and replies in
&ireshar'. (ou will also loo' inside the frames captured for specific information. )his analsis should help to
clarif how pac'et headers are used to transport data to their destination.
S&#, 11 R#&"i#0# .'2" PC8s in&#"*a+# a33"#ss#s.
*or this la"# ou will need to retrie+e our PC,s IP address and its networ' interface card -$IC. phsical
address# also called the MAC address.
a. /pen a command window# tpe i,+'n*i 9a--# and then press Enter.
". $ote our PC interface,s IP address and MAC -phsical. address.
c. As' a team mem"er for their PC,s IP address and pro+ide our PC,s IP address to them. Do not pro+ide
them with our MAC address at this time.
S&#, 51 S&a"& !i"#s$a"% an3 b#in +a,&2"in 3a&a.
a. /n our PC# clic' the &indows S&a"& "utton to see &ireshar' listed as one of the programs on the pop0up
menu. Dou"le0clic' !i"#s$a"%.
". After &ireshar' starts# clic' In&#"*a+# Lis&.
Page 5 of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
N'&#1 Clic'ing the first interface icon in the row of icons also opens the Interface List.
c. /n the &ireshar'1 Capture Interfaces window# clic' the chec' "ox next to the interface connected to our
LA$.
N'&#1 If multiple interfaces are listed and ou are unsure which interface to chec'# clic' the D#&ai-s
"utton# and then clic' the :75.; <E&$#"n#&= ta". 2erif that the MAC address matches what ou noted in
Step !". Close the Interface Details window after +erifing the correct interface.
d. After ou ha+e chec'ed the correct interface# clic' S&a"& to start the data capture.
Page ; of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
3
Information will start scrolling down the top section in &ireshar'. )he data lines will appear in different
colors "ased on protocol.
e. )his information can scroll " +er %uic'l depending on what communication is ta'ing place "etween
our PC and the LA$. &e can appl a filter to ma'e it easier to +iew and wor' with the data that is "eing
captured " &ireshar'. *or this la"# we are onl interested in displaing ICMP -ping. PDUs. )pe i+6, in
the *ilter "ox at the top of &ireshar' and press Enter or clic' on the A,,-. "utton to +iew onl ICMP
-ping. PDUs.
Page > of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
f. )his filter causes all data in the top window to disappear# "ut ou are still capturing the traffic on the
interface. 4ring up the command prompt window that ou opened earlier and ping the IP address that ou
recei+ed from our team mem"er. $otice that ou start seeing data appear in the top window of
&ireshar' again.
N'&#1 If our team mem"er,s PC does not repl to our pings# this ma "e "ecause their PC firewall is
"loc'ing these re%uests. Please see E""'"1 N' s# #n+2#n&"a -a *2#n&# 3# "#*#"#n+ia for information on
how to allow ICMP traffic through the firewall using &indows 5.
g. Stop capturing data " clic'ing the S&', Ca,&2"# icon.
Page ? of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
S&#, ;1 E@a6in# &$# +a,&2"#3 3a&a.
In Step 6# examine the data that was generated " the ping re%uests of our team mem"er,s PC. &ireshar'
data is displaed in three sections1 !. )he top section displas the list of PDU frames captured with a
summar of the IP pac'et information listed# 7. the middle section lists PDU information for the frame selected
in the top part of the screen and separates a captured PDU frame " its protocol laers# and 6. the "ottom
section displas the raw data of each laer. )he raw data is displaed in "oth hexadecimal and decimal form.
a. Clic' the first ICMP re%uest PDU frames in the top section of &ireshar'. $otice that the Source column
has our PC,s IP address# and the Destination contains the IP address of the teammate,s PC ou pinged.
Page A of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
". &ith this PDU frame still selected in the top section# na+igate to the middle section. Clic' the plus sign to
the left of the Ethernet II row to +iew the Destination and Source MAC addresses.
Does the Source MAC address match our PC,s interface8 999999
Does the Destination MAC address in &ireshar' match the MAC address that of our team mem"er,s8
99999
Pa"& 51 Ca,&2"# an3 Ana-.4# R#6'&# ICMP Da&a in !i"#s$a"%
In Part 7# ou will ping remote hosts -hosts not on the LA$. and examine the generated data from those
pings. (ou will then determine what is different a"out this data from the data examined in Part 7.
S&#, 11 S&a"& +a,&2"in 3a&a 'n in&#"*a+#.
a. Clic' the In&#"*a+# Lis& icon to "ring up the list PC interfaces again.
Page B of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
". Ma'e sure the chec' "ox next to the LA$ interface is chec'ed# and then clic' S&a"&.
c. A window prompts to sa+e the pre+iousl captured data "efore starting another capture. It is not
necessar to sa+e this data. Clic' C'n&in2# )i&$'2& Sa0in.
Page : of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
d. &ith the capture acti+e# ping the following three we"site U:Ls1
!. www.ahoo.com
7. www.cisco.com
6. www.google.com
N'&#1 &hen ou ping the U:Ls listed# notice that the Domain $ame Ser+er -D$S. translates the U:L to
an IP address. $ote the IP address recei+ed for each U:L.
e. (ou can stop capturing data " clic'ing the S&', Ca,&2"# icon.
S&#, 51 E@a6inin an3 ana-.4in &$# 3a&a *"'6 &$# "#6'&# $'s&s.
a. :e+iew the captured data in &ireshar'# examine the IP and MAC addresses of the three locations that
ou pinged. List the destination IP and MAC addresses for all three locations in the space pro+ided.
!
st
Location1 IP1 99999.99999.99999.99999 MAC1 99991999919999199991999919999
7
nd
Location1 IP1 99999.99999.99999.99999 MAC1 99991999919999199991999919999
6
rd
Location1 IP1 99999.99999.99999.99999 MAC1 99991999919999199991999919999
Page C of 17
Lab - Usin !i"#s$a"% &' (i#) N#&)'"% T"a**i+
". &hat is significant a"out this information8
999999999999999999999999999999999999999999999999999999999999999999999999999999999999
c. ;ow does this information differ from the local ping information ou recei+ed in Part 78
999999999999999999999999999999999999999999999999999999999999999999999999999999999999
999999999999999999999999999999999999999999999999999999999999999999999999999999999999
Page 17 of 17