Reference no: EM133199081
Assignment - DNS, IP, and TCP Traffic Streams
Preparation
Download and install the TCP/IP packet capture program
Decide on a website of your choice for which you will capture and analyze TCP/IP traffic streams and identify the URL of your selected website?
Use the Week 7 Assignment Template to complete and upload your work to the courseroom.
Resources
Wireshark Documentation.
Wireshark Frequently Asked Questions.
Wireshark User''s Guide - Chapter 2: Building and Installing Wireshark.
Wireshark Essential Training.
Overview
Each protocol in the TCP/IP stack uses a specialized packet to transmit and receive data and protocol-specific information at its layer of the protocol stack. For example, there is the TCP segment packet at the TCP layer and there is the IP datagram packet at the IP layer that encapsulates or includes the TCP segment as its data. Packet capture programs like Wireshark allow us to capture these TCP/IP packets as frames from a network interface card that is connected to the Internet. More importantly, these packet capture programs enable us to analyze TCP/IP traffic and examine the networking information therein.
In this assignment, you will use Wireshark to capture and analyze the DNS, IP, and TCP packets of the traffic streams associated with browsing a website of your choice. You will document your capture and analysis with screenshots highlighting the key information analyzed. You will also explain what you did, interpret the result of your analysis, and reflect on this learning experience in a one-page written summary.
Instructions
Start the TCP/IP packet capture program Wireshark.
Configure Wireshark Time Display Format to display time as "Date and Time of Day" as follows: View > Time Display Format > Date and Time of Day
Do not use the default configuration of Time Display Format as "Seconds Since the Beginning of Capture."
Start Wireshark Capture on your network interface that is connected to the Internet.
In a web browser window, type in the URL of your chosen website and hit ENTER to browse to the website.
Stop Wireshark Capture after a few seconds.
Analyze the Wireshark frame that encapsulates the DNS query about your chosen URL to identify:
The IP address of your network interface as the source IP address.
The URL of your chosen website.
The DNS Queries part of the frame.
Screenshot your identified frame, similar to figure 1.a, below. On the screenshot, highlight the IP address of your network interface as the source IP address, the URL of your chosen website, and the DNS Queries part of the frame.
The line containing the IP address of the network interface is highlighted in red with a note stating "Time displayed as Date and Time of Day." Queries section of the window is also highlighted, including the following text under the Queries heading: www.ibm.com: type A, class IN.