CST 620 Project
CST620P3LabHTTPPPI
| Communications Reference | Source Information | Destination Information | Other Information of Interest | ||||||||||
| Sample Wireshark Record Number | Communication Protocol | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | OSI Layer | Comments |
| 1 | DNS | 4 | 192.168.1.132 | 00:14:a5:cb:6e:1a | 1031 | No | 4 | 192.168.1.1 | 00:01:02:27:f9:b2 | 53 | No | Layer 1 | Can determine that the DNS query was for www.polito.it |
| 2 | 802.11 (ppi:wlan_radio:wlan) | Not Listed | Not Listed | Not Listed | Not Listed | No | Not Listed | Not Listed | 00:14:a5:cb:6e:1a | Not Listed | No | Layer 1 (Physical Layer) | |
| 11 | HTTP | 4 | 192.168.1.1 | 00:01:02:27:f9:b2 | 3827 | No | 4 | 192.168.1.132 | 00:14:a5:cb:6e:1a | 80 | No | Layer 7 (application) | Wget request for www.polito.it website |
| 90 | NBNS (netbios name service | 4 | 192.168.1.132 | 00:14:a5:cb:6e:1a | 137 | No | 4 | 192.168.1.255 | ff:ff:ff:ff:ff:ff | 137 | No | Layer 7 (application) | |
| 5 | TCP | 4 | 192.168.1.132 | 00:14:a5:cb:6e:1a | 3827 | No | 4 | 130.192.73.1 | 00:01:02:27:f9:b2 | 80 | No | Layer 5 (Session Layer) | |
CST620P3LabWPAEAPTLS
| Communications Reference | Source Information | Destination Information | Other Information of Interest | ||||||||||
| Sample Wireshark Record Number | Communication Protocol | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | OSI Layer | Comments |
| 2 | ARP | 4 | 10.194.144.1 | 80:fb:06:f0:45:d7 | N/A | no | 4 | 10.194.144.196 | 00:00:00:00:00:00 | N/A | No | Layer 2 (data Link Layer) | |
| 18 | DNS | 4 | 95.136.242.99 | e0:a1:d8:18:c2:73 | 65388 | no | 4 | 109.0.66.20 | 00:17:33:61:00:00 | 53 | No | Layer 1 | DNS request for perdu.com |
| 324 | HTTP | 4 | 95.136.242.99 | e0:a1:d7:18:c2:73 | 65389 | no | 4 | 208.97.177.124 | 00:17:33:61:00:00 | 80 | No | Layer 7 (application) | GET request for http://perdu.com |
| 238 | ICMPv6 | 6 | fe80::ca4c:75ff:fe78:ed00 | 00:17:33:61:00:00 | 1701 | no | 6 | ff02::1 | e0:a1:d7:18:c2:73 | 1701 | No | Layer 3 (Network Layer) | Router advertisement |
| 9 | L2TP | 4 | 95.136.242.99 | e0:a1:d7:18:c2:73 | 1701 | no | 4 | 109.6.1.72 | 00:17:33:61:00:00 | 1701 | No | Layer 2 (Data link layer) | Control Message - Hello (tunnel id=1527, session id=0) |
| 47 | OCSP | 4 | 95.136.242.99 | e0:a1:d7:18:c2:73 | 65386 | no | 4 | 00:17:33:61:00:00 | 00:17:33:61:00:00 | 80 | No | Layer 7 (Application Layer) | Request |
| 7 | PPP LCP | 4 | 95.136.242.99 | e0:a1:d7:18:c2:73 | 1701 | no | 4 | 109.6.1.72 | 00:17:33:61:00:00 | 1701 | No | Layer 3 (Network Layer) | Echo Request |
| 278 | RADIUS | 4 | 10.251.23.139 | e0:a1:d7:18:c2:72 | 45577 | no | 4 | 80.118.192.115 | 80:fb:06:f0:45:d7 | 424 | No | Access Request(1) (id=0, l=382) | |
| 1 | Syslog | 4 | 10.251.23.139 | e0:a1:d7:18:c2:72 | 59194 | no | 4 | 62.39.3.142 | 80:fb:06:f0:45:d7 | 514 | No | Layer 7 (Application Layer) | Local2.ERR: Jan 2 10:09:52 nb6 chillispot[4222]: c:192.168.2.83/00:19:7D:3B:6F:D4\n |
| 26 | TCP | 4 | 95.136.242.99 | e0:a1:d7:18:c2:73 | 65386 | no | 4 | 109.0.74.75 | 00:17:33:61:00:00 | 443 | No | Layer 4 (Transport Layer) | |
| 29 | TLSv1 | 4 | 95.136.242.99 | e0:a1:d7:18:c2:73 | 65386 | Yes | 4 | 109.0.74.75 | 00:17:33:61:00:00 | 443 | Yes | Layer 5 ( Session layer) | |
CST620P3LabWPANDUCTION
| Communications Reference | Source Information | Destination Information | Other Information of Interest | ||||||||||
| Sample Wireshark Record Number | Communication Protocol | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | OSI Layer | Comments |
| 471 | ARP | 4 | 10.251.196.1 | 80:fb:06:f0:45:d7 | N/A | No | 4 | 10.251.196.69 | 00:00:00:00:00:00 | N/A | No | Layer 2 (data Link Layer) | |
| 2 | PPP LCP | 4 | 95.136.242.99 | e0:a1:d7:18:c2:73 | 1701 | No | 4 | 109.6.1.72 | 00:17:33:61:00:00 | 1701 | No | Layer 3 (Network Layer) | Echo Request |
| 11 | RTP | 4 | 109.3.79.137 | 80:fb:06:f0:45:d7 | 44344 | No | 4 | 10.251.23.139 | e0:a1:d7:18:c2:72 | 35560 | No | Layer 7 (application layer) | |
| 6 | SIP | 4 | 172.22.75.71 | 80:fb:06:f0:45:d7 | 5062 | No | 4 | 10.251.23.139 | e0:a1:d7:18:c2:72 | 5060 | No | Layer 7 (application layer) | |
| 5 | SIP/SDP | 4 | 10.251.23.139 | e0:a1:d7:18:c2:73 | 5060 | No | 4 | 172.22.75.71 | 80:fb:06:f0:45:d7 | 5062 | No | Layer 7 (application layer) | |
CST620P3LabNETJOINNOKIAMOBILE
| Communications Reference | Source Information | Destination Information | Other Information of Interest | ||||||||||
| Sample Wireshark Record Number | Communication Protocol | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | OSI Layer | Comments |
| 1 | 802.11 | N/a | 00:01:e3:41:bd:6e | N/A | N/A | ff:ff:ff:ff:ff:ff | N/A | Layer 1 (Physical Layer) | |||||
| 723 | EAPOL | N/A | 00:01:e3:41:bd:6e | N/A | N/A | 00:16:bc:3d:aa:57 | N/A | Layer 3 (network Layer) | |||||
CST620P3LabMESHNET
| Communications Reference | Source Information | Destination Information | Other Information of Interest | ||||||||||
| Sample Wireshark Record Number | Communication Protocol | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | OSI Layer | Comments |
| 26 | 802.11 | N/A | 10:6f:3f:0e:33:3c | N/A | No | N/A | 24:77:03:d2:5e:a8 | N/A | No | Layer 1 (Physical Layer) | QoS Data, SN=12, FN=0, Flags=.p….F. | ||
| 1 | EAP | N/A | 10:6f:3f:0e:33:3c | N/A | No | N/A | 24:77:03:d2:5e:a8 | N/A | No | Layer 2 (Data-link layer) | Request, Identity | ||
| 22 | EAPOL | N/A | 10:6f:3f:0e:33:3c | N/A | No | N/A | 24:77:03:d2:5e:a8 | N/A | No | Layer 3 (network Layer) | Key (Message 1 of 4) | ||
| 6 | TLSv1 | N/A | 24:77:03:d2:5e:a8 | N/A | No | N/A | 10:6f:3f:0e:33:3c | N/A | No | Layer 5 ( Session layer) | Client Hello | ||
CST620P3LabWPA2LINKUPPASSPHRA
| Communications Reference | Source Information | Destination Information | Other Information of Interest | ||||||||||
| Sample Wireshark Record Number | Communication Protocol | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | IPv4 or IPv6? | IP Address | MAC Address | Port Number | Secure Data? | OSI Layer | Comments |
| 1 | 802.11 | N/A | 00:0c:41:82:b2:55 | N/A | No | N/A | ff:ff:ff:ff:ff:ff | N/A | No | Layer 1 (physical Layer) | |||
| 87 | EAPOL | N/A | 00:0c:41:82:b2:55 | N/A | No | N/A | 00:0d:93:82:36:3a | N/A | No | Layer 3 (network Layer) | |||
| 148 | SNA | N/A | 00:0d:93:82:36:3a | N/A | No | N/A | 00:0d:93:82:36:3a | N/A | No | Layer 4 (Transport Layer) | |||