CSIS 100
LAB: WIRESHARK PACKET CAPTURE ASSIGNMENT TEMPLATE
Screenshot #1:
Question #1 How many seconds did your
capture run?
30 Seconds
Question 2: How many packets did you
capture?
137840 Packets
Page 1 of 5
CSIS 100
Screenshot #2:
Question 3: What colors are present in your
output?
Blue, Green, Gray, Black, Red
Question 4: Are there any protocols that
appear with more than one color? Why or
why not?
The TCP sections appear to be bad and are
in a red and black color.
Page 2 of 5
CSIS 100
Screenshot #3:
Question 5: How many rows are appearing
in your WireShark capture with the filter in
place? (Be careful with this...The “No.”
column represents the packet number – not
the number of rows currently visible.)
About 31 different ones.
Question 6: What other protocols do you see
in the “Protocol” column?
It looks like just HTTP.
Page 3 of 5
CSIS 100
Screenshot #4:
Question 7: What is the host listed directly
below the GET / HTTP/1.1 command in your
TCP Stream output?
www.bbc.com
Question 8: How many bytes is the entire
conversation?
455
Page 4 of 5
CSIS 100
Screenshot #5:
Question 9: Compare the IPv4 address listed
in your ipconfig output to the IP address that
is listed under the Source column in your
Wireshark capture for the first “GET /
HTTP/1.1” row. Are these IP addresses the
same? Why or why not?
Yes they are the same because I am routed
through the same network.
Question 10: Click on the row of the next
packet in this conversation. Does your IP
address appear in the Source or Destination
column? Why?
Yes it is the same because I searched for
the website through the same network.
Page 5 of 5
