1 / 4100%
Screenshot #1:
Question #1: 51.2253870 seconds.
Question #2: 4265 packets.
Screenshot #2:
CSIS 330 Lab 3: Wireshark
Packet Analysis Answer Template
Screenshot #3:
Question #3: 48 6f 73 74 3a 20 67 6f 6f 67 65 2e 63 6f 6d 0d 0a
Question #4: No, because the numbering sequence is different.
Question #5: Hex = 48 6f 73 74 3a 20 67 6f 6f 67 65 2e 63 6f 6d 0d 0a
Char = Host: googe.com Carriage Return Line Feed
Screenshot #4:
Question #6: Nothing happened with the capture.
Question #7: 11 things were captured.
Question #8: There is a difference because Wireshark is only capturing
information from www.microsoft.com because it is acting as the host.
Question #9: All the info/data passing through pot 53 is standard query.
Question #10: 10.202.0.82
=
Frame
#
Ethernet
II,
4
Time
Source
20
21
22
23
24
25
5.
24679100
10.
202.0.
82
5.
24839700
10.
202.0.
82
5.
24860900
10.
254.10.
82
5.
24901400
10.
254.10.
82
5.
24974000
10.
202.0.
82
5.
25019400
10.
254.10.
82
5.
25149100
10.
202.0.
82
5.
25173400
10.
254.10.
82
5.
25306100
10.
202.0.
82
5.
25385700
10.
254.10.
82
5.
25518600
10.
254.10.
82
5.
25999300
10.
202.0.
82
5.
26179900
10.
254.10.
82
6.
19461100
10.
202.0.
82
6.
22048800
10.
202.0.
82
6.
22076700
10.
254.10.
82
6.
22473000
10.
254.
20.
82
6.
76001200
10.
202.0.
82
6.
76245800
10.
254.10.
82
34:
77
bytes
on wire
(616
bits),
77
HonHaipr_2f:d4:a4
(80:56:f2:2f:d4:a4),
Ds
src:
3c
08
F6
21 e4
00
80
56
00
3
59
00 00
80 11
14
52
£0
3b
00
35
00
2b
00
00
00 00 00 00
O05
66
Resin.
Rstocot
Length,
10.
254.10.
82
DNS:
79
standard
10.
254.10.
82
DNS:
79
standard
10.
202.0.
82
DNS:
91
standard
10.
202.0.
82
DNS:
241
Standard
10.
254.10.
82
DNS:
84
standard
10.
202.0.
82
DNS:
95
standard
10.
254.10.
82
DNS:
80
standard
10.
202.0.
82
DNS:
224
standard
10.
254.10.
82
DNS:
85
standard
10.
202.0.
82
DNS:
132
standard
10.
202.0.
82
DNS:
101
standard
10.
254.10.
82
DNS:
83
standard
10.
202.0.
82
DNS:
169
standard
10.
254.10.
82
DNS:
77
standard
10.254.
20.82
DNS:
77
standard
10.
202.0.
82
DNS:
129
standard
10.
202.0.
82
DNS:
129
standard
10.
254.10.
82
DNS:
84
standard
10.
202.0.
82
DNS:
144
standard
2F a4
08 00
45
00
6c
Oa
ca
00
52
0a fe
9
52
25
O1
00 00
O1
Ge
74 73
07
67 73 74
00
01
00
01
st:
Cisco_2:
gusty
query
query
query
query
query
query
query
query
query
query
query
query
query
query
query
query
query
query
query
VAUEiy
om
nmme
iuer
Lye
cue
(Ox3ae2
A
ajax.
googleapis.
com
Oxbe3a_
A
va.
v.
liveperson.
net
response
OxbffO A 192.168.1.80
response
Ox3ae2
CNAME
googleapis.
1.
google.
com
A
173.194.
205.95
A
74.125.192.95
A
17
(Oxf4c8_A
www.
google-analytics.
com
response
Oxbc3a A
208.
89.12.87
0xd222_A
Fonts.
googleapis.
com
response
Oxf4c8 CNAME
www-google-analytics.1.google.
com
A
209.85.
232.102
A
209.85.2
Ox25cd_A
content.
cdninstagram.
com
response
0xd222
CNAME
googleadapis.
1.
google.com
A
173.194.66.95
response
Ox25cd
A
31.13.69.245
Ox1c60
A
stats.g.
doubleclick.
net
response
Ox1c60 CNAME
stats.
1.doubleclick.net
A
74.125.22.154
A
74.125.22.156
A
74.
0x5225
A
fonts.
gstatic.
com
0x5225_
A
Fonts.
gstatic.
com
response
0x5225
CNAME
gstaticadss1.1.
google.com
A
173.194.68.94
response
0x5225
CNAME
gstaticadss1.1.
google.com
A
173.194.68.94
0x6c03
A
www.
googletagmanager.
com
response
Ox6cO3
CNAME
www-googletagmanager
.
1.
google.
com
A
173.194.
208.97
bytes
captured
(616
bits)
on
interface
0
"1:24:00
(3¢:08:F6:21:e4:00)
File:
"C:\Users\CAMERO~
1\AppData\Local\.._|
Packets:
100
-
Displayed:
100
(100.0%)
«
Dropped:
0
(0.0%)
Profile:
Default
Screenshot #5:
Powered by TCPDF (www.tcpdf.org)
Students also viewed