实验二 传输层议报文信息分析.doc

中国矿业大学计算机科学与技术学院实验报告 【实验目的】 进一步熟悉协议分析工具软件使用，分析传输层报文承载的信息，掌握传输层协议工作的基本原理。 【实验要求】 1．对截取浏览网页时和即时通讯时的数据报文，进行分析，陈述两个不同高层应用的传输层协议的不同，应特别说明端口问题，并把截图写入报告。 2．在TCP建立和断开连接时截获数据报文，用截图说明三次握手和四次握手的过程。 【实验内容】 由上图知本机IP为15 1、浏览网页数据报文 截图如下： No. Time Source Destination Protocol Info 351 199.346792 15 5 TCP dectalk http [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 351 (54 bytes on wire, 54 bytes captured) Arrival Time: Dec 18, 2010 23:10:30.152304000 [Time delta from previous captured frame: 0.000065000 seconds] [Time delta from previous displayed frame: 0.000065000 seconds] [Time since reference or first frame: 199.346792000 seconds] Frame Number: 351 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: CompalIn_29:bd:20 (70:5a:b6:29:bd:20), Dst: LinkageS_04:d6:00 (00:09:53:04:d6:00) Destination: LinkageS_04:d6:00 (00:09:53:04:d6:00) Address: LinkageS_04:d6:00 (00:09:53:04:d6:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: CompalIn_29:bd:20 (70:5a:b6:29:bd:20) Address: CompalIn_29:bd:20 (70:5a:b6:29:bd:20) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 15 (15), Dst: 5 (5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x3486