wireshark练习及答案lab-udp.docx

 PAGE \* MERGEFORMAT 7 Lab Exercise – UDP Objective To look at the details of UDP (User Datagram Protocol). UDP is a transport protocol used throughout the Internet as an alternative to TCP when reliability is not required. It is covered in §6.4 of your text. Review that section before doing this lab. The trace file is here:  HYPERLINK http://scisweb.ulster.ac.uk/~kevin/com320/labs/wireshark/trace-udp.pcap http://scisweb.ulster.ac.uk/~kevin/com320/labs/wireshark/trace-udp.pcap Step 1: Capture a Trace There are many ways to cause your computer to send and receive UDP messages since UDP is widely used as a transport protocol. The easiest options are to: Do nothing but wait for a while. UDP is used for many “system protocols” that typically run in the background and produce small amounts of traffic, e.g., DHCP for IP address assignment and NTP for time synchronization. Use your browser to visit sites. UDP is used by DNS for resolving domain names to IP addresses, so visiting fresh sites will cause DNS traffic to be sent. Be careful not to visit unsafe sites; pick recommended sites or sites you know about but have not visited recently. Simply browsing the web is likely to cause a steady stream of DNS traffic. Start up a voice-over-IP call with your favorite client. UDP is used by RTP, which is the protocol commonly used to carry media samples in a voice or video call over the Internet. Proceed as follows to capture a trace of UDP traffic; alternatively, you may use a supplied trace: Launch Wireshark and start a capture with a filter of “udp“. Figure 1: Setting up the capture options When the capture is started, perform some activities that will generate UDP traffic. We described several options above, e.g., browse the web or start a short VoIP call. Wait a little while (say 60 seconds) after you have stopped your activity to also observe any background UDP traffic. It is likely that you will observe a trickle of UDP traffic because system activity often