计网实验Basic Packet analysis by Wiredhark.docVIP

Test 2. Basic Packet analysis by Wiredhark The Wireshark packet analyser is used to capture and show the control information and data stored in packets transmitted on a network. In order to start capturing packet data transmitted over the network you need to specify an interface on which you want to capture information. On the menu bar, click on the capture option in the main Wireshark menu and then select the interfaces. This choice will let you to assign a network adapter for capturing data packets transmitted over the network. Select a network interface that can be used for data collection and click the corresponding Start button. (Such interface will have an IP address corresponding to the network segment was the data you are interested in originates). The data that have been collected during the capture will be shown in the Wireshark application window. To terminate a capture session click on the Stop button. The application window is divided into 3 panes. The top pane show a row of information for each packed captured (including a sequence number, capture time, source and destination address, the protocol used and information column about the purpose for each captured packet) . Note: source and destination addresses could be IP, MAC or port addresses (depending on the protocol used by the packet). (The order (ascending/ descending) of the content in each column can be changed by clicking on the Heading) The center pane displays the protocols associated by the selected packet. The bottom pane displays the hexadecimal representation of data contained in the selected packet on the left and a character based version of same information on the right. Exercise1. 1.Start a capture session and observe the middle pane for a few minutes. 2.Open a browser and enter / into the browser address bar and press Enter. 3.Once the science direct page displayed click the close button on the browser and Stop the Wireshark capture. Packet Filter The data captured could be