PAGE·PAGE1· 管理學院實驗報告學號姓名專業(yè)班級指導老師實驗日期課程名稱實驗名稱實驗成績實驗報告具體內容一般應包括：一、實驗目的和要求;二、主要儀器設備(軟件); 三、實驗內容及實驗數(shù)據(jù)記錄;四、實驗體會1.實驗目的和要求1）熟練掌握常見網(wǎng)絡應用程序的使用方法；2）掌握數(shù)據(jù)包的捕獲及分析方法；3）能通過查看公共網(wǎng)絡協(xié)議數(shù)據(jù)包的內容來印證協(xié)議的具體工作流程。2.實驗原理以教材所附的操作流程和教師在實驗課中的演示為引導，使用常規(guī)的基于公共協(xié)議的網(wǎng)絡應用，捕獲其相關的數(shù)據(jù)包，分析數(shù)據(jù)包的格式與內容，與協(xié)議的原理及規(guī)定相印證。3.主要儀器設備（軟件）1）硬件配置：使用綜合實驗室中現(xiàn)有配置的計算機，無特殊要求。2）軟件環(huán)境：WindowsXP或以上的操作系統(tǒng)，數(shù)據(jù)包捕獲和分析工具WireShark。4.實驗內容及步驟1.FollowtheinstructionsonWireshark_HTTP_July_22_2007.pdf,answerthefollowingquestions:A.TheBasicHTTPGET/responseinteraction1)IsyourbrowserrunningHTTPversion1.0or1.1?WhatversionofHTTPistheserverrunning?2)Whatlanguages(ifany)doesyourbrowserindicatethatitcanaccepttotheserver?3)WhatistheIPaddressofyourcomputer?Oftheserver?4)Whatisthestatuscodereturnedfromtheservertoyourbrowser?5)WhenwastheHTMLfilethatyouareretrievinglastmodifiedattheserver?6)Howmanybytesofcontentarebeingreturnedtoyourbrowser?7)Byinspectingtherawdatainthepacketcontentwindow,doyouseeanyheaderswithinthedatathatarenotdisplayedinthepacket-listingwindow?Ifso,nameone.B.TheHTTPCONDITIONALGET/responseinteraction8)InspectthecontentsofthefirstHTTPGETrequestfromyourbrowsertotheserver.Doyouseean“IF-MODIFIED-SINCE”lineintheHTTPGET?9)Inspectthecontentsoftheserverresponse.Didtheserverexplicitlyreturnthecontentsofthefile?Howcanyoutell?10)NowinspectthecontentsofthesecondHTTPGETrequestfromyourbrowsertotheserver.Doyouseean“IF-MODIFIED-SINCE:”lineintheHTTPGET?Ifso,whatinformationfollowsthe“IF-MODIFIED-SINCE:”header?11)WhatistheHTTPstatuscodeandphrasereturnedfromtheserverinresponsetothissecondHTTPGET?Didtheserverexplicitlyreturnthecontentsofthefile?2.FollowtheinstructionsonWireshark_TCP_July_22_2007.pdf,answerthefollowingquestions:1)WhatistheIPaddressandTCPportnumberusedbytheclientcomputer(source)thatistransferringthefileto?2)WhatistheIPaddressof?OnwhatportnumberisitsendingandreceivingTCPsegmentsforthisconnection?Answertheabovetwoquestionsbylookingintofiletcpethereal-trace-1in/wireshark-labs/wireshark-traces.zip.4)WhatisthesequencenumberoftheTCPSYNsegmentthatisusedtoinitiatetheTCPconnectionbetweentheclientcomputerand?WhatisitinthesegmentthatidentifiesthesegmentasaSYNsegment?5)WhatisthesequencenumberoftheSYNACKsegmentsentbytotheclientcomputerinreplytotheSYN?WhatisthevalueoftheACKnowledgementfieldintheSYNACKsegment?Howdiddeterminethatvalue?WhatisitinthesegmentthatidentifiesthesegmentasaSYNACKsegment?6)WhatisthesequencenumberoftheTCPsegmentcontainingtheHTTPPOSTcommand?7)ConsidertheTCPsegmentcontainingtheHTTPPOSTasthefirstsegmentintheTCPconnection.WhatarethesequencenumbersofthefirstsixsegmentsintheTCPconnection(includingthesegmentcontainingtheHTTPPOST)?Atwhattimewaseachsegmentsent?WhenwastheACKforeachsegmentreceived?GiventhedifferencebetweenwheneachTCPsegmentwassent,andwhenitsacknowledgementwasreceived,whatistheRTTvalueforeachofthesixsegments?3.FollowtheinstructionsonWireshark_IP_July_22_2007.pdf,answerthefollowingquestions:1)WhatistheIPaddressofyourcomputer?2)WithintheIPpacketheader,whatisthevalueintheupperlayerprotocolfield?3)HowmanybytesareintheIPheader?HowmanybytesareinthepayloadoftheIPdatagram?Explainhowyoudeterminedthenumberofpayloadbytes.4)HasthisIPdatagrambeenfragmented?5)WhichfieldsintheIPdatagramalwayschangefromonedatagramtothenextwithinthisseriesofICMPmessagessentbyyourcomputer?6)Whichfieldsstayconstant?Whichofthefieldsmuststayconstant?Whichfieldsmustchange?7)FindthefirstICMPEchoRequestmessagethatwassentbyyourcomputerafteryouchangedthePacketSizeinpingplottertobe2000.HasthatmessagebeenfragmentedacrossmorethanoneIPdatagram?9)FindoutthefirstfragmentofthefragmentedIPdatagram.WhatinformationintheIPheaderindicatesthatthedatagrambeenfragmented?WhatinformationintheIPheaderindicateswhetherthisisthefirstfragmentversusalatterfragment?HowlongisthisIPdatagram?10)PrintoutthesecondfragmentofthefragmentedIPdatagram.WhatinformationintheIPheaderindicatesthatthisisnotthefirstdatagramfragment?Arethemorefragments?11)WhatfieldschangeintheIPheaderbetweenthefirstandsecondfragment?4.FollowtheinstructionsonWireshark_Ethernet_ARP_July_22_2007.pdf,answerthefollowingquestions:1)Whatisthe48-bitEthernetaddressofyourcomputer?2)Whatisthe48-bitdestinationaddressintheEthernetframe?IsthistheEthernetaddressof?WhatdevicehasthisasitsEthernetaddress?3)Givethehexadecimalvalueforthetwo-byteFrametypefield.4)HowmanybytesfromtheverystartoftheEthernetframedoestheASCII“G”in“GET”appearintheEthernetframe?5)*WhatisthehexadecimalvalueoftheCRCfieldinthisEthernetframe?Answerthefollowingquestions,basedonthecontentsoftheEthernetframecontainingthefirstbyteoftheHTTPresponsemessage.6)WhatisthevalueoftheEthernetsourceaddress?Isthistheaddressofyourcomputer,orof.WhatdevicehasthisasitsEthernetaddress?7)WhatisthedestinationaddressintheEthernetframe?IsthistheE