正在加载图片...
d)Where in the ARP request does the"question"appear-the Ethernet address of the machine whose corresponding IP address is being queried? 13.Now find the ARP reply that was sent in response to the ARP request. a)How many bytes from the very beginning of the Ethernet frame does the ARP opcode field begin? b)What is the value of the opcode field within the ARP-payload part of the Ethernet frame in which an ARP response is made? c)Where in the ARP message does the"answer"to the earlier ARP request appear-the IP address of the machine having the Ethe net address whose ponding IP address is being queried? hexa values for th g the ARP source a nd destination addre ses in the me contai 15. Openth ethernet-etherea essage file in l/ga umass.edu/wireshark-l s/wire rk-traces zip.The first and second ein thistace correspond to an ARPes running Wireshark,and the ARP reply sent to the computer running Wireshark by the computer with the ARP-requested Ethernet address.But there is yet another computer on this network,as indicated by packet 6-another ARP request.Why is there no ARP reply (sent in response to the ARP request in packet 6)in the packet trace? Extra Credit EX-1.The arp command: arp-s InetAddr EtherAddr u to manually add an ent Addr.What happen when you ally y,you ente correct IP address,but the wrong ernet EX-2.What is the default amount of time that an entry remains in your ARP cache before being removed.You can determine this empirically (by monitoring the cache contents)or by looking this up in your operation system documentation. Indicate how/where you determined this value.d) Where in the ARP request does the “question” appear – the Ethernet address of the machine whose corresponding IP address is being queried? 13. Now find the ARP reply that was sent in response to the ARP request. a) How many bytes from the very beginning of the Ethernet frame does the ARP opcode field begin? b) What is the value of the opcode field within the ARP-payload part of the Ethernet frame in which an ARP response is made? c) Where in the ARP message does the “answer” to the earlier ARP request appear – the IP address of the machine having the Ethernet address whose corresponding IP address is being queried? 14. What are the hexadecimal values for the source and destination addresses in the Ethernet frame containing the ARP reply message? 15. Open the ethernet-ethereal-trace-1 trace file in http://gaia.cs.umass.edu/wireshark-labs/wireshark-traces.zip. The first and second ARP packets in this trace correspond to an ARP request sent by the computer running Wireshark, and the ARP reply sent to the computer running Wireshark by the computer with the ARP-requested Ethernet address. But there is yet another computer on this network, as indicated by packet 6 – another ARP request. Why is there no ARP reply (sent in response to the ARP request in packet 6) in the packet trace? Extra Credit EX-1. The arp command: arp -s InetAddr EtherAddr allows you to manually add an entry to the ARP cache that resolves the IP address InetAddr to the physical address EtherAddr. What would happen if, when you manually added an entry, you entered the correct IP address, but the wrong Ethernet address for that remote interface? EX-2. What is the default amount of time that an entry remains in your ARP cache before being removed. You can determine this empirically (by monitoring the cache contents) or by looking this up in your operation system documentation. Indicate how/where you determined this value
<<向上翻页
©2008-现在 cucdc.com 高等教育资讯网 版权所有