Principles of Internetworking

LAB REPORT 2

Mounika sai
Ameer Hamza
Syed Shah Mohammed Quadri 1315275

1. Exercise 2 (a):
Pinged all the 4 PCs and from PC1 and verified that all are properly
connected.
Started Wireshark(sudo wireshark) on PC1. In the window capture options
set capture filter
ip.addr == 10.0.1.12.
The following packet traffic captured

(only traffic between PC1 and PC2 captured. Rest filtered)

2. Exercise 2 (b):
In Wireshark we set the Display filter options, and applied the settings.
Next pinged PC2 from PC1.

The above result is observed.

The filter settings are adjusted by using the command
ip.src==10.0.1.12
to obtain the following result.

(attach the saved report Attch: print summary)

3. Exercise 2 (c):
With Wireshark running, Pinged PC2 from PC1,
Use secure shell(ssh) to remote login PC2 to PC1 using the command
ssh 10.0.1.12
and entered the login Password.
Stopped and captured the traffic by applying the filters
1. TCP traffic with IP address of PC2 either in Source and Destination.(In
wireshark assign display filter as tcp only and apply)

2. Similarly, ICMP messages for IP address of PC2 in either source or

destination.

4. Exercise 3 (A):
View arp cache
arp a
Delete all entries, for PC2 write on terminal of PC1
sudo arp d 10.0.1.12
Issue ping to PC2
Destination MAC addreaa of the ARP protocol
00:1A:A0: 22: 2B: 29
The type field in the Ethernet headers of ARP packets and
ICMP messages -

1. What is the destination MAC address of an ARP Request packet?

ff:ff:ff:ff:ff:ff. Since all ARP request packets are transmitted with the Ethernet
broadcast address, so that all hosts in the network will receive the request.

2. What are the different values of the Type field in the Ethernet
headers that you observed?

3. Use the captured data to discuss the process in which ARP

acquires the MAC address for IP address 10.0.1.12
When ARP needs to resolve a given IP address to Ethernet address, it
broadcasts an ARP request packet. The ARP request packet contains the
source MAC address (00:1A:A0: 22: 2B: 29) and the source IP address
(10.0.1.11) and the destination IP address (10.0.1.12). Each host in the local
network receives this packet. The host with the specified destination IP
address (PC2) sends an ARP reply packet to the originating host(PC1) with its
IP address.

IV.

Exercise 3(b):

Linux PC
PC1
PC2
PC3
PC4

V.

IP address of the MAC

interface eth0
10.0.1.11/24
10.0.1.12/24
10.0.1.13/24
10.0.1.14/24

MAC address of Ethernet Interface

eth0
00:1A:A0: 22: 2B: 29
00:1A:A0: 22: 0D:4B
00:1A:A0: 20: 6E:BD
00:1A:A0: 20: 67:71

Exercise 3(c):
Using the saved output, describe the time interval between each
ARP Request packet issued by PC1. Describe the method used by
ARP to determine the time between retransmissions of an
unsuccessful ARP Request. Include relevant data to support your
answer.
the frequency of the ARP requests: 5.5 seconds after the first request, then
again 24 seconds later. The total time shown in the ssh output is 29.5

seconds. TCP calculates the round-trip time and uses this method to
determine the time between retransmissions

Why are ARP Request packets not transmitted (i.e. not

encapsulated) as IP packets? Explain your answer.
ARP protocol is implemented by the network protocol driver. ARP packets
are encapsulated by Ethernet headers and transmitted

VI.

Exercise 6:
Cleared ARP cache
Assign ip address 10.0.1.11 to PC4(same as PC1, duplicate)
Sudo ifconfig eth0 10.0.1.11 netmask 255.255.255.0 // in terminal of PC4
Ping 10.0.1.11 from PC3

Ping was established with PC1 and not PC4 because in ARP cache 10.0.1.11
ip is assigned to PC1. If a ping from PC4 is issued, the packet will be sent to
PC4 as Arp cache will be updated as such.

VII. Exercise 7:
A) ping from PC1 to PC3 is successful as both have same netmask but
B) ping from PC1 to PC4 and C) ping from PC4 to PC1 is unsuccessful as PC1
and PC4 have different netmasks