ICMP and Ping

1. What is the IP address of your host? What is the IP address of the destination host?

ANS:- IP Address Of Sending Host :- 192.168.1.101

IP Address Of Destination Host:- 143.89.14.34

2. Why is it that an ICMP packet does not have source and destination port numbers?

ANS:- Because ICMP Protocol Belongs To Layer 3 And Layer 3 Doesn'T Deal With Port Numbers.

3. Examine one of the ping request packets sent by your host. What are the ICMP
type and code numbers? What other fields does this ICMP packet have? How
many bytes are the checksum, sequence number and identifier fields?

ANS:- ICMP Type =8 (Echo Request)

ICMP Code Number = 0

ICMP Packets Have These Fields Also:-

A) Checksum
B) Identifier
C) Sequence Number
D) Data

All These Three Fields Checksum, Sequence Number And Identifier Are Of 2 Bytes Each.

4. Examine the corresponding ping reply packet. What are the ICMP type and code
numbers? What other fields does this ICMP packet have? How many bytes are the
checksum, sequence number and identifier fields?

Ans:- ICMP Type :- 0 (Echo Reply)

ICMP Code :- 0

Other Fields Are:-

A) Checksum
B) Identifier
C) Sequence Number
D) Data

The Checksum,Sequence Number And Identifier All Are Of 2 Bytes Each.

1
 ICMP and Traceroute

5. What is the IP address of your host? What is the IP address of the target

destination host?

ANS:- IP Address Of Host Is 192.168.1.101

IP Address Of Destination Host Is 138.96.146.2

6. If ICMP sent UDP packets instead (as in Unix/Linux), would the IP protocol
number still be 01 for the probe packets? If not, what would it be?
ANS:- No, The Protocol Number If Deffernet And The Protocol Number Is 0X11 Because Udp Protocol
Number Is 17

7. Examine the ICMP echo packet in your screenshot. Is this different from the
ICMP ping query packets in the first half of this lab? If yes, how so?
ANS:- The ICMP Echo Packet Has The Same Fields As The Ping Query Packets.

8. Examine the ICMP error packet in your screenshot. It has more fields than the
ICMP echo packet. What is included in those fields?
ANS:- The ICMP Error Packet Is Not The Same As The ICMP Echo Packet. It Contain Both The Ip Header
And The Sequence Number Of The Original ICMP Packet That The Error Is For.

9. Examine the last three ICMP packets received by the source host. How are these
packets different from the ICMP error packets? Why are they different?
ANS:- The Last Three Icmp Packets Are Message Type 0(Echo Reply) Now 11 (Ttl Expired). They Are
Different Becauase They Reach The Destination Before The Ttl Expired.

10. Within the tracert measurements, is there a link whose delay is significantly
longer than others? Refer to the screenshot in Figure 4, is there a link whose
delay is significantly longer than others? On the basis of the router names, can
you guess the location of the two routers on the end of this link?

ANS:- Link Between Hop 11 And 12 That Has A Significant Longer Delay. Link From New York To
Aubervilliers. In Fig 4 From The Lab, Link From New York To Pastourelle.

2
 Capturing packets from an execution of traceroute

1. Select the first ICMP Echo Request message sent by your computer, and expand
the Internet Protocol part of the packet in the packet details window.
What is the IP address of your computer?
Ans:- Ip Address Of My Computer Is 192.168.1.102

2. Within the IP packet header, what is the value in the upper layer protocol field?

ANS:- The Value In The Upper Layer Protocol Field Is Icmp(0X01)

3. How many bytes are in the IP header? How many bytes are in the payload of the
IP datagram? Explain how you determined the number of payload bytes
ANS:- 20 Bytes In The Ip Header.
No. Of Payload Bytes = Total Length - Ip Header Byte
No. Of Payload Bytes = 84 - 20
No. Of Payload Bytes = 64 Bytes

4. Has this IP datagram been fragmented? Explain how you determined whether or
not the datagram has been fragmented

ANS:- This Ip Datagram Has Not Been Fragmented Because When We Expan The Flags, More Fragments
Bit Has Not Set.

5. Which fields in the IP datagram always change from one datagram to the next within this series
of ICMP messages sent by your computer?

Ans:- The Checksum and the sequence number.

6. Which fields stay constant? Which of the fields must stay constant? Which fields must change?
Why?

Ans:- Header length and time to live stay constant because these are present. The fragment number,
sequence number, total lenght and checksum vary from segment to segment.

7. Describe the pattern you see in the values in the Identification field of the IP datagram.

Ans:- The value of Identification field of the IP datagram is incremented by 1 on every new outgoing
message.

8. What is the value in the Identification field and the TTL field?

Ans:- According to the screenshot provided Identification field 0x32d0 and TTL is not clear.

3
9. Do these values remain unchanged for all of the ICMP TTL-exceeded replies sent to your
computer by the nearest (first hop) router? Why?

Ans:-The Identification field changes but TTL remains constant in the ICMP TTL-exceeded replies sent to
the computer by the nearest router.

Fragmentation:-
10. Find the first ICMP Echo Request message that was sent by your computer after you changed
the Packet Size in pingplotter to be 2000. Has that message been fragmented across more than
one IP datagram?

Ans:-Yes, it has been fragmented.

11. Print out the first fragment of the fragmented IP datagram. What information in the IP header
indicates that the datagram been fragmented? What information in the IP header indicates
whether this is the first fragment versus a latterfragment? How long is this IP datagram?

Ans:- The more fragment bit under the Flag field set to 1 indicates that the datagram has been
fragmented. Fragment offset field value set to 0 indicates that it is the first fragment. The length is 1500.

12. Print out the second fragment of the fragmented IP datagram. What information in the IP
header indicates that this is not the first datagram fragment? Are the more fragments? How can
you tell?

Ans:- Since fragment offset field is not set to 0 so it means it is not the first segment and more fragment
bit under the flag field set to 0 means no more fragments.

13. What fields change in the IP header between the first and second fragment?

Ans:- The fields that change are total length, identification, flags,TTL, Fragment offset and checksum.

14. How many fragments were created from the original datagram?

Ans:- Three fragments were created from the original datagram.

15. What fields change in the IP header among the fragments?

Ans:-Total length, identification, flags,TTL, Fragment offset and checksum.