Cloudshark ARP and Ethernet
Part One
1. Identify the ARP request from 130.203.151.88 looking for the address of
130.203.151.1. What is the MAC Address of 130.203.151.88? Note: you need
to dig into the data to get the
...
Cloudshark ARP and Ethernet
Part One
1. Identify the ARP request from 130.203.151.88 looking for the address of
130.203.151.1. What is the MAC Address of 130.203.151.88? Note: you need
to dig into the data to get the full 48-bit (hex) MAC address. Hint – We want
you to provide the hex MAC address, so it doesn’t start with “Dell”. Provide a
screen shot.
Sender MAC address: 78:2b:cb:8a:13:a3
2. Identify the next ARP response. What is the MAC Address of 130.203.151.1?
Note: you need to dig into the data to get the full 48-bit (hex) MAC address.
Hint – it doesn’t start with “Cisco”. Provide a screen shot.
Sender MAC address: (00:22:55:3a:9d:c0)
3. Identify an ARP request from 130.203.151.1 looking for the address of some
other node. What is the destination MAC address of this request? Why do you
Dst MAC (ff:ff:ff:ff:ff:ff), doesn’t know which machine belongs to the address,
so it sends out a broadcast message.
4. Assuming the other host is turned on and responds, explain why you don’t
see the response in this packet capture.
The packet capture is a broadcast
5. What role do you think that 130.203.151.1 plays in this network? Explain the
reasoning behind your conclusion.
It is the network gateway because it is the router sending out broadcast
addresses.
Part Two
6. What is the 48-bit Ethernet address of the computer that made the request?
Provide one screen shot to cover questions 6 and 7.
Source: (78:2b:cb:8a:13:a3)
. What is the 48-bit destination address in the Ethernet frame? What node
does this MAC address correspond to? (Hint: the answer is not the web
server).
Destination: (00:22:55:3a:9d:c0); 208.86.224.90
Next, answer the following questions based on the contents of the Ethernet frame
containing the first byte of the HTTP response message. This will be the packet with
the beginning of the text file in it. You should be able to see the text of Shakespeare’s
MacBeth in the packet in the bottom window.
8. What is the value of the Ethernet source address? What device has this as its
Ethernet address? Provide one screen shot to cover questions 8 and 9.
Src: (00:22:55:3a:9d:c0), Cisco router
9. What is the destination address in the Ethernet frame? Is this the Ethernet
address of the computer that made the original request?
Dst: (78:2b:cb:8a:13:a3); No
How did the host know which MAC address to send the request to the web
server? We don’t see this part in our packet trace, but you should be able to
make an educated guess at how this works. (Hint: A minimum host
configuration includes an IP address, subnet mask, default gateway’s IP
address, and one or more DNS server addresses.)
The host sends a request to the router, which is the default gateway IP. The
router goes to the configured DNS , DNS matches the address.
[Show More]
.png)
.png)
