mirror of
https://github.com/jackyzha0/quartz.git
synced 2025-12-28 07:14:05 -06:00
68 lines
2.2 KiB
Markdown
68 lines
2.2 KiB
Markdown
---
|
|
title: "cosc203-lab24"
|
|
aliases:
|
|
tags:
|
|
- cosc203
|
|
- lab
|
|
---
|
|
|
|
1. 20 bytes in header - 1480 bytes in payload
|
|
|
|
|
|
2. The more fragments flag is set. the size of the packet is 1500 bytes. Its the first because the id ends with a zero
|
|
|
|
|
|
3. The id field indicates that it is the second fragment. There are more because the more fragments flag is set
|
|
[printout](file:///C:/Users/Jet%20Hughes/Documents/Personal/courses/cosc-203/labs/lab24/2ndfragment.pdf)
|
|
|
|
4. the time to live and the id have changed
|
|
|
|
|
|
|
|
5. the pattern is tll = 255, 252, 1, 2, 3, 4, 252. first sends a probe with tll=255 (max) maybe to check if it exists? then 4 probes with increasing tll to trace the route. I dont know about the 252 ones
|
|
|
|
|
|
get - packet 76
|
|
res - 78
|
|
|
|
6. bc:54:2f:5e:83:d7
|
|
|
|
|
|
7. (00:00:0c:9f:f0:04) - the router i'm connected to
|
|
|
|
|
|
8. 0800 - ipv4
|
|
|
|
|
|
9. the G is the 41st byte. Before this is the TCP information
|
|
|
|
|
|
10. Source: Cisco_65:34:42 (00:2a:6a:65:34:42). the address of the router
|
|
|
|
|
|
11. bc:54:2f:5e:83:d7 - yes this is my computer
|
|
|
|
|
|
12. 10.66.8.42
|
|
|
|
|
|
13. its different not sure why
|
|
|
|
|
|
14. Destination: Broadcast (ff:ff:ff:ff:ff:ff) this is the default gateway
|
|
|
|
|
|
|
|
15. Opcode: request (1)
|
|
|
|
|
|
16. yes - needed so that people can reply without also having to send an ARP
|
|
|
|
|
|
17.
|
|
a. Sender MAC address: Cisco_9f:f0:04 (00:00:0c:9f:f0:04) the router i am connected to
|
|
b. Target MAC address: IntelCor_5e:83:d7 (bc:54:2f:5e:83:d7) my computer
|
|
|
|
|
|
18. default time is 20mins
|
|
[source](https://duckduckgo.com/?q=default+amount+of+time+that+an+entry+remains+in+your+ARP+windows+11&t=opera&ia=web) |