计算机网络实验lab,《计算机网络》实验课-Lab6_Wireshark_Ethernet.pdf

Wireshark Lab: Ethernet and ARP

Computer Networking: A Top-

Version: 2.0 down Approach, 4th edition.

© 2007 J.F. Kurose, K.W. Ross. All Rights Reserved

In this lab, we’ll investigate the Ethernet protocol and the ARP protocol. Before

beginning this lab, you’ll probably want to review sections 5.5 (Ethernet), 5.4.1 (link-

layer addressing) and 5.4.2 (ARP) in the text. RFC 826 (/in-

notes/std/std37.txt) contains the gory details of the ARP protocol, which is used by an IP

device to determine the IP address of a remote interface whose Ethernet address is

known.

1. Capturing and analyzing Ethernet frames

1

Let’s begin by capturing a set of Ethernet frames to study. Do the following :

• First, make sure your browser’s cache is empty. (To do this under Netscape 7.0,

select Edit->Preferences->Advanced->Cache and clear the memory and disk

cache. For Internet Explorer, select Tools->Internet Options->Delete Files. For

Firefox select Tools->Clear Private Data.

• Start up the Wireshark packet sniffer

• Enter the following URL into your browser

/wireshark-labs/HTTP-ethereal-lab-file3.html

Your browser should display the rather lengthy US Bill of Rights.

1

If you are unable to run Wireshark live on a computer, you can download the zip file

/wireshark-labs/wireshark-traces.zip and extract the file ethernet--ethereal-trace-1.

The traces in this zip file were collected by Wireshark running on one of the author’s computers, while

performing the steps indicated in the Wireshark lab. Once you have downloaded the trace, you can load it

into Wireshark and view the trace using the File pull down menu, choosing Open, and then selecting the