I. DHCP Protocol To get started on learning details about the IP protocol operat
ID: 2989460 • Letter: I
Question
I. DHCP Protocol
To get started on learning details about the IP protocol operation, start up the Wireshark program and open the capture file: ecet-375DHCPreqRel.pcap. This capture file is generated when the following commands are executed at the cmd prompt in Windows (Programs->Accessories->C:Command Prompt):
C:>ipconfig /release
C:>ipconfig /rewnew
C:>ipconfig /rewnew
The program ipconfig under Windows displays and modifies the IP address parameters of the PC. A similar command, ifconfig, has been used in Linux (UNIX).
Follow the activities shown below and provide your answers to the questions.
a) Verify that you see a display like the one shown below:
i) Which packet numbers belong to DHCP protocol? [Hint: Click on the protocol column field name to sort according to protocol name]
ii) Create and apply a Wireshark display filter to display only the DHCP protocol packets. [Hint: udp.srcport for DHCP packets is either 67 or 68]. You should see in the display only the packets belonging to DHCP protocol. Verify that you see only Packets 9, 35, 38, 39, 41, 89, and 91.
iii) Which transportation layer protocol are the DHCP (bootp) messages carried on?
iv) What layer does the DHCP protocol operate on?
b) Notice that Packet 9 is the DHCP Release message. Select Packet 9.
i) What is the address of the DHCP server and DHCP client in this message?
ii) Expand the Bootstrap Protocol item in the Tree View Protocol pane and discover the values for these fields:
Client MAC address:
Server Identifier (in Hex):
iii) What do you think is the address of the client host after the message is completed?
c) Notice that type of the message in Packet 35 is DHCP Discover. Select Packet 35. Expand the Bootstrap Protocol item in the Tree View Protocol pane. What values do you see for these fields?
DHCP Discover Message Type Code:
Client Host Name:
Client MAC address:
Ethernet Card Vendor ID:
Length of the Request Parameter List:
What type of information the Client is requesting?
d) Packet 38 is the DHCP Offer message from a DJCP server. Select Packet 38. Expand the Bootstrap Protocol item in the Tree View Protocol pane.
i) What information is the serer offering to provide the client?
ii) What is the lease time offered in minutes?
iii) What is the Domain name?
e) Packet 39 is the DHCP Request message.
i) Who is sending this message?
ii) What is the Fully Qualified Domain Name of the client that appears in this message?
f) Packet 41 is the DHCP ACK message from the client. What is the source address of this message?
g) Draw the timing diagram of the messages exchanged between the Client Host and the DHCP server. Make sure you show the source and destination addresses and the time elapsed between messages.
II. IP Protocol
This trace was created while sending 5,000 byte UDP message from a client (port 1453) to the server (port 5001).
a. The Packets 4 through 7 carry this message. We will study the IP packet details in these packets. Select the Packet 4 and the corresponding Internet Protocol item in the Tree View Protocol Pane. Right click on this item and select Copy->Byte (Hex stream). Then paste it here and arrange them in 8-digit rows.
i) How many rows are they?
ii) What is the Fragment ID in each of the packets
Explanation / Answer
The question is too long.