Notice that it is a dynamic port selected for this HTTPS connection. Expand Transmission Control Protocol to view TCP details.Notice that the destination address is the IP address of the HTTPS server. Notice that the source address is your IP address. Expand Internet Protocol Version 4 to view IP details.You can use ipconfig /all and arp -a to confirm. The destination should be your default gateway's MAC address and the source should be your MAC address. Observe the Destination and Source fields.Expand Ethernet II to view Ethernet details.Notice that it is an Ethernet II / Internet Protocol Version 4 / Transmission Control Protocol frame. Observe the packet details in the middle Wireshark packet details pane.The first three packets (TCP SYN, TCP SYN/ACK, TCP ACK) are the TCP three way handshake. Observe the traffic captured in the top Wireshark packet list pane.To view all related traffic for this connection, change the filter to ip.addr =, where is the destination address of the HTTP packet.Īctivity 3 - Analyze TCP Connection Traffic. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |