Lab, Wireshark, Traceroute and acronyms. From Fareed Ali

Fareed Ali
CS461 assignment.




HTTP- Stands for Hypertext Transfer Protocol and it exchanges or transfers structured texts called hypertext. HTTP functions as a request-response protocol. Request-response means when one computer sends a request for information then another computer responds to that request. In this case the request-response is between a client and a server. An example is Internet Explorer is the client requesting info and a website like Gmail.com is the server responding to the request.
Www.wikipedia.org


SMTP- Stands for Simple Mail Transfer Protocol and it allows any software to send electronic mails(e-mails) across networks. When a user sends an email, SMTP breaks up the message into smaller strings of text. These text are separated by codes words or numbers, which allows the email server software to understand and identify the parts of the message. SMPT can also be used to set up communication rules between servers. SMPT are popular because they are reliable and easy to work with. A downside is its security issues. Even though its security has improved,it is possible to send fraudulent emails and spread viruses.
Www.whatsmyipaddress.com


RTP- Stands for Real-Time Transport Protocol and is used for real-time transmission of multimedia data over unicast(meaning between one sender and one receiver) or multicast(meaning between one sender and multiple receivers) network services. One example is to do video conferences with multiple people in different locations. RTP can also be used for phone calls or sending faxes known as internet telephony. Its performance is good as long as the network it is using is good. RTP has many components which are: a sequence number which detects lost packets, a payload identification which describes media encoding just in case it needs to be converted, a frame indication which marks the beginning and end of each frame, source identification which identifies who or what the source came from and finally intramedia synchronization which uses timestamps to detect different delay jitters in a stream for compensation.
http://searchnetworking.techtarget.com/definition/Real-Time-Transport-Protocol


DNS- Stands for Domain Name System and it is the name of a website address in which a computer can understand. A website will have a name which people can understand like hotmail, yahoo, or netflix but a computer only understand the address as DNS. Its format looks like 123.456.78.90 called an IP address. So when you type a website name like www.youtube.com your computer looks for what IP address is in connection with youtube from your DNS server.
Www.howtogeek.com


TCP- Stands for Transmission Control Protocol and it provides a delivery of a stream of octets(digital information the size of 8 bytes) between computer programs and the network. Web browsers like firefox will use TCP when they connect to servers. TCP is reliable, ordered and error-checked and used to send emails or transfer data between multiple locations. TCP is slower than other methods but its main purpose is to provide accurate, reliable and guaranteed data from the original source. Due to speed issues it is not suitable for real-time applications.
Wikipedia.org


UDP- Stands for User Datagram Protocol and is used to send information called datagrams to other hosts on a network without prior communications to set up channels for data paths(called handshaking). This makes it unreliable and can't guarantee delivery or protection. Although UDP has some functions for integrity like checksums, it is not used when error-checking is necessary in applications. Speed and simplicity are its strength so it is used when data received on a timely basis is more important than dropped packets.


IP- Stands for Internet Protocol and is the mostly used protocol in the internet layer. Its function is to deliver packets(or datagrams) from on host to another. IP also lays down the format and the addressing design of the packets. In other words the IP puts the IP address source(where it came from) and destination IP address(where it's going to).
Wikipedia.org


ICMP- Stands for Internet Control Message Protocol and is used by network devices like routers. Unlike TCP, ICMP is not used for data exchange. Its primary purpose is for diagnostic or control purposes. If an error occurred the packet will be discarded and then the ICMP will send and error message back to the source. So ICMP does not actually sends the actual data, it send status information of the actual network.
Wikipedia.org


DSL- Stands for Digital Subscriber Line and it is the most popular broadband technology used. It delivers internet access by transmitting data through telephone lines and its downstream speed ranges from 256kilobits per second to 100megabits. So DSL and wired phone service can work on the same line. So that way a customer don't need to disconnect or reconnect their wires if they want internet or phone service privileges.
Wikipedia.org


SONET- Stands for Synchronous Optical Networking and are protocols that send multiple digital bit streams through optical fiber(transparent fiber made of silica or plastic) using lasers or LEDs. Its characteristics allows it to transmit an enormous amount of date ranging from 51.84 Mbs to around 40 Gbps. Obviously SONET is able to transfer higher level application protocols. SONET's cabling can span farther than ethernet cabling, going up to 1.2 miles. The cabling has an additional piece of optic fiber called the protection ring. This works as a backup just in case the main fiber cable fails.
Wikipedia.org
http://compnetworking.about.com/cs/sonet/g/bldef_sonet.htm


802.11- Implements wireless network communications. Meaning multiple hosts can connect with each other or a server wirelessly. There are many changes to the old standard like 802.11b, 802.11g, 802.11n, ect. Some versions are improvements of previous ones while some have special purposes. For example 802.1X is designed for administrators to restrict the wireless service only between authenticated and authorized devices.
Wikipedia.org
http://www.webopedia.com/TERM/8/802_11.html


Ethernet- Most popular used local area networking today and was invented by Xerox Corporation. Can reach speeds up 100 Gigabytes. The data is divided into shorter pieces which are called frames. The frame contains source and destination addresses. Error-checking is also done in order to retransmit data that was damaged. The protocol used is CSMA/CD, which stands for Carrier Sense Multiple Access with Collision Detection.
Wikipedia.org
http://www.webopedia.com/TERM/E/Ethernet.htm







Traceroute LAB:

Question #1 – To be handed in on Monday.


Question #2 – To be completed on Monday.


Question # 3 Below I tried to find a Guyanese website but with no luck. I found a government website but the last destination is from america. I even found a website about a nightclub located in Guyana but that was an american address too. I hope I did this right. Below are my results. The locations I wrote down are to the right in bold text.


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.


C:\>tracert www.op.gov.gy


Tracing route to op.gov.gy [174.136.6.72]
over a maximum of 30 hops:


1 <1 ms <1 ms <1 ms 192.168.1.1 (my router? New York)
2 36 ms 25 ms 17 ms cpe-98-14-64-1.nyc.res.rr.com [98.14.64.1] (Jamaica, Queens)
3 11 ms 9 ms 11 ms ten-0-2-0-2.nycmnyu-rtr02.nyc.rr.com [24.168.135
.213] (Kansan, USA)
4 14 ms 15 ms 11 ms agg34.nyclnyrg01r.nyc.rr.com [184.152.112.145] (Kansas, USA)
5 14 ms 11 ms 11 ms ae-4-0.cr0.nyc30.tbone.rr.com [66.109.6.78] (Kansas, USA)
6 48 ms 47 ms 43 ms bu-ether14.atlngamq47w-bcr01.tbone.rr.com [107.1
4.17.143] (Ontario, CA, USA)
7 78 ms 45 ms 47 ms bu-ether21.atlngamq46w-bcr00.tbone.rr.com [107.1
4.19.8] (Ontario, CA, USA)
8 47 ms 47 ms 47 ms 66.109.1.44 (Kansas, USA)
9 47 ms 47 ms 47 ms agg4.hstqtxl301r.texas.rr.com [107.14.19.95] (Ontario, CA, USA)
10 50 ms 87 ms 50 ms agg1.dllbtxlb02r.texas.rr.com [24.175.49.9] (Kansas, USA)
11 50 ms 51 ms 51 ms agg10.dllbtxlb01r.texas.rr.com [24.175.49.6] (Kansas, USA)
12 64 ms 56 ms 48 ms xe-1-0-0.DLLUTXJR1CW.tx.twcbiz.com [71.40.237.85
] (Midford, TX, USA)
13 176 ms 49 ms 50 ms rrcs-24-153-208-146.sw.biz.rr.com [24.153.208.14
6] (Richardson, TX, USA)
14 54 ms 60 ms 56 ms 72.249.137.132 (Saint Louis, MI, USA)
15 55 ms 55 ms 55 ms dubai.directrouter.com [174.136.6.72] (Saint Louis, MI, USA)


Trace complete.


C:\>




Question #4 – This is the farthest I could get. Even so, it still most likely all wrong.


#include <sys/socket.h>
#include <stdlib.h>
#include <string.h>


using namespace pf_inet;
int main(){


int socket ( int namespace, int style, int protocol)
int sock = socket(SOCK_STREAM)




return 0;
}




Question #5 – (wireshark lab)
1- Ten protocols seen are: SSDP, ARP, IPV6, UDP, SSL, TCP, ICMPV6, HTTP, IGMPV2, TLSV1.2


2 – From what I see it took less than a second from the “get” to the “ok” message.


3 – The address of gaia is 128.119.245.12 and my address is 192.168.1.1.118. My address was found under the “source” column.



4 - Sorry this how the print came out.

 No. Time Source Destination Protocol Length Info 279 20:37:01.896 927000 192.168.1.118 128.119.245 .12 HTTP 438 GET /wireshar k-labs/INTRO-wiresha rk-file1.html HTTP/1 .1
Frame 279: 438 bytes on wire (3504 bits) , 438 bytes captured (3504 bits) on inte rface 0 Ethernet II, Src: As rockIn_4a:6b:95 (bc: 5f:f4:4a:6b:95), Dst : Cisco-Li_9f:57:b6 (20:aa:4b:9f:57:b6) Internet Protocol Ve rsion 4, Src: 192.16 8.1.118 (192.168.1.1 18), Dst: 128.119.24 5.12 (128.119.245.12 ) Transmission Control Protocol, Src Port: 49232 (49232), Dst Port: http (80), Seq : 1, Ack: 1, Len: 38 4 Hypertext Transfer P rotocol GET /wireshark-l abs/INTRO-wireshark-file1.html HTTP/1.1\ r\n [Expert Info (Chat/Sequence): GE T /wireshark-labs/IN TRO-wireshark-file1. html HTTP/1.1\r\n] [Message : GET /wireshark-lab s/INTRO-wireshark-fi le1.html HTTP/1.1\r\ n] [Severit y level: Chat] [Group: Sequence] Request Meth od: GET Request URI: /wireshark-labs/INT RO-wireshark-file1.h tml Request Vers ion: HTTP/1.1

Host: gaia.cs.um ass.edu\r\n Connection: keep-alive\r\n Accept: text/htm l,application/xhtml+ xml,application/xml; q=0.9,image/webp,*/* ;q=0.8\r\n User-Agent: Mozi lla/5.0 (Windows NT 6.1; WOW64) AppleWeb Kit/537.36 (KHTML, l ike Gecko) Chrome/32 .0.1700.102 Safari/5 37.36\r\n Accept-Encoding: gzip,deflate,sdch\r \n Accept-Language: en-US,en;q=0.8\r\n \r\n [Full request UR I: http://gaia.cs.um ass.edu/wireshark-la bs/INTRO-wireshark-f ile1.html] [HTTP request 1/ 2] [Response in fra me: 283] [Next request in frame: 284]





No. Time Source Destination Protocol Length Info 283 20:37:01.916 997000 128.119.245.1 2 192.168.1.1 18 HTTP 436 HTTP/1.1 200 OK (text/html)
Frame 283: 436 bytes on wire (3488 bits) , 436 bytes captured (3488 bits) on inte rface 0 Ethernet II, Src: Ci sco-Li_9f:57:b6 (20: aa:4b:9f:57:b6), Dst : AsrockIn_4a:6b:95 (bc:5f:f4:4a:6b:95) Internet Protocol Ve rsion 4, Src: 128.11 9.245.12 (128.119.24 5.12), Dst: 192.168. 1.118 (192.168.1.118 ) Transmission Control Protocol, Src Port: http (80), Dst Port : 49232 (49232), Seq : 1, Ack: 385, Len: 382 Hypertext Transfer P rotocol HTTP/1.1 200 OK\ r\n [Expert Info (Chat/Sequence): HT TP/1.1 200 OK\r\n] [Message : HTTP/1.1 200 OK\r\ n] [Severit y level: Chat] [Group: Sequence] Request Vers ion: HTTP/1.1 Status Code: 200 Response Phr ase: OK Date: Sun, 02 Fe b 2014 01:37:01 GMT\ r\n Server: Apache/2 .2.3 (CentOS)\r\n Last-Modified: S un, 02 Feb 2014 01:3 7:01 GMT\r\n ETag: W/"8734b-5 1-718d0940"\r\n

Accept-Ranges: b ytes\r\n Content-Length: 81\r\n Keep-Alive: time out=10, max=100\r\n Connection: Keep-Alive\r\n Content-Type: te xt/html; charset=UTF-8\r\n \r\n [HTTP response 1 /2] [Time since requ est: 0.020070000 sec onds] [Request in fram e: 279] [Next request in frame: 284] [Next response i n frame: 285] Line-based text data : text/html