Maryland University Using Wireshark improving network analysis skills

Having Trouble Meeting Your Deadline?

Get your assignment on Maryland University Using Wireshark improving network analysis skills completed on time. avoid delay and – ORDER NOW

Do My Paper

All information that travels across a network is sent in packets. For example, when an email is sent from one computer to another, it is first broken up into smaller segments. Each segment has the destination address attached, the source address, and other information such as the number of packets and reassembly order. Once they arrive at the destination, the packet’s headers and footers are stripped away, and the packets are reconstituted.

A packet sniffer is a device or program that allows the user to eavesdrop on traffic traveling between networked computers. The program will capture data that is addressed to other machines, saving it for later analysis.

Purpose

This project introduces the Wireshark packet sniffer. During the project you will capture packets, use a capture filter, and look at the contents of a packet.

Directions

• Read and execute the instructions for Hands-on Project 1 starting on page 323.
• Write a paper describing your experience and project results. Describe challenges you encountered.
• Paste the screenshots into your paper. For each screenshot, describe in DETAIL what is taking place.

One of the most well-known packet sniffers is called Wireshark^® (formerly Ethereal^®). It is a powerful tool that can capture, filter, and analyze network traffic. It can promiscuously capture traffic on both wired and wireless networks. It is used by security and networking professionals to troubleshoot networking problems.

In this project, you will install Wireshark, capture packets, and look at the contents of a packet. When the device is placed correctly, a network administrator can use Wireshark to see all the traffic coming into and out of a network. Network administrators can, among other things, see which hostnames are being requested and who is requesting them. Surfing the web is not anonymous.

1. Download Wireshark from www.wireshark.org/download.html.
2. Click Download Windows Installer. (Download the latest stable release.)
3. Click Save.
4. Save the file in your download folder.
5. If the program doesn’t automatically open, browse to your download folder.
6. Double-click Wireshark-setup-3.0.3.exe. (The software version numbers will be slightly different as newer versions are released.)
7. Finish the installation process.
8. Double-click the Wireshark icon on your desktop. (You can also access it through your Start menu.)
9. Click Interface List. (This will display a list of all available network interfaces on your computer. You will want to note the description and IP address of the interface with the most traffic. You will need to select this interface in the following steps.)
10. Note the interface with the most traffic. (You will select this interface in the following steps. If there are duplicate names for the Network Interface Card (NIC), you can use the last three or four values of the MAC address to identify the appropriate NIC.)
11. Close the Capture Interfaces window.
12. Click Capture and Options.
13. Select your Network Interface Card if it is not already selected.
14. Take a screenshot.
15. Close all other programs you currently have open except your word processing program (Microsoft Word, LibreOffice Writer^®, etc.).
16. Click Start.
17. Let it run for 10 seconds.
18. While you are waiting, open a web browser and go to www.google.com.
19. Return to your Wireshark window.
20. In the file menu, click Capture and Stop (or use the keyboard shortcut—Ctrl+E).
21. Scroll up until you see a green and blue area. (These are the packets you captured when you requested Google’s main page.)
22. Take a screenshot.
23. Scroll down until you see a line that has GET/HTTP/1.1. (You may have to try more than one until you get to the packet that shows “www.google.com” in the bottom pane.)
24. Select that row.
25. In the bottom pane, you will see a bunch of numbers to the left. (It’s the packet’s contents in hexadecimal.) Just to the right you will see the content of the packet in a column.
26. Select the text: www.google.com.
27. Take a screenshot.