ICMP实验报告0001

1、ahnTN - - B,J= 3HTn 厶-N 三 inring n?izu 5S.249.117*5258.249.117.52 58.249.117-52 58-249.117-5258.249.117.52 58-249,117.52 Sfl.249.117.52 58-249,117-S258.249.117.522:间_ ITTT 二-二-二二-一二 FTT -二-二-二 13 333333333 - = = = = = = ,z字王耳主土士彳兀子具有32字节的数据=2flms TTL49=29ms TTL-49=25ms TTL=49=19ns TTL=49=19ns TTL-49

2、-ZSns TTL=49-lflns TTL-49=l$ms TTLM9=20ms TTL=49=lBns TTL=49实验日期：2021 年04 月20日学号：姓名：实验名称：ICMP总分：一、实验概述1了解ICMP协议下数据包相关格式和内容;2. 了解ping和tracert两种指令功能。二、实验条件 联网的电脑； Ethereal软件； win pcap 4.0.三、实验内容ping指令操作rtaw 苣彥员：C:W1ndow5 .system 3 2crnd,exeMicvDsoFt Windows 版本 61.7011版杪所有 2021 HicFosoft Cdrparation a保

3、存所有权利亠C: MJsers ljjping -n luIjj为笔者desti nati onEfl.249.117.52 的 Ping 统计信息:I rai：- la. bw 坦丧失-a 丧失x往返谜呈的估计新酸叭毫秒为wfc = 18ns j,販长 =28ms, 平均 =20vnsC: MJsersM,i,ipinH -n 10 w-rwlzu,con正在 Ping me 12u 58 .249.117.52 J 具有 32 予节丁数据:姓名拼音缩写通过输入指令ping，检测通道是否导通。Ethereal 抓包1. What is the IP address of your host?

4、 What is the IP address of the host?2. Why is it that an ICMP packet does not have source and destination port numbers?答：因为ICMP数据包在网络层圭寸装在IP数据包中，因此不需要destination 和source3. Exam ine one of the ping request packets sent by your host. What are the ICMPtype and code numbers? What other fields does this

5、ICMPpacket have? How many bytes are the checksum, seque nee nu mber and ide ntifier fields?在其他的地方没有ICMP数据包因为它没有分组4. Exam ine the corresp onding ping reply packet. What are the ICMP type and Code numbers? What other fields does this ICMPpacket have? Howmanybytes are the checksum,sequeneenu mberandide

6、n tifierfields?Eifter iizmpTlmeSoira-742743 14.26295S 122. 207-4S. 253122u2Q7t4IS 122. ZO7.48 122. 20*7.48 5罠249.117亦25345523reHKjQir In忖 %.- -3 J! - Jicmp Echo Cp1n) repl r791 15.259330 122.2078.45795 15.26L95S 122.207,40.2531Z2207. w:rIOVEcho(pingO1requestichpEchop1rig)印1 貿KhpEchoping)requestTrpnl

7、vTine ra live: 49 Protocol r ICMP (Oxflfl) 回Header crieck&jjfi: 0xe330 (correci:Source ：(50.249.117.52)C hecksum Fal2 cor reIdent i f i -er i: 0x01 Ck) Sequence nuHber 0x0a4a.Cati (32 bytes)rocolintermet Cde(Echo (p4ng) reply)Beltirut fen: 122.2O74a.45 (123.207.4 6.45)BDua54 si ed00 idZ94TbTadDBaa45

8、DQ thc e.feoiO 00 Jc 4b Z 00 00 幻 01 M 10 關 f巒34 7a cf P0;_u4z.B02030 ZdOG 00 4a12 0100 Oa 4a 61 62 63 64 65 66. Jabcdef30備临 6b6d6f 70 71 72 73 74 75 76gTil jklnrii ooqrstuv77轧焉酣飙斯牺6? M 69Zu血g MF1I色匚鮒飪旳ijWppLiaiaiL0C3nTe!mje1JiMXXX4EBUW 587 KB 00:00:26| R 1433 D 76M:& DrapE；: 0在其他的地方没有ICMP数据包因为它没有分组

9、tracer 指令操作Ethereal 抓包5. What is the IP address of your host? What is the IP address of the target destination host?6. If ICMPse nt UDPpackets in stead (as in Un ix/Li nu x),would the IP protocol numberstill be 01 for the probe packets? If not, what would it be?答：不是01,因为它的上层协议 UDP所以它的protocol number

10、 不是ICMP( 1)7. Examine the ICMP echo packet in your screenshot. Is this differentfrom the ICMPping query packets in the first half of this lab? If yes, how so?Ping指令Tracer指令可以看出二者的 checksum,sequenee number,data 不同8. Examine the ICMP error packet in your screenshot. It has more fields than theICMP ech

11、o packet. What is in cluded in those fields?error packetecoh packet可以看出，error packet 比 echo packet 多出了 Internet protocol,src:，dst :局部9. Examine the last three ICMP packets received by the source host. How are thes packets differe nt from the ICMP error packets? Why are they differe nt?10. Within the

12、 tracert measurements, is there a link whose delay is significantlyIon ger tha n others? Refer to the scree nshot in Figure 4, is there a link whose delay is sig ni fica ntlyIon ger tha n others? On the basis of the router n ames, can you guessthe location of the two routers on the end of this link?答: tracert指令操作，得出时延差距很大的结论，且不