Ethereal网络协议分析器的使用_实验报告

1、工业计算机网络实验报告实验5： ethereal网络协议分析器的使用一、实验目的：1、了解协议分析器安装；2、熟悉并掌握ethereal的使用方法和基本操作；3、掌握协议分析器分析协议的方法。二、实验环境与因特网连接的计算机网络系统；主机操作系统为windows2000或windows xp； ethereal等三、实验内容：1、ethereal 的安装安装ethereal需要先安装winpeap, &装过程如下:选择默认安装，安装完成后如下:毎 winpcap 3.1 setupcompleting the winpcap 3.1 setup wizardwinpcap 3.1 ha

2、s bee n in stalled on your computer.click finish to close this wizard.backfinishcancelethereal安装完成如卜-图所示:f ethereal 0.99.0 setup* xcompleting the ethereal 0.99.0 setup wizardethereal 0.99.0 has bee 仃 in stalled on your computer.click finish to close this wizard.厂i run ethereal 0.99.0show news< ba

3、ckfinishcancel2、按附录文档学习和使用ethereal没有设置过滤规则时的运行界而刚开始设置网卡信息，选择capture->options,选择默认设置即可，如卜图:结果如下:no.timesourcedestinationprotocolinfo10.000000333udpsourceport:1067destination 匸20.001929333udpsourceport:1067destination 匚30.017576793

4、3udpsourceport:3983destinat ion 匸40.0195027933udpsourceport:3983destination 匸50.0283206933udpsourceport:1743destination p60.028392951udpsourceport:1799destination p70.0302686933udpsourceport:174 3destination

5、 匸s0.0381106933udpsourceport:174 3destination 匚90.0410126933udpsourceport:1743destination p10110.0470340.1279428927.44.2021485533nbns udpname query nb btfans.33220rg<oc source oort: 58034 destination120.128662192.1

6、68.137.9750ssdpm-search * http a-1j3_0-180707192.1687竺udpsource port: 13514destination150.1914354833udpsource port: 58034destination161 t0.191526a ->.4 41 co481 " nn m 01331 nn i " *7 、”udpi mnsourceport:“八尸58034佐人adestinations fr

7、ame 84 (243 bytes on wire, 243 bytes captured)八;± ethernet ii, src: bc:ae:c5:3d:be:14 (bc:ae:c5:3d:be:14), dst: broadcast (ff:ff:ff:ff:ff:ff)* internet protocol, src: 66 (66), dst: 55 (55) ± user datagram protocol, src port: netbios-dgm (

8、138), dst port: netbios-dgm (138)ki o cr/u rm "/%*«*! z-z匸faedcnd cdadbdbd adcdcdce rrrr ">rrr a rurnrooa85 0 0 e 3 a4 c c 4 4 c0 6 5 3 41/o a 4 4 4 s 9 c 4 3 o o 8 a 4 4 q4 8 a 5 4 c1 a o 4 1eoll3n b c 14 4 n d 6 s 6 4 a 3 - b 4 一 crrrrrrtrrrrrbeae00e5029b0000801189ff00sa00sa00dl8

9、9a6008a00bb0000434 *744t g41a144 c42a 7-»v4245 2 e o11 c a - 2 - f00000010002000300040 nnc a| p: 470 d: 470 m: 0 drops: 0file: c:docui.ie-1 wminb1l0c-ls-1tempetherxxx<explar. 5.3、自己扑获网络活动，并形成一个数据文件，查看其特点。例如捕获一个tcp数据包，查看其首部信息。捕获进出()(本机ip)并ji为qq发送接收的数据包，fil血为:host 192.16&7.10 and udp截图如下：四、实验总结通过木次试验对ethereal有了一个人概的了解，网络分析对于某