实验五-DHCP协议分析

实验五DHCP协议分析实验报告一、实验目的：掌握DHCP报文的格式掌握DHCP协议的工作原理及工作流程二、实验环境：联网并运行SimpleNPTS软件的PC机DHCP效劳器三、实验内容和要求：1、捕获并分析DHCP客户端在请求分配IP地址的过程中发送和接收到的报文2、构造并发送DHCP请求报文，观察捕获到的DHCP效劳器的响应报文四、实验步骤：开启网络协议分析软件，设置过滤器为只捕获DHCP协议报文。把客户端的网卡设置为“自动获得IP地址〞和“自动获得DNS效劳器地址〞。然后单击确定。捕获并分析本机发送和DHCP效劳器响应的Discover、Offer、Request、Ack等4个DHCP报文。启动Windows命令窗口，在窗口中键入以下命令，并通过协议分析软件捕获并分析这个过程中发送和接收到DHCP报文。ipconfig/release释放已分配的IP地址ipconfig/renew重新分配IP地址构造和发送DHCPDiscover报文，捕获并分析这个过程中发送和接收到的DHCPDiscover和Offer报文。构造并封装DHCPDiscovers报文的要点：目标硬件地址为：FF-FF-FF-FF-FF-FF〔有限播送〕；源硬件地址为本机MAC地址；帧类型字段的取值：0x0800。目标IP地址为有限播送地址：255.255.255.255；源IP地址为：。IP头协议字段的取值为：17〔UDP〕。总长度据实填写；IP头中其它字段保持为默认值。UDP的目的端口号为：67；源端口号为：68总长度据实填写。DHCP报文：根据前面捕获到的DHCPDiscover报文的内容来填写。计算校验和启动报文的发送。捕获并分析网络中传输的DHCP报文。五、实验结果与分析〔含程序、数据记录及分析和实验总结等〕：1、以十六进制的形式给出第3步为客户端分配IP地址时发送和接收的DHCP报文，并对其进行分析。DISCOVERDHCP01〔操作码：1〕01〔操作类型：1〕06〔硬件长度：6〕00〔跳数〕111A057F〔事物标记〕0000〔秒数〕0000〔保存〕00000000〔客户IP〕00000000〔主机IP〕00000000〔效劳器IP〕0000000000〔网关IP〕E57C07DEEC〔客户主机硬件地址〕0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000〔host〕0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000〔boot〕63825363〔事物标记〕35〔消息标签〕01〔消息长度〕01〔DISCOVER〕7401013D070100E57C07DEEC32040A84FE7E0C0835623230353031363C084D53465420352E30370B010F03062C2E2F1F21F92B2B02DC00FF00〔数据：data〕OFFERDHCP02〔操作码：2〕01〔操作类型：1〕06〔硬件长度：6〕00〔跳数〕A667003E〔事物标记〕0000〔秒数〕0000〔保存〕00000000〔客户IP〕0A84FEDE〔主机IP〕0A84FE04〔效劳器IP〕0000000000〔网关IP〕E57C07DEEC00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000〔boot〕63825363〔事物标记〕35〔消息标签〕01〔消息长度〕02(offer)0104FFFFFF003A040000A8C03B040001275033040001518036040A84FE0403040A84FEFE0608C0A80001C0A80101FF00000000000000000000〔数据：data〕REQUESTDHCP01〔操作码：1〕01〔操作类型：1〕06〔硬件长度：6〕00(跳数)A667003E〔事务标记〕1C00〔秒数〕0000〔保存〕00000000〔客户ip〕00000000〔主机IP〕00000000〔效劳器IP〕00000000〔网关IP〕00E57C07DEEC〔客户主机硬件地址〕00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063825363350103〔消息类型：request〕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〔消息类型：ack〕3A040000A8C03B040001275033040001518036040A84FE040104FFFFFF00510300FFFF03040A84FEFE0608C0A80001C0A80101FF0000000000012、以十六进制的形式给出第4步客户端释放IP地址时发送和接收的DHCP报文，并对其进行分析。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接收的DHCP报文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、以十六进制的形式给出第4步客户端请求分配IP地址时发送和接收的DHCP报文，并对其进行分析。客户端请求分配IP地址时发送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接收的DHCP报文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、以十六进制的形式给出第5步自行编辑发送的DHCP报文和相应的响应报文，并对这些报文进行分析。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