用Wireshrk进行HTTP协议分析.doc

TCP/IP 实 验 报 告 实验1 用Wireshark进行HTTP协议分析 学 院 计算机学 专 业 网络工程 班 级 1班 姓 名 刘小芳 学 号 41009040127 2012． 5 1.1 实验性质 本实验为操作分析性实验。 1.2 实验目的 1. 掌握Wireshark软件的基本使用方法。 2. 掌握基本的网络协议分析方法。 3. 使用Wireshark抓包工具，分析HTTP数据报的格式。 4. 加深理解HTTP协议的原理及其工作过程。 1.3 实验环境 1. 硬件环境：PC机1台。 2. 网络环境：PC机接入LAN或Internet。 物理地址：00-E0-4C-00-16-78 Ip地址：31 3. 软件环境：Windows操作系统和Wireshark软件。 1.4 实验时 .5 实验内容与要求 1.5.1 启动Wireshark协议分析工具 1.5.2 抓取HTTP数据包 1.5.3分析HTTP报文 1. The Basic HTTP GET/response interaction 1. Is your browser running HTTP version 1.0 or 1.1? What version of HTTP is the server running? HTTP 1.1 2. What languages (if any) does your browser indicate that it can accept to the server? Accept-Language: zh-cn\r\n What is the IP address of your computer? Of the server? 31 60 What is the status code returned from the server to your browser? 200 ok When was the HTML file that you are retrieving last modified at the server 20 May 2013 09:42:43 GMT\r\n How many bytes of content are being returned to your browser? 429 7. By inspecting the raw data in the packet content window, do you see any headers within the data that are not displayed in the packet-listing window? If so, name One. 有 2. The HTTP CONDITIONAL GET/response interaction Answer the following questions: 8. Inspect the contents of the first HTTP GET request from your browser to the server. Do you see an “IF-MODIFIED-SINCE” line in the HTTP GET? 有 9. Inspect the contents of the server response. Did the server explicitly return the contents of the file? How can you tell? 有 HTTP/1.1 200 OK\r\n 10. Now inspect the contents of the second HTTP GET request from your browser to the server. Do you see an “IF-MODIFIED-SINCE:” line in the HTTP GET? If so, what information follows the “IF-MODIFIED-SINCE:” header? 没有 11. What is the HTTP status code and phrase returned from the server in response to this second HTTP GET? Did th