用Wireshark进行UDP协议分析.doc

TCP/IP 实 验 报 告 实验2 用Wireshark进行UDP协议分析 学 院 计算机学 专 业 网络工程 班 级 1班 姓 名 刘小芳 学 号 41009040127 2012． 5 2.1 实验性质 本实验为操作分析性实验。 2.2 实验目的 1. 掌握Wireshark软件的基本使用方法。 2. 掌握基本的网络协议分析方法。 3. 使用Wireshark抓包工具，分析UDP数据报的格式。 4. 加深理解UDP协议的原理及其工作过程。 1.3 实验环境 1. 硬件环境：PC机1台。 2. 网络环境：PC机接入LAN或Internet。 物理地址：00-E0-4C-00-16-78 Ip地址：192.168.0.131 3. 软件环境：Windows操作系统和Wireshark软件。 1.4 实验时 .5 实验内容与要求 1.5.1 启动Wireshark协议分析工具 1.5.2 抓取UDP数据包 1.5.3分析UDP报文 answer the question. 1. Select one packet. From this packet, determine how many fields there are in the UDP header. (Do not look in the textbook! Answer these questions directly from what you observe in the packet trace.) Name these fields. 2. From the packet content field, determine the length (in bytes) of each of the UDP header fields. 3. The value in the Length field is the length of what? Verify your claim with your captured UDP packet. 4. What is the maximum number of bytes that can be included in a UDP payload? 5. What is the largest possible source port number? 6. What is the protocol number for UDP? Give your answer in both hexadecimal and decimal notation. (To answer this question, you’ll need to look into the IP header.) 7. Search “UDP” in Google and determine the fields over which the UDP checksum is calculated. 8. Examine a pair of UDP packets in which the first packet is sent by your host and the second packet is a reply to the first packet. Describe the relationship between the port numbers in the two packets. Extra Credit 1. Capture a small UDP packet. Manually verify the checksum in this packet. Show all work and explain all steps 1 1.6 实验总结 [ 通过对IP报文的分析，总结IP协议的工作原理。 ]