Answer to Question #244463 in Computer Networks for Muhammad Ahsan

Question

use of Wireshark, a packet sniffer, to briefly examine the ethernet

Use the “ethernet_packet_capture” file to answer the following questions. After opening the file, find the first DHCP message in the trace and use that to answer the following questions

a. What is the 48-bit Ethernet source address of the frame?

b. What is the 48-bit destination address of the Ethernet frame?

c. Is this destination Ethernet address associated with the destination IP address?

d. Give the hexadecimal value of the two-byte Frame type field.

e. What upper layer protocol does this correspond to?

Answer 1

(a) The 48-bit Ethernet source address of the frame is  fa:f7:0a:6e:37:be

(b)the destination address is a0:f3:c1:f8:6d:f9. It is the address of my TP-link router (Gateway to the Internet).

(c) No, the source host is aware of the destination IP address, but not the destination of the Ethernet address.

(d) The hexadecimal value of the two-byte Frame type field IS 0*0800

(e) The upper layer protocol does it corresponds to is the IP protocol.