Scribd
Upload
4 views1 page

Analyzing TCP/IP Layers with Wireshark

This document examines how to identify the TCP/IP layers in a network frame using Wireshark. It discusses capturing packets using an HTTP port filter, focusing on the Ethernet, IP, TCP and HTTP layers. At the Ethernet layer, IPv4 is identified. TCP specifies the source and destination ports used. HTTP uses the GET method to request a web server send the browser homepage data, with the URI passed through layers to the requesting computer. The activity deepened understanding of how TCP/IP layers work together to request and receive network data.

Uploaded by

Jayson
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
4 views1 page

Analyzing TCP/IP Layers with Wireshark

This document examines how to identify the TCP/IP layers in a network frame using Wireshark. It discusses capturing packets using an HTTP port filter, focusing on the Ethernet, IP, TCP and HTTP layers. At the Ethernet layer, IPv4 is identified. TCP specifies the source and destination ports used. HTTP uses the GET method to request a web server send the browser homepage data, with the URI passed through layers to the requesting computer. The activity deepened understanding of how TCP/IP layers work together to request and receive network data.

Uploaded by

Jayson
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Jayson J.

Becosacer ECEng-5A Data Communications August 30, 2018

Identifying the TCP/IP Layers in a Frame:

In this activity we will examine each layer that make up the TCP/IP and see what information we
can get from those layers using Wireshark. To start, we need to configure Wireshark to capture packets
of data using tcp port http filter. Then we need to open a browser and close it immediately after the home
page completely loads so that we can ask for data from the browser. After the Wireshark captured the
necessary packets, we shall stop the capturing process and focus our attention to a protocol labeled HTTP
and an info that starts with GET. Focusing on the information named Ethernet II we can see that IPv4 was
used in the transmission of data. IPv4 is now commonly used in data transmission on the internet that
why it is on the Internet Layer. The next part that we need to examine is the Transmission Control
Protocol. In the Transmission Control Protocol we can observed that the source and destination port
(Source Port: 53292, Destination Port: 80 ) used in the data transmission was specified. This source and
destination port are necessary to ensure that the data will enter to the right socket. As shown in
Wireshark, the destination port is 80 which means that the data entered in the right socket since port 80
is used in HTTP. Transmission Control Protocol belongs to the Transport Layer which handles the
identification of origin and destination of data. Lastly, we look at the Hypertext Transfer Protocol layer
where requests are made to get data. In the internet set up, the HTTP provides a type of request method
that instructs that web server what to respond. The GET method that we can see in the info section of
Wireshark is one of the few methods that an HTTP can use. In this activity, the GET method was able to
instruct the web server to sends to us the data containing the home page of the browser. If we try to dig
deeper into the details of this layer we can see that a URI (Uniform Resource Identifier) is being asked by
the computer. This URI represents the data of the browser’s homepage which is then sent back to the
computer when the browser was able to finish loading the homepage. The Hypertext Transfer Protocol
belongs to the Application Layer of the TCP/IP. To conclude, the activity was able to deepen our
knowledge in identifying the different layers of the TCP/IP. The information that was gathered and shown
through Wireshark was a comprehensive example of how the TCP/IP layers work together in requesting
and receiving data. Based on the observation made, the application layer requested the data of the
homepage using the GET method at the time that we open the browser for the first time. The web server
was able to respond to the request by sending back the URI for the data by going through the TCP/IP
layers to get back to the computer. The data went to the Network Layer Interface then to the Internet
Layer where the IP address was used to identify the computer that sent the request, next is through the
Transport Layer which identified the source and destination port for the data (destination port is 80 in the
case of HTTP), and finally to the Application Layer where the URI of the data is sent and the request was
made.

Sources:

[Link]

You might also like