ICT341 FT Lab 2
ICT341 FT Lab 2
Start up your web browser, and make sure your browser’s cache is cleared, as discussed above.
Start up the Wireshark packet sniffer
Enter the following URL into your browser http://gaia.cs.umass.edu/wireshark-labs/HTTP-
wireshark-file2.html Your browser should display a very simple five-line HTML file.
Quickly enter the same URL into your browser again (or simply select the refresh button on your
browser)
Stop Wireshark packet capture, and enter “http” in the display-filter-specification window, so that
only captured HTTP messages will be displayed later in the packet-listing window.
(Note: If you are unable to run Wireshark on a live network connection, you can use the http-
ethereal-trace-2 packet trace to answer the questions below;
1. What is the IP address and TCP port number used by your client computer (source) to transfer the
file to gaia.cs.umass.edu?
2. What is the IP address and port number used by gaia.cs.umass.edu to receive the file.
3. What is the sequence number of the TCP SYN segment that is used to initiate the TCP connection
between the client computer and gaia.cs.umass.edu? What is it in the segment that identifies the
segment as a SYN segment?
4. What is the sequence number of the TCP segment containing the HTTP POST command? Note
that in order to find the POST command, you’ll need to dig into the packet content field at the
bottom of the Wireshark window, looking for a segment with a “POST” within its DATA field.
NB: Prepare a lab report with clearly captioned screenshots responding to ALL the outlined
questions above. This should be in pdf. Save it as Lab2. It will be checked tomorrow.