packet capture tool three way hand shake

In the pop-up menu, double-click Wireshark. Step 2: Start Wireshark and select the appropriate interface. The PC host MAC address: _Īnswers will vary.

The PC host IP address: _Īnswers will vary. That is the source address to look for when examining captured packets. Write down the IP and MAC addresses associated with the selected Ethernet adapter.Open a command prompt window, type ipconfig /all, and press Enter.Step 1: Retrieve the PC interface addresses.įor this lab, you need to retrieve the IP address of your PC and its network interface card (NIC) physical address, also called the MAC address. In Part 1, you will start the Wireshark program and select the appropriate interface to begin capturing packets. Required Resourcesġ PC (Windows 7, 8, or 10 with a command prompt access, internet access, and Wireshark installed) Part 1: Prepare Wireshark to Capture Packets

If using a packet sniffer is an issue, the instructor may wish to assign the lab as homework or perform a walk-through demonstration. It is recommended that permission be obtained before running Wireshark for this lab. This lab assumes that you have internet access.Īnswers Note: Using a packet sniffer, such as Wireshark, may be considered a breach of the security policy of the school. Note: This lab cannot be completed using Netlab. A PC can have multiple, simultaneous, active TCP sessions with various websites. For example, when a PC uses a web browser to surf the internet, a three-way handshake is initiated, and a session is established between the PC host and web server. In this lab, you will use Wireshark to capture and examine packets generated between the PC browser using the HyperText Transfer Protocol (HTTP) and a web server, such as When an application, such as HTTP or FTP (File Transfer Protocol) first starts on a host, TCP uses the three-way handshake to establish a reliable TCP session between the two hosts. Part 2: Capture, Locate, and Examine Packets Background / Scenario

Part 1: Prepare Wireshark to Capture Packets Last Updated on Januby Admin 9.2.1.6 Lab – Using Wireshark to Observe the TCP 3-Way Handshake Answers Lab – Using Wireshark to Observe the TCP 3-Way Handshake ( Answers Version)Īnswers Note: Red font color or gray highlights indicate text that appears in the instructor copy only.

Packet capture tool three way hand shake