这一页有部分内容暂时无法显示，其余内容完整。

在参加此测验之前，请确保已在您自己的操作系统上安装并正确运行最新的 Wireshark！

此示例测验通过 Wireshark 等工具测试您对 5 层网络的理解。

此示例测验不会影响您的单元分数 。示例测验结束后，您将能够查看您的答案是否正确以及正确答案。对于示例测验，您将有三次尝试机会。

Question 1

Network Traffic Analysis using Wireshark

To complete this part of the quiz you need to download the following packet capture file available via google drive. Please note that you must be logged in with your Monash email account on the browser you are using for this quiz to access the google drive. Make sure you are logged out of all your personal google accounts if you encounter a request access page.

Important Note: Various parts of the process of creating the PCAP files are randomised. Any name, domain, and/or IP address similarity is coincidental.

Scenario

The provided PCAP file for Apollo node contains the network traffic sent and received by this node for a period of time. During this time a user on this node has visited the web server of the organisation (the node named Web in the diagram), the intranet server (the node named Intranet in the diagram), and the external web server (the node named External in the diagram). The user Sepehr has sent an email to another user within the organisation and has used ping command to test the connection with nodes Zeus and Hera. The network connectivity is shown in the following diagram.

Task 1: Dynamic Host Configuration Protocol

The node Apollo has received its IP address from the DHCP server (node DHCP in the diagram). Identify the DHCP Ack frame and fill out the following fields.

The DHCP Ack frame number:50[1 Mark(s)]

The IP address provided in router option:130.166.120.243[1 Mark(s)]

The IP address provided in domain name server option:70.184.98.27[1 Mark(s)]

The value provided in domain name option:juno.io[1 Mark(s)]

在 Wireshark 的 Display Filter 中输入 bootp.option.type == 5 查找“DHCP ACK”类型的数据包，即服务器对客户端的 IP 分配确认

此处有一段内容暂不支持显示。

点击进入DHCP ACK 报文

此处有一段内容暂不支持显示。

Task 2: Internet Control Message Protocol

a) Identify the ICMP communication between Apollo and Zeus nodes.

Enter the frame numbers of all ICMP Echo Requests sent from Apollo to Zeus from the first to the last as a comma separated list (no spaces):128,138,141,143,147[2 Mark(s)]

Enter the frame numbers of all ICMP Echo Replies sent from Zeus to Apollo from the first to the last as a comma separated list (no spaces):129,139,142,144,148[2 Mark(s)]

b) Identify the ICMP communication between Apollo and Hera nodes.

Enter the frame numbers of all ICMP Echo Requests sent from Apollo to Hera from the first to the last as a comma separated list (no spaces):251,263,265,267,269[2 Mark(s)]

Enter the frame numbers of all ICMP Echo Replies sent from Hera to Apollo from the first to the last as a comma separated list (no spaces):252,264,266,268,270[2 Mark(s)]

ICMP（Internet Control Message Protocol）是一种网络层协议，常用于诊断网络连接。最常见用途是 ping 命令，它实际上发送的是：

此处有一段内容暂不支持显示。