Lab 3b - TCP and UDP en
Lab 3b - TCP and UDP en
1 OBJECTIVE
- Student can receive video from server with difference protocol.
- Student can analyze the UDP and TCP protocol in the video transmission.
2 Analyze UDP
- Open file MSSV-rtsp.pcap.
- Answer the following questions and capture the screens to verify the answers.
1. Using filter to filter the “udp” packet. Select one UDP packet from your trace.
From this packet, determine how many fields there are in the UDP header, name
these field.
3. The value in the Length field is the length of what? Verify your claim with your
captured UDP packet.
4. What is the maximum number of bytes that can be included in a UDP payload?
(Hint: the answer to this question can be determined by your answer to 2. above)
5. What is the largest possible source port number? (Hint: see the hint in 4.)
6. Examine a pair of UDP packets in which your host sends the first UDP packet and
the second UDP packet is a reply to this first UDP packet. (Hint: for a second
packet to be sent in response to a first packet, the sender of the first packet should
be the destination of the second packet). Describe the relationship between the port
numbers in the two packets.
3 Analyze TCP
- Open file MSSV-http.pcap
- Type “tcp” into the display filter specification window towards the top of the
Wireshark window to filter the TCP packet.
Answer the following questions and capture the screen to verify the answers.
7. What is the IP address and TCP port number used by the client?
8. What is the IP address server? On what port number is it sending and receiving
TCP segments for this connection?
9. What is the sequence number of the TCP SYN segment that is used to initiate the
TCP connection between the client and server?
10. What is the sequence number of the SYN/ACK segment sent by server to the
client computer in reply to the SYN?
- What are the sequence numbers and the length of the first six segments?
- At what time was each segment sent? When was the ACK for each segment
received?
- Given the difference between when each TCP segment was sent, and when its
acknowledgement was received, what is the RTT (Round trip time) value for each
of the six segments?
Note: Wireshark has a nice feature that allows you to plot the RTT for each of the
TCP segments sent. Select a TCP segment in the “listing of captured packets”
window that is being sent from the client to server. Then select: Statistics->TCP
Stream Graph -> Time/Sequence (Steven)
Note that: Each dot in the graph represents the sequence number and sending time
of a TCP segment. If there are 2 dots with the same sequence number but they are
in different time => there are restransmission.