ICMP实验报告.docVIP

实 验 报 告 实验日期： 2013 年 04 月 20 日 学 号： 姓 名： 实验名称： ICMP 总 分： 一、实验概述 1．了解ICMP协议下数据包相关格式和内容； 2．了解ping 和tracert两种指令功能。 二、实验条件 ①联网的电脑； ②Ethereal软件； ③winpcap 4.0. 三、实验内容 ping指令操作 ljj为笔者姓名拼音缩写 通过输入指令ping，检测通道是否导通。 Ethereal抓包 1. What is the IP address of your host? What is the IP address of the destination host? 2. Why is it that an ICMP packet does not have source and destination port numbers? 答：因为ICMP数据包在网络层封装在IP数据包中，因此不需要destination和source 3. Examine one of the ping request packets sent by your host. What are the ICMP type and code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields? 在其他的地方没有ICMP数据包因为它没有分组 4. Examine the corresponding ping reply packet. What are the ICMP type and Code numbers? What other fields does this ICMP packet have? How many bytes are the checksum, sequence number and identifier fields? 在其他的地方没有ICMP数据包因为它没有分组 tracer指令操作 Ethereal抓包 5. What is the IP address of your host? What is the IP address of the target destination host? 6. If ICMP sent UDP packets instead (as in Unix/Linux), would the IP protocol number still be 01 for the probe packets? If not, what would it be? 答：不是01，因为它的上层协议UDP,所以它的protocol number 不是ICMP（1） 7. Examine the ICMP echo packet in your screenshot. Is this different from the ICMP ping query packets in the first half of this lab? If yes, how so? Ping指令 Tracer指令 可以看出二者的checksum,sequence number,data不同 8. Examine the ICMP error packet in your screenshot. It has more fields than the ICMP echo packet. What is included in those fields? error packet ecoh packet 可以看出，error packet比echo packet多出了Internet protocol,src:…，dst：…部分 9. Examine the last three ICMP packets received by the source host. How are thes packets different from the ICMP error packets? Why are they different? 10. Within the tracert measurements, is there a link whose delay is significantly longer than others? Refer to the screenshot in Figure 4,