using wireshark to examine ethernet frames

Each address is 48 bits long, or 6 octets, expressed as 12 hexadecimal digits, 09,A-F. This field contains synchronizing bits, processed by the NIC hardware. Lab – Using Wireshark to Examine Ethernet Frames The follow wing table takes the first fra ame in the Wireshark capt ure and displays the data in the Ethernet II header fie elds. S Step 4: Examine the Ethernet E II header h conttents of an A ARP reques st. Th he session begins with an n ARP query for f the MAC address a of the e gateway rou uter, followed by four ping requests es. A filte er has been applied to Wire eshark to view w the ARP an nd ICMP proto ocols only.

The Wires shark capture e below shows s the packets s generated b y a ping being issued from m a PC host to o its default ga ateway. S Step 3: Examine Ethe ernet frames s in a Wires shark captu re. L Lab – Using Wireshark W to o Examine Etthernet Fram mes This PC host h IP addres ss is 10.20.16 64.22 and the e default gatew way has an IP P address of 10.20.164.17 7. S Step 2: Examine the network n con nfiguration of the PC. S Step 1: Re eview the Etthernet II he eader field descriptions d s and lengtths. A Wire eshark capturre will be xamine the co ontents in tho ose fields. P Part 1: Examine E the t Header Fields in an Eth hernet II F Frame In Part 1, you will exam mine the head der fields and content in an n Ethernet II F Frame. In Part 2, yo ou will use W Wireshark to ca apture and analy yze Ethernet II frame heade er fields for lo ocal and remo ote traffic.ġ PC (Windows 7, Vista, or XP with w Internet access a with W Wireshark insstalled) In the first p part of this lab, you will w review the fields contain ned in an Ethernet II frame e. When learning about Layer L 2 conce epts, it is helpfful to analyze e frame heade er information n. This is ttypical for a LA AN environment. For exam mple, if the up pper layer pro otocols are TC CP and IP and d the media a access is Ethernet, then the Laye er 2 frame en ncapsulation will w be Ethern et II. The e frame comp position is dep pendent on the me edia access ty ype. O Objectives Part 1: Ex xamine the Header H Fields s in an Etherrnet II Frame e Part 2: Us se Wireshark k to Capture and Analyze e Ethernet Frramesī Backgroun nd / Scenarrio When upp per layer proto ocols commu unicate with ea ach other, da ata flows down n the Open S Systems Interconne ection (OSI) layers and is encapsulated d into a Layerr 2 frame. L Lab – Us sing Wirreshark to Exam mine Eth hernet Frames T Topology

Using wireshark to examine ethernet frames