Ethereal網(wǎng)絡(luò)協(xié)議分析器的使用_實(shí)驗(yàn)報(bào)告

1、工業(yè)計(jì)算機(jī)網(wǎng)絡(luò)實(shí)驗(yàn)報(bào)告實(shí)驗(yàn)5： ethereal網(wǎng)絡(luò)協(xié)議分析器的使用一、實(shí)驗(yàn)?zāi)康模?、了解協(xié)議分析器安裝；2、熟悉并掌握ethereal的使用方法和基本操作；3、掌握協(xié)議分析器分析協(xié)議的方法。二、實(shí)驗(yàn)環(huán)境與因特網(wǎng)連接的計(jì)算機(jī)網(wǎng)絡(luò)系統(tǒng)；主機(jī)操作系統(tǒng)為windows2000或windows xp； ethereal等三、實(shí)驗(yàn)內(nèi)容：1、ethereal 的安裝安裝ethereal需要先安裝winpeap, &裝過程如下:選擇默認(rèn)安裝，安裝完成后如下:毎 winpcap 3.1 setupcompleting the winpcap 3.1 setup wizardwinpcap 3.1 ha

2、s bee n in stalled on your computer.click finish to close this wizard.backfinishcancelethereal安裝完成如卜-圖所示:f ethereal 0.99.0 setup* xcompleting the ethereal 0.99.0 setup wizardethereal 0.99.0 has bee 仃 in stalled on your computer.click finish to close this wizard.廠i run ethereal 0.99.0show news< ba

3、ckfinishcancel2、按附錄文檔學(xué)習(xí)和使用ethereal沒有設(shè)置過濾規(guī)則時(shí)的運(yùn)行界而剛開始設(shè)置網(wǎng)卡信息，選擇capture->options,選擇默認(rèn)設(shè)置即可，如卜圖:結(jié)果如下:no.timesourcedestinationprotocolinfo10.000000333udpsourceport:1067destination 匸20.001929333udpsourceport:1067destination 匚30.017576793

4、3udpsourceport:3983destinat ion 匸40.0195027933udpsourceport:3983destination 匸50.0283206933udpsourceport:1743destination p60.028392951udpsourceport:1799destination p70.0302686933udpsourceport:174 3destination

5、 匸s0.0381106933udpsourceport:174 3destination 匚90.0410126933udpsourceport:1743destination p10110.0470340.1279428927.44.2021485533nbns udpname query nb btfans.33220rg<oc source oort: 58034 destination120.128662192.1

6、68.137.9750ssdpm-search * http a-1j3_0-180707192.1687竺udpsource port: 13514destination150.1914354833udpsource port: 58034destination161 t0.191526a ->.4 41 co481 " nn m 01331 nn i " *7 、”udpi mnsourceport:“八尸58034佐人adestinations fr

7、ame 84 (243 bytes on wire, 243 bytes captured)八;± ethernet ii, src: bc:ae:c5:3d:be:14 (bc:ae:c5:3d:be:14), dst: broadcast (ff:ff:ff:ff:ff:ff)* internet protocol, src: 66 (66), dst: 55 (55) ± user datagram protocol, src port: netbios-dgm (

8、138), dst port: netbios-dgm (138)ki o cr/u rm "/%*«*! z-z匸faedcnd cdadbdbd adcdcdce rrrr ">rrr a rurnrooa85 0 0 e 3 a4 c c 4 4 c0 6 5 3 41/o a 4 4 4 s 9 c 4 3 o o 8 a 4 4 q4 8 a 5 4 c1 a o 4 1eoll3n b c 14 4 n d 6 s 6 4 a 3 - b 4 一 crrrrrrtrrrrrbeae00e5029b0000801189ff00sa00sa00dl8

9、9a6008a00bb0000434 *744t g41a144 c42a 7-»v4245 2 e o11 c a - 2 - f00000010002000300040 nnc a| p: 470 d: 470 m: 0 drops: 0file: c:docui.ie-1 wminb1l0c-ls-1tempetherxxx<explar. 5.3、自己撲獲網(wǎng)絡(luò)活動(dòng)，并形成一個(gè)數(shù)據(jù)文件，查看其特點(diǎn)。例如捕獲一個(gè)tcp數(shù)據(jù)包，查看其首部信息。捕獲進(jìn)出()(本機(jī)ip)并ji為qq發(fā)送接收的數(shù)據(jù)包，fil血為:host 192.16&7.10 and udp截圖如下：四、實(shí)驗(yàn)總結(jié)通過木次試驗(yàn)對ethereal有了一個(gè)人概的了解，網(wǎng)絡(luò)分析對于某