ARP and DNS Sandbox

CSC-426 · Semester VII · Network Security

Packet Analyzer
No.TimeSourceDestinationProtocolLengthInfo
10.000000192.168.1.10192.168.1.1ARP44Who has 192.168.1.1? Tell 192.168.1.10
20.000001192.168.1.1192.168.1.10ARP44Who has 192.168.1.10? Tell 192.168.1.1
30.000002192.168.1.10192.168.1.1DNS76Standard query 0x24ac A server.lan
40.000003192.168.1.1192.168.1.10DNS92Standard query response 0x24ac A server.lan A 192.168.1.50
50.000004192.168.1.10192.168.1.50TCP6650001 → 22 [SYN] Seq=0 Win=65535 Len=0 MSS=1460
60.000005192.168.1.50192.168.1.10TCP6622 → 50001 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0
70.000006192.168.1.10192.168.1.50TCP5450001 → 22 [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 1: 2 on wire (Ethernet II)
Destination:ff:ff:ff:ff:ff:ff (Broadcast)
Source:00:1b:77:4c:1a:2b
Type:ARP (0x0806)
Hardware Type:Ethernet (1)
Protocol Type:IPv4 (0x0800)
Hardware Size:6
Protocol Size:4
Opcode:request (1)
Sender MAC address:00:1b:77:4c:1a:2b
Sender IP address:192.168.1.10
Target MAC address:00:00:00:00:00:00
Target IP address:192.168.1.1
Frame 1: 44 bytes on wire
Offset0123456789abcdefASCII
0000ffffffffffff001b774c1a2b08060001........wL.+....
00100800060400010001001b774c1a2bc0a8..........wL.+..
0020010a000000000000c0a80101 ............
7 packets7 displayedProfile: Default