LAB 3 2 Exploring Broadcast Domains - devinziegler/Devin-Tech-Journal GitHub Wiki

Assignment: LAB 3-2 - Exploring Broadcast Domains

• Observe layer 2 ARP ICMP communication on LAN.

Problems Encountered:

• Partner system could not ping my system. This was solved by switching his network adapter to bridged.

Helpful Steps:

• Creating ICMP filter will allow you to see only ICMP traffic in Wireshark. This filter makes it much easier to find ping requests and replies.

Final Ideas:

• ARP is a layer two protocol that is used to map an IP address to a physical machine. When making a new connection your host will broadcast looking for a specific IP. Once the client has been found with matching IP, the MAC of client is sent back to Host system.

• Wireshark is a good tool for capturing and analyzing network packets. You can start recording using eth0, and see traffic on the network. If you wish to open a packet, double click it, and you can look at the information that relates to that specific packet.