Observing LAN Activity

lab completed in dorm room Monday 9/7

Part 1

Observe a simple capture - Ping the Default Gateway

Capture a "ping" to the default gateway

• Ran ifconfig /all on windows machine and noted Default Gateway
• Open Wireshark and start scan of ethernet interface
• Ping ip_default_gateway in terminal
• End Wireshark scan

Inspect the results in Wireshark: Default Gateway Inspection

• sort by icmp in Wireshark to filter only by ping requests and replies
• take screenshot of pack section including Mac address of source and destination devices
• screenshots of both request packet and reply packet

Part 2

Observe a simple capture - Ping outside LAN IP addresses

Repeat the Wireshark capture of a ping - but this time use www.timeslive.co.za as the destination address.

• new Wireshark scan
• ping www.timeslive.co.za
• end Wireshark scan
  • Record: What are the source and destination MAC addresses SCREEN CAPTURE

Questions to consider

Q: What is a MAC address and what are its components?
A: It's the physical address of the device burned into the physical motherboard.

Q: How to get a MAC address. Check settings or run network stat command on device
A: What is Wireshark and how to use it? Wireshark is a widely used network traffic scanner used to scan traffic throughput on an interface.

Q: How to find a protocol in Whireshark.
A: Protocol column in scan or filter