lab 2.2 - willtorresortiz/NET-150 GitHub Wiki

Observing LAN Activity

lab completed in dorm room Monday 9/7

Part 1

Observe a simple capture - Ping the Default Gateway

Capture a "ping" to the default gateway

  • Ran ifconfig /all on windows machine and noted Default Gateway
  • Open Wireshark and start scan of ethernet interface
  • Ping ip_default_gateway in terminal
  • End Wireshark scan

Inspect the results in Wireshark: Default Gateway Inspection

  • sort by icmp in Wireshark to filter only by ping requests and replies
  • take screenshot of pack section including Mac address of source and destination devices
  • screenshots of both request packet and reply packet

Part 2

Observe a simple capture - Ping outside LAN IP addresses

Repeat the Wireshark capture of a ping - but this time use www.timeslive.co.za as the destination address.

  • new Wireshark scan
  • ping www.timeslive.co.za
  • end Wireshark scan
    • Record: What are the source and destination MAC addresses SCREEN CAPTURE

Questions to consider

Q: What is a MAC address and what are its components?
A: It's the physical address of the device burned into the physical motherboard.

Q: How to get a MAC address. Check settings or run network stat command on device
A: What is Wireshark and how to use it? Wireshark is a widely used network traffic scanner used to scan traffic throughput on an interface.

Q: How to find a protocol in Whireshark.
A: Protocol column in scan or filter

⚠️ **GitHub.com Fallback** ⚠️