Graphic designing

Question 1. Analysis of Protocols with Wireshark Objective: Gain a good understanding of common Internet protocols as well as using packet capture software (Wireshark) Use the file and the above information to answer the following sub-questions. Do not try to guess answers; use only the above information, the capture file and your knowledge of networking and security to find the answers. (a) Several applications were used on several different computers. Complete the table to summarise the applications in use in the network. The columns are: • Application name or protocol, e.g. Web, SSH, ?, where ? means cannot determine from the capture. • Transport protocol. TCP, UDP, ICMP or other. • Client Port(s). Use a range, e.g. 1-10, if the client changes ports for each connection. • Server Port, Client IP, Server IP. • Time of use. The time when the application is in use. Round to the nearest second. Use a range, e.g. 0-4 seconds. The first row includes example values of selected columns. Complete (or edit) and add further rows as necessary. Application Table App. Tra. Client Server Client Server Time Port(s) Port IP IP of use Web 48158- 0-4 48170 (b) Complete the address table below to show known address information of computers/interfaces in the network. Some information in the table may not be known (e.g. cannot be determined from the capture). Use a question mark “?“ in the table if the information is not known. Use only the information in the question and the capture file to determine the answers (do not guess). Address Table Computer Interface MAC IP 1 1 08:00:27:cc:71:35 [login to view URL] 1 2 08:00:27:1c:6d:33 [login to view URL] 1 3 08:00:27:61:fc:c4 [login to view URL] 2 (c) Some of the computers in the network have domain names as well as IP addresses. List the IP address and domain name of each computer with a domain name, and give the packet number where you found the domain name. (d) Consider the 1st TCP connection in the capture (which starts at packet number 3 in the capture file). Draw a message sequence diagram that illustrates all packets in that TCP connection. A message sequence diagram uses vertical lines to represent events that happen at a computer over time (time is increasing as the line goes down). Addresses of the computers/software are given at the top of the vertical lines. Horizontal or sloped arrows are used to show messages (packets) being sent between computers. Each arrow should be labelled with the protocol, packet type and important information of the message. Examples of message sequence diagrams are given in workshops. Note that you do not need to show the packet times, and the diagram does not have to be to scale. (e) Briefly explain how a TCP connection starts (or opens), and how it completes (or closes), using the 1st TCP connection from the capture (and your message sequence diagram above) as an example. (f) Some of the computers in the network are running a web server. Choose one of the computers and then list which files exist on the web server, and which files do not exist on the web server. Explain how you know the files (that is, refer to the packet number(s) in the capture). (g) What is the password?