to learn basic working of internet and ip address
turn off all network activities (mail, chat, game, facebook)
start wireshark capture
go to a simple web server (e.g. example.com)
stop wireshark
analyze the capture
what do you see? can you find example.com activities?
how to filter the capture to see only what you want?
what is the target ip address (example.com)? how to get it? DNS request/response
HTTP request / response
layering and headers
fields in various headers
be prepared to come back to this exercise again and again
try sjsu.edu or cmpe.sjsu.edu or your home router
figure out the addressing information on your computer
start command shell
run "ipconfig" (windows) or "ifconfig" (mac)
run "ipconfig -all" again
compare the two
do you see DNS address there? is it the same as in your wireshark dns packets?
use wireshark to capture DHCP actions
see if a domain is alive
start wireshark
start command shell
run "ping sjsu.edu"
run "ping google.com"
stop wireshark and analyze
trace the path of ip packet
start wireshark
start command shell
run "tracert sjsu.edu"
run "tracert google.com"
stop wireshark and analyze
pay attention to TTL and icmp packets (this step ma
use nslookup to learn DNS records
start command shell
run nslookup
give any domain, e.g. sjsu.edu, google.com, amazon.com
do ? to see all other options supported by nslookup utility
set type=ANY
try the same domain (e.g. sjsu.edu) again
note all the different records
explore other options
combine with wireshark and analyze various DNS commands