Wireshark TCP v.70. Nama : Akhmad Fariiqun Awwaluddin NRP : Kelas : 1 D4 LJ Teknik Informatika

Transkripsi

1 Nama : Akhmad Fariiqun Awwaluddin NRP : Kelas : 1 D4 LJ Teknik Informatika Wireshark TCP v What is the IP address and TCP port number used by the client computer (source) that is transferring the file to gaia.cs.umass.edu? Client computer (source) IP address: TCP port number: What is the IP address of gaia.cs.umass.edu? On what port number is it sending and receiving TCP segments for this connection? Destination computer: gaia.cs.umass.edu IP address: TCP port number: What is the IP address and TCP port number used by your client computer (source) to transfer the file to gaia.cs.umass.edu? 4. What is the sequence number of the TCP SYN segment that is used to initiate the TCP connection between the client computer and gaia.cs.umass.edu? What is it segment that identifies the segment as a SYN segment? in the

2 Nomor urut dari segmen TCP SYN digunakan untuk memulai koneksi TCP antara komputer klien dan gaia.cs.umass.edu. Hal ini ditunjukkan dengan nilai 0. SYN flag set ke 1 dan menunjukkan bahwa segmen ini adalah segmen SYN. 5. What is the sequence number of the SYNACK segment sent by gaia.cs.umass.edu to the client computer in reply to the SYN? What is the value of the Acknowledgement field in the SYNACK segment? How did gaia.cs.umass.edu determine that value? What is it in the segment that identifies the segment as a SYNACK segment? Nomor urut dari segmen SYNACK dari gaia.cs.umass.edu ke komputer klien dalam membalas SYN memiliki nilai 0 pada trace ini. Nilai bidang Pengakuan di segmen SYNACK adalah 1. Nilai ACKnowledgement field di segmen SYNACK ditentukan oleh gaia.cs.umass.edu dengan menambahkan 1 ke nomor urut awal segmen SYN dari komputer klien (yaitu nomor urut dari segmen SYN diinisiasi oleh komputer klien 0). SYN flag dan ACKnowledgement flag di segmen ditetapkan untuk 1 dan hal itu menunjukkan bahwa segmen ini adalah segmen SYNACK. 6. What is the sequence number of the TCP segment containing the HTTP POST command? Note that in order to find the POST command, you ll need to dig into the packet content field at the bottom of the Wireshark window, looking for a segment with a POST within its DATA field Nomor 4. Adalah segmen TCP yang mengandung perintah HTTP POST. Nomor urut dari segmen ini memiliki nilai 1.

3 7. Consider the TCP segment containing the HTTP POST as the first segment in the TCP connection. What are the sequence numbers of the first six segments in the TCP connection (including the segment containing the HTTP POST)? At what time was each segment sent? When was the ACK for each segment received? Given the difference between when each TCP segment was sent, and when its acknowledgement was received, what is the RTT value for each of the six segments? What is the EstimatedRTT value (see Section 3.5.3, page 242 in text) after the receipt of each ACK? Assume that the value of the EstimatedRTT is equal to the measured RTT for the first segment, and then is computed using the EstimatedRTT equation on page 242 for all subsequent segments. Note: Wireshark has a nice feature that allows you to plot the RTT for each of the TCP segments sent. Select a TCP segment in the listing of captured packets window that is being sent from the client to the gaia.cs.umass.edu server. Then select: Statistics->TCP Stream Graph- >Round Trip Time Graph. The HTTP POST segment is considered as the first segment. Segments 1 6 are No. 4, 5, 7, 8, 10, and 11 in this trace respectively. The ACKs of segments 1 6 are No. 6, 9, 12, 14, 15, and 16 in this trace. Segmen HTTP POST dianggap sebagai segmen pertama. Segmen 1-6 adalah No 4, 5, 7, 8, 10, dan 11 di masing masing trace ini. Segmen ACK 1-6 adalah No 6, 9, 12, 14, 15, dan 16 di trace ini Segment 1 sequence number: 1 Segment 2 sequence number: 566 Segment 3 sequence number: 2026 Segment 4 sequence number: 3486

4 Segment 5 sequence number: 4946 Segment 6 sequence number: 6406 Waktu pengiriman dan waktu diterima dari ACK dapat dilihat dalam tabel berikut. Sent time ACK received time RTT (seconds) Segment Segment Segment Segment Segment Segment EstimatedRTT = * EstimatedRTT * SampleRTT EstimatedRTT after the receipt of the ACK of segment 1: EstimatedRTT = RTT for Segment 1 = second EstimatedRTT after the receipt of the ACK of segment 2: EstimatedRTT = * * = EstimatedRTT after the receipt of the ACK of segment 3: EstimatedRTT = * * = EstimatedRTT after the receipt of the ACK of segment 4: EstimatedRTT = * * = EstimatedRTT after the receipt of the ACK of segment 5: EstimatedRTT = * * = EstimatedRTT after the receipt of the ACK of segment 6: EstimatedRTT = * * = second 8. What is the length of each of the first six TCP segments? Panjang segmen pertama TCP (yang berisi POST HTTP): 565 bytes. Panjang masing-masing dari lima segmen TCP lainnya: bytes 1460 (MSS) 9. What is the minimum amount of available buffer space advertised at the received for the entire trace? Does the lack of receiver buffer space ever throttle the sender? Jumlah minimum ruang buffer (receiver window) diiklankan di gaia.cs.umass.edu untuk seluruh trace adalah 5840 bytes, yang ditunjukkan dalam acknowledgement dari server. Receiver window ini tumbuh terus sampai ukuran penerima buffer maksimum byte.

5 10. Are there any retransmitted segments in the trace file? What did you check for (in the trace) in order to answer this question? Tidak ada segmen ditransmisikan dalam trace file. Hal itu dapat diverifikasi dengan memeriksa nomor urutan segmen TCP dalam trace file. Dalam TimeSequence-Graph (Stevens) dari trace ini, semua nomor urut dari source ( ) ke destination ( ) meningkat terhadap waktu. Jika ada segmen ditransmisikan, jumlah urutan segmen ditransmisikan ini harus lebih kecil dari segmen neighbor. 11. How much data does the receiver typically acknowledge in an ACK? Can you identify cases where the receiver is ACKing every other received segment (see Table 3.2 on page 250 in the text). acknowledged sequence number acknowledged data ACK ACK ACK ACK ACK ACK ACK ACK ACK ACK ACK ACK

6 Perbedaan antara acknowledged sequence numbers dari dua ACK berturut-turut menunjukkan data yang diterima oleh server antara dua ACK tersebut. Dengan memeriksa jumlah acknowledged data oleh masing-masing ACK, di mana penerima ACKing setiap segmen lainnya. Misalnya, acknowledged data dari segmen No bytes = 1460 * 2 bytes 12. What is the throughput (bytes transferred per unit time) for the TCP connection? Explain how you calculated this value. Perhitungan TCP throughput yang sangat tergantung pada pemilihan rata-rata periode waktu. Sebagai perhitungan throughput yang umum, dalam pertanyaan ini, hal ini memilih jangka waktu rata-rata sebagai waktu koneksi secara keseluruhan. Kemudian, throughput rata-rata untuk koneksi TCP ini dihitung sebagai rasio antara jumlah total data dan waktu transmisi keseluruhan. Total Data jumlah yang dikirimkan dapat dihitung dengan perbedaan antara jumlah urutan segmen TCP pertama (yaitu 1 byte untuk segmen No. 4) dan nomor urut acknowledged dari ACK terakhir ( bytes untuk segmen No. 202). Oleh karena itu, total data = byte. Waktu transmisi keseluruhan adalah perbedaan waktu instan dari segmen TCP pertama (yaitu, 0, kedua untuk segmen No.4) dan waktu instan dari ACK terakhir (yaitu, 5, kedua untuk No 202 segmen). Oleh karena itu, waktu transmisi total = 5,4294 detik. Oleh karena itu, throughput untuk koneksi TCP dihitung sebagai / 5,4294 = 30,222 KByte / sec. 13. Use the Time-Sequence-Graph(Stevens) plotting tool to view the sequence number versus time plot of segments being sent from the client to the gaia.cs.umass.edu server.

7 Can you identify where TCP s slowstart phase begins and ends, and where congestion avoidance takes over? Comment on ways in which the measured data differs from the idealized behavior of TCP that we ve studied in the text. TCP Slow Start dimulai pada awal hubungan, yaitu, ketika segmen HTTP POST dikirim keluar. Slow Identification fase awal dan menghindari kemacetan fase TCP tergantung pada nilai dari ukuran kemacetan jendela pengirim TCP ini. Namun, nilai ukuran kemacetan jendela tidak dapat diperoleh secara langsung dari grafik waktu-urutan-graph (Stevens). Kita dapat memperkirakan batas bawah dari ukuran jendela TCP dengan jumlah data yang luar biasa karena data yang beredar adalah jumlah data tanpa acknowledgement. Kita juga tahu bahwa jendela TCP dibatasi oleh ukuran jendela penerima dan buffer penerima dapat bertindak sebagai batas atas dari ukuran jendela TCP. Dalam trace ini, buffer penerima bukan sebuah penghalang. Oleh karena itu, batas atas ini tidak cukup untuk menyimpulkan ukuran jendela TCP. Oleh karena itu, kita fokus pada batas bawah dari ukuran jendela TCP. 14. Answer each of two questions above for the trace that you have gathered when you transferred a file from your computer to gaia.cs.umass.edu Hal ideal dari TCP dalam teks berasumsi bahwa TCP sender yang agresif dalam pengiriman data. Terlalu banyak lalu lintas dapat menyebabkan jaringan padat. Oleh karena itu, TCP sender harus mengikuti algoritma AIMD sehingga ketika mereka mendeteksi kemacetan jaringan (yaitu, packet loss), mengirimkan ukuran jendela mereka harus menyesuaikan. Perilaku TCP juga sangat tergantung pada aplikasi.

8 Wireshark UDP v Select one UDP packet from your trace. From this packet, determine how many fields there are in the UDP header. (You shouldn t look in the textbook! Answer these questions directly from what you observe in the packet trace.) Name these fields. The UDP header contains 4 fields. They are source Port, Destination port, Length and checksum. 2. By consulting the displayed information in Wireshark s packet content field for this packet, determine the length (in bytes) of each of the UDP header fields. The UDP has four fields at two bytes each so in total it is 8 bytes Source Port is 2 bytes Destination port is 2 bytes Length is 2 bytes Checksum is 2 bytes 3. The value in the Length field is the length of what? (You can consult the text for this answer). Verify your claim with your captured UDP packet. The value in the length field is the sum of the 8 header bytes, plus the 42 encapsulated data bytes. 4. What is the maximum number of bytes that can be included in a UDP payload? (Hint: the answer to this question can be determined by your answer to 2. above) The maximum number of bytes that can be included in a UDP payload is less the header bytes. This gives = bytes. 5. What is the largest possible source port number? (Hint: see the hint in 4.) The largest possible source port number is = What is the protocol number for UDP? Give your answer in both hexadecimal and decimal notation. To answer this question, you ll need to look into the Protocol field of the IP datagram containing this UDP segment (see Figure 4.13 in the text, and the discussion of IP header fields). The IP protocol number for UDP is 0x11 hex, which is 17 in decimal value.

9 7. Examine a pair of UDP packets in which your host sends the first UDP packet and the second UDP packet is a reply to this first UDP packet. (Hint: for a second packet to be sent in response to a first packet, the sender of the first packet should be the destination of the second packet). Describe the relationship between the port numbers in the two packets. Dalam paket pertama yang dikirim oleh host, source port paket UDP adalah sama dengan destination port dari paket balasan. Juga destination port dari paket UDP yang dikirim oleh komputer host, cocok dengan source port dari paket balasan.