(b) Which protocols are used on application layer?īased on the TCP port used, 443, the traffic is HTTPS.

This can be seen under Client Hello message → Secure Socket Layer → TLSv1 Record Layer: Handshake Protocol: Client Hello → Handshake Protocol: Client Hello → Extension: server_name The server is the same, but this time with HTTPS. (a) Can you identify the domain name of the server? It might be somewhere within the packet. Open /srv/fit2093files/fit2093lab/Example2.pcap in Wireshark. Location for Bendigo bank and Monash University can be found.Ģ. Students should look at the different layers and see what kind of information they can get. The wireshark file just shows an extract with HTTP messages. (a) Can you identify the domain name of the server? (b) Which protocols are used on application layer?įIT2093 Week 7 Lab (c) Can you get information on the location of destination and source?

Start Wireshark and open /srv/fit2093files/fit2093lab/Example1.pcap. All three examples show parts of the communication between a client and a webserver.ġ. More information can be found from įor this task you need to use Wireshark in order to look at three different examples of recorded network traffic. You may also choose to download and install the Wireshark on your own devices. Alternatively, click any captured file in folder /srv/fit2093files/fit2093lab/ such as Example1.pcap to open Wireshark. Click “Applications–>Internet–>Wireshark” from the desktop to start the Wireshark. In this lab, we will use wireshark preinstalled in the cloud VM to analyse three captured packets files. The learning objective of this lab is for students to get familiar with TLS protocol. Prepared questions will be discussed in the lab session. Study lecture materials at least 1 hour and prepare Lab Task 3.1 prior to the lab session.

Wireshark pcap ciphersuite