Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Wireshark PCAP Reconstruction help?

Hi folks...

Sorry if this seems like a silly question, but i don't have much experience using wireshark and Packet Tracer. I'm in need of a little help with a project I'm trying to figure out.

The goal here is to examine the wireshark capture, identify information (such as host, hops IP addresses etc) and recreate the topology using Packet tracer.

So to the best of my beginners knowledge, i have tried to recreate the network from what I’ve observed in the capture.

This a trace route from PC # 1 (172.19.100.37) to PC #2 ( 172.16.200.41 )

what I see is three ICMP TTL messages coming from 172.19.xx | 172.18.xx… and 172.17.xxx, so that’s 3 hops. Since PC # 2 has a IP address of 172.16.200.41, I assume there must be one more router which would presumably 172.16.1.1

So I’ve created the topology the best I can ( See the screenshot), but something isn’t making sense. For one, i need to assign an ip the fa0/1 interface on router 1, but i'm having trouble putting that together.

I’ve also done the following to allow communication between routers.

router ospf 1

network 172.0.0.0 0.255.255.255 area 0

Am i on the right track here? Any suggestions help would be very much appreciated.

image description

[img]https://i.imgur.com/e24m0fR.png[/img]

Thanks

Wireshark PCAP Reconstruction help?

Hi folks...

Sorry if this seems like a silly question, but i don't have much experience using wireshark and Packet Tracer. I'm in need of a little help with a project I'm trying to figure out.

The goal here is to examine the wireshark capture, identify information (such as host, hops IP addresses etc) and recreate the topology using Packet tracer.

So to the best of my beginners knowledge, i have tried to recreate the network from what I’ve observed in the capture.

This a trace route from PC # 1 (172.19.100.37) to PC #2 ( 172.16.200.41 )

what I see is three ICMP TTL messages coming from 172.19.xx | 172.18.xx… and 172.17.xxx, so that’s 3 hops. Since PC # 2 has a IP address of 172.16.200.41, I assume there must be one more router which would presumably 172.16.1.1

So I’ve created the topology the best I can ( See the screenshot), but something isn’t making sense. For one, i need to assign an ip the fa0/1 interface on router 1, but i'm having trouble putting that together.

I’ve also done the following to allow communication between routers.

router ospf 1

network 172.0.0.0 0.255.255.255 area 0

Screenshots

Am i on the right track here? Any suggestions help would be very much appreciated.

image description

[img]https://i.imgur.com/e24m0fR.png[/img]

Thanks

Wireshark PCAP Reconstruction help?

Hi folks...

Sorry if this seems like a silly question, but i don't have much experience using wireshark and Packet Tracer. I'm in need of a little help with a project I'm trying to figure out.

The goal here is to examine the wireshark capture, identify information (such as host, hops IP addresses etc) and recreate the topology using Packet tracer.

So to the best of my beginners knowledge, i have tried to recreate the network from what I’ve observed in the capture.

This a trace route from PC # 1 (172.19.100.37) to PC #2 ( 172.16.200.41 )

what I see is three ICMP TTL messages coming from 172.19.xx | 172.18.xx… and 172.17.xxx, so that’s 3 hops. Since PC # 2 has a IP address of 172.16.200.41, I assume there must be one more router which would presumably 172.16.1.1

So I’ve created the topology the best I can ( See the screenshot), but something isn’t making sense. For one, i need to assign an ip the fa0/1 interface on router 1, but i'm having trouble putting that together.

I’ve also done the following to allow communication between routers.

router ospf 1

network 172.0.0.0 0.255.255.255 area 0

*See Screenshot*

ScreenshotsTopology

Wireshark

Am i on the right track here? Any suggestions help would be very much appreciated.

Thanks

click to hide/show revision 4
None

Wireshark PCAP Reconstruction help?

Hi folks...

Sorry if this seems like a silly question, but i don't have much experience using wireshark and Packet Tracer. I'm in need of a little help with a project I'm trying to figure out.

The goal here is to examine the wireshark capture, identify information (such as host, hops IP addresses etc) and recreate the topology using Packet tracer.

So to the best of my beginners knowledge, i have tried to recreate the network from what I’ve observed in the capture.

This a trace route from PC # 1 (172.19.100.37) to PC #2 ( 172.16.200.41 )

what I see is three ICMP TTL messages coming from 172.19.xx | 172.18.xx… and 172.17.xxx, so that’s 3 hops. Since PC # 2 has a IP address of 172.16.200.41, I assume there must be one more router which would presumably 172.16.1.1

So I’ve created the topology the best I can ( See the screenshot), but something isn’t making sense. For one, i need to assign an ip the fa0/1 interface on router 1, but i'm having trouble putting that together.

I’ve also done the following to allow communication between routers.

router ospf 1

network 172.0.0.0 0.255.255.255 area 0

*See Screenshot*

Topology

Wireshark

Am i on the right track here? Any suggestions help would be very much appreciated.

Thanks