Cantho University Network Training Center
Lab 4 – Transport layer
Part 1: Observing TCP and UDP using Netstat
-
-
Explain common netstat command parameter and output:
Use netstat command to examine protocol information.
o netstat -a
o netstat -n
Use Web, FTP, Telnet, … and record netstat output.
netstat
/?
Part 2: TCP/IP application and transport layer protocols examination
-
Start Wireshark to capture the network traffic.
Use Web, FTP, …
-
Analyze the result on Wireshark window:
o 3 way handshake.
o TCP fields: destination port number, source port number, sequence number, ACK
number, Window size, Code bits, …
o UDP fields: Dest and Source port number, message length
o Application data:
 HTTP: GET command, response from Server
 FTP: user, password, command, data port, …
Not To Be Distributed
Page 1 of 1