Wireshark Lab: UDP

1. Desination Port, Source Port, checksum, length
2. There are 13 header bytes
3. The total value is the 13 header bytes plus the 21 data bytes.
4. The max number of bytes is 65535-13 = 65522
5. The largest sourceport would be 65535
6. The protocol number is 17.

 7. The checksum is calculated by the 16 bit headers and data added together and they are checked against the key, 0xffff.
8. The destination port of the host packet is the same as the source port of the reply packet.

Wireshark Lab 4: TCP

1. Source ip address: 69.171.227.60,   source port: 80
2. Umass ip address: 128.119.245.12, port: 80

4. The TCP syn has a value of 0, but what identifies it as a syn segment is the value "1 syn:set"
5. The ackknowlegement number is 1. The umass website determines this value because it is acknlowleging the the syn value.

6. The sequence number is 1.
7. POST: 5, 7, 11, 13, 16, 17      Sequence numbers: 1, 249, 725, 1388, 1709, 2196
    ACKS: 8, 10, 12, 14, 19, 20

8.   POST 5: 248           POST 7, 11, 17, 19, 8: 724    
9. The minimum window size is 16425. This does not throttle the buffer because the window size is so large and it will keep growing.
10. No, because one can see using the time graph that the packet rate the time it takes and sequence numbers are increasing proportionally.
11. The reciever typically recieves 16425 bytes of data per packet.
12. 16424/ .82977=  19.79 kb/sec
13. The slow start begins at the start of the connection and ends shortly after. In the text examples, too much data is being sent on purpose so naturally the network will be congested quickly. In this example it is being sent in relatively small amounts so there is no congestion.