Wireshark Lab: ICMP



Worked with Tom Vear
1. HOST: 10.37.9.2
    DESTINATION HOST: 143.89.14.34
2. Because the ICMP packet only communicates between routers and hosts. The software can decipher the messages itself, therefore a port number is not assigned and an application layer process is not needed.
3. The ICMP type is 8 and the code number is 0. The ICMP has a data field, sequence number, identifier, and checksum. They are all two bytes.
4. Both the ICMP type and the code number are 0. There is a data field, sequence number, identifier, and checksum. They are all two bytes.

5. HOST: 10.37.9.254
    DESTINATION HOST: 193.51.193.149
6. No, If UDP packets were sent, the IP protocol number would change.
7. They have the same fields as the ping query packets.
8. The error packet isnt the same as the query packets. What it contains is the IP header packet and 8 bytes of the ICMP packet.
9. They are all echo reply messages. These are different because all of the packets made it to the destination before the time to live expired.
10. The jump between packets 15 and 16 represent the large jump. This is the link that crosses the ocean therefore it takes longer.