1

CS470 - Spring 2014, Monday 1pm Project: 3 machine - WireShark Analysis Essay
You may work in teams of up to 3 students. You are to use a tool such as Wireshark to perform your hands on analysis. Wireshark is available for free download for both Windows and Linux. Note: Kali Linux (free) has Wireshark already built in and configured. You must include screen captures as evidence of your Wireshark work. You are to create of network of 3 computers, using any combination either real or virtual machines. Note: You can use Virtual Box as a free hyper-visor to create a virtual environment. You are to turn on a web server or FTP server on one of the machines. The server can be simple but should provide a large file upon request. Large file means the file size should be greater than 100Kbytes. o Note: You can use free Linux versions to obtain free servers. Distrowatch.com has a good overview of comparison ranking of Linux versions. This, usually requires only enabling the service, but may include installation. Installation can sometimes be as simple as checking the FTP, web services or LAMP application box during installation. Confirm that all three machines can communicate with each other. A screen capture of ping will do. Machine U is to be a user machine. Machine S is to be a servicer. Machine W is to be a tool (Wireshark) machine. You are to use Machine U to access a large file from the Machine S's server. You are to use Wireshark (or equivalent) to capture the packets coming and going on Machine U. You are to use Wireshark (or equivalent) to capture the packets coming and going from Machine S.

Project Task: You are to analyze the client- and server-side traces to explore the interactive aspects of the upper layer (FTP/HTTP) and lower layer (UDP/TCP). And generate, concise (~500 to 1k word) essay on your findings. Your are to directly and closely link your insightful technical analysis to your screen captures and other supporting evidence files. Assuming the roles of networking engineers you are to dive deeply into your traces and give detailed analysis on technical items such as: changes in TCP window behavior, infer packet loss and retransmissions, flow control, congestion control behavior, estimated round trip times. ###