HTTP & DNS – Nhóm 9

Nguyễn Hữu Minh Vũ 22T_KHDL

Phạm Quốc Vũ 22T_KHDL

Nguyễn Tuấn Huy 22T_DT1

Nguyễn Quang Kiên 22T_DT1

Trương Vũ Linh 22T_DT1

I.HTTP
1. The Basic HTTP GET/response interaction

Question:

Problem 1:
HTTP version 1.1
 Problem 2:
Language Accept : VN – US

Problem 3:
IP Address of my computer : 192.168.1.6
IP Address of the gaia.cs.umass.edu.server : 128.119.245.12

Problem 4:
 Code returned : 200

Problem 5:
The HTML file that you are retrieving last modifield at the server
 Problem 6: Bytes of content are being returned to my browser :
 128 byte

Problem 7:
 Don’t see any headers within the data that are not displayed in the packet-listing widow

2. The HTTP CONDITIONAL GET/response interaction

Question:
Problem 8 : Inspect the contents of the first HTTP GET request from your browser to the

server. Do you see an “IF-MODIFIED-SINCE” line in the HTTP GET?

Answer : No, I don’t see an “IF-MODIFIED-SINCE” line in the HTTP GET.

Problem 9 : Inspect the contents of the server response. Did the server explicitly return the
contents of the file? How can you tell?

Answer : Yes , we see in the in the picture, the content of Line-based text data show the server
explicity return the contents of the file.
Problem 10 : Now inspect the contents of the second HTTP GET request from your browser to
the server. Do you see an “IF-MODIFIED-SINCE:” line in the HTTP GET? If so, what
information follows the “IF-MODIFIED-SINCE:” header?

Answer : Yes, i see an “IF-MODIFIED-SINCE” line in the HTTP GET. The information follows the
“IF-MODIFIED-SINCE”: header is:

If-Modified-Since: Sat, 16 Mar 2024 05:59:02 GMT\r\n

\r\n

[Full request URI: http://gaia.cs.umass.edu/wireshark-labs/HTTP-wireshark-file2.html]

[HTTP request 2/2]

[Prev request in frame: 264]

[Response in frame: 345]

Problem 11 : What is the HTTP status code and phrase returned from the server in response to
this second HTTP GET? Did the server explicitly return the contents of the file? Explain.

Answer : HTTP status code : 304 , phrase returned from the server in response : Not Modified.

No, the server didn’t explicity return the contents of the file because the response of the second HTTP
GET not modified.

3. Retrieving Long Documents

Question:
Problem 12. How many HTTP GET request messages did your browser send? => 2

Which packet number in the trace contains the GET message for the Bill or Rights

 28513
Problem 13: Which packet number in the trace contains the status code and phrase associated
with the response to the HTTP GET request?

 5577

Problem 14. What is the status code and phrase in the response?

Problem 15. How many data-containing TCP segments were needed to carry the single HTTP
response and the text of the Bill of Rights?

 5783 bytes
4. HTML Documents with Embedded Objects

Question:
 Problem 16:

How many HTTP GET request messages did your browser send? => 2

To which Internet addresses were these GET requests sent? => 128.119.245.12 ( Destination)

Problem 17:

Can you tell whether your browser downloaded the two images serially, or whether they were
downloaded from the two web sites in parallel? Explain

 Different time. So my browser downloaded two images serially.

5. HTTP Authentication

Questions :

Problem 18: What is the server’s response (status code and phrase) in response to the initial
HTTP GET message from your browser?

 Status code: 404

 Phrase: Not found
Problem 19: What is the server’s response (status code and phrase) in response to the initial
HTTP GET message from your browser?
  Authorization field

II. DNS
Problem 1 : Run nslookup to obtain the IP address of a Web server in Asia. What is the IP
address of that server?

I performed nslookup for ‘samsung.com’

 Its Ip address is 221.45.27.231

Problem 2 : Run nslookup to determine the authoritative DNS servers for a university in
Europe.

I performed nslookup for an European University (Oxford University).

Problem 3: Run nslookup so that one of the DNS servers obtained in Question 2 is queried
for the mail servers for Yahoo! mail. What is its IP address?

 The Ip address is: 130.88.101.5

Problem 4: Locate the DNS query and response messages. Are then sent over UDP or TCP?

 UDP (User Datagram Protocol)

Problem 5 : What is the destination port for the DNS query message? What is the source
port of DNS response message?
 Destination port: 49430 Source Port: 53

Problem 6: To what IP address is the DNS query message sent? Use ipconfig to determine
the IP address of your local DNS server. Are these two IP addresses the same?

These two IP addresses are the same

Problem 7: Examine the DNS query message. What “Type” of DNS query is it? Does the
query message contain any “answers”?

 The query message does not contain any answers

Problem 8: Examine the DNS response message. How many “answers” are provided? What
do each of these answers contain?
  2 answer provided

Problem 9: Consider the subsequent TCP SYN packet sent by your host. Does the
destination IP address of the SYN packet correspond to any of the IP addresses provided in
the DNS response message?

Problem 10: This web page contains images. Before retrieving each image, does your host
issue new DNS queries?

 No

Problem 11.

 Destination port : 53
 Source port of DNS response message : 53
Problem 12.
What is the destination port for the DNS query message?
 2001:ee0:23::23
Is this the IP address of your default local DNS server?

 Yes

Problem 13.
What “Type” of DNS query is it?

 Type : AAAA

Does the query message contain any “answers”?

 Answer RRs : 0

Problem 14.
Examine the DNS response message. How many “answers” are provided?

 4 answer are provided.

What do each of these answers contain?

Problem 15.

Problem 16.

To what IP address is the DNS query message sent?

 Address : 2001:ee0:23::23

Is this the IP address of your default local DNS server?

  Yes

Problem 17.
Examine the DNS query message. What “Type” of DNS query is it?

 Type : NS
Does the query message contain any “answers”?

 Answer RRs : 0

Problem 18.
What MIT nameservers does the response message provide?
ns use5.akam.net
ns eur5.akam.net
ns use2.akam.net
ns ns1-37.akam.net
ns usw2.akam.net
ns asia1.akam.net
ns ns1-173.akam.net
ns asia2.akam.net
Does this response message also provide the IP addresses of the MIT namesers
 No

Problem 19.
Problem 20.

To what IP address is the DNS query message sent?

 18.0.72.3
Is this the IP address of your default local DNS server?
 Yes
Problem 21.
What “Type” of DNS query is it?

 Type : A
Does the query message contain any “answers”?

 Answer RRs : 0

Problem 22.
Examine the DNS response message. How many “answers” are provided?
 1 answer

What does each of these answers contain?

Problem 23.