Page 1 of 18 - Cover Page Submission ID trn:oid:::1:2881116404

Wireshark.pdf
Assignment

Class

University

Document Details

Submission ID

trn:oid:::1:2881116404 16 Pages

Submission Date 1,485 Words

Apr 10, 2024, 1:53 PM UTC

8,757 Characters

Download Date

Apr 10, 2024, 1:54 PM UTC

File Name

tmp9aiol0wz

File Size

3.5 MB

Page 1 of 18 - Cover Page Submission ID trn:oid:::1:2881116404

 Page 2 of 18 - AI Writing Overview Submission ID trn:oid:::1:2881116404

How much of this submission has been generated by AI?

0%
Caution: Percentage may not indicate academic misconduct. Review required.

It is essential to understand the limitations of AI detection before making decisions

about a student's work. We encourage you to learn more about Turnitin's AI detection
capabilities before using the tool.
of qualifying text in this submission has been determined to be
generated by AI.

Frequently Asked Questions

What does the percentage mean?

The percentage shown in the AI writing detection indicator and in the AI writing report is the amount of qualifying text within the
submission that Turnitin's AI writing detection model determines was generated by AI.

Our testing has found that there is a higher incidence of false positives when the percentage is less than 20. In order to reduce the
likelihood of misinterpretation, the AI indicator will display an asterisk for percentages less than 20 to call attention to the fact that
the score is less reliable.

However, the final decision on whether any misconduct has occurred rests with the reviewer/instructor. They should use the
percentage as a means to start a formative conversation with their student and/or use it to examine the submitted assignment in
greater detail according to their school's policies.

How does Turnitin's indicator address false positives?

Our model only processes qualifying text in the form of long-form writing. Long-form writing means individual sentences contained in paragraphs that make up a
longer piece of written work, such as an essay, a dissertation, or an article, etc. Qualifying text that has been determined to be AI-generated will be highlighted blue
on the submission text.

Non-qualifying text, such as bullet points, annotated bibliographies, etc., will not be processed and can create disparity between the submission highlights and the
percentage shown.

What does 'qualifying text' mean?

Sometimes false positives (incorrectly flagging human-written text as AI-generated), can include lists without a lot of structural variation, text that literally repeats
itself, or text that has been paraphrased without developing new ideas. If our indicator shows a higher amount of AI writing in such text, we advise you to take that
into consideration when looking at the percentage indicated.

In a longer document with a mix of authentic writing and AI generated text, it can be difficult to exactly determine where the AI writing begins and original writing
ends, but our model should give you a reliable guide to start conversations with the submitting student.

Disclaimer
Our AI writing assessment is designed to help educators identify text that might be prepared by a generative AI tool. Our AI writing assessment may not always be accurate (it may misidentify
both human and AI-generated text) so it should not be used as the sole basis for adverse actions against a student. It takes further scrutiny and human judgment in conjunction with an
organization's application of its specific academic policies to determine whether any academic misconduct has occurred.

Page 2 of 18 - AI Writing Overview Submission ID trn:oid:::1:2881116404

 Page 3 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

ASSIGNMENT

IT Networking and Communication

ICT504

Student Name Huraira Bin Tahir

Student ID 59566

Page 3 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 4 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

Table of Contents
Contents
1. Question # 1: ................................................................................................................................................................... 5

2. Question # 2: ................................................................................................................................................................... 6

3. Question # 3: ................................................................................................................................................................... 7

4. Question # 4: ................................................................................................................................................................... 8

5. Question # 5: ................................................................................................................................................................... 9

6. Question # 6: ................................................................................................................................................................. 12

7. Question # 7: ................................................................................................................................................................. 13

8. Question # 8: ................................................................................................................................................................. 14

9. Question # 9: ................................................................................................................................................................. 15

10. Question # 10: ............................................................................................................................................................. 15

11. Question # 11: ............................................................................................................................................................. 16

Page 4 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

Page 5 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

Tutorial 1: TCP

Page 5 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 6 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

Starting Question:
Follow the following steps for finding the TCP port number used by client (source) that is
transfering the file to server gaia.cs.umass.edu.
 Open the already captured packet file (tcp-ethereal-trace-1) in wireshark.
 Filter the TCP packets.
 In the packet list Identify an HTTP message. Find an HTTP POST message as it shows the data
transfer from the client to the server.
 Note down that IP address and port number of the client computer through which the file is
captured.


According to below figure, the IP address of the client computer (source)’s is 192.168.1.102 and
its TPC port number is 1161.

Page 6 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 7 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

1. Question # 1:
Follow the following steps for finding the TCP port number used by client (source) that is
transfering the file to server gaia.cs.umass.edu.
 Open the already captured packet file (tcp-ethereal-trace-1) in wireshark.
 Filter the TCP packets.
 Identify any TCP segment sent by gaia.cs.umass.edu in the packet list. Check the destination
IP address to identify, which should match gaia.cs.umass.edu.
 Select the TCP segment sent by gaia.cs.umass.edu.
 Note down the IP address of gaia.cs.umass.edu, along with the source and destination port
numbers.

According to below figure, the IP address of gaia.cs.umass.edu is 128.119.245.12 and the TCP
port number is 80.

Page 7 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 8 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

2. Question # 2:
To find the sequence number of the TCP SYN segment used to initiate the TCP connection
between the client computer and gaia.cs.umass.edu, follow these steps:
 Open the Wireshark captured packet file (tcp-ethereal-trace-1).
 Filter the packets by TCP:
 Locate the initial TCP SYN segment in the packet list. The SYN flag should be set in the "Flags"
column, indicating that it is a SYN segment.
 Note down the sequence number of the TCP SYN segment.

The sequence number of the TCP SYN segment to imitate the TCP connection
between the client computer and gaia.cs.umass.edu. is “0”.
According to below figure,go to the Flags section, observe the the Syn flag it is set to 1 which
indicates that this segment is a SYN segment.

Page 8 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 9 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

3. Question # 3:
The SYNACK segment transmitted by gaia.cs.umass.edu to the client machine in response to the
SYN has a sequence number of 0. See picture below.
In the SYNACK section, the acknowledgment field has a value of 1. The server gaia.cs.umass.edu
determines the value of the Acknowledgment field in the SYNACK segment.
The server adds 1 to the beginning sequence number of the SYN segment received from the client
machine. Since the client computer's SYN segment's beginning sequence number is 0, the
Acknowledgment field in the SYNACK segment has a value of 1.
If the segment's Acknowledgment and SYN flags are both set to 1, the segment will be recognized
as a SYNACK segment.

Page 9 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 10 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

4. Question # 4:
Take the following actions to determine the TCP segment sequence number that contains the
HTTP POST command:
 To view the collected packet file (tcp-ethereal-trace-1), open it using Wireshark.
Use TCP to filter the packets.
 Search the packet content field at the bottom of the Wireshark display for the HTTP POST
command. Each packet's real data payload is shown in this field.
 Choose the packet that contains the HTTP POST command when you've found it.
 Open the Transmission Control Protocol section in the packet details pane at the bottom of
the Wireshark window and expand it.
 Locate the "Sequence number" field, holding the TCP segment sequence number that carries
the HTTP POST instruction.

According to below figure, the segment No.4 in the packet list contains the HTTP POST command.
The sequence number of this segment is 1.

Page 10 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 11 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

5. Question # 5:
From Segments 1‐6
As shown in the below figure, the segments 1-6 are segment No. 4, 5, 7, 8, 10 and 11.
The sequence number for Segment 1 is 1
The sequence number for Segment 2 is 566
The sequence number for Segment 3 is 2026
The sequence number for Segment 4 is 3486
The sequence number for Segment 5 is 4946
The sequence number for Segment 6 is 6406

Page 11 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 12 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

ACK of segments from 1‐6

As shown in below figure, The ACK of segments 1-6 are segment No. 6, 9, 12, 14, 15 and 16

Sending time and received time of ACKs:

Segments Sent time ACK received time RTT

Segment 1 0.026477 0.053937 0.02746
Segment 2 0.041737 0.077294 0.035557
Segment 3 0.054026 0.124085 0.070059
Segment 4 0.054690 0.169118 0.114428
Segment 5 0.077405 0.277219 0.199814
Segment 6 0.078157 0.267802 0.189645

Page 12 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 13 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

According to the formula:

Estimated RTT = 0.875 * Estimated RTT + 0.125 * Sample RTT

For Segment 1:
Estimated RTT1= RTT1 = 0.02746
Estimated RTT1 =RTT1 =0.02746
For Segment 2:
Estimated RTT = 0.875 * Estimated RTT + 0.125 * Sample RTT
Estimated RTT2=0.875×0.02746+0.125×0.035557
Estimated RTT2 =0.028498125
For Segment 3:
Estimated RTT = 0.875 * Estimated RTT + 0.125 * Sample RTT
Estimated RTT3=0.875×0.028498125+0.125×0.070059
Estimated RTT3=0.033704805
For Segment 4:
Estimated RTT = 0.875 * Estimated RTT + 0.125 * Sample RTT
Estimated RTT4=0.875×0.033704805+0.125×0.114428
Estimated RTT4 =0.043831349
For Segment 5:
Estimated RTT = 0.875 * Estimated RTT + 0.125 * Sample RTT
Estimated RTT5=0.875×0.043831349+0.125×0.199814
Estimated RTT5 =0.063259507
For Segment 6:
Estimated RTT = 0.875 * Estimated RTT + 0.125 * Sample RTT
Estimated RTT6=0.875×0.063259507+0.125×0.189645
Estimated RTT6 =0.079126351

Page 13 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 14 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

6. Question # 6:
The length of the first TCP segment is 565 bytes,
The length of the second TCP segment is 1460 bytes
The length of the third TCP segment is 1460 bytes
The length of the fourth TCP segment is 1460 bytes
The length of the fifth TCP segment is 1460 bytes
The length of the sixth TCP segment is 1460 bytes

Page 14 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 15 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

7. Question # 7:
The minimum amount of available buffer space advertised at the received for the entire trace is
indicated first ACK from the server. Its value is 5840 bytes (shown in below figure).
According to the trace, the sender is never throttled due to lacking of receiver buffer space.

Page 15 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 16 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

8. Question # 8:
Since all sequence numbers in the time sequence graph (Stevens) are rising monotonically, there
are no retransmitted segments in the trace file.

Page 16 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 17 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

9. Question # 9:
The receiver normally acknowledges 1460 bytes of data in an ACK. This is because the majority of
data segments delivered by the sender are 1460 bytes in length, which is the Maximum Segment
Length (MTU) usually used on Ethernet networks.

There are several exceptions.

Lines 4, 7, 10, 13, 23, 35, 47, and 58 show the client acknowledging data segments of fewer than
1460 bytes. These are probably the last portions of data being sent.
No, there are no instances in which the receiver acknowledges every other received segment.
In all ACKs (lines 3, 6, 9, 12, 14, 15, etc.), the receiver recognizes all data segments received thus
far. There is no pattern for acknowledging just alternative portions.

10. Question # 10:

We'll find the time elapsed between the first TCP segment and the last acknowledgment (ACK)
received. This will give us the total download time.

Here's the calculation:

Total bytes transferred = Sum of lengths of all TCP segments
Total download time = Time of last ACK - Time of first TCP segment
Throughput = Total bytes transferred / Total download time

Let's perform the calculations:

Total bytes transferred:
Sum of lengths = 619 + 1514 * 119 + 946 * 5 = 191959 bytes

Total download time:

Time of last ACK = 3.025618 seconds (from the last entry)
Time of first TCP segment = 0.000000 seconds (from the first entry)
Total download time = 3.025618 - 0.000000 = 3.025618 seconds

Throughput: Throughput = 191959 bytes / 3.025618 seconds ≈ 63378.728 bytes/second

So, the throughput for the TCP connection is approximately 63378.728 bytes/second.

Page 17 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

 Page 18 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404

11. Question # 11:

Time-Sequence-Graph(Stevens) graph at t = 0, t = 1, t = 2, t = 3, t = 4, and t = 5.
From the below graph, by considering the "fleets" of packets sent around t = 0, t = 1, t = 2, t = 3, t
= 4, and t = 5.
The slow start of the TCP appears to begin at roughly 0 and last for approximately 0.305s. No
congestion avoidance takes place as we can see the graph increasing monotonically without losing
packets

Page 18 of 18 - AI Writing Submission Submission ID trn:oid:::1:2881116404