Page | 1

ASSIGMENT No. 5
Computer Networking

UDP(USER DATAGRAM PROTOCOL)

Answer the following questions
Select segment number 16 in the trace. This is a standard DNS query.
Determine, how many fields there are in the UDP header (Do not look in the
textbook! Answer these questions directly from what you observe in the packet
trace). Name these fields.
Fields Name:

Source Port.
Destination Port.
Length.
Checksum.

Page | 2

From the packet content field (click on any header and observe the display at
the bottom of the Wireshark window), determine the length (in bytes) of each
of the UDP header fields.
Source Port:
2 Bytes
Destination Port:
2 Bytes
Length:
2 Bytes
Checksum:
2 Bytes

Page | 3

The value in the Length field is the length of what? Verify your claim using the
selected packet. (You can add a screenshot of your capture file and count
number of bytes)?
Length Field:
41 Bytes
Source Port + Destination Port + Length + Checksum
2
+
2
+ 2
+ 2
8 Bytes
Application Layer:
Domain Name System DNS (Query) 33 Bytes
Length Field = 33 + 8
41 Bytes

Page | 4

What is the largest possible source port number? (Hint: you can use the length
of port number header field to determine the value)
Largest Source Port No:
Header Field:
| Source port
|

16 Bits

|
|

Destination Port |
16 Bits

bits
Largest Source Port No = 2

216 - 1 = 65535

Examine the segment number 16 and 19. Describe the relationship between the
port numbers in the two packets. Briefly describe the contents of these two
segments?
Relationship:
As it is shown that, Segment No 16 is Query which is linked with
DNS through Query Message.

Page | 5

Segment Number 19 is Query Response for segment number 16

Page | 6

TCP (TRANSMISSION CONTROL

PROTCOL)
What is the IP address and TCP port number used by the client computer
(source) that is transferring the file to http.request.method==POST)
IP ADDRESS:
199.5.297.341
TCP PORT NUMBER (Source):
Health-polling ( 1161 )

Page | 7

What is the IP address of gaia.cs.umass.edu? On what port number is it

sending?
IP ADDRESS:
128.119.245.12
TCP PORT NUMBER (Source):
Http (80)

Page | 8

What is the sequence number of the TCP SYN segment that is used to initiate
the TCP connection between the client computer and gaia.cs.umass.edu? What
is it in the segment that identifies the segment as a SYN segment?
Sequence Number:
Sequence number of the TCP SYN segment that is used to initiate
the TCP connection between the client computer and gaia.cs.umass.edu is
Sequence No: 232129012

Page | 9

Identifies The Segment as a SYN Segment:

TCP contains Flag Field which explains the initiative connection between client
and server.
Flag:
SYN = SET 1

What is the sequence number of the SYNACK segment sent by

gaia.cs.umass.edu to the client computer in reply to the SYN? What is the value
of the Acknowledgement field in the SYNACK segment? What is it in the
segment that identifies the segment as a SYNACK segment?
Sequence Number:
Sequence number of the SYNACK segment sent by
gaia.cs.umass.edu to the client computer in reply to the SYN is
Sequence No: 883061785

P a g e | 10

The Value of The Acknowledgement Field In The SYNACK Segment:

ACK No: 232129013

Identifies The Segment as a SYNACK Segment:

TCP contains Flag Field which explains the response connection between client
and server.
Flag:
Acknowledgment = SET 1

P a g e | 11

What is the sequence number of the TCP segment containing the HTTP POST
command?
Sequence No: 232293053