Sunday, September 25, 2011

Wireshark Lab: HTTP




1. Is your browser running HTTP version 1.0 or 1.1? What version of HTTP is the
server running?

My browser is running HTTP 1.1 and the server is also running 1.1

2. What languages (if any) does your browser indicate that it can accept to the
server?
My browser accepts the English language en-us,en.

3. What is the IP address of your computer? Of the gaia.cs.umass.edu server?

The computer that i used had an ip address of 192.168.2.3
The server had an address of 128.119.245.12

4. What is the status code returned from the server to your browser?

The status code returned by the server to my my browser is code 200(ok).

5. When was the HTML file that you are retrieving last modified at the server?

The time last modified said Saturday, 24 Sep 2011 22:31:01 GMT. So basically when I requested the package.

6. How many bytes of content are being returned to your browser?

4296 bit were returned to my browser.

7. By inspecting the raw data in the packet content window, do you see any headers
within the data that are not displayed in the packet-listing window? If so, name
one.

No, everything in the packet content window matched the packet-listing window.


Answer the following questions:
8. Inspect the contents of the first HTTP GET request from your browser to the
server. Do you see an “IF-MODIFIED-SINCE” line in the HTTP GET?

No, the HTTP GET did not have a IF-Modified-Since line.

9. Inspect the contents of the server response. Did the server explicitly return the
contents of the file? How can you tell?

Yes, because this was the first time I went to the site with my cache cleared.So I received a typical content response (Content-Type: text/html;)


10. Now inspect the contents of the second HTTP GET request from your browser to
the server. Do you see an “IF-MODIFIED-SINCE:” line in the HTTP GET? If
so, what information follows the “IF-MODIFIED-SINCE:” header?

Yes , the request had a IF-Modified-Since header. The time and date follow the header.

11. What is the HTTP status code and phrase returned from the server in response to
this second HTTP GET? Did the server explicitly return the contents of the file?
Explain.

The status code received was 304 Not Modified. So the server did not explicitly return the contents of the file it just returned the previous cached information.


Answer the following questions:

12. How many HTTP GET request messages were sent by your browser?

One get request was sent out by my browser.

13. How many data-containing TCP segments were needed to carry the single HTTP
response?

Four reassembled TCP segments were needed.

14. What is the status code and phrase associated with the response to the HTTP GET
request?

The status code was 200 (ok).

15. Are there any HTTP status lines in the transmitted data associated with a TCPinduced
“Continuation”?

NO, there are not.


Answer the following questions:

16. How many HTTP GET request messages were sent by your browser? To which
Internet addresses were these GET requests sent?

manic.cs.umass.edu
gaia.cs.umass.edu
www.pearsonhighered.com

17. Can you tell whether your browser downloaded the two images serially, or
whether they were downloaded from the two web sites in parallel? Explain.

My browser downloaded the files in parallel for they all had the same time stamp
Sun, 25 Sep 2011 16:48:49 GMT


Answer the following questions:
18. What is the server’s response (status code and phrase) in response to the initial
HTTP GET message from your browser?

401 authorization required

19. When your browser’s sends the HTTP GET message for the second time, what
new field is included in the HTTP GET message?

Authorization: Basic d2lyZXNoYXJrLXN0dWRlbnRzOm5ldHdvcms=\r\n