《1、使用网络协议分析仪Wireshark》由会员分享，可在线阅读，更多相关《1、使用网络协议分析仪Wireshark（7页珍藏版）》请在金锄头文库上搜索。
1、实验名称使用网络分析仪Wireshark 一、实验目的：（1）掌握安装和配置网络协议分析仪Wireshark的使用方法；（2） 熟悉使用Wireshark工具分析网络协议的基本方法，加深对网络协议格式、协议层次和协议 交互过程的理解。四、实验环境:三实验内容和要求：（1）安装和配置网络协议分析仪;（2）使用并熟悉Wireshark 分析仪的部分功能。windows 7 下 Wireshark64 位五、操作方法与实验步骤（一）安装和配置: Wireshark 112.4 (64-bit) SetupWofcome to the Wirestiark 1.12.4(64 bit) Setup W
2、izardThs WEard wil gJde vdu through the insiE-lhoDn af Wireshark3rfere slrtinQ thu instll| Cancel Wireshark 1.12 (64-bit) Setup1 = 1 IMScted Additional TdsksVvlidi add terd 怙苦ks should be done?MCreate ShortcutH工 start Menu Iteni_ Desktop loonQJck Launch oonFile Extensions/ Associate trace tilt 亡 k t
3、ens ms te Wir 亡才bitExtensiDns: Sms mepmpcate, bfr capenq mrf| fdCj outj pcapj- pcBpnar okL rf5r aiocpr s也 tpCj g tracej. ir匸mnpc w说V/rcsharklrEtaler (tm)c BackNet CancelWire:hark 1.12.4 (54-bit) SetupChcHosc Intll LcootionicNsse Hie fader in which to ns tall Wlrediark L.IZ. (&2力.Choose a drcctory h
4、which to ins tai WiresharkDestnation FolderD：嗽件安装WrtresharkSpace required: LQ5占PIEpace 口涸出赳 107.93BBrorae.wreshark insrailer (tm)Cancel Wires hark 1.12.4 (54-bitInstall WinPcap?WflnPcap ic r&qured tfi capture I mb nefork data. 3toJcI WinPcap be ingtaHed?CLrrerit risifllbd VinFccp veracriWinPcop is c
5、urrently not infteledns tai匣 Install WinPcsp 4.13(Use AddEmove Proarams first to uiin&tal an/ u-detected old WrTcap versions)hat is iA*inPcap?Wreshark Installer (tm) Backi 乩Ccj i- Wireshsrk 1,12.4 (64-bit) SetupInstdllimgPlease wait 砧俺 Wineahark 1.12.A (M-bit) is bertg installed.Extract: IhAireshark
6、dll. 67%Outmtftlder: D:嗽询委奘MTEsharkExtract; uninstdl.exeExtract： wet3p-l,12.o,dlExtract; Ibwired-iarkidlli .i 67%V/lresl-ark rei:alter (tm)Ccinoel13 WinPcap 413 Setup叨inPcdpPiease review the fdlowhg aptens before installing WrPzap4.13JI Automatic別 start the InPcap dhB at boot tiTeNulstft infall Syst
7、em 住片& Back n血I/i Wi nReap 4丄 3 SetupCompleting the WinPcap 4 13 Setup Wizardl/Vin Reap 41.3 has be&n in stalled on youoamputer.ick Fheh to dose thia wizard. BackAniehCancel Wireshark 1.12.4 (64-bit) SetupCompleting th Wiresharic 1J2 4(64-bit) Setup WizardWireshark. 1.12.A 64-b(t) has been indaled o
8、n your oamputer.Clck Finidi Id dos亡 this wizard.I? I Run Wireshcrt 1.12 4 fC-l-bit)I 1neve BackFinishCancel（二）、使用 Wireshark分析仪启动系统，点击“Wireshark”图标进入界面Fk： Edt Uuw 些 Caiytura 如详 尹hAo T*(宵小里 Twte pYtcmats H4|pe 卫白二ii證丨宅p卡电苓二I直回目自越I *団电丹WIRESHARKVersw 1.1 (*L：L4tt4B6Lda lirain mastl.LSFilesOnJhre倉 Wtbsi
9、telntrfc LltW- UM 刑口 ddXimCLE 訐KTHfif*TC RKtiBlJ.步吐O-Kicia o* menOpen Recent:亞就taw医无注阳也呈(2? VMwv Nbwork Adpiwr VMnvtL.c*ptur$A 闻 盘申育HQV昭i CKKIK4 阻 M 帕*k；曲 Users uideTh Uwi d* :boi -.vtiar. ri riEricj舒 Security mu ivy n pcwbCapture Optionsj z-ra cuAe cfteraHow t CMptmrtSKEW 卿 13QCXlUI-HhDNetwork. Med
10、iaEputc rtamhon liirca.rtn R： Kr-im*. TMJjM _.选择网络连接方式，因为我用的是WiFi所有选择无线网络连接方式进入Capture Options选项，可以进行很多操作，可以选择接连的网络，可以选择过滤的条 件，选择俘获分组的接口卡点击start开始俘获分组，点击工具栏中红色正方形停止俘获Nd.TimpScurrsDfl=J|infl|ionProtocol L”口thJnD1啊 MOCHW?12Z. 1?9. 207. nL-9Z.1Q4. 1. MTCPM35 3043 Pir4|iC 5*eq=l *ck=l in=l54J Len=J1賦 HK
11、KW9l&- Li 3&122.19-3. 2&?r3LTCPTCP ZuriiindiwJ*KE轧旷1日5、74 址匕Vi-n-0 Lerr-030,2007900019Zrl&6-1.3&19Q.164.1.1725Tandrd tjueryOXlSTtl A M.S-1na-Ci3ni4D.24EOS3OMloa.m.t.i1*32.163. 1-托417i andard 3时yr-fiEpns OMlSTh CHaME Lx=.filnj. ciMChNC-l.O2237O&*112.9d.B4 . IOUW.3L64. 1. 3a req121aicq Pratacai1. 3176
12、510D011250B4-. IDL-9a.lM. l- 36aicq121 aiLq Prctocol72.24&vniDH?1H2.16S-L. 3&LZ.IES. J.LCM572St-and-srd queryJKBZle Acob42.25L9OIH192.1M.L.1L?Z.lS4.2d 同Ct4541?5t-and-yd 口ueryresponse EJELe 匚NAME msinjLi EQfi.i:nChJWE nn9 3.C755 62CIOOS6.ZilL.lg4.1. KUDP1095wrce Pfjrt BOju uestinaticn port act.10102.
13、7H25OM192P14P1.)&M,24flI18&I51LUDPlooSource Do-t; fl000 Oestin-stion port; flOCifl112. 7132004lira.lfif.l. S&U.S.76.243.131UDPU3Source poke： ED4O 口astlnatloi poris 丄123.7355W70|244.144,.21L?ZilS4iJ.d 城UCF外ESoyrts ptrt: BDW Detinotion prt: DOOC+： Frmo-孔 121 byrflG an wdrm CM8 hlts) , 121 by-t：flG capturad
