Class 3 - TCP Dump, IP Behaviour

Question 1

open-source command line tool for monitoring network traffic
- works by capturing and displaying packet headers and matching them against certain criteria
understands boolean search operators and can use host names, IP addresses, network names and protocols as arguments
works on Unix and Linux

Answer 1

TCP Dump

Question 2

IP -> x -> Mac-address

Answer 2

x = RRP (Reverse Resolution Protocol)

Question 3

Mac-address -> x -> IP

Answer 3

x = ARP (Address Resolution Protocol)

Question 4

connectionless service (no session is established between hosts)
does not guarantee or acknowledge delivery or sequence data

Answer 4

UDP (User Datagram Protocol) - only a broadcast

Question 5

connection-oriented service (a session is established between two hosts)
guarantees delivery through the use of acknowledgements and sequenced delivery of data

Answer 5

TCP