[Solved] CS342 Lab 1

Q1.The Internet Ping command bounces a small packet(s) to test network communications, and then shows how long this packet(s) took to make the round trip. The Internet Ping program works much like a sonar echolocation, sending a small packet of information containing an ICMP ECHO_REQUEST to a specified computer, which then sends an ECHO_REPLY packet in return. Explore more about the ping command and answer the following questions (Unix or GNU/Linux version only):

1. What is the option required to specify the number of echo requests to send with ping command?
2. What is the option required to set time interval (in seconds), rather than the default one second interval, between two successive ping

ECHO_REQUESTs?

1. What is the command to send ECHO_REQUEST packets to the destination one after another without waiting for a reply? What is the limit for sending such ECHO_REQUEST packets by normal users (not superuser)?
2. What is the command to set the ECHO_REQUEST payload/data size (in bytes)? If the payload size is set to 32 bytes, what will be the total packet size?

Q2. Select six hosts of your choice in the Internet (mention the list in your report) and experiment with pinging each host 25 times at three different hours of the day. You can use the following online tools for this experiment:

1. http://www.spfld.com/ping.html
2. https: //w ww .subnetonline.com/pages/network-tools/online-ping- php
3. List out the average RTT for each host in tabular form, and explain whether RTT has a correlation with the geographical distance of the destinations from source
4. Check if in any case, packet loss is greater than 0% and provide reason for the same
5. Pick one of the above used hosts, and repeat the experiment with different packet sizes ranging from 64 bytes to 2048 bytes. Plot average RTT vs packet size.
6. Explain how change in packet size, and time of the day impact RTT.

Q3. Select an IP address of your choice (mention the address in your report) and capture the outcome of 1,000 pings in two separate files by executing the following ping commands.

• ping -n <IPAddress>
• ping -p ff00 <IPAddress>

Come up with a method to read and analyze the observations captured in the files and answer the following questions. You are free to look for a tool, programming/scripting language that is best suitable for the task and learn just enough of it to get the analysis done.

1. What was the packet loss rate for each command?
2. What was the minimum, maximum, mean, and median latency of the pings that succeeded? Ignore pings that failed in the calculation.
3. Give plot to show the normal distribution of the ping latency.
4. The two experiments are almost similar except in few aspects. Describe the significant network behavior difference (if any) you observed between the two experiments.

Q4.With regard to ifconfig and route commands, answer the following questions:

1. Run ifconfig command and briefly describe its output (important attributes).
2. What options can be provided with the ifconfig command? Mention and explain at least four options.
3. Explain the output of route command. (1)
4. Mention and explain at least four options of the route Execute the route command with these four options and show the output. (1)

Total marks: 5

Q5.Answer the following questions related to netstat command.

1. What is the command netstat used for? (1)
2. What parameters for netstat should you use to show the established TCP connections? Include a screenshot of the command and output (1)
3. What does netstat r show? Explain all the fields of the output. (1)
4. What option of netstat can be used to display the status of all network interfaces? By using netstat, figure out the number of interfaces on your computer. (1)
5. What option of netstat can be used to show the statistics of all UDP connections? Run the command on your computer and show the output.

(1)

1. Show and explain the function of loop-back interface. (1) Total marks: 6

Q6.Perform a traceroute experiment (with same hosts used in Q2) at three different hours of the day, and then answer the questions below. Use any one of the following online tools for this experiment:

• http://ping.eu;
• http://www.cogentco.com/en/network/looking-glass;
• https://www.ultratools.com/tools/traceRoute; http://network-tools.com ;

1. What is the use of traceroute tool? (1)
2. List out the hop counts for each host in each time slot. Determine the common hops between two routes if they exist. (1)
3. Check and explain the reason, if route to same host changes at different times of the day. (1)
4. Inspect the cases when traceroute does not find complete paths to some hosts, and explain the reasons. (2)
5. Is it possible to find the route to certain hosts which fail to respond with ping experiment? Give reasoning. (2) Total marks: 7

Q7.Answer the following questions regarding ARP.

1. How do you see the full ARP table on your machine? Explain eachcolumn of the ARP table. (2)
2. What command is used to add or delete an entry into the ARP table. Use this mechanism to add at least two new hosts to the ARP table and include a screenshot. (1)
3. Can there be an entry for any IP from different subnet in the ARP table of your

PC? Explain your answer. (2)

1. Check and report what happens when you forcefully replace (using delete, add command of arp) the Ethernet address of an existing entry with the Ethernet address of another existing entry of the ARP table in your PC, and send ping to those IPs. Explain the behavior. (1+2) Total marks: 8

Q8. Install network tool nmap in your PC and perform the following experiments:

1. What is the command to check which PCs of your sub-net are up? (0.5)
2. How to detect firewall settings of your own PC using nmap? (0.5)
3. Run the command of question (a) at least 6 different times of a day, and find the number of hosts online. Plot the number of on PCs vs time, to see if there is an hourly trend for when computers are switched ON or OFF in your LAN. (1) Total marks: 2