You are on page 1of 1

Brian Ghilliotti

Introduction to TCP-IP

Chapter 9 Case Studies

“Guide to TCP/IP” (page 548)


11/4/2018

9-1: A) Sniff all network activities

B) Select statistics from Wireshark menu, then end point menu, and select IPv4 or IPv6
from end points list.

C) Display filters can be used to narrow protocol traffic types (Analyze, then Display
Filters).

9-2: There are three types of ports; registered, well known, and dynamic. Dynamic ports are
temporary and used for specific communication. Once completed, the use of the port ends,
and it will be available for other communications. These ports are unregistered by IANA.

9-3: Frequent packet loss creates small window size. In file transfers, if there is packet loss,
TCP exponentially reduces window size as it senses network congestion. If packet loss
reverses, window sizes will increase linearly, by will continue on an exponential reduction of
window size if packet loss is detected again.

The reasons for the packet loss would require continued traffic monitoring. Packet losses could
be happening at network interfaces. If there is a one device that seems to be generating
packet losses, the hardware device may have to be given increased bandwidth. If connection
segments indicate concentrations of packet loss, they should be tested and replaced.

9-4: The problem should be investigated since it has the potential to slow down business by
reducing productivity of 20 web servers facilitating your company’s e-commerce. Duplicate
ACKs are most likely the results of an unacknowledged ACK from a sender to receiver. Once
can confirm this by looking for re-transmission timeouts, which are repeated 5 times, and given
time extensions that are increased exponentially, until the sender gives up. If this is the case,
wire shark should be used to determine where on the network packet losses or collisions are
happening.

You might also like