This lab consists of collecting and analyzing several TCP packet traces. These traces should be collected using tcpdump and will demonstrate a variety of TCP behaviors.
The traces should be collected using the ttcp testing tool.
On the receiving machine (normally machine 3), use
ttcp -r -s
ttcp -t -s b-20
Prior to starting up a test, you will need to start up a tcpdump session. These traces can be collected at both the sender and the receiver (and for that matter on the router too). Both are useful, and they will show you different things. You should specify the
-i eth0option, and may also wish to specify the
host b-20so you only collect data on the particular connection you are using.
Once you have collected your first trace, get a feel for packet traces and TCP.
Use tcpdump -r trace -x -n | more to print out the contents of a trace file. Identify the 3-way SYN handshake. Look at the use of sequence numbers for data and ACKs. Note that the SYN and FIN each take a byte of sequence space. Note the use of delayed ACKs by the receiver.
For each trace perform the following analysis:
In addition to looking at the traces in the test lab, try collecting a trace to your home site. In order to do this, you'll need to install ttcp on a machine there. The source for ttcp is available on the lab machines; copy it over and give it a try!
In order to do this exercise, you will need to log in to one of the FreeBSD lab workstations. Use ssh to connect from your NT workstation to the FreeBSD machine.
For help on tcptrace, try tcptrace -h.
You can zoom xplot by using the left mouse button to select a region. Clicking the left button unzooms one level. Middle button drags/scrolls the plot. Right button exits. Shift-Left-button produces a .PS file which you might be able to print.