Tugas Keamanan Jaringan- Analisa Wireshark
Oleh:
Muhammad Anugerah Gunawan
1006683141
Tek. Kom ‘10
1. Is your browser running HTTP version 1.0 or 1.1? What version of HTTP is the
server running?
Browser: HTTP 1.1
Server: HTTP 1.0
2. What languages (if any) does your browser indicate that it can accept to the
server?
English-US & english
3. What is the IP address of your computer? Of the gaia.cs.umass.edu server?
Source: 152.118.198.149
Destination: 152.118.24.10
4. What is the status code returned from the server to your browser?
HTTP/1.0 200 OK
5. When was the HTML file that you are retrieving last modified at the server?
Last-Modified: Sat, 17 Dec 2011 12:32:01 GMT
6. How many bytes of content are being returned to your browser?
Content length: 126
7. By inspecting the raw data in the packet content window, do you see any headers
within the data that are not displayed in the packet-listing window? If so, name
one.
Tidak ada
—————————————————————–
8. Inspect the contents of the first HTTP GET request from your browser to the
server. Do you see an “IF-MODIFIED-SINCE” line in the HTTP GET?
Tidak
9. Inspect the contents of the server response. Did the server explicitly return the
contents of the file? How can you tell?
Iya, isinya dapat dilihat dari baris data yang diberikan server
10. Now inspect the contents of the second HTTP GET request from your browser to
the server. Do you see an “IF-MODIFIED-SINCE:” line in the HTTP GET? If
so, what information follows the “IF-MODIFIED-SINCE:” header?
Iya, Sat, 17 Dec 2011 13:41:01 GMT. Informasinya berisi tentang waktu terakhir kali data termodifikasi karena request GET sebelumya.
11. What is the HTTP status code and phrase returned from the server in response to
this second HTTP GET? Did the server explicitly return the contents of the file?
Explain.
Message: HTTP/1.0 304 Not Modified. Server tidak memberikan data lagi karena browser mengambil data tersebut dari cache.
————————————————————————
12. How many HTTP GET request messages were sent by your browser?
1
13. How many data-containing TCP segments were needed to carry the single HTTP
response?
Ada 5 data segmen TCP yang mempunyai besar 436 ,1448 ,1144, 1448
and 460 sehingga totalnya adalah 4936 bytes.
14. What is the status code and phrase associated with the response to the HTTP GET
request?
Expert Info (Chat/Sequence): HTTP/1.0 200 OK\r\n
15. Are there any HTTP status lines in the transmitted data associated with a TCPinduced
“Continuation”?
Tidak ada
16. How many HTTP GET request messages were sent by your browser? To which
Internet addresses were these GET requests sent?
GET Request: 4
Source: 152.118.198.149 (152.118.198.149)
Destination: 152.118.24.10 (152.118.24.10)
17. Can you tell whether your browser downloaded the two images serially, or
whether they were downloaded from the two web sites in parallel? Explain.
Browser mendownload gambarnya secara serial, dapat dilihat dari dua kali koneksi TCP yang dilakukan oleh browser.
——————————————————————————–
18. What is the server’s response (status code and phrase) in response to the initial
HTTP GET message from your browser?
401
19. When your browser’s sends the HTTP GET message for the second time, what
new field is included in the HTTP GET message?
Authorization: Basic ZXRoLXN0dWRlbnRzOm5ldHdvcmtz\r\n. Data yang berisi password yang terenkripsi.
—————————-
CMIIW please~
Link download dokumen: http://upload.ui.ac.id/?a=d&i=851768
