實驗五-DHCP協(xié)議分析

實驗五DHCP協(xié)議分析實驗報告一、實驗目的：掌握DHCP報文的格式掌握DHCP協(xié)議的工作原理及工作流程二、實驗環(huán)境：聯(lián)網(wǎng)并運行SimpleNPTS軟件的PC機DHCP效勞器三、實驗內(nèi)容和要求：1、捕獲并分析DHCP客戶端在請求分配IP地址的過程中發(fā)送和接收到的報文2、構造并發(fā)送DHCP請求報文，觀察捕獲到的DHCP效勞器的響應報文四、實驗步驟：開啟網(wǎng)絡協(xié)議分析軟件，設置過濾器為只捕獲DHCP協(xié)議報文。把客戶端的網(wǎng)卡設置為“自動獲得IP地址〞和“自動獲得DNS效勞器地址〞。然后單擊確定。捕獲并分析本機發(fā)送和DHCP效勞器響應的Discover、Offer、Request、Ack等4個DHCP報文。啟動Windows命令窗口，在窗口中鍵入以下命令，并通過協(xié)議分析軟件捕獲并分析這個過程中發(fā)送和接收到DHCP報文。ipconfig/release釋放已分配的IP地址ipconfig/renew重新分配IP地址構造和發(fā)送DHCPDiscover報文，捕獲并分析這個過程中發(fā)送和接收到的DHCPDiscover和Offer報文。構造并封裝DHCPDiscovers報文的要點：目標硬件地址為：FF-FF-FF-FF-FF-FF〔有限播送〕；源硬件地址為本機MAC地址；幀類型字段的取值：0x0800。目標IP地址為有限播送地址：255.255.255.255；源IP地址為：。IP頭協(xié)議字段的取值為：17〔UDP〕?？傞L度據(jù)實填寫；IP頭中其它字段保持為默認值。UDP的目的端口號為：67；源端口號為：68總長度據(jù)實填寫。DHCP報文：根據(jù)前面捕獲到的DHCPDiscover報文的內(nèi)容來填寫。計算校驗和啟動報文的發(fā)送。捕獲并分析網(wǎng)絡中傳輸?shù)腄HCP報文。五、實驗結果與分析〔含程序、數(shù)據(jù)記錄及分析和實驗總結等〕：1、以十六進制的形式給出第3步為客戶端分配IP地址時發(fā)送和接收的DHCP報文，并對其進行分析。DISCOVERDHCP01〔操作碼：1〕01〔操作類型：1〕06〔硬件長度：6〕00〔跳數(shù)〕111A057F〔事物標記〕0000〔秒數(shù)〕0000〔保存〕00000000〔客戶IP〕00000000〔主機IP〕00000000〔效勞器IP〕0000000000〔網(wǎng)關IP〕E57C07DEEC〔客戶主機硬件地址〕0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000〔host〕0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000〔boot〕63825363〔事物標記〕35〔消息標簽〕01〔消息長度〕01〔DISCOVER〕7401013D070100E57C07DEEC32040A84FE7E0C0835623230353031363C084D53465420352E30370B010F03062C2E2F1F21F92B2B02DC00FF00〔數(shù)據(jù)：data〕OFFERDHCP02〔操作碼：2〕01〔操作類型：1〕06〔硬件長度：6〕00〔跳數(shù)〕A667003E〔事物標記〕0000〔秒數(shù)〕0000〔保存〕00000000〔客戶IP〕0A84FEDE〔主機IP〕0A84FE04〔效勞器IP〕0000000000〔網(wǎng)關IP〕E57C07DEEC00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000〔boot〕63825363〔事物標記〕35〔消息標簽〕01〔消息長度〕02(offer)0104FFFFFF003A040000A8C03B040001275033040001518036040A84FE0403040A84FEFE0608C0A80001C0A80101FF00000000000000000000〔數(shù)據(jù)：data〕REQUESTDHCP01〔操作碼：1〕01〔操作類型：1〕06〔硬件長度：6〕00(跳數(shù))A667003E〔事務標記〕1C00〔秒數(shù)〕0000〔保存〕00000000〔客戶ip〕00000000〔主機IP〕00000000〔效勞器IP〕00000000〔網(wǎng)關IP〕00E57C07DEEC〔客戶主機硬件地址〕00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063825363350103〔消息類型：request〕3D070100E57C07DEEC32040A84FEDE36040A84FE040C083562323035303136510C00000035623230353031362E3C084D53465420352E30370B010F03062C2E2F1F21F92B2B03DC0100FFACKDHCP02010600A667003E00000000000000000A84FEDE000000000000000000E57C07DEEC0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063825363350105〔消息類型：ack〕3A040000A8C03B040001275033040001518036040A84FE040104FFFFFF00510300FFFF03040A84FEFE0608C0A80001C0A80101FF0000000000012、以十六進制的形式給出第4步客戶端釋放IP地址時發(fā)送和接收的DHCP報文，并對其進行分析。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接收的DHCP報文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、以十六進制的形式給出第4步客戶端請求分配IP地址時發(fā)送和接收的DHCP報文，并對其進行分析?？蛻舳苏埱蠓峙銲P地址時發(fā)送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接收的DHCP報文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、以十六進制的形式給出第5步自行編輯發(fā)送的DHCP報文和相應的響應報文，并對這些報文進行分析。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