Assignment 2
Assignment 2
Question 2:
Type in ipconfig/displaydns to see the cached addresses locally on your machine.
i. Take a screenshot of some and paste it here.
ii. What are some of the types of resource records that is cached in your machine
when you ip/display dns?
CNAME Record , A (Host) Record , PTR Record
Question 3:
Type in ipconfig/flushdns to delete cache. Start Wireshark and follow the directions listed.
Then answer the questions below.
• Type in filter bar at the top of the Wireshark interface:
ip.addr==xxxx.xxxx.xxxx.xxxx the xxxx.xxxx.xxxx.xxxx being whatever your IP
address is. You can also filter your captures with "&& dns" (If this does not work,
try removing the IP address condition from the filter, leaving just "dns").
• The type of capture will either be Wifi or Ethernet, depending on how your
machine is connected to the internet.
• Open browser and go to www.ietf.org
• Stop capture.
• Save the capture and attach in submission.
• Try looking through the packet details pane (Default location is between the
packet list pane and the packet bytes pane) for the following information.
ii. What transmission protocol, in the transport layer, did your machine use to find the IP
address of www.ietf.org?
UDP
iii. What is the port destination for the DNS query?
53