Hands On Project 4.4

Learn how to recognize the differences among several different routing protocols and their packets as their data is displayed in Wireshark. Description: In this project, you use Wireshark to view sample capture files of different routing protocols for both IPv4 and IPv6. To view RIPv1 routing protocol data:

  1. Start Wireshark. (In Windows 7, click the Start button, point to All Programs, and then click Wireshark. In Windows 10, click the Start button, click All apps, and then scroll down and click Wireshark. Alternately, use the Start menu search box [Windows 7] or the Search box on the taskbar [Windows 10], type Wireshark, and then click Wireshark in the resulting list.)
  2. In the menu bar under Help, click Sample Captures. The Wireshark Sample Captures Web page opens.
  3. Click the Routing Protocols link in the table of contents. Download the following files to a directory on your computer (alternately, these files may be in a local directory specified by your instructor):
    • eigrp-for-ipv6-auth.pcap
    • ospf.cap
    • RIP_v1
  4. Close the Web browser.
  5. In Windows Explorer or File Explorer, navigate to the directory where you saved the capture files.
  6. Change the file name of the RIP_v1 file to add the .cap extension. The file should now be named RIP_v1.cap.
  7. In Wireshark, click File, click Open, navigate to the folder where you downloaded the routing capture files, and double-click RIP_v1 to open the file.
  8. Click the first entry in the top pane to select it, which should be an RIPv1 request packet.
  9. In the packet details pane below, select Routing Information Protocol and expand it and any subitems below, as shown in Figure 4-47. Examine all content.