Question textNetwork Traffic Analysis using Wireshark To complete this part of the quiz you need to download the following packet capture file available via google drive. Please note that you must be logged in with your Monash email account on the browser you are using for this quiz to access the Google drive. Make sure you are logged out of all your personal Google accounts if you encounter a request access page. Link to Apollo Node PCAP file Important Note: Various parts of the process of creating the PCAP files are randomised. Any name, domain, and/or IP address similarity is coincidental. Scenario The provided PCAP file for Apollo node contains the network traffic sent and received by this node for a period of time. During this time a user on this node has visited the web server of the organisation (the node named Web in the diagram), the intranet server (the node named Intranet in the diagram), and the external web server (the node named External in the diagram). The network connectivity is shown in the following diagram. Task 1: Data Link Layer Using the information contained in the PCAP file, identify the MAC addresses of the following nodes. The answers are not case sensitive. Note: Include colon (:) as the separator for all MAC addresses (e.g. AA:BB:CC:DD:EE:00) MAC address of Hera: Answer 1 Question 1[input] [2 Mark(s)] MAC address of the Intranet server: Answer 2 Question 1[input] [2 Mark(s)] Task 2: Network Layer IP address of Hera: Answer 3 Question 1[input] [2 Mark(s)] IP address of of the external web server (www.luna.net): Answer 4 Question 1[input] [2 Mark(s)] Task 3: Transport and Application Layers Visiting a Web Server Identify the frames of Apollo's visit to the organisation intranet server (the node named Intranet in the diagram) and fill out the following fields. Frame numbers refer to the Wireshark numbering (leftmost column). a) Identify the first frame that initiates the connection. Enter the frame number: Answer 5 Question 1[input] [1 Mark(s)] The client port number: Answer 6 Question 1[input] [1 Mark(s)] The 32-bit raw sequence number in hex including leading zeros (e.g. 00aabbcc): Answer 7 Question 1[input] [1 Mark(s)] b) Identify the frame of the GET request for the default HTML page. Enter the full request URI: Answer 8 Question 1[input] [1 Mark(s)] Enter the size (in bytes) of the application layer message: Answer 9 Question 1[input] [1 Mark(s)] c) Identify the frame of the server response containing the HTML page. Enter the size (in bytes) of the application layer message: Answer 10 Question 1[input] [1 Mark(s)] The HTML page content has a 16-digit hex value as a flag. Enter the flag: Answer 11 Question 1[input] [1 Mark(s)] Sending an email Identify the frames of the email sent from Apollo using the Mail server. Find the frame that contains the email address of the recipient and enter it here (without < and >): Answer 12 Question 1[input] [1 Mark(s)]