This week we’re using wireshark to look at packets. I downloaded wireshark then read the documentation on how to use it.
The setup instructions are here
First I looked at the destination IP addresses and typed in $who is 220.127.116.11 for each IP address and saw that they are in fact tabs that I have open – amazon, stack overflow
Then I looked at the Statistics dropdown and got this, but do not understand it:
UDP – fire and forget
TCP/IP -three way handshake
ARP – address resolution protocol