| Lab Name |
Exploring IP addresses using Network Traffic packets
|
| Subject Area |
Computer Science: Networking
|
| Grade |
9 - 12
|
| Topic |
IP addresses
|
| Experiment Title |
Analyzing Network Traffic packets
|
| Hardware |
WiFi Network Adapter (built-in to laptops)
|
| Software |
- Computer command line or terminal
- Open-source network protocol analyzer
|
| Number of Sessions to teach the topic |
1
|
| Educational standards to be addressed |
AP CSPrinciples Enduring Knowledge Standards:
- EK6.1.1A The Internet connects devices and networks all over the world.
- EK6.1.1C Devices and networks that make up the Internet are connected and communicate using addresses and protocols.
- EK6.1.1E Connecting new devices to the Internet is enabled by assignment of an Internet Protocol (IP) address.
- EK6.1.1G The domain name system (DNS) translates domain names to IP addresses.
- EK6.1.1H The number of devices that could use an IP address has grown so fast that a new protocol (IPv6) has been established to handle routing of many more devices.
|
| COSMOS concepts to be used for the lab |
Ping, client-router-server relationship, IP address, data-rate, packets
|
| K12 Educational Goals (How the educational goals are achieved through teaching using the experiment, how the topic is connected to the COSMOS concepts used) |
The experiment uses the terminal to ping different addresses to learn about IP Addresses and how a DNS works.
The experiment captures 15 second snapshots of network traffic using Wireshark/tshark, which is used to analyze a variety of networking topics (types of traffic on different sites or TCP ports, datarate, etc.)
|
| Short Description and Walk-through of the experiment |
- Students ping various URLs to see the IP address of the server and how long it takes for a message to go back and forth.
- Students use Wireshark/tshark to create a (PCAP → JSON) which they upload into the P5 visualization tool.
- Students capture a packet and identify which IP address has the most traffic.
- Students attempt to determine which IP addresses send the most traffic
|
| Testbed mapping of the experiment |
- Packet Capture files (.pcap) used in experiment can be captured from any Testbed node that has tshark installed. Students would need additional tools to generate traffic on the testbed, instead of from their browser or other laptop applications.
- Ping can be done from different nodes on a testbed:
- Students can see how a different times for a ping to occur from a different starting client.
- The ping could be done between different nodes in one testbed.
|
© 2018 COSMOS Project. Created by Joel Bianchi, Frederick Douglas Academy I
Andrew Rose, Trinity School.