[Haifux] How Ethernet works - Some more details
anir at research.haifa.ac.il
Mon Apr 7 19:03:22 MSD 2008
In my lecture, I mentioned that I cannot put in the lecture slides the
things I showed on screen. Some pages were from books that are in print.
I showed some pictures, that, I think, explain very well certain aspects
of ethernet communication.
However I supply, below, links to some of the information I talked about,
even if these are less good (in my opinion),
and some I didn't have time to talk about :-) ...
presentation of osi layers and other matters.
about : Ethernet over twisted pair
History, layer description, examples, and much more: worth looking at
** everybody will find something he didn't know.
tcp state machine :
(the next link is very long and split on 6 lines !).
-- Wireshark filters --
Here are a few examples of diplay filters and capture filters.
In both cases logical expressions can do wonders.
eth.dst == 00:0d:22:23:62:3f (filtering based on MAC address).
ip.src == 188.8.131.52
!(ip.src == 184.108.40.206) (negation this way works, using != doesn't always)
!(ip.addr == 220.127.116.11 or ip.addr==18.104.22.168)
!(tcp.srcport == 80)
!(tcp.port == 80)
arp (worth trying)
CAPTURE filters : (spaces between keywords are important)
ether host 00:0d:22:23:62:3f
net 22.214.171.124 mask 255.255.255.0 (note: non-netwok bits should be set to zero)
net 126.96.36.199 mask 255.255.255.252
tcp port 8080
More information about the Haifux