At a glance#
en0
Wi-Fi interface captured
6
Display filters applied
10
ICMP packets from one ping
78.52ms
Round trip on the wire
| Item | Value |
|---|---|
| Machine | MacBook Air (M2), macOS |
| Interface | en0 (Wi-Fi) |
| IPv4 address | 192.168.1.229 |
| MAC address | a8:8f:d9:xx:xx:xx (redacted on this site) |
| Default gateway | 192.168.1.1, MAC 24:5a:4c:81:24:16, also the local DNS server |
| Ping target | google.com.sa → 172.217.17.35 |
What's inside#
Setup#
The macOS stand-ins for ipconfig /all and ping -4, and turning off Private Wi-Fi Address to see the real MAC.
Open
Capture & filters#
The six display filters, why the PSU site never showed up as HTTP, and two correct DNS answers for one name. Open
ICMP analysis#
Ten ICMP frames, frame 228's Ethernet and IP headers, and why the wire RTT is lower than ping's.
Open
Findings#
Six things the capture showed, each in a couple of sentences. Open
macOS substitutions
The lab sheet assumes Windows. I used ifconfig en0 in place of ipconfig /all and ping -c 4 in place of ping -4. I also turned off Private Wi-Fi Address so the capture shows the hardware MAC, not a randomised one.