Week 4 Lab - Rosa Pereira

docx

School

University Of Arizona *

*We aren’t endorsed by this school

Course

326

Subject

Computer Science

Date

May 1, 2024

Type

docx

Pages

4

Uploaded by LieutenantStar15454

Report
1 Week 4 Lab: Analyzing Multicast Traffic Via Wireshark Rosa Pereira University of Arizona NETV 375: Advanced Network Operations Professor Cyrus Afarin April 7, 2024
2 The purpose of this assignment is to familiarize ourselves with multicast traffic and how said traffic looks like in real time utilizing Wireshark. This will help us determine different protocols, IP addresses coming from the source and destination, as well as other elements that can be pointed out from the packets that can be observed in the packet analyzer. VLC Media Player will be utilized to stream a video from the class (instructions on the configuration will be provided), and then we will utilize Wireshark to analyze the traffic coming from the media player. A series of steps will be provided for the set up of VLC Media Player. Once the steps are completed, we will analyze the multicast traffic populating within Wireshark as the video is streaming. A single multicast packet from the capture will be pasted onto this week’s lab to serve as a short visual for how the packets should look like in the capture. 1. Download VLC Media Player ( https://www.videolan.org/vlc/download-windows.html ) 2. Then download any video lecture found in the class’s content on D2L, any lecture should give us enough time to stream the content that will populate onto the Wireshark capture later. 3. Open the VLC Media Player app. Navigate to Media > Stream > + Add… (select the lecture downloaded on step 2) > Stream > Select “Next” on the Stream Output page > From the drop down menu in “New destination” select “RTP / MPEG Transport Stream > Add > In address we will use “224.0.0.251” with the Base port being “5001” then click “Next” > In the Transcoding Options deselect “Activate Transcoding”, Profile will be Video – H.264 + MP3 (MP4), click “Next” > Select “Stream all elementary streams”, then click "Stream”. The lecture selected should start streaming automatically. 4. While the lecture plays in the background open VLC again, select “Media” > From the drop-down menu select “Open Network Stream” > The network URL for our specific
3 case is “rtp://@224.0.0.251:5001” then select “Play”. By this point the video should be playing twice in the background. 5. Open Wireshark and start a capture while the lecture(s) play. Let Wireshark capture for however long is necessary (it should immediately start capturing the multicast traffic but give it a few seconds to capture just in case). 6. We should have a capture with multicast traffic in it, select one of the packets and start analyzing selected IP source and destination addresses as well as protocols being used. The packet selected goes as follows: 1 0.000000 roboob.lan mdns.mcast.net MPEG TS 1370 PT=MPEG-II transport streams, SSRC=0xF597E8D8, Seq=46830, Time=2224432024 [MP2T fragment of a reassembled packet] Amongst the more relevant fields that can be appreciated from this singular packet we can appreciate the Source IP address, which is displayed as “roboob.lan”, when we expand the information found in the IPv4 protocol we can see that the IPv4 address belonging to this source is 192.168.1.62 which effectively corresponds to the host name “roboob”. This host is the device sending the data to the destination, which in this case would be “mdns.mcast.net” or 224.0.0.251 as seen in the IPv4 protocol window, we know the destination checks out since that is the Address we provided on step 3 when configuring VLC Media Player. The protocol for this single packet is “MPEG TS”, this also makes sense since “MPEG-TS” is the protocol corresponding to incoming multicast traffic, this was selected back in step 3 of the lab when configuring the destination setup on VLC. Other protocols that can be appreciated in the protocols window go as follows:
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
4 We can see UDP (used by most RTP applications) which specifies the source port as “55281”, and the destination port as assigned on VLC Media Player “5001”. The Real-Time Transport Protocol (RTP, as selected in step 3 of the lab) indicates the delivery of the media via our own IP network. In conclusion, the simplicity and specificity of this lab has helped us understand a bit more of what goes into multicast streaming, even though we have displayed multicast in a small scale we can still understand and point out important protocols that stand out with this application. The use of VLC Media Player along with the specific configuration provided also helped us gather information that was being displayed in the Wireshark capture, the information gathered on the packet analyzed made sense with the instructions given to the media player being used. The completion of this lab only scratches the surface when it comes to the capabilities of multicast, however we can now understand more about its application and how multicast traffic should look like in real time.