
Step 10: Examine the new data in the packet list pane of Wireshark.

Step 8: In the command prompt window, ping. You will receive a popup window asking if you would like to save the previous captured packets to a file before starting a new capture. Click the Start Capture icon to start a new Wireshark capture. What device and MAC address is displayed as the destination address? _ Step 7: Restart packet capture in Wireshark.

Notice that the source and destination MAC addresses have reversed, because this frame was sent from the default gateway router as a reply to the first ping. Click the next frame in the top section and examine an Echo reply frame. What do the last two highlighted octets spell? _ g. Click the Internet Control Message Protocol line in the middle section and examine what is highlighted in the Packet Bytes pane.

You can click any line in the middle section to highlight that part of the frame (hex and ASCII) in the Packet Bytes pane (bottom section). Lab – Using Wireshark to Examine Ethernet Frames f.
