TCP (Transmission Control Protocol) 3 way handshaking The figure below shows the query packets and their responses from our capture. When a client asks for an IPv4 address resolution, it sets query type as “A”, whereas type is in form of “AAAA” when the client wants an ipv6 address resolution. Our web browser creates two dns queries for both ipv4 and ipv6.

Now, the virtual machine has dns server MAC and IP and can create a dns query to ask the server to translate the domain name into an IP address.ĭNS (Domain Name System) service is used to translate a domain name into an IP address. See the details below.ĪLSO READ: How to do TCP Retransmission Analysis using Wireshark

The dns server receives the ARP packet and prepares a response packet that contains its own MAC address. The client broadcasts an ARP request and asks “Who has this IP address, please send me your MAC address”. When I type in the address bar and press enter button, my browser notices that it needs to convert into IP address so it will create a dns query packet, asking the sever to translate the domain name into IP address, but the client (virtual machine) does not know dns server MAC address (it learns IP address of dns server from dhcp server during obtaining an IP address). Resolving DNS server MAC address using ARP (Address Resolution Protocol) See the details below for my capture.ģ) The virtual machine broadcasts a dhcp request packet, saying ' Hey server, I accept what you have sent me'.Ĥ) The dhcp server answers with a dhcp ack packet which lets the virtual machine know that the IP address is registered for it during period of leasing time. ALSO READ: How to use AAA with Network Policy Server (Part 1)Ģ) When the dhcp server receives the discover packet, it processes the request and responses back to the virtual machine with the offer packet, in short saying ' Hey client, do you want this IP address with these options'.

How to get url from wireshark http get