|
Home > Archive > 70-216 > February 2004 > Exam Help
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| Newbee 2004-02-11, 6:46 pm |
| I am taking a practice Exam for 70-216 and a question reads, When tracing network traffic resulting from pinging www.microft.com, wou notice no ARP packets in the trace. Which command explains why you did nit see ARO packets to resolve the default gateway? The options are nclookup, arp, netstat, & tracert. The books I have do not cover these topics in great detail and I would like to understand this before taking the test. Any help is appreciated. | |
| jeff_j_black 2004-02-12, 1:27 pm |
| Best advice is think about what the question is asking you to do, then study what each of those commands are capable of. You can get additional information on these tools by typing them at the command line followed by ' /?'. Example: tracert /?
Don't be afraid of learning command line tools, it is very likely you will use them sometime. | |
| curiousgeorge 2004-02-12, 3:33 pm |
| Jeff eloquently said he doesn't know. 
But to address your question, the way you worded the scenario doesn't make any sense.
1. the ping command doesn't trace network traffic. it only waits for a request from the destination host. the tracert command actually traces network traffic.
2. ARP packets are never in ping results, so there's nothing to explain as to why they aren't there.
Every NIC has a MAC address. ARP (address resolution protocol) maps a NIC's MAC address to an IP address. When sending data to another host, your computer must know both its IP address and MAC address. This information is in the ARP cache of the computer. If the information is not in the ARP cache a broadcast ARP packet is sent accross the network.
So if the question is asking why there were no ARP packets sent accross the network, the answer is because the information was already in the ARP cache of the computer. You can see the ARP cache by typing ARP -a at the command line.
Hope that helps.
Don't worry if it's confusing. Many techies have never used the ARP command. | |
| jeff_j_black 2004-02-12, 4:44 pm |
| Nice!
No, I have taken to encouraging folks to check things out themselves. The answer and an explanation won't get them to try the various tools mentioned, so they won't understand what those tools are capable of. If you were to try out the tools listed and do a little research on the web, you would indeed come to the answer.
Good to see that you are back, George! |
|
|
|
|