تحليل حزمة بيانات شبكية - كتاب الأمن السيبراني - الصف 12 - الفصل 1 - المملكة العربية السعودية

في مثال آخر للحزمة رقم 10214، يمكنك ملاحظة أن عنوان بروتوكول الإنترنت للمصدر (Source IP) هو 199.0.0.154، وعنوان بروتوكول الإنترنت للوجهة (Destination IP) هو 172.217.23.99. وتوضح معلومات التحكم بالنقل (TCP) ورقم المنفذ هو 80، مما يشير إلى استخدام بروتوكول نقل النص التشعبي (HTTP)، وهذا يعني أن المستخدم يزور صفحة ويب بعنوان 172.217.23.99 من صفحة محرك بحث قوقل (Google)، مما يعني تلقي حزمة بيانات من قوقل. يتم استخدام بروتوكول نقل النص التشعبي (HTTP). صفحة محرك بحث قوقل (Google). شكل 2.15: تحليل عناوين بروتوكول الإنترنت (IP) وزارة التعليم Ministry of Education 2025 - 1447 76 --- VISUAL CONTEXT --- **FIGURE**: Scan_results.pcapng Description: A screenshot of a network packet analysis tool (likely Wireshark) displaying captured network traffic. The window includes a menu bar (File, Edit, View, Go, Capture, Analyze, Statistics, Telephony, Wireless, Tools, Help), a toolbar with various icons, a filter bar ('Apply a display filter <Ctrl/>'), and three main panes: a packet list, packet details, and a hexadecimal dump. A smaller, cropped version of the packet list is also visible below the main screenshot, showing truncated 'Info' fields. Table Structure: Headers: No. | Time | Source | Destination | Protocol | Length | Info Rows: Row 1: 10211 | 23.253043 | 199.0.0.154 | 172.217.16.161 | TCP | 54 | 51773 → 443 [ACK] Seq=775 Ack=7213 Win=262144 Len=0 Row 2: 10212 | 23.253149 | 199.0.0.154 | 172.217.16.161 | TLSv1.2 | 100 | Application Data Row 3: 10213 | 23.257407 | 199.0.0.154 | 216.58.206.14 | TLSv1.2 | 147 | Client Key Exchange, Change Cipher Spec, Encrypted Handshake Row 4: 10214 | 23.269741 | 172.217.23.99 | 199.0.0.154 | TCP | 66 | 80 → 51790 [SYN, ACK] Seq=0 Ack=1 Win=60720 Len=0 MSS=1380 SACK_PERM Row 5: 10215 | 23.269831 | 199.0.0.154 | 172.217.23.99 | TCP | 54 | 51790 → 80 [ACK] Seq=1 Ack=1 Win=262144 Len=0 Row 6: 10216 | 23.269944 | 199.0.0.154 | 172.217.23.99 | HTTP | 291 | GET /gts1ol/MFIwUDBOmeEwwSjAJBgUrDgGMGCg Row 7: 10217 | 23.283265 | 199.0.0.154 | 199.0.0.46 | TLSv1.2 | 100 | Application Data Data: The packet list pane (top) shows network packets with columns for 'No.', 'Time', 'Source' IP address, 'Destination' IP address, 'Protocol', 'Length', and 'Info'. Packet 10214, which is highlighted, shows a TCP SYN, ACK packet from 172.217.23.99 (Source) to 199.0.0.154 (Destination) on port 80. The packet details pane (middle) provides a hierarchical breakdown of the selected packet's layers (Frame, Ethernet II, Internet Protocol Version 4, Transmission Control Protocol), including specific fields like Source Port (80), Destination Port (51790), Sequence number (0), Acknowledgment number (1), Flags (0x012 SYN, ACK), and Window size (60720). The hexadecimal dump pane (bottom) shows the raw binary data of the packet. Key Values: Source IP: 199.0.0.154, Destination IP: 172.217.23.99, Protocol: TCP, TLSv1.2, HTTP, Port: 80 (HTTP), 443 (HTTPS), Packet 10214: TCP SYN, ACK from 172.217.23.99 to 199.0.0.154, Src Port 80, Dst Port 51790 Context: This visual demonstrates how network traffic is captured and analyzed, illustrating the interaction between different network protocols (IP, TCP, HTTP, TLS) and the roles of source/destination IP addresses and port numbers in a web browsing scenario (accessing Google). **IMAGE**: Untitled Description: Google logo, a stylized 'G' in blue, red, yellow, and green. Context: Represents the 'Google' search engine mentioned in the main text and the callout box. **IMAGE**: Untitled Description: Logo of the Ministry of Education, Saudi Arabia, with Arabic text 'وزارة التعليم' and English text 'Ministry of Education' along with the years '2025 - 1447'. Context: Publisher or source information for the textbook page.