2022-01-28 20:21:44 +03:00
|
|
|
$ fq -d pcap dv /sll2_tcp.pcap
|
2021-12-08 18:20:37 +03:00
|
|
|
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: /sll2_tcp.pcap (pcap) 0x0-0x1e4.7 (485)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x000|d4 c3 b2 a1 |.... | magic: "little_endian" (0xd4c3b2a1) (valid) 0x0-0x3.7 (4)
|
|
|
|
|
0x000| 02 00 | .. | version_major: 2 0x4-0x5.7 (2)
|
|
|
|
|
0x000| 04 00 | .. | version_minor: 4 0x6-0x7.7 (2)
|
|
|
|
|
0x000| 00 00 00 00 | .... | thiszone: 0 0x8-0xb.7 (4)
|
|
|
|
|
0x000| 00 00 00 00| ....| sigfigs: 0 0xc-0xf.7 (4)
|
|
|
|
|
0x010|00 00 04 00 |.... | snaplen: 262144 0x10-0x13.7 (4)
|
|
|
|
|
0x010| 14 01 00 00 | .... | network: "linux_sll2" (276) (Linux "cooked" capture encapsulation v2) 0x14-0x17.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | packets[0:5]: 0x18-0x1e4.7 (461)
|
|
|
|
|
| | | [0]{}: packet 0x18-0x77.7 (96)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x010| 44 08 a5 61 | D..a | ts_sec: 1638205508 0x18-0x1b.7 (4)
|
|
|
|
|
0x010| 29 c1 0b 00| )...| ts_usec: 770345 0x1c-0x1f.7 (4)
|
|
|
|
|
0x020|50 00 00 00 |P... | incl_len: 80 0x20-0x23.7 (4)
|
|
|
|
|
0x020| 50 00 00 00 | P... | orig_len: 80 0x24-0x27.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | packet{}: (sll2_packet) 0x28-0x77.7 (80)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x020| 08 00 | .. | protocol_type: "ipv4" (0x800) (Internet Protocol version 4) 0x28-0x29.7 (2)
|
|
|
|
|
0x020| 00 00 | .. | reserved: 0 0x2a-0x2b.7 (2)
|
|
|
|
|
0x020| 00 00 00 01| ....| interface_index: 1 0x2c-0x2f.7 (4)
|
|
|
|
|
0x030|03 04 |.. | arphdr_type: "loopback" (772) (Loopback device) 0x30-0x31.7 (2)
|
|
|
|
|
0x030| 00 | . | packet_type: "to_us" (0) (Sent to us) 0x32-0x32.7 (1)
|
2021-12-09 12:38:34 +03:00
|
|
|
0x030| 06 | . | link_address_length: 6 (valid) 0x33-0x33.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x030| 00 00 00 00 00 00 | ...... | link_address: "00:00:00:00:00:00" (0x0) 0x34-0x39.7 (6)
|
|
|
|
|
0x030| 00 00 | .. | padding: raw bits 0x3a-0x3b.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (ipv4_packet) 0x3c-0x77.7 (60)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x030| 45 | E | version: 4 0x3c-0x3c.3 (0.4)
|
|
|
|
|
0x030| 45 | E | ihl: 5 0x3c.4-0x3c.7 (0.4)
|
|
|
|
|
0x030| 00 | . | dscp: 0 0x3d-0x3d.5 (0.6)
|
|
|
|
|
0x030| 00 | . | ecn: 0 0x3d.6-0x3d.7 (0.2)
|
|
|
|
|
0x030| 00 3c| .<| total_length: 60 0x3e-0x3f.7 (2)
|
|
|
|
|
0x040|af 93 |.. | identification: 44947 0x40-0x41.7 (2)
|
|
|
|
|
0x040| 40 | @ | reserved: 0 0x42-0x42 (0.1)
|
|
|
|
|
0x040| 40 | @ | dont_fragment: true 0x42.1-0x42.1 (0.1)
|
|
|
|
|
0x040| 40 | @ | more_fragments: false 0x42.2-0x42.2 (0.1)
|
|
|
|
|
0x040| 40 00 | @. | fragment_offset: 0 0x42.3-0x43.7 (1.5)
|
|
|
|
|
0x040| 40 | @ | ttl: 64 0x44-0x44.7 (1)
|
|
|
|
|
0x040| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x45-0x45.7 (1)
|
|
|
|
|
0x040| 8d 26 | .& | header_checksum: 0x8d26 (valid) 0x46-0x47.7 (2)
|
|
|
|
|
0x040| 7f 00 00 01 | .... | source_ip: "127.0.0.1" (0x7f000001) 0x48-0x4b.7 (4)
|
|
|
|
|
0x040| 7f 00 00 01| ....| destination_ip: "127.0.0.1" (0x7f000001) 0x4c-0x4f.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (tcp_segment) 0x50-0x77.7 (40)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x050|b8 46 |.F | source_port: 47174 0x50-0x51.7 (2)
|
|
|
|
|
0x050| 04 d2 | .. | destination_port: 1234 0x52-0x53.7 (2)
|
|
|
|
|
0x050| 4e 2a 3f da | N*?. | sequence_number: 1311391706 0x54-0x57.7 (4)
|
|
|
|
|
0x050| 00 00 00 00 | .... | acknowledgment_number: 0 0x58-0x5b.7 (4)
|
|
|
|
|
0x050| a0 | . | data_offset: 10 0x5c-0x5c.3 (0.4)
|
|
|
|
|
0x050| a0 | . | reserved: 0 0x5c.4-0x5c.6 (0.3)
|
|
|
|
|
0x050| a0 | . | ns: false 0x5c.7-0x5c.7 (0.1)
|
|
|
|
|
0x050| 02 | . | cwr: false 0x5d-0x5d (0.1)
|
|
|
|
|
0x050| 02 | . | ece: false 0x5d.1-0x5d.1 (0.1)
|
|
|
|
|
0x050| 02 | . | urg: false 0x5d.2-0x5d.2 (0.1)
|
|
|
|
|
0x050| 02 | . | ack: false 0x5d.3-0x5d.3 (0.1)
|
|
|
|
|
0x050| 02 | . | psh: false 0x5d.4-0x5d.4 (0.1)
|
|
|
|
|
0x050| 02 | . | rst: false 0x5d.5-0x5d.5 (0.1)
|
|
|
|
|
0x050| 02 | . | syn: true 0x5d.6-0x5d.6 (0.1)
|
|
|
|
|
0x050| 02 | . | fin: false 0x5d.7-0x5d.7 (0.1)
|
|
|
|
|
0x050| ff d7| ..| window_size: 65495 0x5e-0x5f.7 (2)
|
|
|
|
|
0x060|fe 30 |.0 | checksum: 0xfe30 0x60-0x61.7 (2)
|
|
|
|
|
0x060| 00 00 | .. | urgent_pointer: 0 0x62-0x63.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | options[0:5]: 0x64-0x77.7 (20)
|
|
|
|
|
| | | [0]{}: option 0x64-0x67.7 (4)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x060| 02 | . | kind: "maxseg" (2) (Maximum segment size) 0x64-0x64.7 (1)
|
|
|
|
|
0x060| 04 | . | length: 4 0x65-0x65.7 (1)
|
|
|
|
|
0x060| ff d7 | .. | data: raw bits 0x66-0x67.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [1]{}: option 0x68-0x69.7 (2)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x060| 04 | . | kind: "sack_permitted" (4) (Selective Acknowledgement permitted) 0x68-0x68.7 (1)
|
|
|
|
|
0x060| 02 | . | length: 2 0x69-0x69.7 (1)
|
|
|
|
|
| | | data: raw bits 0x6a-NA (0)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [2]{}: option 0x6a-0x73.7 (10)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x060| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x6a-0x6a.7 (1)
|
|
|
|
|
0x060| 0a | . | length: 10 0x6b-0x6b.7 (1)
|
|
|
|
|
0x060| e4 67 f5 17| .g..| data: raw bits 0x6c-0x73.7 (8)
|
|
|
|
|
0x070|00 00 00 00 |.... |
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [3]{}: option 0x74-0x74.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x070| 01 | . | kind: "nop" (1) (No operation) 0x74-0x74.7 (1)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [4]{}: option 0x75-0x77.7 (3)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x070| 03 | . | kind: "winscale" (3) (Window scale) 0x75-0x75.7 (1)
|
|
|
|
|
0x070| 03 | . | length: 3 0x76-0x76.7 (1)
|
|
|
|
|
0x070| 07 | . | data: raw bits 0x77-0x77.7 (1)
|
|
|
|
|
| | | data: raw bits 0x78-NA (0)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [1]{}: packet 0x78-0xd7.7 (96)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x070| 44 08 a5 61 | D..a | ts_sec: 1638205508 0x78-0x7b.7 (4)
|
|
|
|
|
0x070| 40 c1 0b 00| @...| ts_usec: 770368 0x7c-0x7f.7 (4)
|
|
|
|
|
0x080|50 00 00 00 |P... | incl_len: 80 0x80-0x83.7 (4)
|
|
|
|
|
0x080| 50 00 00 00 | P... | orig_len: 80 0x84-0x87.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | packet{}: (sll2_packet) 0x88-0xd7.7 (80)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x080| 08 00 | .. | protocol_type: "ipv4" (0x800) (Internet Protocol version 4) 0x88-0x89.7 (2)
|
|
|
|
|
0x080| 00 00 | .. | reserved: 0 0x8a-0x8b.7 (2)
|
|
|
|
|
0x080| 00 00 00 01| ....| interface_index: 1 0x8c-0x8f.7 (4)
|
|
|
|
|
0x090|03 04 |.. | arphdr_type: "loopback" (772) (Loopback device) 0x90-0x91.7 (2)
|
|
|
|
|
0x090| 00 | . | packet_type: "to_us" (0) (Sent to us) 0x92-0x92.7 (1)
|
2021-12-09 12:38:34 +03:00
|
|
|
0x090| 06 | . | link_address_length: 6 (valid) 0x93-0x93.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x090| 00 00 00 00 00 00 | ...... | link_address: "00:00:00:00:00:00" (0x0) 0x94-0x99.7 (6)
|
|
|
|
|
0x090| 00 00 | .. | padding: raw bits 0x9a-0x9b.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (ipv4_packet) 0x9c-0xd7.7 (60)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x090| 45 | E | version: 4 0x9c-0x9c.3 (0.4)
|
|
|
|
|
0x090| 45 | E | ihl: 5 0x9c.4-0x9c.7 (0.4)
|
|
|
|
|
0x090| 00 | . | dscp: 0 0x9d-0x9d.5 (0.6)
|
|
|
|
|
0x090| 00 | . | ecn: 0 0x9d.6-0x9d.7 (0.2)
|
|
|
|
|
0x090| 00 3c| .<| total_length: 60 0x9e-0x9f.7 (2)
|
|
|
|
|
0x0a0|00 00 |.. | identification: 0 0xa0-0xa1.7 (2)
|
|
|
|
|
0x0a0| 40 | @ | reserved: 0 0xa2-0xa2 (0.1)
|
|
|
|
|
0x0a0| 40 | @ | dont_fragment: true 0xa2.1-0xa2.1 (0.1)
|
|
|
|
|
0x0a0| 40 | @ | more_fragments: false 0xa2.2-0xa2.2 (0.1)
|
|
|
|
|
0x0a0| 40 00 | @. | fragment_offset: 0 0xa2.3-0xa3.7 (1.5)
|
|
|
|
|
0x0a0| 40 | @ | ttl: 64 0xa4-0xa4.7 (1)
|
|
|
|
|
0x0a0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0xa5-0xa5.7 (1)
|
|
|
|
|
0x0a0| 3c ba | <. | header_checksum: 0x3cba (valid) 0xa6-0xa7.7 (2)
|
|
|
|
|
0x0a0| 7f 00 00 01 | .... | source_ip: "127.0.0.1" (0x7f000001) 0xa8-0xab.7 (4)
|
|
|
|
|
0x0a0| 7f 00 00 01| ....| destination_ip: "127.0.0.1" (0x7f000001) 0xac-0xaf.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (tcp_segment) 0xb0-0xd7.7 (40)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0b0|04 d2 |.. | source_port: 1234 0xb0-0xb1.7 (2)
|
|
|
|
|
0x0b0| b8 46 | .F | destination_port: 47174 0xb2-0xb3.7 (2)
|
|
|
|
|
0x0b0| ce 52 26 de | .R&. | sequence_number: 3461490398 0xb4-0xb7.7 (4)
|
|
|
|
|
0x0b0| 4e 2a 3f db | N*?. | acknowledgment_number: 1311391707 0xb8-0xbb.7 (4)
|
|
|
|
|
0x0b0| a0 | . | data_offset: 10 0xbc-0xbc.3 (0.4)
|
|
|
|
|
0x0b0| a0 | . | reserved: 0 0xbc.4-0xbc.6 (0.3)
|
|
|
|
|
0x0b0| a0 | . | ns: false 0xbc.7-0xbc.7 (0.1)
|
|
|
|
|
0x0b0| 12 | . | cwr: false 0xbd-0xbd (0.1)
|
|
|
|
|
0x0b0| 12 | . | ece: false 0xbd.1-0xbd.1 (0.1)
|
|
|
|
|
0x0b0| 12 | . | urg: false 0xbd.2-0xbd.2 (0.1)
|
|
|
|
|
0x0b0| 12 | . | ack: true 0xbd.3-0xbd.3 (0.1)
|
|
|
|
|
0x0b0| 12 | . | psh: false 0xbd.4-0xbd.4 (0.1)
|
|
|
|
|
0x0b0| 12 | . | rst: false 0xbd.5-0xbd.5 (0.1)
|
|
|
|
|
0x0b0| 12 | . | syn: true 0xbd.6-0xbd.6 (0.1)
|
|
|
|
|
0x0b0| 12 | . | fin: false 0xbd.7-0xbd.7 (0.1)
|
|
|
|
|
0x0b0| ff cb| ..| window_size: 65483 0xbe-0xbf.7 (2)
|
|
|
|
|
0x0c0|fe 30 |.0 | checksum: 0xfe30 0xc0-0xc1.7 (2)
|
|
|
|
|
0x0c0| 00 00 | .. | urgent_pointer: 0 0xc2-0xc3.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | options[0:5]: 0xc4-0xd7.7 (20)
|
|
|
|
|
| | | [0]{}: option 0xc4-0xc7.7 (4)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0c0| 02 | . | kind: "maxseg" (2) (Maximum segment size) 0xc4-0xc4.7 (1)
|
|
|
|
|
0x0c0| 04 | . | length: 4 0xc5-0xc5.7 (1)
|
|
|
|
|
0x0c0| ff d7 | .. | data: raw bits 0xc6-0xc7.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [1]{}: option 0xc8-0xc9.7 (2)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0c0| 04 | . | kind: "sack_permitted" (4) (Selective Acknowledgement permitted) 0xc8-0xc8.7 (1)
|
|
|
|
|
0x0c0| 02 | . | length: 2 0xc9-0xc9.7 (1)
|
|
|
|
|
| | | data: raw bits 0xca-NA (0)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [2]{}: option 0xca-0xd3.7 (10)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0c0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0xca-0xca.7 (1)
|
|
|
|
|
0x0c0| 0a | . | length: 10 0xcb-0xcb.7 (1)
|
|
|
|
|
0x0c0| e4 67 f5 17| .g..| data: raw bits 0xcc-0xd3.7 (8)
|
|
|
|
|
0x0d0|e4 67 f5 17 |.g.. |
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [3]{}: option 0xd4-0xd4.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0d0| 01 | . | kind: "nop" (1) (No operation) 0xd4-0xd4.7 (1)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [4]{}: option 0xd5-0xd7.7 (3)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0d0| 03 | . | kind: "winscale" (3) (Window scale) 0xd5-0xd5.7 (1)
|
|
|
|
|
0x0d0| 03 | . | length: 3 0xd6-0xd6.7 (1)
|
|
|
|
|
0x0d0| 07 | . | data: raw bits 0xd7-0xd7.7 (1)
|
|
|
|
|
| | | data: raw bits 0xd8-NA (0)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [2]{}: packet 0xd8-0x12f.7 (88)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0d0| 44 08 a5 61 | D..a | ts_sec: 1638205508 0xd8-0xdb.7 (4)
|
|
|
|
|
0x0d0| 51 c1 0b 00| Q...| ts_usec: 770385 0xdc-0xdf.7 (4)
|
|
|
|
|
0x0e0|48 00 00 00 |H... | incl_len: 72 0xe0-0xe3.7 (4)
|
|
|
|
|
0x0e0| 48 00 00 00 | H... | orig_len: 72 0xe4-0xe7.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | packet{}: (sll2_packet) 0xe8-0x12f.7 (72)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0e0| 08 00 | .. | protocol_type: "ipv4" (0x800) (Internet Protocol version 4) 0xe8-0xe9.7 (2)
|
|
|
|
|
0x0e0| 00 00 | .. | reserved: 0 0xea-0xeb.7 (2)
|
|
|
|
|
0x0e0| 00 00 00 01| ....| interface_index: 1 0xec-0xef.7 (4)
|
|
|
|
|
0x0f0|03 04 |.. | arphdr_type: "loopback" (772) (Loopback device) 0xf0-0xf1.7 (2)
|
|
|
|
|
0x0f0| 00 | . | packet_type: "to_us" (0) (Sent to us) 0xf2-0xf2.7 (1)
|
2021-12-09 12:38:34 +03:00
|
|
|
0x0f0| 06 | . | link_address_length: 6 (valid) 0xf3-0xf3.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0f0| 00 00 00 00 00 00 | ...... | link_address: "00:00:00:00:00:00" (0x0) 0xf4-0xf9.7 (6)
|
|
|
|
|
0x0f0| 00 00 | .. | padding: raw bits 0xfa-0xfb.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (ipv4_packet) 0xfc-0x12f.7 (52)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x0f0| 45 | E | version: 4 0xfc-0xfc.3 (0.4)
|
|
|
|
|
0x0f0| 45 | E | ihl: 5 0xfc.4-0xfc.7 (0.4)
|
|
|
|
|
0x0f0| 00 | . | dscp: 0 0xfd-0xfd.5 (0.6)
|
|
|
|
|
0x0f0| 00 | . | ecn: 0 0xfd.6-0xfd.7 (0.2)
|
|
|
|
|
0x0f0| 00 34| .4| total_length: 52 0xfe-0xff.7 (2)
|
|
|
|
|
0x100|af 94 |.. | identification: 44948 0x100-0x101.7 (2)
|
|
|
|
|
0x100| 40 | @ | reserved: 0 0x102-0x102 (0.1)
|
|
|
|
|
0x100| 40 | @ | dont_fragment: true 0x102.1-0x102.1 (0.1)
|
|
|
|
|
0x100| 40 | @ | more_fragments: false 0x102.2-0x102.2 (0.1)
|
|
|
|
|
0x100| 40 00 | @. | fragment_offset: 0 0x102.3-0x103.7 (1.5)
|
|
|
|
|
0x100| 40 | @ | ttl: 64 0x104-0x104.7 (1)
|
|
|
|
|
0x100| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x105-0x105.7 (1)
|
|
|
|
|
0x100| 8d 2d | .- | header_checksum: 0x8d2d (valid) 0x106-0x107.7 (2)
|
|
|
|
|
0x100| 7f 00 00 01 | .... | source_ip: "127.0.0.1" (0x7f000001) 0x108-0x10b.7 (4)
|
|
|
|
|
0x100| 7f 00 00 01| ....| destination_ip: "127.0.0.1" (0x7f000001) 0x10c-0x10f.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (tcp_segment) 0x110-0x12f.7 (32)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x110|b8 46 |.F | source_port: 47174 0x110-0x111.7 (2)
|
|
|
|
|
0x110| 04 d2 | .. | destination_port: 1234 0x112-0x113.7 (2)
|
|
|
|
|
0x110| 4e 2a 3f db | N*?. | sequence_number: 1311391707 0x114-0x117.7 (4)
|
|
|
|
|
0x110| ce 52 26 df | .R&. | acknowledgment_number: 3461490399 0x118-0x11b.7 (4)
|
|
|
|
|
0x110| 80 | . | data_offset: 8 0x11c-0x11c.3 (0.4)
|
|
|
|
|
0x110| 80 | . | reserved: 0 0x11c.4-0x11c.6 (0.3)
|
|
|
|
|
0x110| 80 | . | ns: false 0x11c.7-0x11c.7 (0.1)
|
|
|
|
|
0x110| 10 | . | cwr: false 0x11d-0x11d (0.1)
|
|
|
|
|
0x110| 10 | . | ece: false 0x11d.1-0x11d.1 (0.1)
|
|
|
|
|
0x110| 10 | . | urg: false 0x11d.2-0x11d.2 (0.1)
|
|
|
|
|
0x110| 10 | . | ack: true 0x11d.3-0x11d.3 (0.1)
|
|
|
|
|
0x110| 10 | . | psh: false 0x11d.4-0x11d.4 (0.1)
|
|
|
|
|
0x110| 10 | . | rst: false 0x11d.5-0x11d.5 (0.1)
|
|
|
|
|
0x110| 10 | . | syn: false 0x11d.6-0x11d.6 (0.1)
|
|
|
|
|
0x110| 10 | . | fin: false 0x11d.7-0x11d.7 (0.1)
|
|
|
|
|
0x110| 02 00| ..| window_size: 512 0x11e-0x11f.7 (2)
|
|
|
|
|
0x120|fe 28 |.( | checksum: 0xfe28 0x120-0x121.7 (2)
|
|
|
|
|
0x120| 00 00 | .. | urgent_pointer: 0 0x122-0x123.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | options[0:3]: 0x124-0x12f.7 (12)
|
|
|
|
|
| | | [0]{}: option 0x124-0x124.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x120| 01 | . | kind: "nop" (1) (No operation) 0x124-0x124.7 (1)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [1]{}: option 0x125-0x125.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x120| 01 | . | kind: "nop" (1) (No operation) 0x125-0x125.7 (1)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [2]{}: option 0x126-0x12f.7 (10)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x120| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x126-0x126.7 (1)
|
|
|
|
|
0x120| 0a | . | length: 10 0x127-0x127.7 (1)
|
|
|
|
|
0x120| e4 67 f5 17 e4 67 f5 17| .g...g..| data: raw bits 0x128-0x12f.7 (8)
|
|
|
|
|
| | | data: raw bits 0x130-NA (0)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [3]{}: packet 0x130-0x18c.7 (93)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x130|44 08 a5 61 |D..a | ts_sec: 1638205508 0x130-0x133.7 (4)
|
|
|
|
|
0x130| d0 c1 0b 00 | .... | ts_usec: 770512 0x134-0x137.7 (4)
|
|
|
|
|
0x130| 4d 00 00 00 | M... | incl_len: 77 0x138-0x13b.7 (4)
|
|
|
|
|
0x130| 4d 00 00 00| M...| orig_len: 77 0x13c-0x13f.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | packet{}: (sll2_packet) 0x140-0x18c.7 (77)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x140|08 00 |.. | protocol_type: "ipv4" (0x800) (Internet Protocol version 4) 0x140-0x141.7 (2)
|
|
|
|
|
0x140| 00 00 | .. | reserved: 0 0x142-0x143.7 (2)
|
|
|
|
|
0x140| 00 00 00 01 | .... | interface_index: 1 0x144-0x147.7 (4)
|
|
|
|
|
0x140| 03 04 | .. | arphdr_type: "loopback" (772) (Loopback device) 0x148-0x149.7 (2)
|
|
|
|
|
0x140| 00 | . | packet_type: "to_us" (0) (Sent to us) 0x14a-0x14a.7 (1)
|
2021-12-09 12:38:34 +03:00
|
|
|
0x140| 06 | . | link_address_length: 6 (valid) 0x14b-0x14b.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x140| 00 00 00 00| ....| link_address: "00:00:00:00:00:00" (0x0) 0x14c-0x151.7 (6)
|
|
|
|
|
0x150|00 00 |.. |
|
|
|
|
|
0x150| 00 00 | .. | padding: raw bits 0x152-0x153.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (ipv4_packet) 0x154-0x18c.7 (57)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x150| 45 | E | version: 4 0x154-0x154.3 (0.4)
|
|
|
|
|
0x150| 45 | E | ihl: 5 0x154.4-0x154.7 (0.4)
|
|
|
|
|
0x150| 00 | . | dscp: 0 0x155-0x155.5 (0.6)
|
|
|
|
|
0x150| 00 | . | ecn: 0 0x155.6-0x155.7 (0.2)
|
|
|
|
|
0x150| 00 39 | .9 | total_length: 57 0x156-0x157.7 (2)
|
|
|
|
|
0x150| af 95 | .. | identification: 44949 0x158-0x159.7 (2)
|
|
|
|
|
0x150| 40 | @ | reserved: 0 0x15a-0x15a (0.1)
|
|
|
|
|
0x150| 40 | @ | dont_fragment: true 0x15a.1-0x15a.1 (0.1)
|
|
|
|
|
0x150| 40 | @ | more_fragments: false 0x15a.2-0x15a.2 (0.1)
|
|
|
|
|
0x150| 40 00 | @. | fragment_offset: 0 0x15a.3-0x15b.7 (1.5)
|
|
|
|
|
0x150| 40 | @ | ttl: 64 0x15c-0x15c.7 (1)
|
|
|
|
|
0x150| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x15d-0x15d.7 (1)
|
|
|
|
|
0x150| 8d 27| .'| header_checksum: 0x8d27 (valid) 0x15e-0x15f.7 (2)
|
|
|
|
|
0x160|7f 00 00 01 |.... | source_ip: "127.0.0.1" (0x7f000001) 0x160-0x163.7 (4)
|
|
|
|
|
0x160| 7f 00 00 01 | .... | destination_ip: "127.0.0.1" (0x7f000001) 0x164-0x167.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (tcp_segment) 0x168-0x18c.7 (37)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x160| b8 46 | .F | source_port: 47174 0x168-0x169.7 (2)
|
|
|
|
|
0x160| 04 d2 | .. | destination_port: 1234 0x16a-0x16b.7 (2)
|
|
|
|
|
0x160| 4e 2a 3f db| N*?.| sequence_number: 1311391707 0x16c-0x16f.7 (4)
|
|
|
|
|
0x170|ce 52 26 df |.R&. | acknowledgment_number: 3461490399 0x170-0x173.7 (4)
|
|
|
|
|
0x170| 80 | . | data_offset: 8 0x174-0x174.3 (0.4)
|
|
|
|
|
0x170| 80 | . | reserved: 0 0x174.4-0x174.6 (0.3)
|
|
|
|
|
0x170| 80 | . | ns: false 0x174.7-0x174.7 (0.1)
|
|
|
|
|
0x170| 18 | . | cwr: false 0x175-0x175 (0.1)
|
|
|
|
|
0x170| 18 | . | ece: false 0x175.1-0x175.1 (0.1)
|
|
|
|
|
0x170| 18 | . | urg: false 0x175.2-0x175.2 (0.1)
|
|
|
|
|
0x170| 18 | . | ack: true 0x175.3-0x175.3 (0.1)
|
|
|
|
|
0x170| 18 | . | psh: true 0x175.4-0x175.4 (0.1)
|
|
|
|
|
0x170| 18 | . | rst: false 0x175.5-0x175.5 (0.1)
|
|
|
|
|
0x170| 18 | . | syn: false 0x175.6-0x175.6 (0.1)
|
|
|
|
|
0x170| 18 | . | fin: false 0x175.7-0x175.7 (0.1)
|
|
|
|
|
0x170| 02 00 | .. | window_size: 512 0x176-0x177.7 (2)
|
|
|
|
|
0x170| fe 2d | .- | checksum: 0xfe2d 0x178-0x179.7 (2)
|
|
|
|
|
0x170| 00 00 | .. | urgent_pointer: 0 0x17a-0x17b.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | options[0:3]: 0x17c-0x187.7 (12)
|
|
|
|
|
| | | [0]{}: option 0x17c-0x17c.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x170| 01 | . | kind: "nop" (1) (No operation) 0x17c-0x17c.7 (1)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [1]{}: option 0x17d-0x17d.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x170| 01 | . | kind: "nop" (1) (No operation) 0x17d-0x17d.7 (1)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [2]{}: option 0x17e-0x187.7 (10)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x170| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x17e-0x17e.7 (1)
|
|
|
|
|
0x170| 0a| .| length: 10 0x17f-0x17f.7 (1)
|
|
|
|
|
0x180|e4 67 f5 17 e4 67 f5 17 |.g...g.. | data: raw bits 0x180-0x187.7 (8)
|
|
|
|
|
0x180| 74 65 73 74 0a | test. | data: raw bits 0x188-0x18c.7 (5)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [4]{}: packet 0x18d-0x1e4.7 (88)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x180| 44 08 a5| D..| ts_sec: 1638205508 0x18d-0x190.7 (4)
|
|
|
|
|
0x190|61 |a |
|
|
|
|
|
0x190| d7 c1 0b 00 | .... | ts_usec: 770519 0x191-0x194.7 (4)
|
|
|
|
|
0x190| 48 00 00 00 | H... | incl_len: 72 0x195-0x198.7 (4)
|
|
|
|
|
0x190| 48 00 00 00 | H... | orig_len: 72 0x199-0x19c.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | packet{}: (sll2_packet) 0x19d-0x1e4.7 (72)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x190| 08 00 | .. | protocol_type: "ipv4" (0x800) (Internet Protocol version 4) 0x19d-0x19e.7 (2)
|
|
|
|
|
0x190| 00| .| reserved: 0 0x19f-0x1a0.7 (2)
|
|
|
|
|
0x1a0|00 |. |
|
|
|
|
|
0x1a0| 00 00 00 01 | .... | interface_index: 1 0x1a1-0x1a4.7 (4)
|
|
|
|
|
0x1a0| 03 04 | .. | arphdr_type: "loopback" (772) (Loopback device) 0x1a5-0x1a6.7 (2)
|
|
|
|
|
0x1a0| 00 | . | packet_type: "to_us" (0) (Sent to us) 0x1a7-0x1a7.7 (1)
|
2021-12-09 12:38:34 +03:00
|
|
|
0x1a0| 06 | . | link_address_length: 6 (valid) 0x1a8-0x1a8.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x1a0| 00 00 00 00 00 00 | ...... | link_address: "00:00:00:00:00:00" (0x0) 0x1a9-0x1ae.7 (6)
|
|
|
|
|
0x1a0| 00| .| padding: raw bits 0x1af-0x1b0.7 (2)
|
|
|
|
|
0x1b0|00 |. |
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (ipv4_packet) 0x1b1-0x1e4.7 (52)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x1b0| 45 | E | version: 4 0x1b1-0x1b1.3 (0.4)
|
|
|
|
|
0x1b0| 45 | E | ihl: 5 0x1b1.4-0x1b1.7 (0.4)
|
|
|
|
|
0x1b0| 00 | . | dscp: 0 0x1b2-0x1b2.5 (0.6)
|
|
|
|
|
0x1b0| 00 | . | ecn: 0 0x1b2.6-0x1b2.7 (0.2)
|
|
|
|
|
0x1b0| 00 34 | .4 | total_length: 52 0x1b3-0x1b4.7 (2)
|
|
|
|
|
0x1b0| 17 00 | .. | identification: 5888 0x1b5-0x1b6.7 (2)
|
|
|
|
|
0x1b0| 40 | @ | reserved: 0 0x1b7-0x1b7 (0.1)
|
|
|
|
|
0x1b0| 40 | @ | dont_fragment: true 0x1b7.1-0x1b7.1 (0.1)
|
|
|
|
|
0x1b0| 40 | @ | more_fragments: false 0x1b7.2-0x1b7.2 (0.1)
|
|
|
|
|
0x1b0| 40 00 | @. | fragment_offset: 0 0x1b7.3-0x1b8.7 (1.5)
|
|
|
|
|
0x1b0| 40 | @ | ttl: 64 0x1b9-0x1b9.7 (1)
|
|
|
|
|
0x1b0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x1ba-0x1ba.7 (1)
|
|
|
|
|
0x1b0| 25 c2 | %. | header_checksum: 0x25c2 (valid) 0x1bb-0x1bc.7 (2)
|
|
|
|
|
0x1b0| 7f 00 00| ...| source_ip: "127.0.0.1" (0x7f000001) 0x1bd-0x1c0.7 (4)
|
|
|
|
|
0x1c0|01 |. |
|
|
|
|
|
0x1c0| 7f 00 00 01 | .... | destination_ip: "127.0.0.1" (0x7f000001) 0x1c1-0x1c4.7 (4)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | data{}: (tcp_segment) 0x1c5-0x1e4.7 (32)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x1c0| 04 d2 | .. | source_port: 1234 0x1c5-0x1c6.7 (2)
|
|
|
|
|
0x1c0| b8 46 | .F | destination_port: 47174 0x1c7-0x1c8.7 (2)
|
|
|
|
|
0x1c0| ce 52 26 df | .R&. | sequence_number: 3461490399 0x1c9-0x1cc.7 (4)
|
|
|
|
|
0x1c0| 4e 2a 3f| N*?| acknowledgment_number: 1311391712 0x1cd-0x1d0.7 (4)
|
|
|
|
|
0x1d0|e0 |. |
|
|
|
|
|
0x1d0| 80 | . | data_offset: 8 0x1d1-0x1d1.3 (0.4)
|
|
|
|
|
0x1d0| 80 | . | reserved: 0 0x1d1.4-0x1d1.6 (0.3)
|
|
|
|
|
0x1d0| 80 | . | ns: false 0x1d1.7-0x1d1.7 (0.1)
|
|
|
|
|
0x1d0| 10 | . | cwr: false 0x1d2-0x1d2 (0.1)
|
|
|
|
|
0x1d0| 10 | . | ece: false 0x1d2.1-0x1d2.1 (0.1)
|
|
|
|
|
0x1d0| 10 | . | urg: false 0x1d2.2-0x1d2.2 (0.1)
|
|
|
|
|
0x1d0| 10 | . | ack: true 0x1d2.3-0x1d2.3 (0.1)
|
|
|
|
|
0x1d0| 10 | . | psh: false 0x1d2.4-0x1d2.4 (0.1)
|
|
|
|
|
0x1d0| 10 | . | rst: false 0x1d2.5-0x1d2.5 (0.1)
|
|
|
|
|
0x1d0| 10 | . | syn: false 0x1d2.6-0x1d2.6 (0.1)
|
|
|
|
|
0x1d0| 10 | . | fin: false 0x1d2.7-0x1d2.7 (0.1)
|
|
|
|
|
0x1d0| 02 00 | .. | window_size: 512 0x1d3-0x1d4.7 (2)
|
|
|
|
|
0x1d0| fe 28 | .( | checksum: 0xfe28 0x1d5-0x1d6.7 (2)
|
|
|
|
|
0x1d0| 00 00 | .. | urgent_pointer: 0 0x1d7-0x1d8.7 (2)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | options[0:3]: 0x1d9-0x1e4.7 (12)
|
|
|
|
|
| | | [0]{}: option 0x1d9-0x1d9.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x1d0| 01 | . | kind: "nop" (1) (No operation) 0x1d9-0x1d9.7 (1)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [1]{}: option 0x1da-0x1da.7 (1)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x1d0| 01 | . | kind: "nop" (1) (No operation) 0x1da-0x1da.7 (1)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | [2]{}: option 0x1db-0x1e4.7 (10)
|
2021-11-24 23:20:46 +03:00
|
|
|
0x1d0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x1db-0x1db.7 (1)
|
|
|
|
|
0x1d0| 0a | . | length: 10 0x1dc-0x1dc.7 (1)
|
|
|
|
|
0x1d0| e4 67 f5| .g.| data: raw bits 0x1dd-0x1e4.7 (8)
|
|
|
|
|
0x1e0|17 e4 67 f5 17| |..g..| |
|
|
|
|
|
| | | data: raw bits 0x1e5-NA (0)
|
2021-12-08 18:20:37 +03:00
|
|
|
| | | ipv4_reassembled[0:0]: 0x1e5-NA (0)
|
|
|
|
|
| | | tcp_connections[0:1]: 0x1e5-NA (0)
|
|
|
|
|
| | | [0]{}: flow 0x1e5-NA (0)
|
2021-11-24 23:20:46 +03:00
|
|
|
| | | source_ip: "127.0.0.1" 0x1e5-NA (0)
|
|
|
|
|
| | | source_port: 47174 0x1e5-NA (0)
|
|
|
|
|
| | | destination_ip: "127.0.0.1" 0x1e5-NA (0)
|
|
|
|
|
| | | destination_port: 1234 0x1e5-NA (0)
|
|
|
|
|
0x00|74 65 73 74 0a| |test.| | client_stream: raw bits 0x0-0x4.7 (5)
|
|
|
|
|
| | | server_stream: raw bits 0x0-NA (0)
|
