wader/fq
1
1
Fork 0
mirror of https://github.com/wader/fq.git synced 2024-12-28 08:02:28 +03:00
Code Issues Projects Releases Wiki Activity

pcap,pcapng,ipv4,ipv6: Support raw link type (ipv4 or ipv6)

Browse Source
This commit is contained in:
Mattias Wadman 2023-03-02 18:30:35 +01:00
parent cbd2df2b06
commit 6c032455eb
18 changed files with 246 additions and 156 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
format/inet/flowsdecoder/flowsdecoder.go
View File

@ -5,6 +5,7 @@ package flowsdecoder
import (
"bytes"
"encoding/binary"
"fmt"
"net"
"github.com/gopacket/gopacket"
@ -194,6 +195,18 @@ func (fd *Decoder) LoopbackFrame(bs []byte) error {
return fd.packet(gopacket.NewPacket(bs, layers.LayerTypeLoopback, gopacket.Lazy))
}
// LinkTypeRAW IPv4 or Ipv6
func (fd *Decoder) RAWIPFrame(bs []byte) error {
version := bs[0] >> 4
switch version {
case 4:
return fd.IPv4Packet(bs)
case 6:
return fd.IPv6Packet(bs)
}
return fmt.Errorf("invalid ip version %v", version)
}
func (fd *Decoder) packet(p gopacket.Packet) error {
// TODO: linkType
ip4Layer := p.Layer(layers.LayerTypeIPv4)

4
format/inet/ipv4_packet.go
View File

@ -57,11 +57,11 @@ func decodeIPv4(d *decode.D) any {
var lfi format.LinkFrameIn
if d.ArgAs(&ipi) && ipi.EtherType != format.EtherTypeIPv4 {
d.Fatalf("incorrect ethertype %d", ipi.EtherType)
} else if d.ArgAs(&lfi) && lfi.Type != format.LinkTypeIPv4 {
} else if d.ArgAs(&lfi) && lfi.Type != format.LinkTypeIPv4 && lfi.Type != format.LinkTypeRAW {
d.Fatalf("incorrect linktype %d", lfi.Type)
}
d.FieldU4("version")
d.FieldU4("version", d.UintAssert(4))
ihl := d.FieldU4("ihl")
d.FieldU6("dscp")
d.FieldU2("ecn")

4
format/inet/ipv6_packet.go
View File

@ -116,11 +116,11 @@ func decodeIPv6(d *decode.D) any {
var lfi format.LinkFrameIn
if d.ArgAs(&ipi) && ipi.EtherType != format.EtherTypeIPv6 {
d.Fatalf("incorrect ethertype %d", ipi.EtherType)
} else if d.ArgAs(&lfi) && lfi.Type != format.LinkTypeIPv6 {
} else if d.ArgAs(&lfi) && lfi.Type != format.LinkTypeIPv6 && lfi.Type != format.LinkTypeRAW {
d.Fatalf("incorrect linktype %d", lfi.Type)
}
d.FieldU4("version")
d.FieldU4("version", d.UintAssert(6))
d.FieldU6("ds")
d.FieldU2("ecn")
d.FieldU20("flow_label")

2
format/inet/testdata/ether8023_frame.fqtest vendored
View File

@ -5,7 +5,7 @@ $ fq -d ether8023_frame dv ether8023_frame
0x00| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x6-0xb.7 (6)
0x00| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xc-0xd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xe-0xb1.7 (164)
0x00| 45 | E | version: 4 0xe-0xe.3 (0.4)
0x00| 45 | E | version: 4 (valid) 0xe-0xe.3 (0.4)
0x00| 45 | E | ihl: 5 0xe.4-0xe.7 (0.4)
0x00| 00| .| dscp: 0 0xf-0xf.5 (0.6)
0x00| 00| .| ecn: 0 0xf.6-0xf.7 (0.2)

2
format/inet/testdata/ipv4_packet.fqtest vendored
View File

@ -1,7 +1,7 @@
# fq 'first(.. | select(format=="ipv4")) | tobytes' many_interfaces.pcapng > ipv4_packet
$ fq -d ipv4_packet dv ipv4_packet
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: ipv4_packet (ipv4_packet) 0x0-0x3e3.7 (996)
0x000|45 |E | version: 4 0x0-0x0.3 (0.4)
0x000|45 |E | version: 4 (valid) 0x0-0x0.3 (0.4)
0x000|45 |E | ihl: 5 0x0.4-0x0.7 (0.4)
0x000| 00 | . | dscp: 0 0x1-0x1.5 (0.6)
0x000| 00 | . | ecn: 0 0x1.6-0x1.7 (0.2)

2
format/inet/testdata/tls12-ipv4-linkframe-keylog.pcapng.fqtest vendored
View File

@ -9,7 +9,7 @@ $ fq 'first(grep_by(.type=="enhanced_packet")), .[0].tcp_connections | dv' tls12
0x140|19 01 00 00 |.... | capture_packet_length: 281 0x140-0x143.7 (4)
0x140| 19 01 00 00 | .... | original_packet_length: 281 0x144-0x147.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ipv4_packet) 0x148-0x260.7 (281)
0x140| 45 | E | version: 4 0x148-0x148.3 (0.4)
0x140| 45 | E | version: 4 (valid) 0x148-0x148.3 (0.4)
0x140| 45 | E | ihl: 5 0x148.4-0x148.7 (0.4)
0x140| 00 | . | dscp: 0 0x149-0x149.5 (0.6)
0x140| 00 | . | ecn: 0 0x149.6-0x149.7 (0.2)

1
format/pcap/shared.go
View File

@ -14,6 +14,7 @@ var linkToDecodeFn = map[int]func(fd *flowsdecoder.Decoder, bs []byte) error{
format.LinkTypeLINUX_SLL: (*flowsdecoder.Decoder).SLLPacket,
format.LinkTypeLINUX_SLL2: (*flowsdecoder.Decoder).SLL2Packet,
format.LinkTypeNULL: (*flowsdecoder.Decoder).LoopbackFrame,
format.LinkTypeRAW: (*flowsdecoder.Decoder).RAWIPFrame,
}
// TODO: make some of this shared if more packet capture formats are added

8
format/pcap/testdata/dhcp_big_endian.fqtest vendored
View File

@ -49,7 +49,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
0x070| 00 0b 82 01 fc 42 | .....B | source: "00:0b:82:01:fc:42" (0xb8201fc42) 0x76-0x7b.7 (6)
0x070| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x7c-0x7d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x7e-0x1a9.7 (300)
0x070| 45 | E | version: 4 0x7e-0x7e.3 (0.4)
0x070| 45 | E | version: 4 (valid) 0x7e-0x7e.3 (0.4)
0x070| 45 | E | ihl: 5 0x7e.4-0x7e.7 (0.4)
0x070| 00| .| dscp: 0 0x7f-0x7f.5 (0.6)
0x070| 00| .| ecn: 0 0x7f.6-0x7f.7 (0.2)
@ -90,7 +90,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
0x1d0| 00 08 74 ad f1 9b | ..t... | source: "00:08:74:ad:f1:9b" (0x874adf19b) 0x1d2-0x1d7.7 (6)
0x1d0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1d8-0x1d9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1da-0x321.7 (328)
0x1d0| 45 | E | version: 4 0x1da-0x1da.3 (0.4)
0x1d0| 45 | E | version: 4 (valid) 0x1da-0x1da.3 (0.4)
0x1d0| 45 | E | ihl: 5 0x1da.4-0x1da.7 (0.4)
0x1d0| 00 | . | dscp: 0 0x1db-0x1db.5 (0.6)
0x1d0| 00 | . | ecn: 0 0x1db.6-0x1db.7 (0.2)
@ -129,7 +129,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
0x340| 00 0b 82 01 fc 42| .....B| source: "00:0b:82:01:fc:42" (0xb8201fc42) 0x34a-0x34f.7 (6)
0x350|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x350-0x351.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x352-0x47d.7 (300)
0x350| 45 | E | version: 4 0x352-0x352.3 (0.4)
0x350| 45 | E | version: 4 (valid) 0x352-0x352.3 (0.4)
0x350| 45 | E | ihl: 5 0x352.4-0x352.7 (0.4)
0x350| 00 | . | dscp: 0 0x353-0x353.5 (0.6)
0x350| 00 | . | ecn: 0 0x353.6-0x353.7 (0.2)
@ -169,7 +169,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
0x4a0| 00 08 74 ad f1 9b | ..t... | source: "00:08:74:ad:f1:9b" (0x874adf19b) 0x4a6-0x4ab.7 (6)
0x4a0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x4ac-0x4ad.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x4ae-0x5f5.7 (328)
0x4a0| 45 | E | version: 4 0x4ae-0x4ae.3 (0.4)
0x4a0| 45 | E | version: 4 (valid) 0x4ae-0x4ae.3 (0.4)
0x4a0| 45 | E | ihl: 5 0x4ae.4-0x4ae.7 (0.4)
0x4a0| 00| .| dscp: 0 0x4af-0x4af.5 (0.6)
0x4a0| 00| .| ecn: 0 0x4af.6-0x4af.7 (0.2)

8
format/pcap/testdata/dhcp_little_endian.fqtest vendored
View File

@ -60,7 +60,7 @@ $ fq dv dhcp_little_endian.pcapng
0x070| 00 0b 82 01 fc 42 | .....B | source: "00:0b:82:01:fc:42" (0xb8201fc42) 0x76-0x7b.7 (6)
0x070| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x7c-0x7d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x7e-0x1a9.7 (300)
0x070| 45 | E | version: 4 0x7e-0x7e.3 (0.4)
0x070| 45 | E | version: 4 (valid) 0x7e-0x7e.3 (0.4)
0x070| 45 | E | ihl: 5 0x7e.4-0x7e.7 (0.4)
0x070| 00| .| dscp: 0 0x7f-0x7f.5 (0.6)
0x070| 00| .| ecn: 0 0x7f.6-0x7f.7 (0.2)
@ -101,7 +101,7 @@ $ fq dv dhcp_little_endian.pcapng
0x1d0| 00 08 74 ad f1 9b | ..t... | source: "00:08:74:ad:f1:9b" (0x874adf19b) 0x1d2-0x1d7.7 (6)
0x1d0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1d8-0x1d9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1da-0x321.7 (328)
0x1d0| 45 | E | version: 4 0x1da-0x1da.3 (0.4)
0x1d0| 45 | E | version: 4 (valid) 0x1da-0x1da.3 (0.4)
0x1d0| 45 | E | ihl: 5 0x1da.4-0x1da.7 (0.4)
0x1d0| 00 | . | dscp: 0 0x1db-0x1db.5 (0.6)
0x1d0| 00 | . | ecn: 0 0x1db.6-0x1db.7 (0.2)
@ -140,7 +140,7 @@ $ fq dv dhcp_little_endian.pcapng
0x340| 00 0b 82 01 fc 42| .....B| source: "00:0b:82:01:fc:42" (0xb8201fc42) 0x34a-0x34f.7 (6)
0x350|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x350-0x351.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x352-0x47d.7 (300)
0x350| 45 | E | version: 4 0x352-0x352.3 (0.4)
0x350| 45 | E | version: 4 (valid) 0x352-0x352.3 (0.4)
0x350| 45 | E | ihl: 5 0x352.4-0x352.7 (0.4)
0x350| 00 | . | dscp: 0 0x353-0x353.5 (0.6)
0x350| 00 | . | ecn: 0 0x353.6-0x353.7 (0.2)
@ -180,7 +180,7 @@ $ fq dv dhcp_little_endian.pcapng
0x4a0| 00 08 74 ad f1 9b | ..t... | source: "00:08:74:ad:f1:9b" (0x874adf19b) 0x4a6-0x4ab.7 (6)
0x4a0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x4ac-0x4ad.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x4ae-0x5f5.7 (328)
0x4a0| 45 | E | version: 4 0x4ae-0x4ae.3 (0.4)
0x4a0| 45 | E | version: 4 (valid) 0x4ae-0x4ae.3 (0.4)
0x4a0| 45 | E | ihl: 5 0x4ae.4-0x4ae.7 (0.4)
0x4a0| 00| .| dscp: 0 0x4af-0x4af.5 (0.6)
0x4a0| 00| .| ecn: 0 0x4af.6-0x4af.7 (0.2)

20
format/pcap/testdata/http_gzip.fqtest vendored
View File

@ -21,7 +21,7 @@ $ fq -d pcap dv http_gzip.cap
0x00030|95 67 49 3c |.gI< |
0x00030| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x34-0x35.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x36-0x71.7 (60)
0x00030| 45 | E | version: 4 0x36-0x36.3 (0.4)
0x00030| 45 | E | version: 4 (valid) 0x36-0x36.3 (0.4)
0x00030| 45 | E | ihl: 5 0x36.4-0x36.7 (0.4)
0x00030| 00 | . | dscp: 0 0x37-0x37.5 (0.6)
0x00030| 00 | . | ecn: 0 0x37.6-0x37.7 (0.2)
@ -87,7 +87,7 @@ $ fq -d pcap dv http_gzip.cap
0x00080| 00 c0 f0 2d 4a a3 | ...-J. | source: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x88-0x8d.7 (6)
0x00080| 08 00| ..| ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x8e-0x8f.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x90-0xcb.7 (60)
0x00090|45 |E | version: 4 0x90-0x90.3 (0.4)
0x00090|45 |E | version: 4 (valid) 0x90-0x90.3 (0.4)
0x00090|45 |E | ihl: 5 0x90.4-0x90.7 (0.4)
0x00090| 00 | . | dscp: 0 0x91-0x91.5 (0.6)
0x00090| 00 | . | ecn: 0 0x91.6-0x91.7 (0.2)
@ -152,7 +152,7 @@ $ fq -d pcap dv http_gzip.cap
0x000e0| 00 0a 95 67 49 3c | ...gI< | source: "00:0a:95:67:49:3c" (0xa9567493c) 0xe2-0xe7.7 (6)
0x000e0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xe8-0xe9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xea-0x11d.7 (52)
0x000e0| 45 | E | version: 4 0xea-0xea.3 (0.4)
0x000e0| 45 | E | version: 4 (valid) 0xea-0xea.3 (0.4)
0x000e0| 45 | E | ihl: 5 0xea.4-0xea.7 (0.4)
0x000e0| 00 | . | dscp: 0 0xeb-0xeb.5 (0.6)
0x000e0| 00 | . | ecn: 0 0xeb.6-0xeb.7 (0.2)
@ -209,7 +209,7 @@ $ fq -d pcap dv http_gzip.cap
0x00130| 00 0a 95 67 49 3c | ...gI< | source: "00:0a:95:67:49:3c" (0xa9567493c) 0x134-0x139.7 (6)
0x00130| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x13a-0x13b.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x13c-0x32c.7 (497)
0x00130| 45 | E | version: 4 0x13c-0x13c.3 (0.4)
0x00130| 45 | E | version: 4 (valid) 0x13c-0x13c.3 (0.4)
0x00130| 45 | E | ihl: 5 0x13c.4-0x13c.7 (0.4)
0x00130| 00 | . | dscp: 0 0x13d-0x13d.5 (0.6)
0x00130| 00 | . | ecn: 0 0x13d.6-0x13d.7 (0.2)
@ -267,7 +267,7 @@ $ fq -d pcap dv http_gzip.cap
0x00340| 00 c0 f0 2d 4a a3 | ...-J. | source: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x343-0x348.7 (6)
0x00340| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x349-0x34a.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x34b-0x37e.7 (52)
0x00340| 45 | E | version: 4 0x34b-0x34b.3 (0.4)
0x00340| 45 | E | version: 4 (valid) 0x34b-0x34b.3 (0.4)
0x00340| 45 | E | ihl: 5 0x34b.4-0x34b.7 (0.4)
0x00340| 00 | . | dscp: 0 0x34c-0x34c.5 (0.6)
0x00340| 00 | . | ecn: 0 0x34c.6-0x34c.7 (0.2)
@ -327,7 +327,7 @@ $ fq -d pcap dv http_gzip.cap
0x00390| 00 c0 f0 2d 4a a3 | ...-J. | source: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x395-0x39a.7 (6)
0x00390| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x39b-0x39c.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x39d-0x562.7 (454)
0x00390| 45 | E | version: 4 0x39d-0x39d.3 (0.4)
0x00390| 45 | E | version: 4 (valid) 0x39d-0x39d.3 (0.4)
0x00390| 45 | E | ihl: 5 0x39d.4-0x39d.7 (0.4)
0x00390| 00 | . | dscp: 0 0x39e-0x39e.5 (0.6)
0x00390| 00 | . | ecn: 0 0x39e.6-0x39e.7 (0.2)
@ -390,7 +390,7 @@ $ fq -d pcap dv http_gzip.cap
0x00570| 08| .| ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x57f-0x580.7 (2)
0x00580|00 |. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x581-0x5b4.7 (52)
0x00580| 45 | E | version: 4 0x581-0x581.3 (0.4)
0x00580| 45 | E | version: 4 (valid) 0x581-0x581.3 (0.4)
0x00580| 45 | E | ihl: 5 0x581.4-0x581.7 (0.4)
0x00580| 00 | . | dscp: 0 0x582-0x582.5 (0.6)
0x00580| 00 | . | ecn: 0 0x582.6-0x582.7 (0.2)
@ -450,7 +450,7 @@ $ fq -d pcap dv http_gzip.cap
0x005d0|a3 |. |
0x005d0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x5d1-0x5d2.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x5d3-0x606.7 (52)
0x005d0| 45 | E | version: 4 0x5d3-0x5d3.3 (0.4)
0x005d0| 45 | E | version: 4 (valid) 0x5d3-0x5d3.3 (0.4)
0x005d0| 45 | E | ihl: 5 0x5d3.4-0x5d3.7 (0.4)
0x005d0| 00 | . | dscp: 0 0x5d4-0x5d4.5 (0.6)
0x005d0| 00 | . | ecn: 0 0x5d4.6-0x5d4.7 (0.2)
@ -510,7 +510,7 @@ $ fq -d pcap dv http_gzip.cap
0x00620|67 49 3c |gI< |
0x00620| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x623-0x624.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x625-0x658.7 (52)
0x00620| 45 | E | version: 4 0x625-0x625.3 (0.4)
0x00620| 45 | E | version: 4 (valid) 0x625-0x625.3 (0.4)
0x00620| 45 | E | ihl: 5 0x625.4-0x625.7 (0.4)
0x00620| 00 | . | dscp: 0 0x626-0x626.5 (0.6)
0x00620| 00 | . | ecn: 0 0x626.6-0x626.7 (0.2)
@ -569,7 +569,7 @@ $ fq -d pcap dv http_gzip.cap
0x00670|c0 f0 2d 4a a3 |..-J. |
0x00670| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x675-0x676.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x677-0x6aa.7 (52)
0x00670| 45 | E | version: 4 0x677-0x677.3 (0.4)
0x00670| 45 | E | version: 4 (valid) 0x677-0x677.3 (0.4)
0x00670| 45 | E | ihl: 5 0x677.4-0x677.7 (0.4)
0x00670| 00 | . | dscp: 0 0x678-0x678.5 (0.6)
0x00670| 00 | . | ecn: 0 0x678.6-0x678.7 (0.2)

8
format/pcap/testdata/ipv4frags.fqtest vendored
View File

@ -21,7 +21,7 @@ $ fq -d pcap dv ipv4frags.pcap
0x00030|27 fc 6a c9 |'.j. |
0x00030| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x34-0x35.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x36-0x419.7 (996)
0x00030| 45 | E | version: 4 0x36-0x36.3 (0.4)
0x00030| 45 | E | version: 4 (valid) 0x36-0x36.3 (0.4)
0x00030| 45 | E | ihl: 5 0x36.4-0x36.7 (0.4)
0x00030| 00 | . | dscp: 0 0x37-0x37.5 (0.6)
0x00030| 00 | . | ecn: 0 0x37.6-0x37.7 (0.2)
@ -50,7 +50,7 @@ $ fq -d pcap dv ipv4frags.pcap
0x00430|08 00 27 fc 6a c9 |..'.j. | source: "08:00:27:fc:6a:c9" (0x80027fc6ac9) 0x430-0x435.7 (6)
0x00430| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x436-0x437.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x438-0x5fb.7 (452)
0x00430| 45 | E | version: 4 0x438-0x438.3 (0.4)
0x00430| 45 | E | version: 4 (valid) 0x438-0x438.3 (0.4)
0x00430| 45 | E | ihl: 5 0x438.4-0x438.7 (0.4)
0x00430| 00 | . | dscp: 0 0x439-0x439.5 (0.6)
0x00430| 00 | . | ecn: 0 0x439.6-0x439.7 (0.2)
@ -79,7 +79,7 @@ $ fq -d pcap dv ipv4frags.pcap
0x00610| 08 00 27 e2 9f a6 | ..'... | source: "08:00:27:e2:9f:a6" (0x80027e29fa6) 0x612-0x617.7 (6)
0x00610| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x618-0x619.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x61a-0xbad.7 (1428)
0x00610| 45 | E | version: 4 0x61a-0x61a.3 (0.4)
0x00610| 45 | E | version: 4 (valid) 0x61a-0x61a.3 (0.4)
0x00610| 45 | E | ihl: 5 0x61a.4-0x61a.7 (0.4)
0x00610| 00 | . | dscp: 0 0x61b-0x61b.5 (0.6)
0x00610| 00 | . | ecn: 0 0x61b.6-0x61b.7 (0.2)
@ -103,7 +103,7 @@ $ fq -d pcap dv ipv4frags.pcap
* |until 0xbad.7 (end) (1404) | |
| | | ipv4_reassembled[0:1]: 0xbae-NA (0)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| [0]{}: ipv4_packet (ipv4_packet) 0x0-0x593.7 (1428)
0x000|45 |E | version: 4 0x0-0x0.3 (0.4)
0x000|45 |E | version: 4 (valid) 0x0-0x0.3 (0.4)
0x000|45 |E | ihl: 5 0x0.4-0x0.7 (0.4)
0x000| 00 | . | dscp: 0 0x1-0x1.5 (0.6)
0x000| 00 | . | ecn: 0 0x1.6-0x1.7 (0.2)

110
format/pcap/testdata/ipv6_http.fqtest vendored
View File

@ -21,7 +21,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00030|25 82 95 b5 |%... |
0x00030| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x34-0x35.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x36-0x7d.7 (72)
0x00030| 60 | ` | version: 6 0x36-0x36.3 (0.4)
0x00030| 60 | ` | version: 6 (valid) 0x36-0x36.3 (0.4)
0x00030| 60 00 | `. | ds: 0 0x36.4-0x37.1 (0.6)
0x00030| 00 | . | ecn: 0 0x37.2-0x37.3 (0.2)
0x00030| 00 00 00 | ... | flow_label: 0 0x37.4-0x39.7 (2.4)
@ -50,7 +50,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00090| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x94-0x99.7 (6)
0x00090| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x9a-0x9b.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x9c-0xe3.7 (72)
0x00090| 60 | ` | version: 6 0x9c-0x9c.3 (0.4)
0x00090| 60 | ` | version: 6 (valid) 0x9c-0x9c.3 (0.4)
0x00090| 60 00 | `. | ds: 0 0x9c.4-0x9d.1 (0.6)
0x00090| 00 | . | ecn: 0 0x9d.2-0x9d.3 (0.2)
0x00090| 00 00 00| ...| flow_label: 0 0x9d.4-0x9f.7 (2.4)
@ -78,7 +78,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x000f0| 00 11 25 82 95 b5| ..%...| source: "00:11:25:82:95:b5" (0x11258295b5) 0xfa-0xff.7 (6)
0x00100|86 dd |.. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x100-0x101.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x102-0x149.7 (72)
0x00100| 60 | ` | version: 6 0x102-0x102.3 (0.4)
0x00100| 60 | ` | version: 6 (valid) 0x102-0x102.3 (0.4)
0x00100| 60 00 | `. | ds: 0 0x102.4-0x103.1 (0.6)
0x00100| 00 | . | ecn: 0 0x103.2-0x103.3 (0.2)
0x00100| 00 00 00 | ... | flow_label: 0 0x103.4-0x105.7 (2.4)
@ -107,7 +107,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00160|00 d0 09 e3 e8 de |...... | source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x160-0x165.7 (6)
0x00160| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x166-0x167.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x168-0x1b3.7 (76)
0x00160| 60 | ` | version: 6 0x168-0x168.3 (0.4)
0x00160| 60 | ` | version: 6 (valid) 0x168-0x168.3 (0.4)
0x00160| 60 00 | `. | ds: 0 0x168.4-0x169.1 (0.6)
0x00160| 00 | . | ecn: 0 0x169.2-0x169.3 (0.2)
0x00160| 00 00 00 | ... | flow_label: 0 0x169.4-0x16b.7 (2.4)
@ -146,7 +146,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x001c0| 00 d0 09 e3 e8 de| ......| source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x1ca-0x1cf.7 (6)
0x001d0|86 dd |.. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x1d0-0x1d1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1d2-0x211.7 (64)
0x001d0| 60 | ` | version: 6 0x1d2-0x1d2.3 (0.4)
0x001d0| 60 | ` | version: 6 (valid) 0x1d2-0x1d2.3 (0.4)
0x001d0| 60 00 | `. | ds: 0 0x1d2.4-0x1d3.1 (0.6)
0x001d0| 00 | . | ecn: 0 0x1d3.2-0x1d3.3 (0.2)
0x001d0| 00 00 00 | ... | flow_label: 0 0x1d3.4-0x1d5.7 (2.4)
@ -175,7 +175,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00220| 00 d0 09 e3 e8 de | ...... | source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x228-0x22d.7 (6)
0x00220| 86 dd| ..| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x22e-0x22f.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x230-0x2f4.7 (197)
0x00230|60 |` | version: 6 0x230-0x230.3 (0.4)
0x00230|60 |` | version: 6 (valid) 0x230-0x230.3 (0.4)
0x00230|60 00 |`. | ds: 0 0x230.4-0x231.1 (0.6)
0x00230| 00 | . | ecn: 0 0x231.2-0x231.3 (0.2)
0x00230| 00 00 00 | ... | flow_label: 0 0x231.4-0x233.7 (2.4)
@ -495,7 +495,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00310|de |. |
0x00310| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x311-0x312.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x313-0x3c4.7 (178)
0x00310| 60 | ` | version: 6 0x313-0x313.3 (0.4)
0x00310| 60 | ` | version: 6 (valid) 0x313-0x313.3 (0.4)
0x00310| 60 00 | `. | ds: 0 0x313.4-0x314.1 (0.6)
0x00310| 00 | . | ecn: 0 0x314.2-0x314.3 (0.2)
0x00310| 00 00 00 | ... | flow_label: 0 0x314.4-0x316.7 (2.4)
@ -623,7 +623,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x003e0|de |. |
0x003e0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x3e1-0x3e2.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x3e3-0x4a7.7 (197)
0x003e0| 60 | ` | version: 6 0x3e3-0x3e3.3 (0.4)
0x003e0| 60 | ` | version: 6 (valid) 0x3e3-0x3e3.3 (0.4)
0x003e0| 60 00 | `. | ds: 0 0x3e3.4-0x3e4.1 (0.6)
0x003e0| 00 | . | ecn: 0 0x3e4.2-0x3e4.3 (0.2)
0x003e0| 00 00 00 | ... | flow_label: 0 0x3e4.4-0x3e6.7 (2.4)
@ -944,7 +944,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x004c0|09 e3 e8 de |.... |
0x004c0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x4c4-0x4c5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x4c6-0x58a.7 (197)
0x004c0| 60 | ` | version: 6 0x4c6-0x4c6.3 (0.4)
0x004c0| 60 | ` | version: 6 (valid) 0x4c6-0x4c6.3 (0.4)
0x004c0| 60 00 | `. | ds: 0 0x4c6.4-0x4c7.1 (0.6)
0x004c0| 00 | . | ecn: 0 0x4c7.2-0x4c7.3 (0.2)
0x004c0| 00 00 00 | ... | flow_label: 0 0x4c7.4-0x4c9.7 (2.4)
@ -1264,7 +1264,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x005a0| 00 d0 09 e3 e8 de | ...... | source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x5a1-0x5a6.7 (6)
0x005a0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x5a7-0x5a8.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x5a9-0x65a.7 (178)
0x005a0| 60 | ` | version: 6 0x5a9-0x5a9.3 (0.4)
0x005a0| 60 | ` | version: 6 (valid) 0x5a9-0x5a9.3 (0.4)
0x005a0| 60 00 | `. | ds: 0 0x5a9.4-0x5aa.1 (0.6)
0x005a0| 00 | . | ecn: 0 0x5aa.2-0x5aa.3 (0.2)
0x005a0| 00 00 00 | ... | flow_label: 0 0x5aa.4-0x5ac.7 (2.4)
@ -1396,7 +1396,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00670| 00 d0 09 e3 e8 de | ...... | source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x671-0x676.7 (6)
0x00670| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x677-0x678.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x679-0x731.7 (185)
0x00670| 60 | ` | version: 6 0x679-0x679.3 (0.4)
0x00670| 60 | ` | version: 6 (valid) 0x679-0x679.3 (0.4)
0x00670| 60 00 | `. | ds: 0 0x679.4-0x67a.1 (0.6)
0x00670| 00 | . | ecn: 0 0x67a.2-0x67a.3 (0.2)
0x00670| 00 00 00 | ... | flow_label: 0 0x67a.4-0x67c.7 (2.4)
@ -1587,7 +1587,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00740| 00 d0 09 e3 e8 de | ...... | source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x748-0x74d.7 (6)
0x00740| 86 dd| ..| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x74e-0x74f.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x750-0x85c.7 (269)
0x00750|60 |` | version: 6 0x750-0x750.3 (0.4)
0x00750|60 |` | version: 6 (valid) 0x750-0x750.3 (0.4)
0x00750|60 00 |`. | ds: 0 0x750.4-0x751.1 (0.6)
0x00750| 00 | . | ecn: 0 0x751.2-0x751.3 (0.2)
0x00750| 00 00 00 | ... | flow_label: 0 0x751.4-0x753.7 (2.4)
@ -1840,7 +1840,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00870| 00 d0 09 e3 e8 de | ...... | source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x873-0x878.7 (6)
0x00870| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x879-0x87a.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x87b-0x987.7 (269)
0x00870| 60 | ` | version: 6 0x87b-0x87b.3 (0.4)
0x00870| 60 | ` | version: 6 (valid) 0x87b-0x87b.3 (0.4)
0x00870| 60 00 | `. | ds: 0 0x87b.4-0x87c.1 (0.6)
0x00870| 00 | . | ecn: 0 0x87c.2-0x87c.3 (0.2)
0x00870| 00 00 00 | ... | flow_label: 0 0x87c.4-0x87e.7 (2.4)
@ -2096,7 +2096,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x009a0|09 e3 e8 de |.... |
0x009a0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x9a4-0x9a5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x9a6-0x9f1.7 (76)
0x009a0| 60 | ` | version: 6 0x9a6-0x9a6.3 (0.4)
0x009a0| 60 | ` | version: 6 (valid) 0x9a6-0x9a6.3 (0.4)
0x009a0| 60 00 | `. | ds: 0 0x9a6.4-0x9a7.1 (0.6)
0x009a0| 00 | . | ecn: 0 0x9a7.2-0x9a7.3 (0.2)
0x009a0| 00 00 00 | ... | flow_label: 0 0x9a7.4-0x9a9.7 (2.4)
@ -2138,7 +2138,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00a00| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xa08-0xa0d.7 (6)
0x00a00| 86 dd| ..| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xa0e-0xa0f.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xa10-0xa57.7 (72)
0x00a10|60 |` | version: 6 0xa10-0xa10.3 (0.4)
0x00a10|60 |` | version: 6 (valid) 0xa10-0xa10.3 (0.4)
0x00a10|60 00 |`. | ds: 0 0xa10.4-0xa11.1 (0.6)
0x00a10| 00 | . | ecn: 0 0xa11.2-0xa11.3 (0.2)
0x00a10| 00 00 00 | ... | flow_label: 0 0xa11.4-0xa13.7 (2.4)
@ -2167,7 +2167,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00a70|25 82 95 b5 |%... |
0x00a70| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xa74-0xa75.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xa76-0xabd.7 (72)
0x00a70| 60 | ` | version: 6 0xa76-0xa76.3 (0.4)
0x00a70| 60 | ` | version: 6 (valid) 0xa76-0xa76.3 (0.4)
0x00a70| 60 00 | `. | ds: 0 0xa76.4-0xa77.1 (0.6)
0x00a70| 00 | . | ecn: 0 0xa77.2-0xa77.3 (0.2)
0x00a70| 00 00 00 | ... | flow_label: 0 0xa77.4-0xa79.7 (2.4)
@ -2196,7 +2196,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00ad0| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xad4-0xad9.7 (6)
0x00ad0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xada-0xadb.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xadc-0xb23.7 (72)
0x00ad0| 60 | ` | version: 6 0xadc-0xadc.3 (0.4)
0x00ad0| 60 | ` | version: 6 (valid) 0xadc-0xadc.3 (0.4)
0x00ad0| 60 00 | `. | ds: 0 0xadc.4-0xadd.1 (0.6)
0x00ad0| 00 | . | ecn: 0 0xadd.2-0xadd.3 (0.2)
0x00ad0| 00 00 00| ...| flow_label: 0 0xadd.4-0xadf.7 (2.4)
@ -2224,7 +2224,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00b30| 00 11 25 82 95 b5| ..%...| source: "00:11:25:82:95:b5" (0x11258295b5) 0xb3a-0xb3f.7 (6)
0x00b40|86 dd |.. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xb40-0xb41.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xb42-0xb89.7 (72)
0x00b40| 60 | ` | version: 6 0xb42-0xb42.3 (0.4)
0x00b40| 60 | ` | version: 6 (valid) 0xb42-0xb42.3 (0.4)
0x00b40| 60 00 | `. | ds: 0 0xb42.4-0xb43.1 (0.6)
0x00b40| 00 | . | ecn: 0 0xb43.2-0xb43.3 (0.2)
0x00b40| 00 00 00 | ... | flow_label: 0 0xb43.4-0xb45.7 (2.4)
@ -2253,7 +2253,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00ba0|00 11 25 82 95 b5 |..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xba0-0xba5.7 (6)
0x00ba0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xba6-0xba7.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xba8-0xbef.7 (72)
0x00ba0| 60 | ` | version: 6 0xba8-0xba8.3 (0.4)
0x00ba0| 60 | ` | version: 6 (valid) 0xba8-0xba8.3 (0.4)
0x00ba0| 60 00 | `. | ds: 0 0xba8.4-0xba9.1 (0.6)
0x00ba0| 00 | . | ecn: 0 0xba9.2-0xba9.3 (0.2)
0x00ba0| 00 00 00 | ... | flow_label: 0 0xba9.4-0xbab.7 (2.4)
@ -2278,7 +2278,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00c00| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xc06-0xc0b.7 (6)
0x00c00| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xc0c-0xc0d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xc0e-0xc55.7 (72)
0x00c00| 60 | ` | version: 6 0xc0e-0xc0e.3 (0.4)
0x00c00| 60 | ` | version: 6 (valid) 0xc0e-0xc0e.3 (0.4)
0x00c00| 60 00| `.| ds: 0 0xc0e.4-0xc0f.1 (0.6)
0x00c00| 00| .| ecn: 0 0xc0f.2-0xc0f.3 (0.2)
0x00c00| 00| .| flow_label: 0 0xc0f.4-0xc11.7 (2.4)
@ -2309,7 +2309,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00c70|95 b5 |.. |
0x00c70| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xc72-0xc73.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xc74-0xcbb.7 (72)
0x00c70| 60 | ` | version: 6 0xc74-0xc74.3 (0.4)
0x00c70| 60 | ` | version: 6 (valid) 0xc74-0xc74.3 (0.4)
0x00c70| 60 00 | `. | ds: 0 0xc74.4-0xc75.1 (0.6)
0x00c70| 00 | . | ecn: 0 0xc75.2-0xc75.3 (0.2)
0x00c70| 00 00 00 | ... | flow_label: 0 0xc75.4-0xc77.7 (2.4)
@ -2337,7 +2337,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00cd0| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xcd2-0xcd7.7 (6)
0x00cd0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xcd8-0xcd9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xcda-0xd21.7 (72)
0x00cd0| 60 | ` | version: 6 0xcda-0xcda.3 (0.4)
0x00cd0| 60 | ` | version: 6 (valid) 0xcda-0xcda.3 (0.4)
0x00cd0| 60 00 | `. | ds: 0 0xcda.4-0xcdb.1 (0.6)
0x00cd0| 00 | . | ecn: 0 0xcdb.2-0xcdb.3 (0.2)
0x00cd0| 00 00 00 | ... | flow_label: 0 0xcdb.4-0xcdd.7 (2.4)
@ -2366,7 +2366,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00d30| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xd38-0xd3d.7 (6)
0x00d30| 86 dd| ..| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xd3e-0xd3f.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xd40-0xd87.7 (72)
0x00d40|60 |` | version: 6 0xd40-0xd40.3 (0.4)
0x00d40|60 |` | version: 6 (valid) 0xd40-0xd40.3 (0.4)
0x00d40|60 00 |`. | ds: 0 0xd40.4-0xd41.1 (0.6)
0x00d40| 00 | . | ecn: 0 0xd41.2-0xd41.3 (0.2)
0x00d40| 00 00 00 | ... | flow_label: 0 0xd41.4-0xd43.7 (2.4)
@ -2395,7 +2395,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00da0|25 82 95 b5 |%... |
0x00da0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xda4-0xda5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xda6-0xded.7 (72)
0x00da0| 60 | ` | version: 6 0xda6-0xda6.3 (0.4)
0x00da0| 60 | ` | version: 6 (valid) 0xda6-0xda6.3 (0.4)
0x00da0| 60 00 | `. | ds: 0 0xda6.4-0xda7.1 (0.6)
0x00da0| 00 | . | ecn: 0 0xda7.2-0xda7.3 (0.2)
0x00da0| 00 00 00 | ... | flow_label: 0 0xda7.4-0xda9.7 (2.4)
@ -2424,7 +2424,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00e00| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xe04-0xe09.7 (6)
0x00e00| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xe0a-0xe0b.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xe0c-0xe53.7 (72)
0x00e00| 60 | ` | version: 6 0xe0c-0xe0c.3 (0.4)
0x00e00| 60 | ` | version: 6 (valid) 0xe0c-0xe0c.3 (0.4)
0x00e00| 60 00 | `. | ds: 0 0xe0c.4-0xe0d.1 (0.6)
0x00e00| 00 | . | ecn: 0 0xe0d.2-0xe0d.3 (0.2)
0x00e00| 00 00 00| ...| flow_label: 0 0xe0d.4-0xe0f.7 (2.4)
@ -2452,7 +2452,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00e60| 00 11 25 82 95 b5| ..%...| source: "00:11:25:82:95:b5" (0x11258295b5) 0xe6a-0xe6f.7 (6)
0x00e70|86 dd |.. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xe70-0xe71.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xe72-0xeb9.7 (72)
0x00e70| 60 | ` | version: 6 0xe72-0xe72.3 (0.4)
0x00e70| 60 | ` | version: 6 (valid) 0xe72-0xe72.3 (0.4)
0x00e70| 60 00 | `. | ds: 0 0xe72.4-0xe73.1 (0.6)
0x00e70| 00 | . | ecn: 0 0xe73.2-0xe73.3 (0.2)
0x00e70| 00 00 00 | ... | flow_label: 0 0xe73.4-0xe75.7 (2.4)
@ -2481,7 +2481,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00ed0|00 11 25 82 95 b5 |..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xed0-0xed5.7 (6)
0x00ed0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xed6-0xed7.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xed8-0xf1f.7 (72)
0x00ed0| 60 | ` | version: 6 0xed8-0xed8.3 (0.4)
0x00ed0| 60 | ` | version: 6 (valid) 0xed8-0xed8.3 (0.4)
0x00ed0| 60 00 | `. | ds: 0 0xed8.4-0xed9.1 (0.6)
0x00ed0| 00 | . | ecn: 0 0xed9.2-0xed9.3 (0.2)
0x00ed0| 00 00 00 | ... | flow_label: 0 0xed9.4-0xedb.7 (2.4)
@ -2506,7 +2506,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00f30| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0xf36-0xf3b.7 (6)
0x00f30| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xf3c-0xf3d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xf3e-0xf85.7 (72)
0x00f30| 60 | ` | version: 6 0xf3e-0xf3e.3 (0.4)
0x00f30| 60 | ` | version: 6 (valid) 0xf3e-0xf3e.3 (0.4)
0x00f30| 60 00| `.| ds: 0 0xf3e.4-0xf3f.1 (0.6)
0x00f30| 00| .| ecn: 0 0xf3f.2-0xf3f.3 (0.2)
0x00f30| 00| .| flow_label: 0 0xf3f.4-0xf41.7 (2.4)
@ -2537,7 +2537,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x00fa0|95 b5 |.. |
0x00fa0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0xfa2-0xfa3.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0xfa4-0xfeb.7 (72)
0x00fa0| 60 | ` | version: 6 0xfa4-0xfa4.3 (0.4)
0x00fa0| 60 | ` | version: 6 (valid) 0xfa4-0xfa4.3 (0.4)
0x00fa0| 60 00 | `. | ds: 0 0xfa4.4-0xfa5.1 (0.6)
0x00fa0| 00 | . | ecn: 0 0xfa5.2-0xfa5.3 (0.2)
0x00fa0| 00 00 00 | ... | flow_label: 0 0xfa5.4-0xfa7.7 (2.4)
@ -2565,7 +2565,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01000| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x1002-0x1007.7 (6)
0x01000| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x1008-0x1009.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x100a-0x1051.7 (72)
0x01000| 60 | ` | version: 6 0x100a-0x100a.3 (0.4)
0x01000| 60 | ` | version: 6 (valid) 0x100a-0x100a.3 (0.4)
0x01000| 60 00 | `. | ds: 0 0x100a.4-0x100b.1 (0.6)
0x01000| 00 | . | ecn: 0 0x100b.2-0x100b.3 (0.2)
0x01000| 00 00 00 | ... | flow_label: 0 0x100b.4-0x100d.7 (2.4)
@ -2594,7 +2594,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01060| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x1068-0x106d.7 (6)
0x01060| 86 dd| ..| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x106e-0x106f.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1070-0x10b7.7 (72)
0x01070|60 |` | version: 6 0x1070-0x1070.3 (0.4)
0x01070|60 |` | version: 6 (valid) 0x1070-0x1070.3 (0.4)
0x01070|60 00 |`. | ds: 0 0x1070.4-0x1071.1 (0.6)
0x01070| 00 | . | ecn: 0 0x1071.2-0x1071.3 (0.2)
0x01070| 00 00 00 | ... | flow_label: 0 0x1071.4-0x1073.7 (2.4)
@ -2623,7 +2623,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x010d0|25 82 95 b5 |%... |
0x010d0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x10d4-0x10d5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x10d6-0x111d.7 (72)
0x010d0| 60 | ` | version: 6 0x10d6-0x10d6.3 (0.4)
0x010d0| 60 | ` | version: 6 (valid) 0x10d6-0x10d6.3 (0.4)
0x010d0| 60 00 | `. | ds: 0 0x10d6.4-0x10d7.1 (0.6)
0x010d0| 00 | . | ecn: 0 0x10d7.2-0x10d7.3 (0.2)
0x010d0| 00 00 00 | ... | flow_label: 0 0x10d7.4-0x10d9.7 (2.4)
@ -2652,7 +2652,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01130| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x1134-0x1139.7 (6)
0x01130| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x113a-0x113b.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x113c-0x119b.7 (96)
0x01130| 60 | ` | version: 6 0x113c-0x113c.3 (0.4)
0x01130| 60 | ` | version: 6 (valid) 0x113c-0x113c.3 (0.4)
0x01130| 60 00 | `. | ds: 0 0x113c.4-0x113d.1 (0.6)
0x01130| 00 | . | ecn: 0 0x113d.2-0x113d.3 (0.2)
0x01130| 00 00 00| ...| flow_label: 0 0x113d.4-0x113f.7 (2.4)
@ -2681,7 +2681,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x011b0| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x11b2-0x11b7.7 (6)
0x011b0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x11b8-0x11b9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x11ba-0x1201.7 (72)
0x011b0| 60 | ` | version: 6 0x11ba-0x11ba.3 (0.4)
0x011b0| 60 | ` | version: 6 (valid) 0x11ba-0x11ba.3 (0.4)
0x011b0| 60 00 | `. | ds: 0 0x11ba.4-0x11bb.1 (0.6)
0x011b0| 00 | . | ecn: 0 0x11bb.2-0x11bb.3 (0.2)
0x011b0| 00 00 00 | ... | flow_label: 0 0x11bb.4-0x11bd.7 (2.4)
@ -2710,7 +2710,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01210| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x1218-0x121d.7 (6)
0x01210| 86 dd| ..| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x121e-0x121f.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1220-0x1267.7 (72)
0x01220|60 |` | version: 6 0x1220-0x1220.3 (0.4)
0x01220|60 |` | version: 6 (valid) 0x1220-0x1220.3 (0.4)
0x01220|60 00 |`. | ds: 0 0x1220.4-0x1221.1 (0.6)
0x01220| 00 | . | ecn: 0 0x1221.2-0x1221.3 (0.2)
0x01220| 00 00 00 | ... | flow_label: 0 0x1221.4-0x1223.7 (2.4)
@ -2739,7 +2739,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01280|25 82 95 b5 |%... |
0x01280| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x1284-0x1285.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1286-0x12cd.7 (72)
0x01280| 60 | ` | version: 6 0x1286-0x1286.3 (0.4)
0x01280| 60 | ` | version: 6 (valid) 0x1286-0x1286.3 (0.4)
0x01280| 60 00 | `. | ds: 0 0x1286.4-0x1287.1 (0.6)
0x01280| 00 | . | ecn: 0 0x1287.2-0x1287.3 (0.2)
0x01280| 00 00 00 | ... | flow_label: 0 0x1287.4-0x1289.7 (2.4)
@ -2768,7 +2768,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x012e0| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x12e4-0x12e9.7 (6)
0x012e0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x12ea-0x12eb.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x12ec-0x1333.7 (72)
0x012e0| 60 | ` | version: 6 0x12ec-0x12ec.3 (0.4)
0x012e0| 60 | ` | version: 6 (valid) 0x12ec-0x12ec.3 (0.4)
0x012e0| 60 00 | `. | ds: 0 0x12ec.4-0x12ed.1 (0.6)
0x012e0| 00 | . | ecn: 0 0x12ed.2-0x12ed.3 (0.2)
0x012e0| 00 00 00| ...| flow_label: 0 0x12ed.4-0x12ef.7 (2.4)
@ -2796,7 +2796,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01340| 00 11 25 82 95 b5| ..%...| source: "00:11:25:82:95:b5" (0x11258295b5) 0x134a-0x134f.7 (6)
0x01350|86 dd |.. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x1350-0x1351.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1352-0x1399.7 (72)
0x01350| 60 | ` | version: 6 0x1352-0x1352.3 (0.4)
0x01350| 60 | ` | version: 6 (valid) 0x1352-0x1352.3 (0.4)
0x01350| 60 00 | `. | ds: 0 0x1352.4-0x1353.1 (0.6)
0x01350| 00 | . | ecn: 0 0x1353.2-0x1353.3 (0.2)
0x01350| 00 00 00 | ... | flow_label: 0 0x1353.4-0x1355.7 (2.4)
@ -2825,7 +2825,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x013b0|00 11 25 82 95 b5 |..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x13b0-0x13b5.7 (6)
0x013b0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x13b6-0x13b7.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x13b8-0x13ff.7 (72)
0x013b0| 60 | ` | version: 6 0x13b8-0x13b8.3 (0.4)
0x013b0| 60 | ` | version: 6 (valid) 0x13b8-0x13b8.3 (0.4)
0x013b0| 60 00 | `. | ds: 0 0x13b8.4-0x13b9.1 (0.6)
0x013b0| 00 | . | ecn: 0 0x13b9.2-0x13b9.3 (0.2)
0x013b0| 00 00 00 | ... | flow_label: 0 0x13b9.4-0x13bb.7 (2.4)
@ -2850,7 +2850,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01410| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x1416-0x141b.7 (6)
0x01410| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x141c-0x141d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x141e-0x1465.7 (72)
0x01410| 60 | ` | version: 6 0x141e-0x141e.3 (0.4)
0x01410| 60 | ` | version: 6 (valid) 0x141e-0x141e.3 (0.4)
0x01410| 60 00| `.| ds: 0 0x141e.4-0x141f.1 (0.6)
0x01410| 00| .| ecn: 0 0x141f.2-0x141f.3 (0.2)
0x01410| 00| .| flow_label: 0 0x141f.4-0x1421.7 (2.4)
@ -2881,7 +2881,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01480|95 b5 |.. |
0x01480| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x1482-0x1483.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1484-0x14cb.7 (72)
0x01480| 60 | ` | version: 6 0x1484-0x1484.3 (0.4)
0x01480| 60 | ` | version: 6 (valid) 0x1484-0x1484.3 (0.4)
0x01480| 60 00 | `. | ds: 0 0x1484.4-0x1485.1 (0.6)
0x01480| 00 | . | ecn: 0 0x1485.2-0x1485.3 (0.2)
0x01480| 00 00 00 | ... | flow_label: 0 0x1485.4-0x1487.7 (2.4)
@ -2909,7 +2909,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x014e0| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x14e2-0x14e7.7 (6)
0x014e0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x14e8-0x14e9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x14ea-0x1531.7 (72)
0x014e0| 60 | ` | version: 6 0x14ea-0x14ea.3 (0.4)
0x014e0| 60 | ` | version: 6 (valid) 0x14ea-0x14ea.3 (0.4)
0x014e0| 60 00 | `. | ds: 0 0x14ea.4-0x14eb.1 (0.6)
0x014e0| 00 | . | ecn: 0 0x14eb.2-0x14eb.3 (0.2)
0x014e0| 00 00 00 | ... | flow_label: 0 0x14eb.4-0x14ed.7 (2.4)
@ -2938,7 +2938,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01540| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x1548-0x154d.7 (6)
0x01540| 86 dd| ..| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x154e-0x154f.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1550-0x1597.7 (72)
0x01550|60 |` | version: 6 0x1550-0x1550.3 (0.4)
0x01550|60 |` | version: 6 (valid) 0x1550-0x1550.3 (0.4)
0x01550|60 00 |`. | ds: 0 0x1550.4-0x1551.1 (0.6)
0x01550| 00 | . | ecn: 0 0x1551.2-0x1551.3 (0.2)
0x01550| 00 00 00 | ... | flow_label: 0 0x1551.4-0x1553.7 (2.4)
@ -2967,7 +2967,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x015b0|25 82 95 b5 |%... |
0x015b0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x15b4-0x15b5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x15b6-0x15fd.7 (72)
0x015b0| 60 | ` | version: 6 0x15b6-0x15b6.3 (0.4)
0x015b0| 60 | ` | version: 6 (valid) 0x15b6-0x15b6.3 (0.4)
0x015b0| 60 00 | `. | ds: 0 0x15b6.4-0x15b7.1 (0.6)
0x015b0| 00 | . | ecn: 0 0x15b7.2-0x15b7.3 (0.2)
0x015b0| 00 00 00 | ... | flow_label: 0 0x15b7.4-0x15b9.7 (2.4)
@ -2996,7 +2996,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01610| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x1614-0x1619.7 (6)
0x01610| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x161a-0x161b.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x161c-0x1663.7 (72)
0x01610| 60 | ` | version: 6 0x161c-0x161c.3 (0.4)
0x01610| 60 | ` | version: 6 (valid) 0x161c-0x161c.3 (0.4)
0x01610| 60 00 | `. | ds: 0 0x161c.4-0x161d.1 (0.6)
0x01610| 00 | . | ecn: 0 0x161d.2-0x161d.3 (0.2)
0x01610| 00 00 00| ...| flow_label: 0 0x161d.4-0x161f.7 (2.4)
@ -3024,7 +3024,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01670| 00 d0 09 e3 e8 de| ......| source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x167a-0x167f.7 (6)
0x01680|86 dd |.. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x1680-0x1681.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1682-0x16d1.7 (80)
0x01680| 60 | ` | version: 6 0x1682-0x1682.3 (0.4)
0x01680| 60 | ` | version: 6 (valid) 0x1682-0x1682.3 (0.4)
0x01680| 60 00 | `. | ds: 0 0x1682.4-0x1683.1 (0.6)
0x01680| 00 | . | ecn: 0 0x1683.2-0x1683.3 (0.2)
0x01680| 00 00 00 | ... | flow_label: 0 0x1683.4-0x1685.7 (2.4)
@ -3086,7 +3086,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x016e0| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x16e8-0x16ed.7 (6)
0x016e0| 86 dd| ..| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x16ee-0x16ef.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x16f0-0x1733.7 (68)
0x016f0|60 |` | version: 6 0x16f0-0x16f0.3 (0.4)
0x016f0|60 |` | version: 6 (valid) 0x16f0-0x16f0.3 (0.4)
0x016f0|60 0c |`. | ds: 0 0x16f0.4-0x16f1.1 (0.6)
0x016f0| 0c | . | ecn: 0 0x16f1.2-0x16f1.3 (0.2)
0x016f0| 0c 93 09 | ... | flow_label: 824073 0x16f1.4-0x16f3.7 (2.4)
@ -3139,7 +3139,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01740| 00 d0 09 e3 e8 de| ......| source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x174a-0x174f.7 (6)
0x01750|86 dd |.. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x1750-0x1751.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1752-0x178d.7 (60)
0x01750| 60 | ` | version: 6 0x1752-0x1752.3 (0.4)
0x01750| 60 | ` | version: 6 (valid) 0x1752-0x1752.3 (0.4)
0x01750| 60 00 | `. | ds: 0 0x1752.4-0x1753.1 (0.6)
0x01750| 00 | . | ecn: 0 0x1753.2-0x1753.3 (0.2)
0x01750| 00 00 00 | ... | flow_label: 0 0x1753.4-0x1755.7 (2.4)
@ -3183,7 +3183,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x017a0| 00 d0 09 e3 e8 de | ...... | source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x17a4-0x17a9.7 (6)
0x017a0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x17aa-0x17ab.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x17ac-0x18d7.7 (300)
0x017a0| 60 | ` | version: 6 0x17ac-0x17ac.3 (0.4)
0x017a0| 60 | ` | version: 6 (valid) 0x17ac-0x17ac.3 (0.4)
0x017a0| 60 00 | `. | ds: 0 0x17ac.4-0x17ad.1 (0.6)
0x017a0| 00 | . | ecn: 0 0x17ad.2-0x17ad.3 (0.2)
0x017a0| 00 00 00| ...| flow_label: 0 0x17ad.4-0x17af.7 (2.4)
@ -3227,7 +3227,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x018f0|25 82 95 b5 |%... |
0x018f0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x18f4-0x18f5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x18f6-0x1ec9.7 (1492)
0x018f0| 60 | ` | version: 6 0x18f6-0x18f6.3 (0.4)
0x018f0| 60 | ` | version: 6 (valid) 0x18f6-0x18f6.3 (0.4)
0x018f0| 60 0c | `. | ds: 0 0x18f6.4-0x18f7.1 (0.6)
0x018f0| 0c | . | ecn: 0 0x18f7.2-0x18f7.3 (0.2)
0x018f0| 0c 93 09 | ... | flow_label: 824073 0x18f7.4-0x18f9.7 (2.4)
@ -3271,7 +3271,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x01ee0|00 11 25 82 95 b5 |..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x1ee0-0x1ee5.7 (6)
0x01ee0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x1ee6-0x1ee7.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x1ee8-0x225e.7 (887)
0x01ee0| 60 | ` | version: 6 0x1ee8-0x1ee8.3 (0.4)
0x01ee0| 60 | ` | version: 6 (valid) 0x1ee8-0x1ee8.3 (0.4)
0x01ee0| 60 0c | `. | ds: 0 0x1ee8.4-0x1ee9.1 (0.6)
0x01ee0| 0c | . | ecn: 0 0x1ee9.2-0x1ee9.3 (0.2)
0x01ee0| 0c 93 09 | ... | flow_label: 824073 0x1ee9.4-0x1eeb.7 (2.4)
@ -3314,7 +3314,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x02270| 00 11 25 82 95 b5 | ..%... | source: "00:11:25:82:95:b5" (0x11258295b5) 0x2275-0x227a.7 (6)
0x02270| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x227b-0x227c.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x227d-0x22b8.7 (60)
0x02270| 60 | ` | version: 6 0x227d-0x227d.3 (0.4)
0x02270| 60 | ` | version: 6 (valid) 0x227d-0x227d.3 (0.4)
0x02270| 60 0c | `. | ds: 0 0x227d.4-0x227e.1 (0.6)
0x02270| 0c | . | ecn: 0 0x227e.2-0x227e.3 (0.2)
0x02270| 0c 93| ..| flow_label: 824073 0x227e.4-0x2280.7 (2.4)
@ -3359,7 +3359,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x022d0|d0 09 e3 e8 de |..... |
0x022d0| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x22d5-0x22d6.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x22d7-0x2312.7 (60)
0x022d0| 60 | ` | version: 6 0x22d7-0x22d7.3 (0.4)
0x022d0| 60 | ` | version: 6 (valid) 0x22d7-0x22d7.3 (0.4)
0x022d0| 60 00 | `. | ds: 0 0x22d7.4-0x22d8.1 (0.6)
0x022d0| 00 | . | ecn: 0 0x22d8.2-0x22d8.3 (0.2)
0x022d0| 00 00 00 | ... | flow_label: 0 0x22d8.4-0x22da.7 (2.4)
@ -3404,7 +3404,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x02320| 86| .| ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x232f-0x2330.7 (2)
0x02330|dd |. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x2331-0x236c.7 (60)
0x02330| 60 | ` | version: 6 0x2331-0x2331.3 (0.4)
0x02330| 60 | ` | version: 6 (valid) 0x2331-0x2331.3 (0.4)
0x02330| 60 00 | `. | ds: 0 0x2331.4-0x2332.1 (0.6)
0x02330| 00 | . | ecn: 0 0x2332.2-0x2332.3 (0.2)
0x02330| 00 00 00 | ... | flow_label: 0 0x2332.4-0x2334.7 (2.4)
@ -3448,7 +3448,7 @@ $ fq -d pcap dv ipv6_http.pcap
0x02380| 00 d0 09 e3 e8 de | ...... | source: "00:d0:09:e3:e8:de" (0xd009e3e8de) 0x2383-0x2388.7 (6)
0x02380| 86 dd | .. | ether_type: "ipv6" (0x86dd) (Internet Protocol Version 6) 0x2389-0x238a.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv6_packet) 0x238b-0x23c6.7 (60)
0x02380| 60 | ` | version: 6 0x238b-0x238b.3 (0.4)
0x02380| 60 | ` | version: 6 (valid) 0x238b-0x238b.3 (0.4)
0x02380| 60 00 | `. | ds: 0 0x238b.4-0x238c.1 (0.6)
0x02380| 00 | . | ecn: 0 0x238c.2-0x238c.3 (0.2)
0x02380| 00 00 00 | ... | flow_label: 0 0x238c.4-0x238e.7 (2.4)

BIN
format/pcap/testdata/link_type_raw.pcap vendored Normal file
View File

Binary file not shown.

76
format/pcap/testdata/link_type_raw.pcap.fqtest vendored Normal file
View File

@ -0,0 +1,76 @@
$ fq dv link_type_raw.pcap
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: link_type_raw.pcap (pcap) 0x0-0x65.7 (102)
| | | header{}: 0x0-0x17.7 (24)
0x00|d4 c3 b2 a1 |.... | magic: "little_endian" (0xd4c3b2a1) (valid) 0x0-0x3.7 (4)
0x00| 02 00 | .. | version_major: 2 0x4-0x5.7 (2)
0x00| 04 00 | .. | version_minor: 4 0x6-0x7.7 (2)
0x00| 00 00 00 00 | .... | thiszone: 0 0x8-0xb.7 (4)
0x00| 00 00 00 00| ....| sigfigs: 0 0xc-0xf.7 (4)
0x10|ff ff 00 00 |.... | snaplen: 65535 0x10-0x13.7 (4)
0x10| 65 00 00 00 | e... | network: "raw" (101) (Raw IP) 0x14-0x17.7 (4)
| | | packets[0:1]: 0x18-0x65.7 (78)
| | | [0]{}: packet 0x18-0x65.7 (78)
0x10| f3 1c 73 61 | ..sa | ts_sec: 1634934003 0x18-0x1b.7 (4)
0x10| 13 50 03 00| .P..| ts_usec: 217107 0x1c-0x1f.7 (4)
0x20|3e 00 00 00 |>... | incl_len: 62 0x20-0x23.7 (4)
0x20| 3e 00 00 00 | >... | orig_len: 62 0x24-0x27.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ipv4_packet) 0x28-0x65.7 (62)
0x20| 45 | E | version: 4 (valid) 0x28-0x28.3 (0.4)
0x20| 45 | E | ihl: 5 0x28.4-0x28.7 (0.4)
0x20| 00 | . | dscp: 0 0x29-0x29.5 (0.6)
0x20| 00 | . | ecn: 0 0x29.6-0x29.7 (0.2)
0x20| 00 3e | .> | total_length: 62 0x2a-0x2b.7 (2)
0x20| 72 9e | r. | identification: 29342 0x2c-0x2d.7 (2)
0x20| 40 | @ | reserved: 0 0x2e-0x2e (0.1)
0x20| 40 | @ | dont_fragment: true 0x2e.1-0x2e.1 (0.1)
0x20| 40 | @ | more_fragments: false 0x2e.2-0x2e.2 (0.1)
0x20| 40 00| @.| fragment_offset: 0 0x2e.3-0x2f.7 (1.5)
0x30|40 |@ | ttl: 64 0x30-0x30.7 (1)
0x30| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x31-0x31.7 (1)
0x30| 58 5f | X_ | header_checksum: 0x585f (valid) 0x32-0x33.7 (2)
0x30| 0a d7 ad 01 | .... | source_ip: "10.215.173.1" (0xad7ad01) 0x34-0x37.7 (4)
0x30| 0a d7 ad 02 | .... | destination_ip: "10.215.173.2" (0xad7ad02) 0x38-0x3b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x3c-0x65.7 (42)
0x30| c0 ec | .. | source_port: 49388 0x3c-0x3d.7 (2)
0x30| 00 35| .5| destination_port: "domain" (53) (Domain Name Server) 0x3e-0x3f.7 (2)
0x40|00 2a |.* | length: 42 0x40-0x41.7 (2)
0x40| 22 3e | "> | checksum: 0x223e 0x42-0x43.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0x44-0x65.7 (34)
| | | header{}: 0x44-0x47.7 (4)
0x40| b2 7a | .z | id: 45690 0x44-0x45.7 (2)
0x40| 01 | . | qr: "query" (0) 0x46-0x46 (0.1)
0x40| 01 | . | opcode: "query" (0) 0x46.1-0x46.4 (0.4)
0x40| 01 | . | authoritative_answer: false 0x46.5-0x46.5 (0.1)
0x40| 01 | . | truncation: false 0x46.6-0x46.6 (0.1)
0x40| 01 | . | recursion_desired: true 0x46.7-0x46.7 (0.1)
0x40| 00 | . | recursion_available: false 0x47-0x47 (0.1)
0x40| 00 | . | z: 0 0x47.1-0x47.3 (0.3)
0x40| 00 | . | rcode: "no_error" (0) (No error) 0x47.4-0x47.7 (0.4)
0x40| 00 01 | .. | qd_count: 1 0x48-0x49.7 (2)
0x40| 00 00 | .. | an_count: 0 0x4a-0x4b.7 (2)
0x40| 00 00 | .. | ns_count: 0 0x4c-0x4d.7 (2)
0x40| 00 00| ..| ar_count: 0 0x4e-0x4f.7 (2)
| | | questions[0:1]: 0x50-0x65.7 (22)
| | | [0]{}: question 0x50-0x65.7 (22)
| | | name{}: 0x50-0x61.7 (18)
| | | labels[0:4]: 0x50-0x61.7 (18)
| | | [0]{}: label 0x50-0x55.7 (6)
0x50|05 |. | length: 5 0x50-0x50.7 (1)
0x50| 6d 74 61 6c 6b | mtalk | value: "mtalk" 0x51-0x55.7 (5)
| | | [1]{}: label 0x56-0x5c.7 (7)
0x50| 06 | . | length: 6 0x56-0x56.7 (1)
0x50| 67 6f 6f 67 6c 65 | google | value: "google" 0x57-0x5c.7 (6)
| | | [2]{}: label 0x5d-0x60.7 (4)
0x50| 03 | . | length: 3 0x5d-0x5d.7 (1)
0x50| 63 6f| co| value: "com" 0x5e-0x60.7 (3)
0x60|6d |m |
| | | [3]{}: label 0x61-0x61.7 (1)
0x60| 00 | . | length: 0 0x61-0x61.7 (1)
| | | value: "mtalk.google.com" 0x62-NA (0)
0x60| 00 1c | .. | type: "aaaa" (28) 0x62-0x63.7 (2)
0x60| 00 01| | ..| | class: "in" (1) (Internet) 0x64-0x65.7 (2)
| | | answers[0:0]: 0x66-NA (0)
| | | nameservers[0:0]: 0x66-NA (0)
| | | additionals[0:0]: 0x66-NA (0)
| | | ipv4_reassembled[0:0]: 0x66-NA (0)
| | | tcp_connections[0:0]: 0x66-NA (0)

128
format/pcap/testdata/many_interfaces.fqtest vendored
View File

@ -416,7 +416,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x005c0| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x5c2-0x5c7.7 (6)
0x005c0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x5c8-0x5c9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x5ca-0x66d.7 (164)
0x005c0| 45 | E | version: 4 0x5ca-0x5ca.3 (0.4)
0x005c0| 45 | E | version: 4 (valid) 0x5ca-0x5ca.3 (0.4)
0x005c0| 45 | E | ihl: 5 0x5ca.4-0x5ca.7 (0.4)
0x005c0| 00 | . | dscp: 0 0x5cb-0x5cb.5 (0.6)
0x005c0| 00 | . | ecn: 0 0x5cb.6-0x5cb.7 (0.2)
@ -455,7 +455,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00690| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x696-0x69b.7 (6)
0x00690| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x69c-0x69d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x69e-0x741.7 (164)
0x00690| 45 | E | version: 4 0x69e-0x69e.3 (0.4)
0x00690| 45 | E | version: 4 (valid) 0x69e-0x69e.3 (0.4)
0x00690| 45 | E | ihl: 5 0x69e.4-0x69e.7 (0.4)
0x00690| 00| .| dscp: 0 0x69f-0x69f.5 (0.6)
0x00690| 00| .| ecn: 0 0x69f.6-0x69f.7 (0.2)
@ -493,7 +493,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (bsd_loopback_frame) 0x764-0x80b.7 (168)
0x00760| 02 00 00 00 | .... | network_layer: "ipv4" (0x2) (Internet protocol v4) 0x764-0x767.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x768-0x80b.7 (164)
0x00760| 45 | E | version: 4 0x768-0x768.3 (0.4)
0x00760| 45 | E | version: 4 (valid) 0x768-0x768.3 (0.4)
0x00760| 45 | E | ihl: 5 0x768.4-0x768.7 (0.4)
0x00760| 00 | . | dscp: 0 0x769-0x769.5 (0.6)
0x00760| 00 | . | ecn: 0 0x769.6-0x769.7 (0.2)
@ -530,7 +530,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (bsd_loopback_frame) 0x82c-0x8d3.7 (168)
0x00820| 02 00 00 00| ....| network_layer: "ipv4" (0x2) (Internet protocol v4) 0x82c-0x82f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x830-0x8d3.7 (164)
0x00830|45 |E | version: 4 0x830-0x830.3 (0.4)
0x00830|45 |E | version: 4 (valid) 0x830-0x830.3 (0.4)
0x00830|45 |E | ihl: 5 0x830.4-0x830.7 (0.4)
0x00830| 00 | . | dscp: 0 0x831-0x831.5 (0.6)
0x00830| 00 | . | ecn: 0 0x831.6-0x831.7 (0.2)
@ -569,7 +569,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x008f0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x8fa-0x8ff.7 (6)
0x00900|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x900-0x901.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x902-0x949.7 (72)
0x00900| 45 | E | version: 4 0x902-0x902.3 (0.4)
0x00900| 45 | E | version: 4 (valid) 0x902-0x902.3 (0.4)
0x00900| 45 | E | ihl: 5 0x902.4-0x902.7 (0.4)
0x00900| 00 | . | dscp: 0 0x903-0x903.5 (0.6)
0x00900| 00 | . | ecn: 0 0x903.6-0x903.7 (0.2)
@ -652,7 +652,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00970| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x972-0x977.7 (6)
0x00970| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x978-0x979.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x97a-0x9c5.7 (76)
0x00970| 45 | E | version: 4 0x97a-0x97a.3 (0.4)
0x00970| 45 | E | version: 4 (valid) 0x97a-0x97a.3 (0.4)
0x00970| 45 | E | ihl: 5 0x97a.4-0x97a.7 (0.4)
0x00970| c0 | . | dscp: 48 0x97b-0x97b.5 (0.6)
0x00970| c0 | . | ecn: 0 0x97b.6-0x97b.7 (0.2)
@ -692,7 +692,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x009f0|3e 05 36 d3 |>.6. |
0x009f0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x9f4-0x9f5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x9f6-0xa57.7 (98)
0x009f0| 45 | E | version: 4 0x9f6-0x9f6.3 (0.4)
0x009f0| 45 | E | version: 4 (valid) 0x9f6-0x9f6.3 (0.4)
0x009f0| 45 | E | ihl: 5 0x9f6.4-0x9f6.7 (0.4)
0x009f0| 00 | . | dscp: 0 0x9f7-0x9f7.5 (0.6)
0x009f0| 00 | . | ecn: 0 0x9f7.6-0x9f7.7 (0.2)
@ -817,7 +817,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00a80|60 f1 7d 93 |`.}. |
0x00a80| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xa84-0xa85.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xa86-0xacf.7 (74)
0x00a80| 45 | E | version: 4 0xa86-0xa86.3 (0.4)
0x00a80| 45 | E | version: 4 (valid) 0xa86-0xa86.3 (0.4)
0x00a80| 45 | E | ihl: 5 0xa86.4-0xa86.7 (0.4)
0x00a80| 00 | . | dscp: 0 0xa87-0xa87.5 (0.6)
0x00a80| 00 | . | ecn: 0 0xa87.6-0xa87.7 (0.2)
@ -900,7 +900,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00af0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xaf6-0xafb.7 (6)
0x00af0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xafc-0xafd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xafe-0xb86.7 (137)
0x00af0| 45 | E | version: 4 0xafe-0xafe.3 (0.4)
0x00af0| 45 | E | version: 4 (valid) 0xafe-0xafe.3 (0.4)
0x00af0| 45 | E | ihl: 5 0xafe.4-0xafe.7 (0.4)
0x00af0| 00| .| dscp: 0 0xaff-0xaff.5 (0.6)
0x00af0| 00| .| ecn: 0 0xaff.6-0xaff.7 (0.2)
@ -1049,7 +1049,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00bb0|60 f1 7d 93 |`.}. |
0x00bb0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xbb4-0xbb5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xbb6-0xbfd.7 (72)
0x00bb0| 45 | E | version: 4 0xbb6-0xbb6.3 (0.4)
0x00bb0| 45 | E | version: 4 (valid) 0xbb6-0xbb6.3 (0.4)
0x00bb0| 45 | E | ihl: 5 0xbb6.4-0xbb6.7 (0.4)
0x00bb0| 00 | . | dscp: 0 0xbb7-0xbb7.5 (0.6)
0x00bb0| 00 | . | ecn: 0 0xbb7.6-0xbb7.7 (0.2)
@ -1132,7 +1132,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00c20| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xc26-0xc2b.7 (6)
0x00c20| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xc2c-0xc2d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xc2e-0xc79.7 (76)
0x00c20| 45 | E | version: 4 0xc2e-0xc2e.3 (0.4)
0x00c20| 45 | E | version: 4 (valid) 0xc2e-0xc2e.3 (0.4)
0x00c20| 45 | E | ihl: 5 0xc2e.4-0xc2e.7 (0.4)
0x00c20| 28| (| dscp: 10 0xc2f-0xc2f.5 (0.6)
0x00c20| 28| (| ecn: 0 0xc2f.6-0xc2f.7 (0.2)
@ -1173,7 +1173,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00ca0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xca2-0xca7.7 (6)
0x00ca0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xca8-0xca9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xcaa-0xcf1.7 (72)
0x00ca0| 45 | E | version: 4 0xcaa-0xcaa.3 (0.4)
0x00ca0| 45 | E | version: 4 (valid) 0xcaa-0xcaa.3 (0.4)
0x00ca0| 45 | E | ihl: 5 0xcaa.4-0xcaa.7 (0.4)
0x00ca0| 00 | . | dscp: 0 0xcab-0xcab.5 (0.6)
0x00ca0| 00 | . | ecn: 0 0xcab.6-0xcab.7 (0.2)
@ -1254,7 +1254,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00d10| 94 10 3e 05 36 d3| ..>.6.| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xd1a-0xd1f.7 (6)
0x00d20|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xd20-0xd21.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xd22-0xd67.7 (70)
0x00d20| 45 | E | version: 4 0xd22-0xd22.3 (0.4)
0x00d20| 45 | E | version: 4 (valid) 0xd22-0xd22.3 (0.4)
0x00d20| 45 | E | ihl: 5 0xd22.4-0xd22.7 (0.4)
0x00d20| 28 | ( | dscp: 10 0xd23-0xd23.5 (0.6)
0x00d20| 28 | ( | ecn: 0 0xd23.6-0xd23.7 (0.2)
@ -1295,7 +1295,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00d90|60 f1 7d 93 |`.}. |
0x00d90| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xd94-0xd95.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xd96-0xddd.7 (72)
0x00d90| 45 | E | version: 4 0xd96-0xd96.3 (0.4)
0x00d90| 45 | E | version: 4 (valid) 0xd96-0xd96.3 (0.4)
0x00d90| 45 | E | ihl: 5 0xd96.4-0xd96.7 (0.4)
0x00d90| 00 | . | dscp: 0 0xd97-0xd97.5 (0.6)
0x00d90| 00 | . | ecn: 0 0xd97.6-0xd97.7 (0.2)
@ -1378,7 +1378,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00e00| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xe06-0xe0b.7 (6)
0x00e00| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xe0c-0xe0d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xe0e-0xe53.7 (70)
0x00e00| 45 | E | version: 4 0xe0e-0xe0e.3 (0.4)
0x00e00| 45 | E | version: 4 (valid) 0xe0e-0xe0e.3 (0.4)
0x00e00| 45 | E | ihl: 5 0xe0e.4-0xe0e.7 (0.4)
0x00e00| 28| (| dscp: 10 0xe0f-0xe0f.5 (0.6)
0x00e00| 28| (| ecn: 0 0xe0f.6-0xe0f.7 (0.2)
@ -1418,7 +1418,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00e70| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xe7a-0xe7f.7 (6)
0x00e80|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xe80-0xe81.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xe82-0xec9.7 (72)
0x00e80| 45 | E | version: 4 0xe82-0xe82.3 (0.4)
0x00e80| 45 | E | version: 4 (valid) 0xe82-0xe82.3 (0.4)
0x00e80| 45 | E | ihl: 5 0xe82.4-0xe82.7 (0.4)
0x00e80| 00 | . | dscp: 0 0xe83-0xe83.5 (0.6)
0x00e80| 00 | . | ecn: 0 0xe83.6-0xe83.7 (0.2)
@ -1459,7 +1459,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00ef0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xef2-0xef7.7 (6)
0x00ef0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xef8-0xef9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xefa-0xf82.7 (137)
0x00ef0| 45 | E | version: 4 0xefa-0xefa.3 (0.4)
0x00ef0| 45 | E | version: 4 (valid) 0xefa-0xefa.3 (0.4)
0x00ef0| 45 | E | ihl: 5 0xefa.4-0xefa.7 (0.4)
0x00ef0| 00 | . | dscp: 0 0xefb-0xefb.5 (0.6)
0x00ef0| 00 | . | ecn: 0 0xefb.6-0xefb.7 (0.2)
@ -1633,7 +1633,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00fa0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xfaa-0xfaf.7 (6)
0x00fb0|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xfb0-0xfb1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xfb2-0xff7.7 (70)
0x00fb0| 45 | E | version: 4 0xfb2-0xfb2.3 (0.4)
0x00fb0| 45 | E | version: 4 (valid) 0xfb2-0xfb2.3 (0.4)
0x00fb0| 45 | E | ihl: 5 0xfb2.4-0xfb2.7 (0.4)
0x00fb0| 00 | . | dscp: 0 0xfb3-0xfb3.5 (0.6)
0x00fb0| 00 | . | ecn: 0 0xfb3.6-0xfb3.7 (0.2)
@ -1718,7 +1718,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01020|3e 05 36 d3 |>.6. |
0x01020| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1024-0x1025.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1026-0x1080.7 (91)
0x01020| 45 | E | version: 4 0x1026-0x1026.3 (0.4)
0x01020| 45 | E | version: 4 (valid) 0x1026-0x1026.3 (0.4)
0x01020| 45 | E | ihl: 5 0x1026.4-0x1026.7 (0.4)
0x01020| 00 | . | dscp: 0 0x1027-0x1027.5 (0.6)
0x01020| 00 | . | ecn: 0 0x1027.6-0x1027.7 (0.2)
@ -1839,7 +1839,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x010a0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x10aa-0x10af.7 (6)
0x010b0|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x10b0-0x10b1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x10b2-0x10fb.7 (74)
0x010b0| 45 | E | version: 4 0x10b2-0x10b2.3 (0.4)
0x010b0| 45 | E | version: 4 (valid) 0x10b2-0x10b2.3 (0.4)
0x010b0| 45 | E | ihl: 5 0x10b2.4-0x10b2.7 (0.4)
0x010b0| 00 | . | dscp: 0 0x10b3-0x10b3.5 (0.6)
0x010b0| 00 | . | ecn: 0 0x10b3.6-0x10b3.7 (0.2)
@ -1924,7 +1924,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01120| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x1122-0x1127.7 (6)
0x01120| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1128-0x1129.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x112a-0x1195.7 (108)
0x01120| 45 | E | version: 4 0x112a-0x112a.3 (0.4)
0x01120| 45 | E | version: 4 (valid) 0x112a-0x112a.3 (0.4)
0x01120| 45 | E | ihl: 5 0x112a.4-0x112a.7 (0.4)
0x01120| 00 | . | dscp: 0 0x112b-0x112b.5 (0.6)
0x01120| 00 | . | ecn: 0 0x112b.6-0x112b.7 (0.2)
@ -2053,7 +2053,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x011c0|60 f1 7d 93 |`.}. |
0x011c0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x11c4-0x11c5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x11c6-0x1206.7 (65)
0x011c0| 45 | E | version: 4 0x11c6-0x11c6.3 (0.4)
0x011c0| 45 | E | version: 4 (valid) 0x11c6-0x11c6.3 (0.4)
0x011c0| 45 | E | ihl: 5 0x11c6.4-0x11c6.7 (0.4)
0x011c0| 00 | . | dscp: 0 0x11c7-0x11c7.5 (0.6)
0x011c0| 00 | . | ecn: 0 0x11c7.6-0x11c7.7 (0.2)
@ -2128,7 +2128,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01230|3e 05 36 d3 |>.6. |
0x01230| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1234-0x1235.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1236-0x133e.7 (265)
0x01230| 45 | E | version: 4 0x1236-0x1236.3 (0.4)
0x01230| 45 | E | version: 4 (valid) 0x1236-0x1236.3 (0.4)
0x01230| 45 | E | ihl: 5 0x1236.4-0x1236.7 (0.4)
0x01230| 00 | . | dscp: 0 0x1237-0x1237.5 (0.6)
0x01230| 00 | . | ecn: 0 0x1237.6-0x1237.7 (0.2)
@ -2565,7 +2565,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01360| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1366-0x136b.7 (6)
0x01360| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x136c-0x136d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x136e-0x13ad.7 (64)
0x01360| 45 | E | version: 4 0x136e-0x136e.3 (0.4)
0x01360| 45 | E | version: 4 (valid) 0x136e-0x136e.3 (0.4)
0x01360| 45 | E | ihl: 5 0x136e.4-0x136e.7 (0.4)
0x01360| 00| .| dscp: 0 0x136f-0x136f.5 (0.6)
0x01360| 00| .| ecn: 0 0x136f.6-0x136f.7 (0.2)
@ -2644,7 +2644,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x013d0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x13d6-0x13db.7 (6)
0x013d0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x13dc-0x13dd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x13de-0x1419.7 (60)
0x013d0| 45 | E | version: 4 0x13de-0x13de.3 (0.4)
0x013d0| 45 | E | version: 4 (valid) 0x13de-0x13de.3 (0.4)
0x013d0| 45 | E | ihl: 5 0x13de.4-0x13de.7 (0.4)
0x013d0| 28| (| dscp: 10 0x13df-0x13df.5 (0.6)
0x013d0| 28| (| ecn: 0 0x13df.6-0x13df.7 (0.2)
@ -2717,7 +2717,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01440| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1442-0x1447.7 (6)
0x01440| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1448-0x1449.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x144a-0x147d.7 (52)
0x01440| 45 | E | version: 4 0x144a-0x144a.3 (0.4)
0x01440| 45 | E | version: 4 (valid) 0x144a-0x144a.3 (0.4)
0x01440| 45 | E | ihl: 5 0x144a.4-0x144a.7 (0.4)
0x01440| 00 | . | dscp: 0 0x144b-0x144b.5 (0.6)
0x01440| 00 | . | ecn: 0 0x144b.6-0x144b.7 (0.2)
@ -2778,7 +2778,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x014a0| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x14a6-0x14ab.7 (6)
0x014a0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x14ac-0x14ad.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x14ae-0x16e6.7 (569)
0x014a0| 45 | E | version: 4 0x14ae-0x14ae.3 (0.4)
0x014a0| 45 | E | version: 4 (valid) 0x14ae-0x14ae.3 (0.4)
0x014a0| 45 | E | ihl: 5 0x14ae.4-0x14ae.7 (0.4)
0x014a0| 00| .| dscp: 0 0x14af-0x14af.5 (0.6)
0x014a0| 00| .| ecn: 0 0x14af.6-0x14af.7 (0.2)
@ -2844,7 +2844,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01710|3e 05 36 d3 |>.6. |
0x01710| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1714-0x1715.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1716-0x1749.7 (52)
0x01710| 45 | E | version: 4 0x1716-0x1716.3 (0.4)
0x01710| 45 | E | version: 4 (valid) 0x1716-0x1716.3 (0.4)
0x01710| 45 | E | ihl: 5 0x1716.4-0x1716.7 (0.4)
0x01710| 28 | ( | dscp: 10 0x1717-0x1717.5 (0.6)
0x01710| 28 | ( | ecn: 0 0x1717.6-0x1717.7 (0.2)
@ -2907,7 +2907,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01770| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x1772-0x1777.7 (6)
0x01770| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1778-0x1779.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x177a-0x183f.7 (198)
0x01770| 45 | E | version: 4 0x177a-0x177a.3 (0.4)
0x01770| 45 | E | version: 4 (valid) 0x177a-0x177a.3 (0.4)
0x01770| 45 | E | ihl: 5 0x177a.4-0x177a.7 (0.4)
0x01770| 28 | ( | dscp: 10 0x177b-0x177b.5 (0.6)
0x01770| 28 | ( | ecn: 0 0x177b.6-0x177b.7 (0.2)
@ -2970,7 +2970,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01860| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1866-0x186b.7 (6)
0x01860| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x186c-0x186d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x186e-0x18a1.7 (52)
0x01860| 45 | E | version: 4 0x186e-0x186e.3 (0.4)
0x01860| 45 | E | version: 4 (valid) 0x186e-0x186e.3 (0.4)
0x01860| 45 | E | ihl: 5 0x186e.4-0x186e.7 (0.4)
0x01860| 00| .| dscp: 0 0x186f-0x186f.5 (0.6)
0x01860| 00| .| ecn: 0 0x186f.6-0x186f.7 (0.2)
@ -3033,7 +3033,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x018c0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x18ca-0x18cf.7 (6)
0x018d0|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x18d0-0x18d1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x18d2-0x1938.7 (103)
0x018d0| 45 | E | version: 4 0x18d2-0x18d2.3 (0.4)
0x018d0| 45 | E | version: 4 (valid) 0x18d2-0x18d2.3 (0.4)
0x018d0| 45 | E | ihl: 5 0x18d2.4-0x18d2.7 (0.4)
0x018d0| 00 | . | dscp: 0 0x18d3-0x18d3.5 (0.6)
0x018d0| 00 | . | ecn: 0 0x18d3.6-0x18d3.7 (0.2)
@ -3100,7 +3100,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01960| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1962-0x1967.7 (6)
0x01960| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1968-0x1969.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x196a-0x19d2.7 (105)
0x01960| 45 | E | version: 4 0x196a-0x196a.3 (0.4)
0x01960| 45 | E | version: 4 (valid) 0x196a-0x196a.3 (0.4)
0x01960| 45 | E | ihl: 5 0x196a.4-0x196a.7 (0.4)
0x01960| 00 | . | dscp: 0 0x196b-0x196b.5 (0.6)
0x01960| 00 | . | ecn: 0 0x196b.6-0x196b.7 (0.2)
@ -3163,7 +3163,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x019f0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x19fa-0x19ff.7 (6)
0x01a00|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1a00-0x1a01.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1a02-0x1a67.7 (102)
0x01a00| 45 | E | version: 4 0x1a02-0x1a02.3 (0.4)
0x01a00| 45 | E | version: 4 (valid) 0x1a02-0x1a02.3 (0.4)
0x01a00| 45 | E | ihl: 5 0x1a02.4-0x1a02.7 (0.4)
0x01a00| 00 | . | dscp: 0 0x1a03-0x1a03.5 (0.6)
0x01a00| 00 | . | ecn: 0 0x1a03.6-0x1a03.7 (0.2)
@ -3230,7 +3230,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01a90|60 f1 7d 93 |`.}. |
0x01a90| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1a94-0x1a95.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1a96-0x1af3.7 (94)
0x01a90| 45 | E | version: 4 0x1a96-0x1a96.3 (0.4)
0x01a90| 45 | E | version: 4 (valid) 0x1a96-0x1a96.3 (0.4)
0x01a90| 45 | E | ihl: 5 0x1a96.4-0x1a96.7 (0.4)
0x01a90| 00 | . | dscp: 0 0x1a97-0x1a97.5 (0.6)
0x01a90| 00 | . | ecn: 0 0x1a97.6-0x1a97.7 (0.2)
@ -3294,7 +3294,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x01b10| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1b1a-0x1b1f.7 (6)
0x01b20|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1b20-0x1b21.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1b22-0x1fe9.7 (1224)
0x01b20| 45 | E | version: 4 0x1b22-0x1b22.3 (0.4)
0x01b20| 45 | E | version: 4 (valid) 0x1b22-0x1b22.3 (0.4)
0x01b20| 45 | E | ihl: 5 0x1b22.4-0x1b22.7 (0.4)
0x01b20| 00 | . | dscp: 0 0x1b23-0x1b23.5 (0.6)
0x01b20| 00 | . | ecn: 0 0x1b23.6-0x1b23.7 (0.2)
@ -3361,7 +3361,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02010| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2012-0x2017.7 (6)
0x02010| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2018-0x2019.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x201a-0x204d.7 (52)
0x02010| 45 | E | version: 4 0x201a-0x201a.3 (0.4)
0x02010| 45 | E | version: 4 (valid) 0x201a-0x201a.3 (0.4)
0x02010| 45 | E | ihl: 5 0x201a.4-0x201a.7 (0.4)
0x02010| 28 | ( | dscp: 10 0x201b-0x201b.5 (0.6)
0x02010| 28 | ( | ecn: 0 0x201b.6-0x201b.7 (0.2)
@ -3422,7 +3422,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02070| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2076-0x207b.7 (6)
0x02070| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x207c-0x207d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x207e-0x20e9.7 (108)
0x02070| 45 | E | version: 4 0x207e-0x207e.3 (0.4)
0x02070| 45 | E | version: 4 (valid) 0x207e-0x207e.3 (0.4)
0x02070| 45 | E | ihl: 5 0x207e.4-0x207e.7 (0.4)
0x02070| 28| (| dscp: 10 0x207f-0x207f.5 (0.6)
0x02070| 28| (| ecn: 0 0x207f.6-0x207f.7 (0.2)
@ -3488,7 +3488,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02110| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2112-0x2117.7 (6)
0x02110| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2118-0x2119.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x211a-0x2177.7 (94)
0x02110| 45 | E | version: 4 0x211a-0x211a.3 (0.4)
0x02110| 45 | E | version: 4 (valid) 0x211a-0x211a.3 (0.4)
0x02110| 45 | E | ihl: 5 0x211a.4-0x211a.7 (0.4)
0x02110| 28 | ( | dscp: 10 0x211b-0x211b.5 (0.6)
0x02110| 28 | ( | ecn: 0 0x211b.6-0x211b.7 (0.2)
@ -3552,7 +3552,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x021a0|3e 05 36 d3 |>.6. |
0x021a0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x21a4-0x21a5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x21a6-0x21ff.7 (90)
0x021a0| 45 | E | version: 4 0x21a6-0x21a6.3 (0.4)
0x021a0| 45 | E | version: 4 (valid) 0x21a6-0x21a6.3 (0.4)
0x021a0| 45 | E | ihl: 5 0x21a6.4-0x21a6.7 (0.4)
0x021a0| 28 | ( | dscp: 10 0x21a7-0x21a7.5 (0.6)
0x021a0| 28 | ( | ecn: 0 0x21a7.6-0x21a7.7 (0.2)
@ -3616,7 +3616,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02220| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2226-0x222b.7 (6)
0x02220| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x222c-0x222d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x222e-0x2261.7 (52)
0x02220| 45 | E | version: 4 0x222e-0x222e.3 (0.4)
0x02220| 45 | E | version: 4 (valid) 0x222e-0x222e.3 (0.4)
0x02220| 45 | E | ihl: 5 0x222e.4-0x222e.7 (0.4)
0x02220| 00| .| dscp: 0 0x222f-0x222f.5 (0.6)
0x02220| 00| .| ecn: 0 0x222f.6-0x222f.7 (0.2)
@ -3679,7 +3679,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02280| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x228a-0x228f.7 (6)
0x02290|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2290-0x2291.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2292-0x22c5.7 (52)
0x02290| 45 | E | version: 4 0x2292-0x2292.3 (0.4)
0x02290| 45 | E | version: 4 (valid) 0x2292-0x2292.3 (0.4)
0x02290| 45 | E | ihl: 5 0x2292.4-0x2292.7 (0.4)
0x02290| 00 | . | dscp: 0 0x2293-0x2293.5 (0.6)
0x02290| 00 | . | ecn: 0 0x2293.6-0x2293.7 (0.2)
@ -3744,7 +3744,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x022f0|60 f1 7d 93 |`.}. |
0x022f0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x22f4-0x22f5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x22f6-0x2329.7 (52)
0x022f0| 45 | E | version: 4 0x22f6-0x22f6.3 (0.4)
0x022f0| 45 | E | version: 4 (valid) 0x22f6-0x22f6.3 (0.4)
0x022f0| 45 | E | ihl: 5 0x22f6.4-0x22f6.7 (0.4)
0x022f0| 00 | . | dscp: 0 0x22f7-0x22f7.5 (0.6)
0x022f0| 00 | . | ecn: 0 0x22f7.6-0x22f7.7 (0.2)
@ -3807,7 +3807,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02350| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2352-0x2357.7 (6)
0x02350| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2358-0x2359.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x235a-0x23b3.7 (90)
0x02350| 45 | E | version: 4 0x235a-0x235a.3 (0.4)
0x02350| 45 | E | version: 4 (valid) 0x235a-0x235a.3 (0.4)
0x02350| 45 | E | ihl: 5 0x235a.4-0x235a.7 (0.4)
0x02350| 00 | . | dscp: 0 0x235b-0x235b.5 (0.6)
0x02350| 00 | . | ecn: 0 0x235b.6-0x235b.7 (0.2)
@ -3870,7 +3870,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x023d0| 94 10 3e 05 36 d3| ..>.6.| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x23da-0x23df.7 (6)
0x023e0|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x23e0-0x23e1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x23e2-0x2603.7 (546)
0x023e0| 45 | E | version: 4 0x23e2-0x23e2.3 (0.4)
0x023e0| 45 | E | version: 4 (valid) 0x23e2-0x23e2.3 (0.4)
0x023e0| 45 | E | ihl: 5 0x23e2.4-0x23e2.7 (0.4)
0x023e0| 28 | ( | dscp: 10 0x23e3-0x23e3.5 (0.6)
0x023e0| 28 | ( | ecn: 0 0x23e3.6-0x23e3.7 (0.2)
@ -3936,7 +3936,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02620| 94 10 3e 05 36 d3| ..>.6.| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x262a-0x262f.7 (6)
0x02630|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2630-0x2631.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2632-0x268b.7 (90)
0x02630| 45 | E | version: 4 0x2632-0x2632.3 (0.4)
0x02630| 45 | E | version: 4 (valid) 0x2632-0x2632.3 (0.4)
0x02630| 45 | E | ihl: 5 0x2632.4-0x2632.7 (0.4)
0x02630| 28 | ( | dscp: 10 0x2633-0x2633.5 (0.6)
0x02630| 28 | ( | ecn: 0 0x2633.6-0x2633.7 (0.2)
@ -4003,7 +4003,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x026b0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x26b2-0x26b7.7 (6)
0x026b0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x26b8-0x26b9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x26ba-0x271b.7 (98)
0x026b0| 45 | E | version: 4 0x26ba-0x26ba.3 (0.4)
0x026b0| 45 | E | version: 4 (valid) 0x26ba-0x26ba.3 (0.4)
0x026b0| 45 | E | ihl: 5 0x26ba.4-0x26ba.7 (0.4)
0x026b0| 28 | ( | dscp: 10 0x26bb-0x26bb.5 (0.6)
0x026b0| 28 | ( | ecn: 0 0x26bb.6-0x26bb.7 (0.2)
@ -4067,7 +4067,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02740| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2742-0x2747.7 (6)
0x02740| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2748-0x2749.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x274a-0x277d.7 (52)
0x02740| 45 | E | version: 4 0x274a-0x274a.3 (0.4)
0x02740| 45 | E | version: 4 (valid) 0x274a-0x274a.3 (0.4)
0x02740| 45 | E | ihl: 5 0x274a.4-0x274a.7 (0.4)
0x02740| 00 | . | dscp: 0 0x274b-0x274b.5 (0.6)
0x02740| 00 | . | ecn: 0 0x274b.6-0x274b.7 (0.2)
@ -4128,7 +4128,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x027a0| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x27a6-0x27ab.7 (6)
0x027a0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x27ac-0x27ad.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x27ae-0x27e1.7 (52)
0x027a0| 45 | E | version: 4 0x27ae-0x27ae.3 (0.4)
0x027a0| 45 | E | version: 4 (valid) 0x27ae-0x27ae.3 (0.4)
0x027a0| 45 | E | ihl: 5 0x27ae.4-0x27ae.7 (0.4)
0x027a0| 00| .| dscp: 0 0x27af-0x27af.5 (0.6)
0x027a0| 00| .| ecn: 0 0x27af.6-0x27af.7 (0.2)
@ -4191,7 +4191,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02800| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x280a-0x280f.7 (6)
0x02810|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2810-0x2811.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2812-0x2845.7 (52)
0x02810| 45 | E | version: 4 0x2812-0x2812.3 (0.4)
0x02810| 45 | E | version: 4 (valid) 0x2812-0x2812.3 (0.4)
0x02810| 45 | E | ihl: 5 0x2812.4-0x2812.7 (0.4)
0x02810| 00 | . | dscp: 0 0x2813-0x2813.5 (0.6)
0x02810| 00 | . | ecn: 0 0x2813.6-0x2813.7 (0.2)
@ -4256,7 +4256,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02870|60 f1 7d 93 |`.}. |
0x02870| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2874-0x2875.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2876-0x28d7.7 (98)
0x02870| 45 | E | version: 4 0x2876-0x2876.3 (0.4)
0x02870| 45 | E | version: 4 (valid) 0x2876-0x2876.3 (0.4)
0x02870| 45 | E | ihl: 5 0x2876.4-0x2876.7 (0.4)
0x02870| 00 | . | dscp: 0 0x2877-0x2877.5 (0.6)
0x02870| 00 | . | ecn: 0 0x2877.6-0x2877.7 (0.2)
@ -4321,7 +4321,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02900|60 f1 7d 93 |`.}. |
0x02900| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2904-0x2905.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2906-0x2e67.7 (1378)
0x02900| 45 | E | version: 4 0x2906-0x2906.3 (0.4)
0x02900| 45 | E | version: 4 (valid) 0x2906-0x2906.3 (0.4)
0x02900| 45 | E | ihl: 5 0x2906.4-0x2906.7 (0.4)
0x02900| 00 | . | dscp: 0 0x2907-0x2907.5 (0.6)
0x02900| 00 | . | ecn: 0 0x2907.6-0x2907.7 (0.2)
@ -4361,7 +4361,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02e90|60 f1 7d 93 |`.}. |
0x02e90| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2e94-0x2e95.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2e96-0x2ed5.7 (64)
0x02e90| 45 | E | version: 4 0x2e96-0x2e96.3 (0.4)
0x02e90| 45 | E | version: 4 (valid) 0x2e96-0x2e96.3 (0.4)
0x02e90| 45 | E | ihl: 5 0x2e96.4-0x2e96.7 (0.4)
0x02e90| 00 | . | dscp: 0 0x2e97-0x2e97.5 (0.6)
0x02e90| 00 | . | ecn: 0 0x2e97.6-0x2e97.7 (0.2)
@ -4442,7 +4442,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02f00|3e 05 36 d3 |>.6. |
0x02f00| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2f04-0x2f05.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2f06-0x2f39.7 (52)
0x02f00| 45 | E | version: 4 0x2f06-0x2f06.3 (0.4)
0x02f00| 45 | E | version: 4 (valid) 0x2f06-0x2f06.3 (0.4)
0x02f00| 45 | E | ihl: 5 0x2f06.4-0x2f06.7 (0.4)
0x02f00| 28 | ( | dscp: 10 0x2f07-0x2f07.5 (0.6)
0x02f00| 28 | ( | ecn: 0 0x2f07.6-0x2f07.7 (0.2)
@ -4505,7 +4505,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02f60| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2f62-0x2f67.7 (6)
0x02f60| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2f68-0x2f69.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2f6a-0x2fa5.7 (60)
0x02f60| 45 | E | version: 4 0x2f6a-0x2f6a.3 (0.4)
0x02f60| 45 | E | version: 4 (valid) 0x2f6a-0x2f6a.3 (0.4)
0x02f60| 45 | E | ihl: 5 0x2f6a.4-0x2f6a.7 (0.4)
0x02f60| 28 | ( | dscp: 10 0x2f6b-0x2f6b.5 (0.6)
0x02f60| 28 | ( | ecn: 0 0x2f6b.6-0x2f6b.7 (0.2)
@ -4577,7 +4577,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x02fd0|60 f1 7d 93 |`.}. |
0x02fd0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2fd4-0x2fd5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2fd6-0x3009.7 (52)
0x02fd0| 45 | E | version: 4 0x2fd6-0x2fd6.3 (0.4)
0x02fd0| 45 | E | version: 4 (valid) 0x2fd6-0x2fd6.3 (0.4)
0x02fd0| 45 | E | ihl: 5 0x2fd6.4-0x2fd6.7 (0.4)
0x02fd0| 00 | . | dscp: 0 0x2fd7-0x2fd7.5 (0.6)
0x02fd0| 00 | . | ecn: 0 0x2fd7.6-0x2fd7.7 (0.2)
@ -4640,7 +4640,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x03030| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x3032-0x3037.7 (6)
0x03030| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3038-0x3039.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x303a-0x3145.7 (268)
0x03030| 45 | E | version: 4 0x303a-0x303a.3 (0.4)
0x03030| 45 | E | version: 4 (valid) 0x303a-0x303a.3 (0.4)
0x03030| 45 | E | ihl: 5 0x303a.4-0x303a.7 (0.4)
0x03030| 00 | . | dscp: 0 0x303b-0x303b.5 (0.6)
0x03030| 00 | . | ecn: 0 0x303b.6-0x303b.7 (0.2)
@ -4704,7 +4704,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x03170|60 f1 7d 93 |`.}. |
0x03170| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3174-0x3175.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x3176-0x36d7.7 (1378)
0x03170| 45 | E | version: 4 0x3176-0x3176.3 (0.4)
0x03170| 45 | E | version: 4 (valid) 0x3176-0x3176.3 (0.4)
0x03170| 45 | E | ihl: 5 0x3176.4-0x3176.7 (0.4)
0x03170| 00 | . | dscp: 0 0x3177-0x3177.5 (0.6)
0x03170| 00 | . | ecn: 0 0x3177.6-0x3177.7 (0.2)
@ -4744,7 +4744,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x03700|60 f1 7d 93 |`.}. |
0x03700| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3704-0x3705.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x3706-0x373a.7 (53)
0x03700| 45 | E | version: 4 0x3706-0x3706.3 (0.4)
0x03700| 45 | E | version: 4 (valid) 0x3706-0x3706.3 (0.4)
0x03700| 45 | E | ihl: 5 0x3706.4-0x3706.7 (0.4)
0x03700| 00 | . | dscp: 0 0x3707-0x3707.5 (0.6)
0x03700| 00 | . | ecn: 0 0x3707.6-0x3707.7 (0.2)
@ -4783,7 +4783,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x03760| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x3762-0x3767.7 (6)
0x03760| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3768-0x3769.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x376a-0x3ccb.7 (1378)
0x03760| 45 | E | version: 4 0x376a-0x376a.3 (0.4)
0x03760| 45 | E | version: 4 (valid) 0x376a-0x376a.3 (0.4)
0x03760| 45 | E | ihl: 5 0x376a.4-0x376a.7 (0.4)
0x03760| 28 | ( | dscp: 10 0x376b-0x376b.5 (0.6)
0x03760| 28 | ( | ecn: 0 0x376b.6-0x376b.7 (0.2)
@ -4823,7 +4823,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x03cf0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x3cf2-0x3cf7.7 (6)
0x03cf0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3cf8-0x3cf9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x3cfa-0x425b.7 (1378)
0x03cf0| 45 | E | version: 4 0x3cfa-0x3cfa.3 (0.4)
0x03cf0| 45 | E | version: 4 (valid) 0x3cfa-0x3cfa.3 (0.4)
0x03cf0| 45 | E | ihl: 5 0x3cfa.4-0x3cfa.7 (0.4)
0x03cf0| 28 | ( | dscp: 10 0x3cfb-0x3cfb.5 (0.6)
0x03cf0| 28 | ( | ecn: 0 0x3cfb.6-0x3cfb.7 (0.2)
@ -4863,7 +4863,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04280| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x4282-0x4287.7 (6)
0x04280| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x4288-0x4289.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x428a-0x42cd.7 (68)
0x04280| 45 | E | version: 4 0x428a-0x428a.3 (0.4)
0x04280| 45 | E | version: 4 (valid) 0x428a-0x428a.3 (0.4)
0x04280| 45 | E | ihl: 5 0x428a.4-0x428a.7 (0.4)
0x04280| 00 | . | dscp: 0 0x428b-0x428b.5 (0.6)
0x04280| 00 | . | ecn: 0 0x428b.6-0x428b.7 (0.2)
@ -4902,7 +4902,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x042f0| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x42f6-0x42fb.7 (6)
0x042f0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x42fc-0x42fd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x42fe-0x485f.7 (1378)
0x042f0| 45 | E | version: 4 0x42fe-0x42fe.3 (0.4)
0x042f0| 45 | E | version: 4 (valid) 0x42fe-0x42fe.3 (0.4)
0x042f0| 45 | E | ihl: 5 0x42fe.4-0x42fe.7 (0.4)
0x042f0| 00| .| dscp: 0 0x42ff-0x42ff.5 (0.6)
0x042f0| 00| .| ecn: 0 0x42ff.6-0x42ff.7 (0.2)
@ -4942,7 +4942,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04880| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x4886-0x488b.7 (6)
0x04880| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x488c-0x488d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x488e-0x4b53.7 (710)
0x04880| 45 | E | version: 4 0x488e-0x488e.3 (0.4)
0x04880| 45 | E | version: 4 (valid) 0x488e-0x488e.3 (0.4)
0x04880| 45 | E | ihl: 5 0x488e.4-0x488e.7 (0.4)
0x04880| 00| .| dscp: 0 0x488f-0x488f.5 (0.6)
0x04880| 00| .| ecn: 0 0x488f.6-0x488f.7 (0.2)
@ -4982,7 +4982,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04b70| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x4b7a-0x4b7f.7 (6)
0x04b80|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x4b80-0x4b81.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x4b82-0x4c36.7 (181)
0x04b80| 45 | E | version: 4 0x4b82-0x4b82.3 (0.4)
0x04b80| 45 | E | version: 4 (valid) 0x4b82-0x4b82.3 (0.4)
0x04b80| 45 | E | ihl: 5 0x4b82.4-0x4b82.7 (0.4)
0x04b80| 00 | . | dscp: 0 0x4b83-0x4b83.5 (0.6)
0x04b80| 00 | . | ecn: 0 0x4b83.6-0x4b83.7 (0.2)

2
format/pcap/testdata/ns.fqtest vendored
View File

@ -22,7 +22,7 @@ $ fq dv ns.pcap
0x30|b5 cb 28 ce |..(. |
0x30| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x34-0x35.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x36-0xc5.7 (144)
0x30| 45 | E | version: 4 0x36-0x36.3 (0.4)
0x30| 45 | E | version: 4 (valid) 0x36-0x36.3 (0.4)
0x30| 45 | E | ihl: 5 0x36.4-0x36.7 (0.4)
0x30| 00 | . | dscp: 0 0x37-0x37.5 (0.6)
0x30| 00 | . | ecn: 0 0x37.6-0x37.7 (0.2)

10
format/pcap/testdata/sll2_tcp.fqtest vendored
View File

@ -24,7 +24,7 @@ $ fq -d pcap dv sll2_tcp.pcap
0x030| 00 00 00 00 00 00 | ...... | link_address: "00:00:00:00:00:00" (0x0) 0x34-0x39.7 (6)
0x030| 00 00 | .. | padding: raw bits 0x3a-0x3b.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x3c-0x77.7 (60)
0x030| 45 | E | version: 4 0x3c-0x3c.3 (0.4)
0x030| 45 | E | version: 4 (valid) 0x3c-0x3c.3 (0.4)
0x030| 45 | E | ihl: 5 0x3c.4-0x3c.7 (0.4)
0x030| 00 | . | dscp: 0 0x3d-0x3d.5 (0.6)
0x030| 00 | . | ecn: 0 0x3d.6-0x3d.7 (0.2)
@ -93,7 +93,7 @@ $ fq -d pcap dv sll2_tcp.pcap
0x090| 00 00 00 00 00 00 | ...... | link_address: "00:00:00:00:00:00" (0x0) 0x94-0x99.7 (6)
0x090| 00 00 | .. | padding: raw bits 0x9a-0x9b.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x9c-0xd7.7 (60)
0x090| 45 | E | version: 4 0x9c-0x9c.3 (0.4)
0x090| 45 | E | version: 4 (valid) 0x9c-0x9c.3 (0.4)
0x090| 45 | E | ihl: 5 0x9c.4-0x9c.7 (0.4)
0x090| 00 | . | dscp: 0 0x9d-0x9d.5 (0.6)
0x090| 00 | . | ecn: 0 0x9d.6-0x9d.7 (0.2)
@ -162,7 +162,7 @@ $ fq -d pcap dv sll2_tcp.pcap
0x0f0| 00 00 00 00 00 00 | ...... | link_address: "00:00:00:00:00:00" (0x0) 0xf4-0xf9.7 (6)
0x0f0| 00 00 | .. | padding: raw bits 0xfa-0xfb.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xfc-0x12f.7 (52)
0x0f0| 45 | E | version: 4 0xfc-0xfc.3 (0.4)
0x0f0| 45 | E | version: 4 (valid) 0xfc-0xfc.3 (0.4)
0x0f0| 45 | E | ihl: 5 0xfc.4-0xfc.7 (0.4)
0x0f0| 00 | . | dscp: 0 0xfd-0xfd.5 (0.6)
0x0f0| 00 | . | ecn: 0 0xfd.6-0xfd.7 (0.2)
@ -223,7 +223,7 @@ $ fq -d pcap dv sll2_tcp.pcap
0x150|00 00 |.. |
0x150| 00 00 | .. | padding: raw bits 0x152-0x153.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x154-0x18c.7 (57)
0x150| 45 | E | version: 4 0x154-0x154.3 (0.4)
0x150| 45 | E | version: 4 (valid) 0x154-0x154.3 (0.4)
0x150| 45 | E | ihl: 5 0x154.4-0x154.7 (0.4)
0x150| 00 | . | dscp: 0 0x155-0x155.5 (0.6)
0x150| 00 | . | ecn: 0 0x155.6-0x155.7 (0.2)
@ -286,7 +286,7 @@ $ fq -d pcap dv sll2_tcp.pcap
0x1a0| 00| .| padding: raw bits 0x1af-0x1b0.7 (2)
0x1b0|00 |. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1b1-0x1e4.7 (52)
0x1b0| 45 | E | version: 4 0x1b1-0x1b1.3 (0.4)
0x1b0| 45 | E | version: 4 (valid) 0x1b1-0x1b1.3 (0.4)
0x1b0| 45 | E | ihl: 5 0x1b1.4-0x1b1.7 (0.4)
0x1b0| 00 | . | dscp: 0 0x1b2-0x1b2.5 (0.6)
0x1b0| 00 | . | ecn: 0 0x1b2.6-0x1b2.7 (0.2)

4
format/pcap/testdata/tcp-ipv4frag.pcap.fqtest vendored
View File

@ -2,7 +2,7 @@
$ fq '.ipv4_reassembled, .tcp_connections | dv' tcp-ipv4frag.pcap
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.ipv4_reassembled[0:2]: 0x70f-NA (0)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| [0]{}: ipv4_packet (ipv4_packet) 0x0-0x1f0.7 (497)
0x000|45 |E | version: 4 0x0-0x0.3 (0.4)
0x000|45 |E | version: 4 (valid) 0x0-0x0.3 (0.4)
0x000|45 |E | ihl: 5 0x0.4-0x0.7 (0.4)
0x000| 00 | . | dscp: 0 0x1-0x1.5 (0.6)
0x000| 00 | . | ecn: 0 0x1.6-0x1.7 (0.2)
@ -50,7 +50,7 @@ $ fq '.ipv4_reassembled, .tcp_connections | dv' tcp-ipv4frag.pcap
0x004|68 65 72 65 61 6c 2e 68 74 6d 6c 20 48 54 54 50|hereal.html HTTP|
* |until 0x1f0.7 (end) (445) | |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| [1]{}: ipv4_packet (ipv4_packet) 0x0-0x1c5.7 (454)
0x000|45 |E | version: 4 0x0-0x0.3 (0.4)
0x000|45 |E | version: 4 (valid) 0x0-0x0.3 (0.4)
0x000|45 |E | ihl: 5 0x0.4-0x0.7 (0.4)
0x000| 00 | . | dscp: 0 0x1-0x1.5 (0.6)
0x000| 00 | . | ecn: 0 0x1.6-0x1.7 (0.2)