wader/fq
1
1
Fork 0
mirror of https://github.com/wader/fq.git synced 2024-12-25 14:23:18 +03:00
Code Issues Projects Releases Wiki Activity
93de19c9b3
fq/format/pcap/testdata/many_interfaces.fqtest
Mattias Wadman 9a5fcc89f1 xml: Allow trailing <?procinstr?> 
Also more context in error messages and refactor trim function
2022-08-11 23:48:29 +02:00

5526 lines
672 KiB
Plaintext
Raw Blame History

# from https://wiki.wireshark.org/Development/PcapNg
$ fq -d pcapng dv many_interfaces.pcapng
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.[0:1]: many_interfaces.pcapng (pcapng) 0x0-0x51b7.7 (20920)
| | | [0]{}: section 0x0-0x51b7.7 (20920)
| | | blocks[0:88]: 0x0-0x51b7.7 (20920)
| | | [0]{}: block 0x0-0x8b.7 (140)
0x00000|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a) (Section Header Block) 0x0-0x3.7 (4)
0x00000| 8c 00 00 00 | .... | length: 140 0x4-0x7.7 (4)
0x00000| 4d 3c 2b 1a | M<+. | byte_order_magic: "little_endian" (0x4d3c2b1a) 0x8-0xb.7 (4)
0x00000| 01 00 | .. | major_version: 1 0xc-0xd.7 (2)
0x00000| 00 00| ..| minor_version: 0 0xe-0xf.7 (2)
0x00010|ff ff ff ff ff ff ff ff |........ | section_length: -1 0x10-0x17.7 (8)
| | | options[0:3]: 0x18-0x87.7 (112)
| | | [0]{}: option 0x18-0x4b.7 (52)
0x00010| 03 00 | .. | code: "os" (3) 0x18-0x19.7 (2)
0x00010| 2d 00 | -. | length: 45 0x1a-0x1b.7 (2)
0x00010| 4d 61 63 20| Mac | value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x1c-0x48.7 (45)
0x00020|4f 53 20 58 20 31 30 2e 31 30 2e 34 2c 20 62 75|OS X 10.10.4, bu|
* |until 0x48.7 (45) | |
0x00040| 00 00 00 | ... | padding: raw bits 0x49-0x4b.7 (3)
| | | [1]{}: option 0x4c-0x83.7 (56)
0x00040| 04 00 | .. | code: "userappl" (4) 0x4c-0x4d.7 (2)
0x00040| 34 00| 4.| length: 52 0x4e-0x4f.7 (2)
0x00050|44 75 6d 70 63 61 70 20 31 2e 31 32 2e 36 20 28|Dumpcap 1.12.6 (| value: "Dumpcap 1.12.6 (v1.12.6-0-gee1fce6 from master-..." 0x50-0x83.7 (52)
* |until 0x83.7 (52) | |
| | | padding: raw bits 0x84-NA (0)
| | | [2]{}: option 0x84-0x87.7 (4)
0x00080| 00 00 | .. | code: "end" (0) (End of options) 0x84-0x85.7 (2)
0x00080| 00 00 | .. | length: 0 0x86-0x87.7 (2)
0x00080| 8c 00 00 00 | .... | footer_total_length: 140 0x88-0x8b.7 (4)
| | | [1]{}: block 0x8c-0xff.7 (116)
0x00080| 01 00 00 00| ....| type: "interface_description" (0x1) (Interface Description Block) 0x8c-0x8f.7 (4)
0x00090|74 00 00 00 |t... | length: 116 0x90-0x93.7 (4)
0x00090| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x94-0x95.7 (2)
0x00090| 00 00 | .. | reserved: 0 0x96-0x97.7 (2)
0x00090| 00 00 04 00 | .... | snap_len: 262144 0x98-0x9b.7 (4)
| | | options[0:5]: 0x9c-0xfb.7 (96)
| | | [0]{}: option 0x9c-0xa3.7 (8)
0x00090| 02 00 | .. | code: "name" (2) 0x9c-0x9d.7 (2)
0x00090| 03 00| ..| length: 3 0x9e-0x9f.7 (2)
0x000a0|65 6e 30 |en0 | value: "en0" 0xa0-0xa2.7 (3)
0x000a0| 00 | . | padding: raw bits 0xa3-0xa3.7 (1)
| | | [1]{}: option 0xa4-0xab.7 (8)
0x000a0| 09 00 | .. | code: "tsresol" (9) 0xa4-0xa5.7 (2)
0x000a0| 01 00 | .. | length: 1 0xa6-0xa7.7 (2)
0x000a0| 06 | . | value: "\x06" 0xa8-0xa8.7 (1)
0x000a0| 00 00 00 | ... | padding: raw bits 0xa9-0xab.7 (3)
| | | [2]{}: option 0xac-0xc3.7 (24)
0x000a0| 0b 00 | .. | code: "filter" (11) 0xac-0xad.7 (2)
0x000a0| 13 00| ..| length: 19 0xae-0xaf.7 (2)
0x000b0|00 68 6f 73 74 20 31 39 32 2e 31 36 38 2e 31 2e|.host 192.168.1.| value: "" 0xb0-0xc2.7 (19)
0x000c0|31 33 39 |139 |
0x000c0| 00 | . | padding: raw bits 0xc3-0xc3.7 (1)
| | | [3]{}: option 0xc4-0xf7.7 (52)
0x000c0| 0c 00 | .. | code: "os" (12) 0xc4-0xc5.7 (2)
0x000c0| 2d 00 | -. | length: 45 0xc6-0xc7.7 (2)
0x000c0| 4d 61 63 20 4f 53 20 58| Mac OS X| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0xc8-0xf4.7 (45)
0x000d0|20 31 30 2e 31 30 2e 34 2c 20 62 75 69 6c 64 20| 10.10.4, build |
* |until 0xf4.7 (45) | |
0x000f0| 00 00 00 | ... | padding: raw bits 0xf5-0xf7.7 (3)
| | | [4]{}: option 0xf8-0xfb.7 (4)
0x000f0| 00 00 | .. | code: "end" (0) (End of options) 0xf8-0xf9.7 (2)
0x000f0| 00 00 | .. | length: 0 0xfa-0xfb.7 (2)
0x000f0| 74 00 00 00| t...| footer_length: 116 0xfc-0xff.7 (4)
| | | [2]{}: block 0x100-0x177.7 (120)
0x00100|01 00 00 00 |.... | type: "interface_description" (0x1) (Interface Description Block) 0x100-0x103.7 (4)
0x00100| 78 00 00 00 | x... | length: 120 0x104-0x107.7 (4)
0x00100| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x108-0x109.7 (2)
0x00100| 00 00 | .. | reserved: 0 0x10a-0x10b.7 (2)
0x00100| 00 00 04 00| ....| snap_len: 262144 0x10c-0x10f.7 (4)
| | | options[0:5]: 0x110-0x173.7 (100)
| | | [0]{}: option 0x110-0x11b.7 (12)
0x00110|02 00 |.. | code: "name" (2) 0x110-0x111.7 (2)
0x00110| 05 00 | .. | length: 5 0x112-0x113.7 (2)
0x00110| 61 77 64 6c 30 | awdl0 | value: "awdl0" 0x114-0x118.7 (5)
0x00110| 00 00 00 | ... | padding: raw bits 0x119-0x11b.7 (3)
| | | [1]{}: option 0x11c-0x123.7 (8)
0x00110| 09 00 | .. | code: "tsresol" (9) 0x11c-0x11d.7 (2)
0x00110| 01 00| ..| length: 1 0x11e-0x11f.7 (2)
0x00120|06 |. | value: "\x06" 0x120-0x120.7 (1)
0x00120| 00 00 00 | ... | padding: raw bits 0x121-0x123.7 (3)
| | | [2]{}: option 0x124-0x13b.7 (24)
0x00120| 0b 00 | .. | code: "filter" (11) 0x124-0x125.7 (2)
0x00120| 13 00 | .. | length: 19 0x126-0x127.7 (2)
0x00120| 00 68 6f 73 74 20 31 39| .host 19| value: "" 0x128-0x13a.7 (19)
0x00130|32 2e 31 36 38 2e 31 2e 31 33 39 |2.168.1.139 |
0x00130| 00 | . | padding: raw bits 0x13b-0x13b.7 (1)
| | | [3]{}: option 0x13c-0x16f.7 (52)
0x00130| 0c 00 | .. | code: "os" (12) 0x13c-0x13d.7 (2)
0x00130| 2d 00| -.| length: 45 0x13e-0x13f.7 (2)
0x00140|4d 61 63 20 4f 53 20 58 20 31 30 2e 31 30 2e 34|Mac OS X 10.10.4| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x140-0x16c.7 (45)
* |until 0x16c.7 (45) | |
0x00160| 00 00 00| ...| padding: raw bits 0x16d-0x16f.7 (3)
| | | [4]{}: option 0x170-0x173.7 (4)
0x00170|00 00 |.. | code: "end" (0) (End of options) 0x170-0x171.7 (2)
0x00170| 00 00 | .. | length: 0 0x172-0x173.7 (2)
0x00170| 78 00 00 00 | x... | footer_length: 120 0x174-0x177.7 (4)
| | | [3]{}: block 0x178-0x1ef.7 (120)
0x00170| 01 00 00 00 | .... | type: "interface_description" (0x1) (Interface Description Block) 0x178-0x17b.7 (4)
0x00170| 78 00 00 00| x...| length: 120 0x17c-0x17f.7 (4)
0x00180|01 00 |.. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x180-0x181.7 (2)
0x00180| 00 00 | .. | reserved: 0 0x182-0x183.7 (2)
0x00180| 00 00 04 00 | .... | snap_len: 262144 0x184-0x187.7 (4)
| | | options[0:5]: 0x188-0x1eb.7 (100)
| | | [0]{}: option 0x188-0x193.7 (12)
0x00180| 02 00 | .. | code: "name" (2) 0x188-0x189.7 (2)
0x00180| 07 00 | .. | length: 7 0x18a-0x18b.7 (2)
0x00180| 62 72 69 64| brid| value: "bridge0" 0x18c-0x192.7 (7)
0x00190|67 65 30 |ge0 |
0x00190| 00 | . | padding: raw bits 0x193-0x193.7 (1)
| | | [1]{}: option 0x194-0x19b.7 (8)
0x00190| 09 00 | .. | code: "tsresol" (9) 0x194-0x195.7 (2)
0x00190| 01 00 | .. | length: 1 0x196-0x197.7 (2)
0x00190| 06 | . | value: "\x06" 0x198-0x198.7 (1)
0x00190| 00 00 00 | ... | padding: raw bits 0x199-0x19b.7 (3)
| | | [2]{}: option 0x19c-0x1b3.7 (24)
0x00190| 0b 00 | .. | code: "filter" (11) 0x19c-0x19d.7 (2)
0x00190| 13 00| ..| length: 19 0x19e-0x19f.7 (2)
0x001a0|00 68 6f 73 74 20 31 39 32 2e 31 36 38 2e 31 2e|.host 192.168.1.| value: "" 0x1a0-0x1b2.7 (19)
0x001b0|31 33 39 |139 |
0x001b0| 00 | . | padding: raw bits 0x1b3-0x1b3.7 (1)
| | | [3]{}: option 0x1b4-0x1e7.7 (52)
0x001b0| 0c 00 | .. | code: "os" (12) 0x1b4-0x1b5.7 (2)
0x001b0| 2d 00 | -. | length: 45 0x1b6-0x1b7.7 (2)
0x001b0| 4d 61 63 20 4f 53 20 58| Mac OS X| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x1b8-0x1e4.7 (45)
0x001c0|20 31 30 2e 31 30 2e 34 2c 20 62 75 69 6c 64 20| 10.10.4, build |
* |until 0x1e4.7 (45) | |
0x001e0| 00 00 00 | ... | padding: raw bits 0x1e5-0x1e7.7 (3)
| | | [4]{}: option 0x1e8-0x1eb.7 (4)
0x001e0| 00 00 | .. | code: "end" (0) (End of options) 0x1e8-0x1e9.7 (2)
0x001e0| 00 00 | .. | length: 0 0x1ea-0x1eb.7 (2)
0x001e0| 78 00 00 00| x...| footer_length: 120 0x1ec-0x1ef.7 (4)
| | | [4]{}: block 0x1f0-0x267.7 (120)
0x001f0|01 00 00 00 |.... | type: "interface_description" (0x1) (Interface Description Block) 0x1f0-0x1f3.7 (4)
0x001f0| 78 00 00 00 | x... | length: 120 0x1f4-0x1f7.7 (4)
0x001f0| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x1f8-0x1f9.7 (2)
0x001f0| 00 00 | .. | reserved: 0 0x1fa-0x1fb.7 (2)
0x001f0| 00 00 04 00| ....| snap_len: 262144 0x1fc-0x1ff.7 (4)
| | | options[0:5]: 0x200-0x263.7 (100)
| | | [0]{}: option 0x200-0x20b.7 (12)
0x00200|02 00 |.. | code: "name" (2) 0x200-0x201.7 (2)
0x00200| 08 00 | .. | length: 8 0x202-0x203.7 (2)
0x00200| 76 62 6f 78 6e 65 74 30 | vboxnet0 | value: "vboxnet0" 0x204-0x20b.7 (8)
| | | padding: raw bits 0x20c-NA (0)
| | | [1]{}: option 0x20c-0x213.7 (8)
0x00200| 09 00 | .. | code: "tsresol" (9) 0x20c-0x20d.7 (2)
0x00200| 01 00| ..| length: 1 0x20e-0x20f.7 (2)
0x00210|06 |. | value: "\x06" 0x210-0x210.7 (1)
0x00210| 00 00 00 | ... | padding: raw bits 0x211-0x213.7 (3)
| | | [2]{}: option 0x214-0x22b.7 (24)
0x00210| 0b 00 | .. | code: "filter" (11) 0x214-0x215.7 (2)
0x00210| 13 00 | .. | length: 19 0x216-0x217.7 (2)
0x00210| 00 68 6f 73 74 20 31 39| .host 19| value: "" 0x218-0x22a.7 (19)
0x00220|32 2e 31 36 38 2e 31 2e 31 33 39 |2.168.1.139 |
0x00220| 00 | . | padding: raw bits 0x22b-0x22b.7 (1)
| | | [3]{}: option 0x22c-0x25f.7 (52)
0x00220| 0c 00 | .. | code: "os" (12) 0x22c-0x22d.7 (2)
0x00220| 2d 00| -.| length: 45 0x22e-0x22f.7 (2)
0x00230|4d 61 63 20 4f 53 20 58 20 31 30 2e 31 30 2e 34|Mac OS X 10.10.4| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x230-0x25c.7 (45)
* |until 0x25c.7 (45) | |
0x00250| 00 00 00| ...| padding: raw bits 0x25d-0x25f.7 (3)
| | | [4]{}: option 0x260-0x263.7 (4)
0x00260|00 00 |.. | code: "end" (0) (End of options) 0x260-0x261.7 (2)
0x00260| 00 00 | .. | length: 0 0x262-0x263.7 (2)
0x00260| 78 00 00 00 | x... | footer_length: 120 0x264-0x267.7 (4)
| | | [5]{}: block 0x268-0x2df.7 (120)
0x00260| 01 00 00 00 | .... | type: "interface_description" (0x1) (Interface Description Block) 0x268-0x26b.7 (4)
0x00260| 78 00 00 00| x...| length: 120 0x26c-0x26f.7 (4)
0x00270|00 00 |.. | link_type: "null" (0) (BSD loopback encapsulation) 0x270-0x271.7 (2)
0x00270| 00 00 | .. | reserved: 0 0x272-0x273.7 (2)
0x00270| 00 00 04 00 | .... | snap_len: 262144 0x274-0x277.7 (4)
| | | options[0:5]: 0x278-0x2db.7 (100)
| | | [0]{}: option 0x278-0x283.7 (12)
0x00270| 02 00 | .. | code: "name" (2) 0x278-0x279.7 (2)
0x00270| 05 00 | .. | length: 5 0x27a-0x27b.7 (2)
0x00270| 75 74 75 6e| utun| value: "utun0" 0x27c-0x280.7 (5)
0x00280|30 |0 |
0x00280| 00 00 00 | ... | padding: raw bits 0x281-0x283.7 (3)
| | | [1]{}: option 0x284-0x28b.7 (8)
0x00280| 09 00 | .. | code: "tsresol" (9) 0x284-0x285.7 (2)
0x00280| 01 00 | .. | length: 1 0x286-0x287.7 (2)
0x00280| 06 | . | value: "\x06" 0x288-0x288.7 (1)
0x00280| 00 00 00 | ... | padding: raw bits 0x289-0x28b.7 (3)
| | | [2]{}: option 0x28c-0x2a3.7 (24)
0x00280| 0b 00 | .. | code: "filter" (11) 0x28c-0x28d.7 (2)
0x00280| 13 00| ..| length: 19 0x28e-0x28f.7 (2)
0x00290|00 68 6f 73 74 20 31 39 32 2e 31 36 38 2e 31 2e|.host 192.168.1.| value: "" 0x290-0x2a2.7 (19)
0x002a0|31 33 39 |139 |
0x002a0| 00 | . | padding: raw bits 0x2a3-0x2a3.7 (1)
| | | [3]{}: option 0x2a4-0x2d7.7 (52)
0x002a0| 0c 00 | .. | code: "os" (12) 0x2a4-0x2a5.7 (2)
0x002a0| 2d 00 | -. | length: 45 0x2a6-0x2a7.7 (2)
0x002a0| 4d 61 63 20 4f 53 20 58| Mac OS X| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x2a8-0x2d4.7 (45)
0x002b0|20 31 30 2e 31 30 2e 34 2c 20 62 75 69 6c 64 20| 10.10.4, build |
* |until 0x2d4.7 (45) | |
0x002d0| 00 00 00 | ... | padding: raw bits 0x2d5-0x2d7.7 (3)
| | | [4]{}: option 0x2d8-0x2db.7 (4)
0x002d0| 00 00 | .. | code: "end" (0) (End of options) 0x2d8-0x2d9.7 (2)
0x002d0| 00 00 | .. | length: 0 0x2da-0x2db.7 (2)
0x002d0| 78 00 00 00| x...| footer_length: 120 0x2dc-0x2df.7 (4)
| | | [6]{}: block 0x2e0-0x353.7 (116)
0x002e0|01 00 00 00 |.... | type: "interface_description" (0x1) (Interface Description Block) 0x2e0-0x2e3.7 (4)
0x002e0| 74 00 00 00 | t... | length: 116 0x2e4-0x2e7.7 (4)
0x002e0| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x2e8-0x2e9.7 (2)
0x002e0| 00 00 | .. | reserved: 0 0x2ea-0x2eb.7 (2)
0x002e0| 00 00 04 00| ....| snap_len: 262144 0x2ec-0x2ef.7 (4)
| | | options[0:5]: 0x2f0-0x34f.7 (96)
| | | [0]{}: option 0x2f0-0x2f7.7 (8)
0x002f0|02 00 |.. | code: "name" (2) 0x2f0-0x2f1.7 (2)
0x002f0| 03 00 | .. | length: 3 0x2f2-0x2f3.7 (2)
0x002f0| 65 6e 31 | en1 | value: "en1" 0x2f4-0x2f6.7 (3)
0x002f0| 00 | . | padding: raw bits 0x2f7-0x2f7.7 (1)
| | | [1]{}: option 0x2f8-0x2ff.7 (8)
0x002f0| 09 00 | .. | code: "tsresol" (9) 0x2f8-0x2f9.7 (2)
0x002f0| 01 00 | .. | length: 1 0x2fa-0x2fb.7 (2)
0x002f0| 06 | . | value: "\x06" 0x2fc-0x2fc.7 (1)
0x002f0| 00 00 00| ...| padding: raw bits 0x2fd-0x2ff.7 (3)
| | | [2]{}: option 0x300-0x317.7 (24)
0x00300|0b 00 |.. | code: "filter" (11) 0x300-0x301.7 (2)
0x00300| 13 00 | .. | length: 19 0x302-0x303.7 (2)
0x00300| 00 68 6f 73 74 20 31 39 32 2e 31 36| .host 192.16| value: "" 0x304-0x316.7 (19)
0x00310|38 2e 31 2e 31 33 39 |8.1.139 |
0x00310| 00 | . | padding: raw bits 0x317-0x317.7 (1)
| | | [3]{}: option 0x318-0x34b.7 (52)
0x00310| 0c 00 | .. | code: "os" (12) 0x318-0x319.7 (2)
0x00310| 2d 00 | -. | length: 45 0x31a-0x31b.7 (2)
0x00310| 4d 61 63 20| Mac | value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x31c-0x348.7 (45)
0x00320|4f 53 20 58 20 31 30 2e 31 30 2e 34 2c 20 62 75|OS X 10.10.4, bu|
* |until 0x348.7 (45) | |
0x00340| 00 00 00 | ... | padding: raw bits 0x349-0x34b.7 (3)
| | | [4]{}: option 0x34c-0x34f.7 (4)
0x00340| 00 00 | .. | code: "end" (0) (End of options) 0x34c-0x34d.7 (2)
0x00340| 00 00| ..| length: 0 0x34e-0x34f.7 (2)
0x00350|74 00 00 00 |t... | footer_length: 116 0x350-0x353.7 (4)
| | | [7]{}: block 0x354-0x3cb.7 (120)
0x00350| 01 00 00 00 | .... | type: "interface_description" (0x1) (Interface Description Block) 0x354-0x357.7 (4)
0x00350| 78 00 00 00 | x... | length: 120 0x358-0x35b.7 (4)
0x00350| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x35c-0x35d.7 (2)
0x00350| 00 00| ..| reserved: 0 0x35e-0x35f.7 (2)
0x00360|00 00 04 00 |.... | snap_len: 262144 0x360-0x363.7 (4)
| | | options[0:5]: 0x364-0x3c7.7 (100)
| | | [0]{}: option 0x364-0x36f.7 (12)
0x00360| 02 00 | .. | code: "name" (2) 0x364-0x365.7 (2)
0x00360| 08 00 | .. | length: 8 0x366-0x367.7 (2)
0x00360| 76 62 6f 78 6e 65 74 31| vboxnet1| value: "vboxnet1" 0x368-0x36f.7 (8)
| | | padding: raw bits 0x370-NA (0)
| | | [1]{}: option 0x370-0x377.7 (8)
0x00370|09 00 |.. | code: "tsresol" (9) 0x370-0x371.7 (2)
0x00370| 01 00 | .. | length: 1 0x372-0x373.7 (2)
0x00370| 06 | . | value: "\x06" 0x374-0x374.7 (1)
0x00370| 00 00 00 | ... | padding: raw bits 0x375-0x377.7 (3)
| | | [2]{}: option 0x378-0x38f.7 (24)
0x00370| 0b 00 | .. | code: "filter" (11) 0x378-0x379.7 (2)
0x00370| 13 00 | .. | length: 19 0x37a-0x37b.7 (2)
0x00370| 00 68 6f 73| .hos| value: "" 0x37c-0x38e.7 (19)
0x00380|74 20 31 39 32 2e 31 36 38 2e 31 2e 31 33 39 |t 192.168.1.139 |
0x00380| 00| .| padding: raw bits 0x38f-0x38f.7 (1)
| | | [3]{}: option 0x390-0x3c3.7 (52)
0x00390|0c 00 |.. | code: "os" (12) 0x390-0x391.7 (2)
0x00390| 2d 00 | -. | length: 45 0x392-0x393.7 (2)
0x00390| 4d 61 63 20 4f 53 20 58 20 31 30 2e| Mac OS X 10.| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x394-0x3c0.7 (45)
0x003a0|31 30 2e 34 2c 20 62 75 69 6c 64 20 31 34 45 34|10.4, build 14E4|
* |until 0x3c0.7 (45) | |
0x003c0| 00 00 00 | ... | padding: raw bits 0x3c1-0x3c3.7 (3)
| | | [4]{}: option 0x3c4-0x3c7.7 (4)
0x003c0| 00 00 | .. | code: "end" (0) (End of options) 0x3c4-0x3c5.7 (2)
0x003c0| 00 00 | .. | length: 0 0x3c6-0x3c7.7 (2)
0x003c0| 78 00 00 00 | x... | footer_length: 120 0x3c8-0x3cb.7 (4)
| | | [8]{}: block 0x3cc-0x43f.7 (116)
0x003c0| 01 00 00 00| ....| type: "interface_description" (0x1) (Interface Description Block) 0x3cc-0x3cf.7 (4)
0x003d0|74 00 00 00 |t... | length: 116 0x3d0-0x3d3.7 (4)
0x003d0| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x3d4-0x3d5.7 (2)
0x003d0| 00 00 | .. | reserved: 0 0x3d6-0x3d7.7 (2)
0x003d0| 00 00 04 00 | .... | snap_len: 262144 0x3d8-0x3db.7 (4)
| | | options[0:5]: 0x3dc-0x43b.7 (96)
| | | [0]{}: option 0x3dc-0x3e3.7 (8)
0x003d0| 02 00 | .. | code: "name" (2) 0x3dc-0x3dd.7 (2)
0x003d0| 03 00| ..| length: 3 0x3de-0x3df.7 (2)
0x003e0|65 6e 32 |en2 | value: "en2" 0x3e0-0x3e2.7 (3)
0x003e0| 00 | . | padding: raw bits 0x3e3-0x3e3.7 (1)
| | | [1]{}: option 0x3e4-0x3eb.7 (8)
0x003e0| 09 00 | .. | code: "tsresol" (9) 0x3e4-0x3e5.7 (2)
0x003e0| 01 00 | .. | length: 1 0x3e6-0x3e7.7 (2)
0x003e0| 06 | . | value: "\x06" 0x3e8-0x3e8.7 (1)
0x003e0| 00 00 00 | ... | padding: raw bits 0x3e9-0x3eb.7 (3)
| | | [2]{}: option 0x3ec-0x403.7 (24)
0x003e0| 0b 00 | .. | code: "filter" (11) 0x3ec-0x3ed.7 (2)
0x003e0| 13 00| ..| length: 19 0x3ee-0x3ef.7 (2)
0x003f0|00 68 6f 73 74 20 31 39 32 2e 31 36 38 2e 31 2e|.host 192.168.1.| value: "" 0x3f0-0x402.7 (19)
0x00400|31 33 39 |139 |
0x00400| 00 | . | padding: raw bits 0x403-0x403.7 (1)
| | | [3]{}: option 0x404-0x437.7 (52)
0x00400| 0c 00 | .. | code: "os" (12) 0x404-0x405.7 (2)
0x00400| 2d 00 | -. | length: 45 0x406-0x407.7 (2)
0x00400| 4d 61 63 20 4f 53 20 58| Mac OS X| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x408-0x434.7 (45)
0x00410|20 31 30 2e 31 30 2e 34 2c 20 62 75 69 6c 64 20| 10.10.4, build |
* |until 0x434.7 (45) | |
0x00430| 00 00 00 | ... | padding: raw bits 0x435-0x437.7 (3)
| | | [4]{}: option 0x438-0x43b.7 (4)
0x00430| 00 00 | .. | code: "end" (0) (End of options) 0x438-0x439.7 (2)
0x00430| 00 00 | .. | length: 0 0x43a-0x43b.7 (2)
0x00430| 74 00 00 00| t...| footer_length: 116 0x43c-0x43f.7 (4)
| | | [9]{}: block 0x440-0x4b3.7 (116)
0x00440|01 00 00 00 |.... | type: "interface_description" (0x1) (Interface Description Block) 0x440-0x443.7 (4)
0x00440| 74 00 00 00 | t... | length: 116 0x444-0x447.7 (4)
0x00440| 0c 00 | .. | link_type: 12 0x448-0x449.7 (2)
0x00440| 00 00 | .. | reserved: 0 0x44a-0x44b.7 (2)
0x00440| 00 00 04 00| ....| snap_len: 262144 0x44c-0x44f.7 (4)
| | | options[0:5]: 0x450-0x4af.7 (96)
| | | [0]{}: option 0x450-0x457.7 (8)
0x00450|02 00 |.. | code: "name" (2) 0x450-0x451.7 (2)
0x00450| 04 00 | .. | length: 4 0x452-0x453.7 (2)
0x00450| 70 32 70 30 | p2p0 | value: "p2p0" 0x454-0x457.7 (4)
| | | padding: raw bits 0x458-NA (0)
| | | [1]{}: option 0x458-0x45f.7 (8)
0x00450| 09 00 | .. | code: "tsresol" (9) 0x458-0x459.7 (2)
0x00450| 01 00 | .. | length: 1 0x45a-0x45b.7 (2)
0x00450| 06 | . | value: "\x06" 0x45c-0x45c.7 (1)
0x00450| 00 00 00| ...| padding: raw bits 0x45d-0x45f.7 (3)
| | | [2]{}: option 0x460-0x477.7 (24)
0x00460|0b 00 |.. | code: "filter" (11) 0x460-0x461.7 (2)
0x00460| 13 00 | .. | length: 19 0x462-0x463.7 (2)
0x00460| 00 68 6f 73 74 20 31 39 32 2e 31 36| .host 192.16| value: "" 0x464-0x476.7 (19)
0x00470|38 2e 31 2e 31 33 39 |8.1.139 |
0x00470| 00 | . | padding: raw bits 0x477-0x477.7 (1)
| | | [3]{}: option 0x478-0x4ab.7 (52)
0x00470| 0c 00 | .. | code: "os" (12) 0x478-0x479.7 (2)
0x00470| 2d 00 | -. | length: 45 0x47a-0x47b.7 (2)
0x00470| 4d 61 63 20| Mac | value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x47c-0x4a8.7 (45)
0x00480|4f 53 20 58 20 31 30 2e 31 30 2e 34 2c 20 62 75|OS X 10.10.4, bu|
* |until 0x4a8.7 (45) | |
0x004a0| 00 00 00 | ... | padding: raw bits 0x4a9-0x4ab.7 (3)
| | | [4]{}: option 0x4ac-0x4af.7 (4)
0x004a0| 00 00 | .. | code: "end" (0) (End of options) 0x4ac-0x4ad.7 (2)
0x004a0| 00 00| ..| length: 0 0x4ae-0x4af.7 (2)
0x004b0|74 00 00 00 |t... | footer_length: 116 0x4b0-0x4b3.7 (4)
| | | [10]{}: block 0x4b4-0x52b.7 (120)
0x004b0| 01 00 00 00 | .... | type: "interface_description" (0x1) (Interface Description Block) 0x4b4-0x4b7.7 (4)
0x004b0| 78 00 00 00 | x... | length: 120 0x4b8-0x4bb.7 (4)
0x004b0| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x4bc-0x4bd.7 (2)
0x004b0| 00 00| ..| reserved: 0 0x4be-0x4bf.7 (2)
0x004c0|00 00 04 00 |.... | snap_len: 262144 0x4c0-0x4c3.7 (4)
| | | options[0:5]: 0x4c4-0x527.7 (100)
| | | [0]{}: option 0x4c4-0x4cf.7 (12)
0x004c0| 02 00 | .. | code: "name" (2) 0x4c4-0x4c5.7 (2)
0x004c0| 08 00 | .. | length: 8 0x4c6-0x4c7.7 (2)
0x004c0| 76 62 6f 78 6e 65 74 32| vboxnet2| value: "vboxnet2" 0x4c8-0x4cf.7 (8)
| | | padding: raw bits 0x4d0-NA (0)
| | | [1]{}: option 0x4d0-0x4d7.7 (8)
0x004d0|09 00 |.. | code: "tsresol" (9) 0x4d0-0x4d1.7 (2)
0x004d0| 01 00 | .. | length: 1 0x4d2-0x4d3.7 (2)
0x004d0| 06 | . | value: "\x06" 0x4d4-0x4d4.7 (1)
0x004d0| 00 00 00 | ... | padding: raw bits 0x4d5-0x4d7.7 (3)
| | | [2]{}: option 0x4d8-0x4ef.7 (24)
0x004d0| 0b 00 | .. | code: "filter" (11) 0x4d8-0x4d9.7 (2)
0x004d0| 13 00 | .. | length: 19 0x4da-0x4db.7 (2)
0x004d0| 00 68 6f 73| .hos| value: "" 0x4dc-0x4ee.7 (19)
0x004e0|74 20 31 39 32 2e 31 36 38 2e 31 2e 31 33 39 |t 192.168.1.139 |
0x004e0| 00| .| padding: raw bits 0x4ef-0x4ef.7 (1)
| | | [3]{}: option 0x4f0-0x523.7 (52)
0x004f0|0c 00 |.. | code: "os" (12) 0x4f0-0x4f1.7 (2)
0x004f0| 2d 00 | -. | length: 45 0x4f2-0x4f3.7 (2)
0x004f0| 4d 61 63 20 4f 53 20 58 20 31 30 2e| Mac OS X 10.| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x4f4-0x520.7 (45)
0x00500|31 30 2e 34 2c 20 62 75 69 6c 64 20 31 34 45 34|10.4, build 14E4|
* |until 0x520.7 (45) | |
0x00520| 00 00 00 | ... | padding: raw bits 0x521-0x523.7 (3)
| | | [4]{}: option 0x524-0x527.7 (4)
0x00520| 00 00 | .. | code: "end" (0) (End of options) 0x524-0x525.7 (2)
0x00520| 00 00 | .. | length: 0 0x526-0x527.7 (2)
0x00520| 78 00 00 00 | x... | footer_length: 120 0x528-0x52b.7 (4)
| | | [11]{}: block 0x52c-0x59f.7 (116)
0x00520| 01 00 00 00| ....| type: "interface_description" (0x1) (Interface Description Block) 0x52c-0x52f.7 (4)
0x00530|74 00 00 00 |t... | length: 116 0x530-0x533.7 (4)
0x00530| 00 00 | .. | link_type: "null" (0) (BSD loopback encapsulation) 0x534-0x535.7 (2)
0x00530| 00 00 | .. | reserved: 0 0x536-0x537.7 (2)
0x00530| 00 00 04 00 | .... | snap_len: 262144 0x538-0x53b.7 (4)
| | | options[0:5]: 0x53c-0x59b.7 (96)
| | | [0]{}: option 0x53c-0x543.7 (8)
0x00530| 02 00 | .. | code: "name" (2) 0x53c-0x53d.7 (2)
0x00530| 03 00| ..| length: 3 0x53e-0x53f.7 (2)
0x00540|6c 6f 30 |lo0 | value: "lo0" 0x540-0x542.7 (3)
0x00540| 00 | . | padding: raw bits 0x543-0x543.7 (1)
| | | [1]{}: option 0x544-0x54b.7 (8)
0x00540| 09 00 | .. | code: "tsresol" (9) 0x544-0x545.7 (2)
0x00540| 01 00 | .. | length: 1 0x546-0x547.7 (2)
0x00540| 06 | . | value: "\x06" 0x548-0x548.7 (1)
0x00540| 00 00 00 | ... | padding: raw bits 0x549-0x54b.7 (3)
| | | [2]{}: option 0x54c-0x563.7 (24)
0x00540| 0b 00 | .. | code: "filter" (11) 0x54c-0x54d.7 (2)
0x00540| 13 00| ..| length: 19 0x54e-0x54f.7 (2)
0x00550|00 68 6f 73 74 20 31 39 32 2e 31 36 38 2e 31 2e|.host 192.168.1.| value: "" 0x550-0x562.7 (19)
0x00560|31 33 39 |139 |
0x00560| 00 | . | padding: raw bits 0x563-0x563.7 (1)
| | | [3]{}: option 0x564-0x597.7 (52)
0x00560| 0c 00 | .. | code: "os" (12) 0x564-0x565.7 (2)
0x00560| 2d 00 | -. | length: 45 0x566-0x567.7 (2)
0x00560| 4d 61 63 20 4f 53 20 58| Mac OS X| value: "Mac OS X 10.10.4, build 14E46 (Darwin 14.4.0)" 0x568-0x594.7 (45)
0x00570|20 31 30 2e 31 30 2e 34 2c 20 62 75 69 6c 64 20| 10.10.4, build |
* |until 0x594.7 (45) | |
0x00590| 00 00 00 | ... | padding: raw bits 0x595-0x597.7 (3)
| | | [4]{}: option 0x598-0x59b.7 (4)
0x00590| 00 00 | .. | code: "end" (0) (End of options) 0x598-0x599.7 (2)
0x00590| 00 00 | .. | length: 0 0x59a-0x59b.7 (2)
0x00590| 74 00 00 00| t...| footer_length: 116 0x59c-0x59f.7 (4)
| | | [12]{}: block 0x5a0-0x673.7 (212)
0x005a0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x5a0-0x5a3.7 (4)
0x005a0| d4 00 00 00 | .... | length: 212 0x5a4-0x5a7.7 (4)
0x005a0| 00 00 00 00 | .... | interface_id: 0 0x5a8-0x5ab.7 (4)
0x005a0| 72 1d 05 00| r...| timestamp_high: 335218 0x5ac-0x5af.7 (4)
0x005b0|e7 6d 62 c9 |.mb. | timestamp_low: 3378671079 0x5b0-0x5b3.7 (4)
0x005b0| b2 00 00 00 | .... | capture_packet_length: 178 0x5b4-0x5b7.7 (4)
0x005b0| b2 00 00 00 | .... | original_packet_length: 178 0x5b8-0x5bb.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x5bc-0x66d.7 (178)
0x005b0| ff ff ff ff| ....| destination: "ff:ff:ff:ff:ff:ff" (0xffffffffffff) 0x5bc-0x5c1.7 (6)
0x005c0|ff ff |.. |
0x005c0| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x5c2-0x5c7.7 (6)
0x005c0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x5c8-0x5c9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x5ca-0x66d.7 (164)
0x005c0| 45 | E | version: 4 0x5ca-0x5ca.3 (0.4)
0x005c0| 45 | E | ihl: 5 0x5ca.4-0x5ca.7 (0.4)
0x005c0| 00 | . | dscp: 0 0x5cb-0x5cb.5 (0.6)
0x005c0| 00 | . | ecn: 0 0x5cb.6-0x5cb.7 (0.2)
0x005c0| 00 a4 | .. | total_length: 164 0x5cc-0x5cd.7 (2)
0x005c0| c6 ce| ..| identification: 50894 0x5ce-0x5cf.7 (2)
0x005d0|00 |. | reserved: 0 0x5d0-0x5d0 (0.1)
0x005d0|00 |. | dont_fragment: false 0x5d0.1-0x5d0.1 (0.1)
0x005d0|00 |. | more_fragments: false 0x5d0.2-0x5d0.2 (0.1)
0x005d0|00 00 |.. | fragment_offset: 0 0x5d0.3-0x5d1.7 (1.5)
0x005d0| 40 | @ | ttl: 64 0x5d2-0x5d2.7 (1)
0x005d0| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x5d3-0x5d3.7 (1)
0x005d0| f1 47 | .G | header_checksum: 0xf147 (valid) 0x5d4-0x5d5.7 (2)
0x005d0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x5d6-0x5d9.7 (4)
0x005d0| ff ff ff ff | .... | destination_ip: "255.255.255.255" (0xffffffff) 0x5da-0x5dd.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x5de-0x66d.7 (144)
0x005d0| 44 5c| D\| source_port: 17500 0x5de-0x5df.7 (2)
0x005e0|44 5c |D\ | destination_port: 17500 0x5e0-0x5e1.7 (2)
0x005e0| 00 90 | .. | length: 144 0x5e2-0x5e3.7 (2)
0x005e0| ba 03 | .. | checksum: 0xba03 0x5e4-0x5e5.7 (2)
0x005e0| 7b 22 68 6f 73 74 5f 69 6e 74| {"host_int| payload: raw bits 0x5e6-0x66d.7 (136)
0x005f0|22 3a 20 34 30 39 34 35 31 34 34 38 33 2c 20 22|": 4094514483, "|
* |until 0x66d.7 (136) | |
0x00660| 00 00| ..| padding: raw bits 0x66e-0x66f.7 (2)
| | | options[0:0]: 0x670-NA (0)
0x00670|d4 00 00 00 |.... | footer_length: 212 0x670-0x673.7 (4)
| | | [13]{}: block 0x674-0x747.7 (212)
0x00670| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x674-0x677.7 (4)
0x00670| d4 00 00 00 | .... | length: 212 0x678-0x67b.7 (4)
0x00670| 00 00 00 00| ....| interface_id: 0 0x67c-0x67f.7 (4)
0x00680|72 1d 05 00 |r... | timestamp_high: 335218 0x680-0x683.7 (4)
0x00680| df 6e 62 c9 | .nb. | timestamp_low: 3378671327 0x684-0x687.7 (4)
0x00680| b2 00 00 00 | .... | capture_packet_length: 178 0x688-0x68b.7 (4)
0x00680| b2 00 00 00| ....| original_packet_length: 178 0x68c-0x68f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x690-0x741.7 (178)
0x00690|ff ff ff ff ff ff |...... | destination: "ff:ff:ff:ff:ff:ff" (0xffffffffffff) 0x690-0x695.7 (6)
0x00690| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x696-0x69b.7 (6)
0x00690| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x69c-0x69d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x69e-0x741.7 (164)
0x00690| 45 | E | version: 4 0x69e-0x69e.3 (0.4)
0x00690| 45 | E | ihl: 5 0x69e.4-0x69e.7 (0.4)
0x00690| 00| .| dscp: 0 0x69f-0x69f.5 (0.6)
0x00690| 00| .| ecn: 0 0x69f.6-0x69f.7 (0.2)
0x006a0|00 a4 |.. | total_length: 164 0x6a0-0x6a1.7 (2)
0x006a0| 60 b4 | `. | identification: 24756 0x6a2-0x6a3.7 (2)
0x006a0| 00 | . | reserved: 0 0x6a4-0x6a4 (0.1)
0x006a0| 00 | . | dont_fragment: false 0x6a4.1-0x6a4.1 (0.1)
0x006a0| 00 | . | more_fragments: false 0x6a4.2-0x6a4.2 (0.1)
0x006a0| 00 00 | .. | fragment_offset: 0 0x6a4.3-0x6a5.7 (1.5)
0x006a0| 40 | @ | ttl: 64 0x6a6-0x6a6.7 (1)
0x006a0| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x6a7-0x6a7.7 (1)
0x006a0| 94 ba | .. | header_checksum: 0x94ba (valid) 0x6a8-0x6a9.7 (2)
0x006a0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x6aa-0x6ad.7 (4)
0x006a0| c0 a8| ..| destination_ip: "192.168.1.255" (0xc0a801ff) 0x6ae-0x6b1.7 (4)
0x006b0|01 ff |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x6b2-0x741.7 (144)
0x006b0| 44 5c | D\ | source_port: 17500 0x6b2-0x6b3.7 (2)
0x006b0| 44 5c | D\ | destination_port: 17500 0x6b4-0x6b5.7 (2)
0x006b0| 00 90 | .. | length: 144 0x6b6-0x6b7.7 (2)
0x006b0| f7 5b | .[ | checksum: 0xf75b 0x6b8-0x6b9.7 (2)
0x006b0| 7b 22 68 6f 73 74| {"host| payload: raw bits 0x6ba-0x741.7 (136)
0x006c0|5f 69 6e 74 22 3a 20 34 30 39 34 35 31 34 34 38|_int": 409451448|
* |until 0x741.7 (136) | |
0x00740| 00 00 | .. | padding: raw bits 0x742-0x743.7 (2)
| | | options[0:0]: 0x744-NA (0)
0x00740| d4 00 00 00 | .... | footer_length: 212 0x744-0x747.7 (4)
| | | [14]{}: block 0x748-0x80f.7 (200)
0x00740| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x748-0x74b.7 (4)
0x00740| c8 00 00 00| ....| length: 200 0x74c-0x74f.7 (4)
0x00750|0a 00 00 00 |.... | interface_id: 10 0x750-0x753.7 (4)
0x00750| 72 1d 05 00 | r... | timestamp_high: 335218 0x754-0x757.7 (4)
0x00750| c0 6d 62 c9 | .mb. | timestamp_low: 3378671040 0x758-0x75b.7 (4)
0x00750| a8 00 00 00| ....| capture_packet_length: 168 0x75c-0x75f.7 (4)
0x00760|a8 00 00 00 |.... | original_packet_length: 168 0x760-0x763.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (bsd_loopback_frame) 0x764-0x80b.7 (168)
0x00760| 02 00 00 00 | .... | network_layer: "ipv4" (0x2) (Internet protocol v4) 0x764-0x767.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x768-0x80b.7 (164)
0x00760| 45 | E | version: 4 0x768-0x768.3 (0.4)
0x00760| 45 | E | ihl: 5 0x768.4-0x768.7 (0.4)
0x00760| 00 | . | dscp: 0 0x769-0x769.5 (0.6)
0x00760| 00 | . | ecn: 0 0x769.6-0x769.7 (0.2)
0x00760| 00 a4 | .. | total_length: 164 0x76a-0x76b.7 (2)
0x00760| c6 ce | .. | identification: 50894 0x76c-0x76d.7 (2)
0x00760| 00 | . | reserved: 0 0x76e-0x76e (0.1)
0x00760| 00 | . | dont_fragment: false 0x76e.1-0x76e.1 (0.1)
0x00760| 00 | . | more_fragments: false 0x76e.2-0x76e.2 (0.1)
0x00760| 00 00| ..| fragment_offset: 0 0x76e.3-0x76f.7 (1.5)
0x00770|40 |@ | ttl: 64 0x770-0x770.7 (1)
0x00770| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x771-0x771.7 (1)
0x00770| f1 47 | .G | header_checksum: 0xf147 (valid) 0x772-0x773.7 (2)
0x00770| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x774-0x777.7 (4)
0x00770| ff ff ff ff | .... | destination_ip: "255.255.255.255" (0xffffffff) 0x778-0x77b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x77c-0x80b.7 (144)
0x00770| 44 5c | D\ | source_port: 17500 0x77c-0x77d.7 (2)
0x00770| 44 5c| D\| destination_port: 17500 0x77e-0x77f.7 (2)
0x00780|00 90 |.. | length: 144 0x780-0x781.7 (2)
0x00780| ba 03 | .. | checksum: 0xba03 0x782-0x783.7 (2)
0x00780| 7b 22 68 6f 73 74 5f 69 6e 74 22 3a| {"host_int":| payload: raw bits 0x784-0x80b.7 (136)
0x00790|20 34 30 39 34 35 31 34 34 38 33 2c 20 22 76 65| 4094514483, "ve|
* |until 0x80b.7 (136) | |
| | | padding: raw bits 0x80c-NA (0)
| | | options[0:0]: 0x80c-NA (0)
0x00800| c8 00 00 00| ....| footer_length: 200 0x80c-0x80f.7 (4)
| | | [15]{}: block 0x810-0x8d7.7 (200)
0x00810|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x810-0x813.7 (4)
0x00810| c8 00 00 00 | .... | length: 200 0x814-0x817.7 (4)
0x00810| 0a 00 00 00 | .... | interface_id: 10 0x818-0x81b.7 (4)
0x00810| 72 1d 05 00| r...| timestamp_high: 335218 0x81c-0x81f.7 (4)
0x00820|be 6e 62 c9 |.nb. | timestamp_low: 3378671294 0x820-0x823.7 (4)
0x00820| a8 00 00 00 | .... | capture_packet_length: 168 0x824-0x827.7 (4)
0x00820| a8 00 00 00 | .... | original_packet_length: 168 0x828-0x82b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (bsd_loopback_frame) 0x82c-0x8d3.7 (168)
0x00820| 02 00 00 00| ....| network_layer: "ipv4" (0x2) (Internet protocol v4) 0x82c-0x82f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x830-0x8d3.7 (164)
0x00830|45 |E | version: 4 0x830-0x830.3 (0.4)
0x00830|45 |E | ihl: 5 0x830.4-0x830.7 (0.4)
0x00830| 00 | . | dscp: 0 0x831-0x831.5 (0.6)
0x00830| 00 | . | ecn: 0 0x831.6-0x831.7 (0.2)
0x00830| 00 a4 | .. | total_length: 164 0x832-0x833.7 (2)
0x00830| 60 b4 | `. | identification: 24756 0x834-0x835.7 (2)
0x00830| 00 | . | reserved: 0 0x836-0x836 (0.1)
0x00830| 00 | . | dont_fragment: false 0x836.1-0x836.1 (0.1)
0x00830| 00 | . | more_fragments: false 0x836.2-0x836.2 (0.1)
0x00830| 00 00 | .. | fragment_offset: 0 0x836.3-0x837.7 (1.5)
0x00830| 40 | @ | ttl: 64 0x838-0x838.7 (1)
0x00830| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x839-0x839.7 (1)
0x00830| 94 ba | .. | header_checksum: 0x94ba (valid) 0x83a-0x83b.7 (2)
0x00830| c0 a8 01 8b| ....| source_ip: "192.168.1.139" (0xc0a8018b) 0x83c-0x83f.7 (4)
0x00840|c0 a8 01 ff |.... | destination_ip: "192.168.1.255" (0xc0a801ff) 0x840-0x843.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x844-0x8d3.7 (144)
0x00840| 44 5c | D\ | source_port: 17500 0x844-0x845.7 (2)
0x00840| 44 5c | D\ | destination_port: 17500 0x846-0x847.7 (2)
0x00840| 00 90 | .. | length: 144 0x848-0x849.7 (2)
0x00840| f7 5b | .[ | checksum: 0xf75b 0x84a-0x84b.7 (2)
0x00840| 7b 22 68 6f| {"ho| payload: raw bits 0x84c-0x8d3.7 (136)
0x00850|73 74 5f 69 6e 74 22 3a 20 34 30 39 34 35 31 34|st_int": 4094514|
* |until 0x8d3.7 (136) | |
| | | padding: raw bits 0x8d4-NA (0)
| | | options[0:0]: 0x8d4-NA (0)
0x008d0| c8 00 00 00 | .... | footer_length: 200 0x8d4-0x8d7.7 (4)
| | | [16]{}: block 0x8d8-0x94f.7 (120)
0x008d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x8d8-0x8db.7 (4)
0x008d0| 78 00 00 00| x...| length: 120 0x8dc-0x8df.7 (4)
0x008e0|00 00 00 00 |.... | interface_id: 0 0x8e0-0x8e3.7 (4)
0x008e0| 72 1d 05 00 | r... | timestamp_high: 335218 0x8e4-0x8e7.7 (4)
0x008e0| 3f e6 69 c9 | ?.i. | timestamp_low: 3379160639 0x8e8-0x8eb.7 (4)
0x008e0| 56 00 00 00| V...| capture_packet_length: 86 0x8ec-0x8ef.7 (4)
0x008f0|56 00 00 00 |V... | original_packet_length: 86 0x8f0-0x8f3.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x8f4-0x949.7 (86)
0x008f0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x8f4-0x8f9.7 (6)
0x008f0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x8fa-0x8ff.7 (6)
0x00900|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x900-0x901.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x902-0x949.7 (72)
0x00900| 45 | E | version: 4 0x902-0x902.3 (0.4)
0x00900| 45 | E | ihl: 5 0x902.4-0x902.7 (0.4)
0x00900| 00 | . | dscp: 0 0x903-0x903.5 (0.6)
0x00900| 00 | . | ecn: 0 0x903.6-0x903.7 (0.2)
0x00900| 00 48 | .H | total_length: 72 0x904-0x905.7 (2)
0x00900| db 32 | .2 | identification: 56114 0x906-0x907.7 (2)
0x00900| 00 | . | reserved: 0 0x908-0x908 (0.1)
0x00900| 00 | . | dont_fragment: false 0x908.1-0x908.1 (0.1)
0x00900| 00 | . | more_fragments: false 0x908.2-0x908.2 (0.1)
0x00900| 00 00 | .. | fragment_offset: 0 0x908.3-0x909.7 (1.5)
0x00900| ff | . | ttl: 255 0x90a-0x90a.7 (1)
0x00900| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x90b-0x90b.7 (1)
0x00900| 5c 95 | \. | header_checksum: 0x5c95 (valid) 0x90c-0x90d.7 (2)
0x00900| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0x90e-0x911.7 (4)
0x00910|01 8b |.. |
0x00910| c0 a8 01 01 | .... | destination_ip: "192.168.1.1" (0xc0a80101) 0x912-0x915.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x916-0x949.7 (52)
0x00910| c2 54 | .T | source_port: 49748 0x916-0x917.7 (2)
0x00910| 00 35 | .5 | destination_port: "domain" (53) (Domain Name Server) 0x918-0x919.7 (2)
0x00910| 00 34 | .4 | length: 52 0x91a-0x91b.7 (2)
0x00910| 04 67 | .g | checksum: 0x467 0x91c-0x91d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0x91e-0x949.7 (44)
| | | header{}: 0x91e-0x921.7 (4)
0x00910| f3 03| ..| id: 62211 0x91e-0x91f.7 (2)
0x00920|01 |. | qr: "query" (0) 0x920-0x920 (0.1)
0x00920|01 |. | opcode: "query" (0) 0x920.1-0x920.4 (0.4)
0x00920|01 |. | authoritative_answer: false 0x920.5-0x920.5 (0.1)
0x00920|01 |. | truncation: false 0x920.6-0x920.6 (0.1)
0x00920|01 |. | recursion_desired: true 0x920.7-0x920.7 (0.1)
0x00920| 00 | . | recursion_available: false 0x921-0x921 (0.1)
0x00920| 00 | . | z: 0 0x921.1-0x921.3 (0.3)
0x00920| 00 | . | rcode: "no_error" (0) (No error) 0x921.4-0x921.7 (0.4)
0x00920| 00 01 | .. | qd_count: 1 0x922-0x923.7 (2)
0x00920| 00 00 | .. | an_count: 0 0x924-0x925.7 (2)
0x00920| 00 00 | .. | ns_count: 0 0x926-0x927.7 (2)
0x00920| 00 00 | .. | ar_count: 0 0x928-0x929.7 (2)
| | | questions[0:1]: 0x92a-0x949.7 (32)
| | | [0]{}: question 0x92a-0x949.7 (32)
| | | name{}: 0x92a-0x945.7 (28)
| | | labels[0:7]: 0x92a-0x945.7 (28)
| | | [0]{}: label 0x92a-0x92d.7 (4)
0x00920| 03 | . | length: 3 0x92a-0x92a.7 (1)
0x00920| 31 33 39 | 139 | value: "139" 0x92b-0x92d.7 (3)
| | | [1]{}: label 0x92e-0x92f.7 (2)
0x00920| 01 | . | length: 1 0x92e-0x92e.7 (1)
0x00920| 31| 1| value: "1" 0x92f-0x92f.7 (1)
| | | [2]{}: label 0x930-0x933.7 (4)
0x00930|03 |. | length: 3 0x930-0x930.7 (1)
0x00930| 31 36 38 | 168 | value: "168" 0x931-0x933.7 (3)
| | | [3]{}: label 0x934-0x937.7 (4)
0x00930| 03 | . | length: 3 0x934-0x934.7 (1)
0x00930| 31 39 32 | 192 | value: "192" 0x935-0x937.7 (3)
| | | [4]{}: label 0x938-0x93f.7 (8)
0x00930| 07 | . | length: 7 0x938-0x938.7 (1)
0x00930| 69 6e 2d 61 64 64 72| in-addr| value: "in-addr" 0x939-0x93f.7 (7)
| | | [5]{}: label 0x940-0x944.7 (5)
0x00940|04 |. | length: 4 0x940-0x940.7 (1)
0x00940| 61 72 70 61 | arpa | value: "arpa" 0x941-0x944.7 (4)
| | | [6]{}: label 0x945-0x945.7 (1)
0x00940| 00 | . | length: 0 0x945-0x945.7 (1)
| | | value: "139.1.168.192.in-addr.arpa" 0x946-NA (0)
0x00940| 00 0c | .. | type: "ptr" (12) 0x946-0x947.7 (2)
0x00940| 00 01 | .. | class: "in" (1) (Internet) 0x948-0x949.7 (2)
| | | answers[0:0]: 0x94a-NA (0)
| | | nameservers[0:0]: 0x94a-NA (0)
| | | additionals[0:0]: 0x94a-NA (0)
0x00940| 00 00 | .. | padding: raw bits 0x94a-0x94b.7 (2)
| | | options[0:0]: 0x94c-NA (0)
0x00940| 78 00 00 00| x...| footer_length: 120 0x94c-0x94f.7 (4)
| | | [17]{}: block 0x950-0x9cb.7 (124)
0x00950|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x950-0x953.7 (4)
0x00950| 7c 00 00 00 | |... | length: 124 0x954-0x957.7 (4)
0x00950| 00 00 00 00 | .... | interface_id: 0 0x958-0x95b.7 (4)
0x00950| 72 1d 05 00| r...| timestamp_high: 335218 0x95c-0x95f.7 (4)
0x00960|40 e6 69 c9 |@.i. | timestamp_low: 3379160640 0x960-0x963.7 (4)
0x00960| 5a 00 00 00 | Z... | capture_packet_length: 90 0x964-0x967.7 (4)
0x00960| 5a 00 00 00 | Z... | original_packet_length: 90 0x968-0x96b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x96c-0x9c5.7 (90)
0x00960| 94 10 3e 05| ..>.| destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x96c-0x971.7 (6)
0x00970|36 d3 |6. |
0x00970| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x972-0x977.7 (6)
0x00970| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x978-0x979.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x97a-0x9c5.7 (76)
0x00970| 45 | E | version: 4 0x97a-0x97a.3 (0.4)
0x00970| 45 | E | ihl: 5 0x97a.4-0x97a.7 (0.4)
0x00970| c0 | . | dscp: 48 0x97b-0x97b.5 (0.6)
0x00970| c0 | . | ecn: 0 0x97b.6-0x97b.7 (0.2)
0x00970| 00 4c | .L | total_length: 76 0x97c-0x97d.7 (2)
0x00970| 6e 26| n&| identification: 28198 0x97e-0x97f.7 (2)
0x00980|00 |. | reserved: 0 0x980-0x980 (0.1)
0x00980|00 |. | dont_fragment: false 0x980.1-0x980.1 (0.1)
0x00980|00 |. | more_fragments: false 0x980.2-0x980.2 (0.1)
0x00980|00 00 |.. | fragment_offset: 0 0x980.3-0x981.7 (1.5)
0x00980| 40 | @ | ttl: 64 0x982-0x982.7 (1)
0x00980| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x983-0x983.7 (1)
0x00980| 2a 8e | *. | header_checksum: 0x2a8e (valid) 0x984-0x985.7 (2)
0x00980| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x986-0x989.7 (4)
0x00980| 11 fd 0c fd | .... | destination_ip: "17.253.12.253" (0x11fd0cfd) 0x98a-0x98d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x98e-0x9c5.7 (56)
0x00980| 00 7b| .{| source_port: "ntp" (123) (Network Time Protocol) 0x98e-0x98f.7 (2)
0x00990|00 7b |.{ | destination_port: "ntp" (123) (Network Time Protocol) 0x990-0x991.7 (2)
0x00990| 00 38 | .8 | length: 56 0x992-0x993.7 (2)
0x00990| 28 7f | (. | checksum: 0x287f 0x994-0x995.7 (2)
0x00990| 23 02 0a ec 00 00 0d 0b 00 00| #.........| payload: raw bits 0x996-0x9c5.7 (48)
0x009a0|0a f6 11 fd 0c fd d9 7b 62 3c bf e4 9d cd d9 7b|.......{b<.....{|
* |until 0x9c5.7 (48) | |
0x009c0| 00 00 | .. | padding: raw bits 0x9c6-0x9c7.7 (2)
| | | options[0:0]: 0x9c8-NA (0)
0x009c0| 7c 00 00 00 | |... | footer_length: 124 0x9c8-0x9cb.7 (4)
| | | [18]{}: block 0x9cc-0xa5b.7 (144)
0x009c0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x9cc-0x9cf.7 (4)
0x009d0|90 00 00 00 |.... | length: 144 0x9d0-0x9d3.7 (4)
0x009d0| 00 00 00 00 | .... | interface_id: 0 0x9d4-0x9d7.7 (4)
0x009d0| 72 1d 05 00 | r... | timestamp_high: 335218 0x9d8-0x9db.7 (4)
0x009d0| b2 b0 6a c9| ..j.| timestamp_low: 3379212466 0x9dc-0x9df.7 (4)
0x009e0|70 00 00 00 |p... | capture_packet_length: 112 0x9e0-0x9e3.7 (4)
0x009e0| 70 00 00 00 | p... | original_packet_length: 112 0x9e4-0x9e7.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x9e8-0xa57.7 (112)
0x009e0| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x9e8-0x9ed.7 (6)
0x009e0| 94 10| ..| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x9ee-0x9f3.7 (6)
0x009f0|3e 05 36 d3 |>.6. |
0x009f0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x9f4-0x9f5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x9f6-0xa57.7 (98)
0x009f0| 45 | E | version: 4 0x9f6-0x9f6.3 (0.4)
0x009f0| 45 | E | ihl: 5 0x9f6.4-0x9f6.7 (0.4)
0x009f0| 00 | . | dscp: 0 0x9f7-0x9f7.5 (0.6)
0x009f0| 00 | . | ecn: 0 0x9f7.6-0x9f7.7 (0.2)
0x009f0| 00 62 | .b | total_length: 98 0x9f8-0x9f9.7 (2)
0x009f0| 00 00 | .. | identification: 0 0x9fa-0x9fb.7 (2)
0x009f0| 40 | @ | reserved: 0 0x9fc-0x9fc (0.1)
0x009f0| 40 | @ | dont_fragment: true 0x9fc.1-0x9fc.1 (0.1)
0x009f0| 40 | @ | more_fragments: false 0x9fc.2-0x9fc.2 (0.1)
0x009f0| 40 00 | @. | fragment_offset: 0 0x9fc.3-0x9fd.7 (1.5)
0x009f0| 40 | @ | ttl: 64 0x9fe-0x9fe.7 (1)
0x009f0| 11| .| protocol: "udp" (17) (User datagram protocol) 0x9ff-0x9ff.7 (1)
0x00a00|b6 ae |.. | header_checksum: 0xb6ae (valid) 0xa00-0xa01.7 (2)
0x00a00| c0 a8 01 01 | .... | source_ip: "192.168.1.1" (0xc0a80101) 0xa02-0xa05.7 (4)
0x00a00| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0xa06-0xa09.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xa0a-0xa57.7 (78)
0x00a00| 00 35 | .5 | source_port: "domain" (53) (Domain Name Server) 0xa0a-0xa0b.7 (2)
0x00a00| c2 54 | .T | destination_port: 49748 0xa0c-0xa0d.7 (2)
0x00a00| 00 4e| .N| length: 78 0xa0e-0xa0f.7 (2)
0x00a10|69 97 |i. | checksum: 0x6997 0xa10-0xa11.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0xa12-0xa57.7 (70)
| | | header{}: 0xa12-0xa15.7 (4)
0x00a10| f3 03 | .. | id: 62211 0xa12-0xa13.7 (2)
0x00a10| 85 | . | qr: "response" (1) 0xa14-0xa14 (0.1)
0x00a10| 85 | . | opcode: "query" (0) 0xa14.1-0xa14.4 (0.4)
0x00a10| 85 | . | authoritative_answer: true 0xa14.5-0xa14.5 (0.1)
0x00a10| 85 | . | truncation: false 0xa14.6-0xa14.6 (0.1)
0x00a10| 85 | . | recursion_desired: true 0xa14.7-0xa14.7 (0.1)
0x00a10| 80 | . | recursion_available: true 0xa15-0xa15 (0.1)
0x00a10| 80 | . | z: 0 0xa15.1-0xa15.3 (0.3)
0x00a10| 80 | . | rcode: "no_error" (0) (No error) 0xa15.4-0xa15.7 (0.4)
0x00a10| 00 01 | .. | qd_count: 1 0xa16-0xa17.7 (2)
0x00a10| 00 01 | .. | an_count: 1 0xa18-0xa19.7 (2)
0x00a10| 00 00 | .. | ns_count: 0 0xa1a-0xa1b.7 (2)
0x00a10| 00 00 | .. | ar_count: 0 0xa1c-0xa1d.7 (2)
| | | questions[0:1]: 0xa1e-0xa3d.7 (32)
| | | [0]{}: question 0xa1e-0xa3d.7 (32)
| | | name{}: 0xa1e-0xa39.7 (28)
| | | labels[0:7]: 0xa1e-0xa39.7 (28)
| | | [0]{}: label 0xa1e-0xa21.7 (4)
0x00a10| 03 | . | length: 3 0xa1e-0xa1e.7 (1)
0x00a10| 31| 1| value: "139" 0xa1f-0xa21.7 (3)
0x00a20|33 39 |39 |
| | | [1]{}: label 0xa22-0xa23.7 (2)
0x00a20| 01 | . | length: 1 0xa22-0xa22.7 (1)
0x00a20| 31 | 1 | value: "1" 0xa23-0xa23.7 (1)
| | | [2]{}: label 0xa24-0xa27.7 (4)
0x00a20| 03 | . | length: 3 0xa24-0xa24.7 (1)
0x00a20| 31 36 38 | 168 | value: "168" 0xa25-0xa27.7 (3)
| | | [3]{}: label 0xa28-0xa2b.7 (4)
0x00a20| 03 | . | length: 3 0xa28-0xa28.7 (1)
0x00a20| 31 39 32 | 192 | value: "192" 0xa29-0xa2b.7 (3)
| | | [4]{}: label 0xa2c-0xa33.7 (8)
0x00a20| 07 | . | length: 7 0xa2c-0xa2c.7 (1)
0x00a20| 69 6e 2d| in-| value: "in-addr" 0xa2d-0xa33.7 (7)
0x00a30|61 64 64 72 |addr |
| | | [5]{}: label 0xa34-0xa38.7 (5)
0x00a30| 04 | . | length: 4 0xa34-0xa34.7 (1)
0x00a30| 61 72 70 61 | arpa | value: "arpa" 0xa35-0xa38.7 (4)
| | | [6]{}: label 0xa39-0xa39.7 (1)
0x00a30| 00 | . | length: 0 0xa39-0xa39.7 (1)
| | | value: "139.1.168.192.in-addr.arpa" 0xa3a-NA (0)
0x00a30| 00 0c | .. | type: "ptr" (12) 0xa3a-0xa3b.7 (2)
0x00a30| 00 01 | .. | class: "in" (1) (Internet) 0xa3c-0xa3d.7 (2)
| | | answers[0:1]: 0xa1e-0xa57.7 (58)
| | | [0]{}: answer 0xa1e-0xa57.7 (58)
| | | name{}: 0xa1e-0xa3f.7 (34)
| | | labels[0:7]: 0xa1e-0xa3f.7 (34)
| | | [0]{}: label 0xa1e-0xa3f.7 (34)
0x00a10| 03 | . | length: 3 0xa1e-0xa1e.7 (1)
0x00a10| 31| 1| value: "139" 0xa1f-0xa21.7 (3)
0x00a20|33 39 |39 |
0x00a30| c0 | . | is_pointer: 3 0xa3e-0xa3e.1 (0.2)
0x00a30| c0 0c| ..| pointer: 12 0xa3e.2-0xa3f.7 (1.6)
| | | [1]{}: label 0xa22-0xa23.7 (2)
0x00a20| 01 | . | length: 1 0xa22-0xa22.7 (1)
0x00a20| 31 | 1 | value: "1" 0xa23-0xa23.7 (1)
| | | [2]{}: label 0xa24-0xa27.7 (4)
0x00a20| 03 | . | length: 3 0xa24-0xa24.7 (1)
0x00a20| 31 36 38 | 168 | value: "168" 0xa25-0xa27.7 (3)
| | | [3]{}: label 0xa28-0xa2b.7 (4)
0x00a20| 03 | . | length: 3 0xa28-0xa28.7 (1)
0x00a20| 31 39 32 | 192 | value: "192" 0xa29-0xa2b.7 (3)
| | | [4]{}: label 0xa2c-0xa33.7 (8)
0x00a20| 07 | . | length: 7 0xa2c-0xa2c.7 (1)
0x00a20| 69 6e 2d| in-| value: "in-addr" 0xa2d-0xa33.7 (7)
0x00a30|61 64 64 72 |addr |
| | | [5]{}: label 0xa34-0xa38.7 (5)
0x00a30| 04 | . | length: 4 0xa34-0xa34.7 (1)
0x00a30| 61 72 70 61 | arpa | value: "arpa" 0xa35-0xa38.7 (4)
| | | [6]{}: label 0xa39-0xa39.7 (1)
0x00a30| 00 | . | length: 0 0xa39-0xa39.7 (1)
| | | value: "139.1.168.192.in-addr.arpa" 0xa3a-NA (0)
0x00a40|00 0c |.. | type: "ptr" (12) 0xa40-0xa41.7 (2)
0x00a40| 00 01 | .. | class: "in" (1) (Internet) 0xa42-0xa43.7 (2)
0x00a40| 00 00 00 00 | .... | ttl: 0 0xa44-0xa47.7 (4)
0x00a40| 00 0e | .. | rdlength: 14 0xa48-0xa49.7 (2)
| | | ptr{}: 0xa4a-0xa57.7 (14)
| | | labels[0:2]: 0xa4a-0xa57.7 (14)
| | | [0]{}: label 0xa4a-0xa56.7 (13)
0x00a40| 0c | . | length: 12 0xa4a-0xa4a.7 (1)
0x00a40| 48 61 64 72 69| Hadri| value: "Hadriels-MBP" 0xa4b-0xa56.7 (12)
0x00a50|65 6c 73 2d 4d 42 50 |els-MBP |
| | | [1]{}: label 0xa57-0xa57.7 (1)
0x00a50| 00 | . | length: 0 0xa57-0xa57.7 (1)
| | | value: "Hadriels-MBP" 0xa58-NA (0)
| | | nameservers[0:0]: 0xa58-NA (0)
| | | additionals[0:0]: 0xa58-NA (0)
| | | padding: raw bits 0xa58-NA (0)
| | | options[0:0]: 0xa58-NA (0)
0x00a50| 90 00 00 00 | .... | footer_length: 144 0xa58-0xa5b.7 (4)
| | | [19]{}: block 0xa5c-0xad3.7 (120)
0x00a50| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xa5c-0xa5f.7 (4)
0x00a60|78 00 00 00 |x... | length: 120 0xa60-0xa63.7 (4)
0x00a60| 00 00 00 00 | .... | interface_id: 0 0xa64-0xa67.7 (4)
0x00a60| 72 1d 05 00 | r... | timestamp_high: 335218 0xa68-0xa6b.7 (4)
0x00a60| 9a b3 6a c9| ..j.| timestamp_low: 3379213210 0xa6c-0xa6f.7 (4)
0x00a70|58 00 00 00 |X... | capture_packet_length: 88 0xa70-0xa73.7 (4)
0x00a70| 58 00 00 00 | X... | original_packet_length: 88 0xa74-0xa77.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xa78-0xacf.7 (88)
0x00a70| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xa78-0xa7d.7 (6)
0x00a70| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xa7e-0xa83.7 (6)
0x00a80|60 f1 7d 93 |`.}. |
0x00a80| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xa84-0xa85.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xa86-0xacf.7 (74)
0x00a80| 45 | E | version: 4 0xa86-0xa86.3 (0.4)
0x00a80| 45 | E | ihl: 5 0xa86.4-0xa86.7 (0.4)
0x00a80| 00 | . | dscp: 0 0xa87-0xa87.5 (0.6)
0x00a80| 00 | . | ecn: 0 0xa87.6-0xa87.7 (0.2)
0x00a80| 00 4a | .J | total_length: 74 0xa88-0xa89.7 (2)
0x00a80| 52 6f | Ro | identification: 21103 0xa8a-0xa8b.7 (2)
0x00a80| 00 | . | reserved: 0 0xa8c-0xa8c (0.1)
0x00a80| 00 | . | dont_fragment: false 0xa8c.1-0xa8c.1 (0.1)
0x00a80| 00 | . | more_fragments: false 0xa8c.2-0xa8c.2 (0.1)
0x00a80| 00 00 | .. | fragment_offset: 0 0xa8c.3-0xa8d.7 (1.5)
0x00a80| ff | . | ttl: 255 0xa8e-0xa8e.7 (1)
0x00a80| 11| .| protocol: "udp" (17) (User datagram protocol) 0xa8f-0xa8f.7 (1)
0x00a90|e5 56 |.V | header_checksum: 0xe556 (valid) 0xa90-0xa91.7 (2)
0x00a90| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0xa92-0xa95.7 (4)
0x00a90| c0 a8 01 01 | .... | destination_ip: "192.168.1.1" (0xc0a80101) 0xa96-0xa99.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xa9a-0xacf.7 (54)
0x00a90| fe 21 | .! | source_port: 65057 0xa9a-0xa9b.7 (2)
0x00a90| 00 35 | .5 | destination_port: "domain" (53) (Domain Name Server) 0xa9c-0xa9d.7 (2)
0x00a90| 00 36| .6| length: 54 0xa9e-0xa9f.7 (2)
0x00aa0|95 79 |.y | checksum: 0x9579 0xaa0-0xaa1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0xaa2-0xacf.7 (46)
| | | header{}: 0xaa2-0xaa5.7 (4)
0x00aa0| f1 ea | .. | id: 61930 0xaa2-0xaa3.7 (2)
0x00aa0| 01 | . | qr: "query" (0) 0xaa4-0xaa4 (0.1)
0x00aa0| 01 | . | opcode: "query" (0) 0xaa4.1-0xaa4.4 (0.4)
0x00aa0| 01 | . | authoritative_answer: false 0xaa4.5-0xaa4.5 (0.1)
0x00aa0| 01 | . | truncation: false 0xaa4.6-0xaa4.6 (0.1)
0x00aa0| 01 | . | recursion_desired: true 0xaa4.7-0xaa4.7 (0.1)
0x00aa0| 00 | . | recursion_available: false 0xaa5-0xaa5 (0.1)
0x00aa0| 00 | . | z: 0 0xaa5.1-0xaa5.3 (0.3)
0x00aa0| 00 | . | rcode: "no_error" (0) (No error) 0xaa5.4-0xaa5.7 (0.4)
0x00aa0| 00 01 | .. | qd_count: 1 0xaa6-0xaa7.7 (2)
0x00aa0| 00 00 | .. | an_count: 0 0xaa8-0xaa9.7 (2)
0x00aa0| 00 00 | .. | ns_count: 0 0xaaa-0xaab.7 (2)
0x00aa0| 00 00 | .. | ar_count: 0 0xaac-0xaad.7 (2)
| | | questions[0:1]: 0xaae-0xacf.7 (34)
| | | [0]{}: question 0xaae-0xacf.7 (34)
| | | name{}: 0xaae-0xacb.7 (30)
| | | labels[0:7]: 0xaae-0xacb.7 (30)
| | | [0]{}: label 0xaae-0xab1.7 (4)
0x00aa0| 03 | . | length: 3 0xaae-0xaae.7 (1)
0x00aa0| 32| 2| value: "255" 0xaaf-0xab1.7 (3)
0x00ab0|35 35 |55 |
| | | [1]{}: label 0xab2-0xab5.7 (4)
0x00ab0| 03 | . | length: 3 0xab2-0xab2.7 (1)
0x00ab0| 32 35 35 | 255 | value: "255" 0xab3-0xab5.7 (3)
| | | [2]{}: label 0xab6-0xab9.7 (4)
0x00ab0| 03 | . | length: 3 0xab6-0xab6.7 (1)
0x00ab0| 32 35 35 | 255 | value: "255" 0xab7-0xab9.7 (3)
| | | [3]{}: label 0xaba-0xabd.7 (4)
0x00ab0| 03 | . | length: 3 0xaba-0xaba.7 (1)
0x00ab0| 32 35 35 | 255 | value: "255" 0xabb-0xabd.7 (3)
| | | [4]{}: label 0xabe-0xac5.7 (8)
0x00ab0| 07 | . | length: 7 0xabe-0xabe.7 (1)
0x00ab0| 69| i| value: "in-addr" 0xabf-0xac5.7 (7)
0x00ac0|6e 2d 61 64 64 72 |n-addr |
| | | [5]{}: label 0xac6-0xaca.7 (5)
0x00ac0| 04 | . | length: 4 0xac6-0xac6.7 (1)
0x00ac0| 61 72 70 61 | arpa | value: "arpa" 0xac7-0xaca.7 (4)
| | | [6]{}: label 0xacb-0xacb.7 (1)
0x00ac0| 00 | . | length: 0 0xacb-0xacb.7 (1)
| | | value: "255.255.255.255.in-addr.arpa" 0xacc-NA (0)
0x00ac0| 00 0c | .. | type: "ptr" (12) 0xacc-0xacd.7 (2)
0x00ac0| 00 01| ..| class: "in" (1) (Internet) 0xace-0xacf.7 (2)
| | | answers[0:0]: 0xad0-NA (0)
| | | nameservers[0:0]: 0xad0-NA (0)
| | | additionals[0:0]: 0xad0-NA (0)
| | | padding: raw bits 0xad0-NA (0)
| | | options[0:0]: 0xad0-NA (0)
0x00ad0|78 00 00 00 |x... | footer_length: 120 0xad0-0xad3.7 (4)
| | | [20]{}: block 0xad4-0xb8b.7 (184)
0x00ad0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xad4-0xad7.7 (4)
0x00ad0| b8 00 00 00 | .... | length: 184 0xad8-0xadb.7 (4)
0x00ad0| 00 00 00 00| ....| interface_id: 0 0xadc-0xadf.7 (4)
0x00ae0|72 1d 05 00 |r... | timestamp_high: 335218 0xae0-0xae3.7 (4)
0x00ae0| fd 3a 6b c9 | .:k. | timestamp_low: 3379247869 0xae4-0xae7.7 (4)
0x00ae0| 97 00 00 00 | .... | capture_packet_length: 151 0xae8-0xaeb.7 (4)
0x00ae0| 97 00 00 00| ....| original_packet_length: 151 0xaec-0xaef.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xaf0-0xb86.7 (151)
0x00af0|a4 5e 60 f1 7d 93 |.^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xaf0-0xaf5.7 (6)
0x00af0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xaf6-0xafb.7 (6)
0x00af0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xafc-0xafd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xafe-0xb86.7 (137)
0x00af0| 45 | E | version: 4 0xafe-0xafe.3 (0.4)
0x00af0| 45 | E | ihl: 5 0xafe.4-0xafe.7 (0.4)
0x00af0| 00| .| dscp: 0 0xaff-0xaff.5 (0.6)
0x00af0| 00| .| ecn: 0 0xaff.6-0xaff.7 (0.2)
0x00b00|00 89 |.. | total_length: 137 0xb00-0xb01.7 (2)
0x00b00| 00 00 | .. | identification: 0 0xb02-0xb03.7 (2)
0x00b00| 40 | @ | reserved: 0 0xb04-0xb04 (0.1)
0x00b00| 40 | @ | dont_fragment: true 0xb04.1-0xb04.1 (0.1)
0x00b00| 40 | @ | more_fragments: false 0xb04.2-0xb04.2 (0.1)
0x00b00| 40 00 | @. | fragment_offset: 0 0xb04.3-0xb05.7 (1.5)
0x00b00| 40 | @ | ttl: 64 0xb06-0xb06.7 (1)
0x00b00| 11 | . | protocol: "udp" (17) (User datagram protocol) 0xb07-0xb07.7 (1)
0x00b00| b6 87 | .. | header_checksum: 0xb687 (valid) 0xb08-0xb09.7 (2)
0x00b00| c0 a8 01 01 | .... | source_ip: "192.168.1.1" (0xc0a80101) 0xb0a-0xb0d.7 (4)
0x00b00| c0 a8| ..| destination_ip: "192.168.1.139" (0xc0a8018b) 0xb0e-0xb11.7 (4)
0x00b10|01 8b |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xb12-0xb86.7 (117)
0x00b10| 00 35 | .5 | source_port: "domain" (53) (Domain Name Server) 0xb12-0xb13.7 (2)
0x00b10| fe 21 | .! | destination_port: 65057 0xb14-0xb15.7 (2)
0x00b10| 00 75 | .u | length: 117 0xb16-0xb17.7 (2)
0x00b10| ff 57 | .W | checksum: 0xff57 0xb18-0xb19.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0xb1a-0xb86.7 (109)
| | | header{}: 0xb1a-0xb1d.7 (4)
0x00b10| f1 ea | .. | id: 61930 0xb1a-0xb1b.7 (2)
0x00b10| 85 | . | qr: "response" (1) 0xb1c-0xb1c (0.1)
0x00b10| 85 | . | opcode: "query" (0) 0xb1c.1-0xb1c.4 (0.4)
0x00b10| 85 | . | authoritative_answer: true 0xb1c.5-0xb1c.5 (0.1)
0x00b10| 85 | . | truncation: false 0xb1c.6-0xb1c.6 (0.1)
0x00b10| 85 | . | recursion_desired: true 0xb1c.7-0xb1c.7 (0.1)
0x00b10| 80 | . | recursion_available: true 0xb1d-0xb1d (0.1)
0x00b10| 80 | . | z: 0 0xb1d.1-0xb1d.3 (0.3)
0x00b10| 80 | . | rcode: "no_error" (0) (No error) 0xb1d.4-0xb1d.7 (0.4)
0x00b10| 00 01| ..| qd_count: 1 0xb1e-0xb1f.7 (2)
0x00b20|00 00 |.. | an_count: 0 0xb20-0xb21.7 (2)
0x00b20| 00 01 | .. | ns_count: 1 0xb22-0xb23.7 (2)
0x00b20| 00 00 | .. | ar_count: 0 0xb24-0xb25.7 (2)
| | | questions[0:1]: 0xb26-0xb47.7 (34)
| | | [0]{}: question 0xb26-0xb47.7 (34)
| | | name{}: 0xb26-0xb43.7 (30)
| | | labels[0:7]: 0xb26-0xb43.7 (30)
| | | [0]{}: label 0xb26-0xb29.7 (4)
0x00b20| 03 | . | length: 3 0xb26-0xb26.7 (1)
0x00b20| 32 35 35 | 255 | value: "255" 0xb27-0xb29.7 (3)
| | | [1]{}: label 0xb2a-0xb2d.7 (4)
0x00b20| 03 | . | length: 3 0xb2a-0xb2a.7 (1)
0x00b20| 32 35 35 | 255 | value: "255" 0xb2b-0xb2d.7 (3)
| | | [2]{}: label 0xb2e-0xb31.7 (4)
0x00b20| 03 | . | length: 3 0xb2e-0xb2e.7 (1)
0x00b20| 32| 2| value: "255" 0xb2f-0xb31.7 (3)
0x00b30|35 35 |55 |
| | | [3]{}: label 0xb32-0xb35.7 (4)
0x00b30| 03 | . | length: 3 0xb32-0xb32.7 (1)
0x00b30| 32 35 35 | 255 | value: "255" 0xb33-0xb35.7 (3)
| | | [4]{}: label 0xb36-0xb3d.7 (8)
0x00b30| 07 | . | length: 7 0xb36-0xb36.7 (1)
0x00b30| 69 6e 2d 61 64 64 72 | in-addr | value: "in-addr" 0xb37-0xb3d.7 (7)
| | | [5]{}: label 0xb3e-0xb42.7 (5)
0x00b30| 04 | . | length: 4 0xb3e-0xb3e.7 (1)
0x00b30| 61| a| value: "arpa" 0xb3f-0xb42.7 (4)
0x00b40|72 70 61 |rpa |
| | | [6]{}: label 0xb43-0xb43.7 (1)
0x00b40| 00 | . | length: 0 0xb43-0xb43.7 (1)
| | | value: "255.255.255.255.in-addr.arpa" 0xb44-NA (0)
0x00b40| 00 0c | .. | type: "ptr" (12) 0xb44-0xb45.7 (2)
0x00b40| 00 01 | .. | class: "in" (1) (Internet) 0xb46-0xb47.7 (2)
| | | answers[0:0]: 0xb48-NA (0)
| | | nameservers[0:1]: 0xb48-0xb86.7 (63)
| | | [0]{}: nameserver 0xb48-0xb86.7 (63)
| | | name{}: 0xb48-0xb65.7 (30)
| | | labels[0:7]: 0xb48-0xb65.7 (30)
| | | [0]{}: label 0xb48-0xb4b.7 (4)
0x00b40| 03 | . | length: 3 0xb48-0xb48.7 (1)
0x00b40| 32 35 35 | 255 | value: "255" 0xb49-0xb4b.7 (3)
| | | [1]{}: label 0xb4c-0xb4f.7 (4)
0x00b40| 03 | . | length: 3 0xb4c-0xb4c.7 (1)
0x00b40| 32 35 35| 255| value: "255" 0xb4d-0xb4f.7 (3)
| | | [2]{}: label 0xb50-0xb53.7 (4)
0x00b50|03 |. | length: 3 0xb50-0xb50.7 (1)
0x00b50| 32 35 35 | 255 | value: "255" 0xb51-0xb53.7 (3)
| | | [3]{}: label 0xb54-0xb57.7 (4)
0x00b50| 03 | . | length: 3 0xb54-0xb54.7 (1)
0x00b50| 32 35 35 | 255 | value: "255" 0xb55-0xb57.7 (3)
| | | [4]{}: label 0xb58-0xb5f.7 (8)
0x00b50| 07 | . | length: 7 0xb58-0xb58.7 (1)
0x00b50| 49 4e 2d 41 44 44 52| IN-ADDR| value: "IN-ADDR" 0xb59-0xb5f.7 (7)
| | | [5]{}: label 0xb60-0xb64.7 (5)
0x00b60|04 |. | length: 4 0xb60-0xb60.7 (1)
0x00b60| 41 52 50 41 | ARPA | value: "ARPA" 0xb61-0xb64.7 (4)
| | | [6]{}: label 0xb65-0xb65.7 (1)
0x00b60| 00 | . | length: 0 0xb65-0xb65.7 (1)
| | | value: "255.255.255.255.IN-ADDR.ARPA" 0xb66-NA (0)
| | | mname{}: 0xb48-0xb71.7 (42)
| | | labels[0:7]: 0xb48-0xb71.7 (42)
| | | [0]{}: label 0xb48-0xb71.7 (42)
0x00b40| 03 | . | length: 3 0xb48-0xb48.7 (1)
0x00b40| 32 35 35 | 255 | value: "255" 0xb49-0xb4b.7 (3)
0x00b70|c0 |. | is_pointer: 3 0xb70-0xb70.1 (0.2)
0x00b70|c0 2e |.. | pointer: 46 0xb70.2-0xb71.7 (1.6)
| | | [1]{}: label 0xb4c-0xb4f.7 (4)
0x00b40| 03 | . | length: 3 0xb4c-0xb4c.7 (1)
0x00b40| 32 35 35| 255| value: "255" 0xb4d-0xb4f.7 (3)
| | | [2]{}: label 0xb50-0xb53.7 (4)
0x00b50|03 |. | length: 3 0xb50-0xb50.7 (1)
0x00b50| 32 35 35 | 255 | value: "255" 0xb51-0xb53.7 (3)
| | | [3]{}: label 0xb54-0xb57.7 (4)
0x00b50| 03 | . | length: 3 0xb54-0xb54.7 (1)
0x00b50| 32 35 35 | 255 | value: "255" 0xb55-0xb57.7 (3)
| | | [4]{}: label 0xb58-0xb5f.7 (8)
0x00b50| 07 | . | length: 7 0xb58-0xb58.7 (1)
0x00b50| 49 4e 2d 41 44 44 52| IN-ADDR| value: "IN-ADDR" 0xb59-0xb5f.7 (7)
| | | [5]{}: label 0xb60-0xb64.7 (5)
0x00b60|04 |. | length: 4 0xb60-0xb60.7 (1)
0x00b60| 41 52 50 41 | ARPA | value: "ARPA" 0xb61-0xb64.7 (4)
| | | [6]{}: label 0xb65-0xb65.7 (1)
0x00b60| 00 | . | length: 0 0xb65-0xb65.7 (1)
| | | value: "255.255.255.255.IN-ADDR.ARPA" 0xb66-NA (0)
0x00b60| 00 06 | .. | type: "soa" (6) 0xb66-0xb67.7 (2)
0x00b60| 00 01 | .. | class: "in" (1) (Internet) 0xb68-0xb69.7 (2)
0x00b60| 00 01 51 80 | ..Q. | ttl: 86400 0xb6a-0xb6d.7 (4)
0x00b60| 00 17| ..| rdlength: 23 0xb6e-0xb6f.7 (2)
| | | rname{}: 0xb72-0xb72.7 (1)
| | | labels[0:1]: 0xb72-0xb72.7 (1)
| | | [0]{}: label 0xb72-0xb72.7 (1)
0x00b70| 00 | . | length: 0 0xb72-0xb72.7 (1)
| | | value: "" 0xb73-NA (0)
0x00b70| 00 00 00 00 | .... | serial: 0 0xb73-0xb76.7 (4)
0x00b70| 00 00 70 80 | ..p. | refresh: 28800 0xb77-0xb7a.7 (4)
0x00b70| 00 00 1c 20 | ... | retry: 7200 0xb7b-0xb7e.7 (4)
0x00b70| 00| .| expire: 604800 0xb7f-0xb82.7 (4)
0x00b80|09 3a 80 |.:. |
0x00b80| 00 01 51 80 | ..Q. | minimum: 86400 0xb83-0xb86.7 (4)
| | | additionals[0:0]: 0xb87-NA (0)
0x00b80| 00 | . | padding: raw bits 0xb87-0xb87.7 (1)
| | | options[0:0]: 0xb88-NA (0)
0x00b80| b8 00 00 00 | .... | footer_length: 184 0xb88-0xb8b.7 (4)
| | | [21]{}: block 0xb8c-0xc03.7 (120)
0x00b80| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xb8c-0xb8f.7 (4)
0x00b90|78 00 00 00 |x... | length: 120 0xb90-0xb93.7 (4)
0x00b90| 00 00 00 00 | .... | interface_id: 0 0xb94-0xb97.7 (4)
0x00b90| 72 1d 05 00 | r... | timestamp_high: 335218 0xb98-0xb9b.7 (4)
0x00b90| 1c 41 6b c9| .Ak.| timestamp_low: 3379249436 0xb9c-0xb9f.7 (4)
0x00ba0|56 00 00 00 |V... | capture_packet_length: 86 0xba0-0xba3.7 (4)
0x00ba0| 56 00 00 00 | V... | original_packet_length: 86 0xba4-0xba7.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xba8-0xbfd.7 (86)
0x00ba0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xba8-0xbad.7 (6)
0x00ba0| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xbae-0xbb3.7 (6)
0x00bb0|60 f1 7d 93 |`.}. |
0x00bb0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xbb4-0xbb5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xbb6-0xbfd.7 (72)
0x00bb0| 45 | E | version: 4 0xbb6-0xbb6.3 (0.4)
0x00bb0| 45 | E | ihl: 5 0xbb6.4-0xbb6.7 (0.4)
0x00bb0| 00 | . | dscp: 0 0xbb7-0xbb7.5 (0.6)
0x00bb0| 00 | . | ecn: 0 0xbb7.6-0xbb7.7 (0.2)
0x00bb0| 00 48 | .H | total_length: 72 0xbb8-0xbb9.7 (2)
0x00bb0| 1e 68 | .h | identification: 7784 0xbba-0xbbb.7 (2)
0x00bb0| 00 | . | reserved: 0 0xbbc-0xbbc (0.1)
0x00bb0| 00 | . | dont_fragment: false 0xbbc.1-0xbbc.1 (0.1)
0x00bb0| 00 | . | more_fragments: false 0xbbc.2-0xbbc.2 (0.1)
0x00bb0| 00 00 | .. | fragment_offset: 0 0xbbc.3-0xbbd.7 (1.5)
0x00bb0| ff | . | ttl: 255 0xbbe-0xbbe.7 (1)
0x00bb0| 11| .| protocol: "udp" (17) (User datagram protocol) 0xbbf-0xbbf.7 (1)
0x00bc0|19 60 |.` | header_checksum: 0x1960 (valid) 0xbc0-0xbc1.7 (2)
0x00bc0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0xbc2-0xbc5.7 (4)
0x00bc0| c0 a8 01 01 | .... | destination_ip: "192.168.1.1" (0xc0a80101) 0xbc6-0xbc9.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xbca-0xbfd.7 (52)
0x00bc0| ca 28 | .( | source_port: 51752 0xbca-0xbcb.7 (2)
0x00bc0| 00 35 | .5 | destination_port: "domain" (53) (Domain Name Server) 0xbcc-0xbcd.7 (2)
0x00bc0| 00 34| .4| length: 52 0xbce-0xbcf.7 (2)
0x00bd0|97 14 |.. | checksum: 0x9714 0xbd0-0xbd1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0xbd2-0xbfd.7 (44)
| | | header{}: 0xbd2-0xbd5.7 (4)
0x00bd0| 56 85 | V. | id: 22149 0xbd2-0xbd3.7 (2)
0x00bd0| 01 | . | qr: "query" (0) 0xbd4-0xbd4 (0.1)
0x00bd0| 01 | . | opcode: "query" (0) 0xbd4.1-0xbd4.4 (0.4)
0x00bd0| 01 | . | authoritative_answer: false 0xbd4.5-0xbd4.5 (0.1)
0x00bd0| 01 | . | truncation: false 0xbd4.6-0xbd4.6 (0.1)
0x00bd0| 01 | . | recursion_desired: true 0xbd4.7-0xbd4.7 (0.1)
0x00bd0| 00 | . | recursion_available: false 0xbd5-0xbd5 (0.1)
0x00bd0| 00 | . | z: 0 0xbd5.1-0xbd5.3 (0.3)
0x00bd0| 00 | . | rcode: "no_error" (0) (No error) 0xbd5.4-0xbd5.7 (0.4)
0x00bd0| 00 01 | .. | qd_count: 1 0xbd6-0xbd7.7 (2)
0x00bd0| 00 00 | .. | an_count: 0 0xbd8-0xbd9.7 (2)
0x00bd0| 00 00 | .. | ns_count: 0 0xbda-0xbdb.7 (2)
0x00bd0| 00 00 | .. | ar_count: 0 0xbdc-0xbdd.7 (2)
| | | questions[0:1]: 0xbde-0xbfd.7 (32)
| | | [0]{}: question 0xbde-0xbfd.7 (32)
| | | name{}: 0xbde-0xbf9.7 (28)
| | | labels[0:7]: 0xbde-0xbf9.7 (28)
| | | [0]{}: label 0xbde-0xbe1.7 (4)
0x00bd0| 03 | . | length: 3 0xbde-0xbde.7 (1)
0x00bd0| 32| 2| value: "255" 0xbdf-0xbe1.7 (3)
0x00be0|35 35 |55 |
| | | [1]{}: label 0xbe2-0xbe3.7 (2)
0x00be0| 01 | . | length: 1 0xbe2-0xbe2.7 (1)
0x00be0| 31 | 1 | value: "1" 0xbe3-0xbe3.7 (1)
| | | [2]{}: label 0xbe4-0xbe7.7 (4)
0x00be0| 03 | . | length: 3 0xbe4-0xbe4.7 (1)
0x00be0| 31 36 38 | 168 | value: "168" 0xbe5-0xbe7.7 (3)
| | | [3]{}: label 0xbe8-0xbeb.7 (4)
0x00be0| 03 | . | length: 3 0xbe8-0xbe8.7 (1)
0x00be0| 31 39 32 | 192 | value: "192" 0xbe9-0xbeb.7 (3)
| | | [4]{}: label 0xbec-0xbf3.7 (8)
0x00be0| 07 | . | length: 7 0xbec-0xbec.7 (1)
0x00be0| 69 6e 2d| in-| value: "in-addr" 0xbed-0xbf3.7 (7)
0x00bf0|61 64 64 72 |addr |
| | | [5]{}: label 0xbf4-0xbf8.7 (5)
0x00bf0| 04 | . | length: 4 0xbf4-0xbf4.7 (1)
0x00bf0| 61 72 70 61 | arpa | value: "arpa" 0xbf5-0xbf8.7 (4)
| | | [6]{}: label 0xbf9-0xbf9.7 (1)
0x00bf0| 00 | . | length: 0 0xbf9-0xbf9.7 (1)
| | | value: "255.1.168.192.in-addr.arpa" 0xbfa-NA (0)
0x00bf0| 00 0c | .. | type: "ptr" (12) 0xbfa-0xbfb.7 (2)
0x00bf0| 00 01 | .. | class: "in" (1) (Internet) 0xbfc-0xbfd.7 (2)
| | | answers[0:0]: 0xbfe-NA (0)
| | | nameservers[0:0]: 0xbfe-NA (0)
| | | additionals[0:0]: 0xbfe-NA (0)
0x00bf0| 00 00| ..| padding: raw bits 0xbfe-0xbff.7 (2)
| | | options[0:0]: 0xc00-NA (0)
0x00c00|78 00 00 00 |x... | footer_length: 120 0xc00-0xc03.7 (4)
| | | [22]{}: block 0xc04-0xc7f.7 (124)
0x00c00| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xc04-0xc07.7 (4)
0x00c00| 7c 00 00 00 | |... | length: 124 0xc08-0xc0b.7 (4)
0x00c00| 00 00 00 00| ....| interface_id: 0 0xc0c-0xc0f.7 (4)
0x00c10|72 1d 05 00 |r... | timestamp_high: 335218 0xc10-0xc13.7 (4)
0x00c10| 23 67 6b c9 | #gk. | timestamp_low: 3379259171 0xc14-0xc17.7 (4)
0x00c10| 5a 00 00 00 | Z... | capture_packet_length: 90 0xc18-0xc1b.7 (4)
0x00c10| 5a 00 00 00| Z...| original_packet_length: 90 0xc1c-0xc1f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xc20-0xc79.7 (90)
0x00c20|a4 5e 60 f1 7d 93 |.^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xc20-0xc25.7 (6)
0x00c20| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xc26-0xc2b.7 (6)
0x00c20| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xc2c-0xc2d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xc2e-0xc79.7 (76)
0x00c20| 45 | E | version: 4 0xc2e-0xc2e.3 (0.4)
0x00c20| 45 | E | ihl: 5 0xc2e.4-0xc2e.7 (0.4)
0x00c20| 28| (| dscp: 10 0xc2f-0xc2f.5 (0.6)
0x00c20| 28| (| ecn: 0 0xc2f.6-0xc2f.7 (0.2)
0x00c30|00 4c |.L | total_length: 76 0xc30-0xc31.7 (2)
0x00c30| 00 00 | .. | identification: 0 0xc32-0xc33.7 (2)
0x00c30| 40 | @ | reserved: 0 0xc34-0xc34 (0.1)
0x00c30| 40 | @ | dont_fragment: true 0xc34.1-0xc34.1 (0.1)
0x00c30| 40 | @ | more_fragments: false 0xc34.2-0xc34.2 (0.1)
0x00c30| 40 00 | @. | fragment_offset: 0 0xc34.3-0xc35.7 (1.5)
0x00c30| 34 | 4 | ttl: 52 0xc36-0xc36.7 (1)
0x00c30| 11 | . | protocol: "udp" (17) (User datagram protocol) 0xc37-0xc37.7 (1)
0x00c30| 65 4c | eL | header_checksum: 0x654c (valid) 0xc38-0xc39.7 (2)
0x00c30| 11 fd 0c fd | .... | source_ip: "17.253.12.253" (0x11fd0cfd) 0xc3a-0xc3d.7 (4)
0x00c30| c0 a8| ..| destination_ip: "192.168.1.139" (0xc0a8018b) 0xc3e-0xc41.7 (4)
0x00c40|01 8b |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xc42-0xc79.7 (56)
0x00c40| 00 7b | .{ | source_port: "ntp" (123) (Network Time Protocol) 0xc42-0xc43.7 (2)
0x00c40| 00 7b | .{ | destination_port: "ntp" (123) (Network Time Protocol) 0xc44-0xc45.7 (2)
0x00c40| 00 38 | .8 | length: 56 0xc46-0xc47.7 (2)
0x00c40| ea 4f | .O | checksum: 0xea4f 0xc48-0xc49.7 (2)
0x00c40| 24 01 06 ec 00 00| $.....| payload: raw bits 0xc4a-0xc79.7 (48)
0x00c50|00 00 00 00 00 47 47 50 53 73 d9 7b 64 77 91 fd|.....GGPSs.{dw..|
* |until 0xc79.7 (48) | |
0x00c70| 00 00 | .. | padding: raw bits 0xc7a-0xc7b.7 (2)
| | | options[0:0]: 0xc7c-NA (0)
0x00c70| 7c 00 00 00| |...| footer_length: 124 0xc7c-0xc7f.7 (4)
| | | [23]{}: block 0xc80-0xcf7.7 (120)
0x00c80|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xc80-0xc83.7 (4)
0x00c80| 78 00 00 00 | x... | length: 120 0xc84-0xc87.7 (4)
0x00c80| 00 00 00 00 | .... | interface_id: 0 0xc88-0xc8b.7 (4)
0x00c80| 72 1d 05 00| r...| timestamp_high: 335218 0xc8c-0xc8f.7 (4)
0x00c90|27 67 6b c9 |'gk. | timestamp_low: 3379259175 0xc90-0xc93.7 (4)
0x00c90| 56 00 00 00 | V... | capture_packet_length: 86 0xc94-0xc97.7 (4)
0x00c90| 56 00 00 00 | V... | original_packet_length: 86 0xc98-0xc9b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xc9c-0xcf1.7 (86)
0x00c90| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xc9c-0xca1.7 (6)
0x00ca0|7d 93 |}. |
0x00ca0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xca2-0xca7.7 (6)
0x00ca0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xca8-0xca9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xcaa-0xcf1.7 (72)
0x00ca0| 45 | E | version: 4 0xcaa-0xcaa.3 (0.4)
0x00ca0| 45 | E | ihl: 5 0xcaa.4-0xcaa.7 (0.4)
0x00ca0| 00 | . | dscp: 0 0xcab-0xcab.5 (0.6)
0x00ca0| 00 | . | ecn: 0 0xcab.6-0xcab.7 (0.2)
0x00ca0| 00 48 | .H | total_length: 72 0xcac-0xcad.7 (2)
0x00ca0| 00 00| ..| identification: 0 0xcae-0xcaf.7 (2)
0x00cb0|40 |@ | reserved: 0 0xcb0-0xcb0 (0.1)
0x00cb0|40 |@ | dont_fragment: true 0xcb0.1-0xcb0.1 (0.1)
0x00cb0|40 |@ | more_fragments: false 0xcb0.2-0xcb0.2 (0.1)
0x00cb0|40 00 |@. | fragment_offset: 0 0xcb0.3-0xcb1.7 (1.5)
0x00cb0| 40 | @ | ttl: 64 0xcb2-0xcb2.7 (1)
0x00cb0| 11 | . | protocol: "udp" (17) (User datagram protocol) 0xcb3-0xcb3.7 (1)
0x00cb0| b6 c8 | .. | header_checksum: 0xb6c8 (valid) 0xcb4-0xcb5.7 (2)
0x00cb0| c0 a8 01 01 | .... | source_ip: "192.168.1.1" (0xc0a80101) 0xcb6-0xcb9.7 (4)
0x00cb0| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0xcba-0xcbd.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xcbe-0xcf1.7 (52)
0x00cb0| 00 35| .5| source_port: "domain" (53) (Domain Name Server) 0xcbe-0xcbf.7 (2)
0x00cc0|ca 28 |.( | destination_port: 51752 0xcc0-0xcc1.7 (2)
0x00cc0| 00 34 | .4 | length: 52 0xcc2-0xcc3.7 (2)
0x00cc0| 12 91 | .. | checksum: 0x1291 0xcc4-0xcc5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0xcc6-0xcf1.7 (44)
| | | header{}: 0xcc6-0xcc9.7 (4)
0x00cc0| 56 85 | V. | id: 22149 0xcc6-0xcc7.7 (2)
0x00cc0| 85 | . | qr: "response" (1) 0xcc8-0xcc8 (0.1)
0x00cc0| 85 | . | opcode: "query" (0) 0xcc8.1-0xcc8.4 (0.4)
0x00cc0| 85 | . | authoritative_answer: true 0xcc8.5-0xcc8.5 (0.1)
0x00cc0| 85 | . | truncation: false 0xcc8.6-0xcc8.6 (0.1)
0x00cc0| 85 | . | recursion_desired: true 0xcc8.7-0xcc8.7 (0.1)
0x00cc0| 83 | . | recursion_available: true 0xcc9-0xcc9 (0.1)
0x00cc0| 83 | . | z: 0 0xcc9.1-0xcc9.3 (0.3)
0x00cc0| 83 | . | rcode: "nx_domain" (3) (Non-Existent Domain) 0xcc9.4-0xcc9.7 (0.4)
0x00cc0| 00 01 | .. | qd_count: 1 0xcca-0xccb.7 (2)
0x00cc0| 00 00 | .. | an_count: 0 0xccc-0xccd.7 (2)
0x00cc0| 00 00| ..| ns_count: 0 0xcce-0xccf.7 (2)
0x00cd0|00 00 |.. | ar_count: 0 0xcd0-0xcd1.7 (2)
| | | questions[0:1]: 0xcd2-0xcf1.7 (32)
| | | [0]{}: question 0xcd2-0xcf1.7 (32)
| | | name{}: 0xcd2-0xced.7 (28)
| | | labels[0:7]: 0xcd2-0xced.7 (28)
| | | [0]{}: label 0xcd2-0xcd5.7 (4)
0x00cd0| 03 | . | length: 3 0xcd2-0xcd2.7 (1)
0x00cd0| 32 35 35 | 255 | value: "255" 0xcd3-0xcd5.7 (3)
| | | [1]{}: label 0xcd6-0xcd7.7 (2)
0x00cd0| 01 | . | length: 1 0xcd6-0xcd6.7 (1)
0x00cd0| 31 | 1 | value: "1" 0xcd7-0xcd7.7 (1)
| | | [2]{}: label 0xcd8-0xcdb.7 (4)
0x00cd0| 03 | . | length: 3 0xcd8-0xcd8.7 (1)
0x00cd0| 31 36 38 | 168 | value: "168" 0xcd9-0xcdb.7 (3)
| | | [3]{}: label 0xcdc-0xcdf.7 (4)
0x00cd0| 03 | . | length: 3 0xcdc-0xcdc.7 (1)
0x00cd0| 31 39 32| 192| value: "192" 0xcdd-0xcdf.7 (3)
| | | [4]{}: label 0xce0-0xce7.7 (8)
0x00ce0|07 |. | length: 7 0xce0-0xce0.7 (1)
0x00ce0| 69 6e 2d 61 64 64 72 | in-addr | value: "in-addr" 0xce1-0xce7.7 (7)
| | | [5]{}: label 0xce8-0xcec.7 (5)
0x00ce0| 04 | . | length: 4 0xce8-0xce8.7 (1)
0x00ce0| 61 72 70 61 | arpa | value: "arpa" 0xce9-0xcec.7 (4)
| | | [6]{}: label 0xced-0xced.7 (1)
0x00ce0| 00 | . | length: 0 0xced-0xced.7 (1)
| | | value: "255.1.168.192.in-addr.arpa" 0xcee-NA (0)
0x00ce0| 00 0c| ..| type: "ptr" (12) 0xcee-0xcef.7 (2)
0x00cf0|00 01 |.. | class: "in" (1) (Internet) 0xcf0-0xcf1.7 (2)
| | | answers[0:0]: 0xcf2-NA (0)
| | | nameservers[0:0]: 0xcf2-NA (0)
| | | additionals[0:0]: 0xcf2-NA (0)
0x00cf0| 00 00 | .. | padding: raw bits 0xcf2-0xcf3.7 (2)
| | | options[0:0]: 0xcf4-NA (0)
0x00cf0| 78 00 00 00 | x... | footer_length: 120 0xcf4-0xcf7.7 (4)
| | | [24]{}: block 0xcf8-0xd6b.7 (116)
0x00cf0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xcf8-0xcfb.7 (4)
0x00cf0| 74 00 00 00| t...| length: 116 0xcfc-0xcff.7 (4)
0x00d00|00 00 00 00 |.... | interface_id: 0 0xd00-0xd03.7 (4)
0x00d00| 72 1d 05 00 | r... | timestamp_high: 335218 0xd04-0xd07.7 (4)
0x00d00| a8 34 6e c9 | .4n. | timestamp_low: 3379442856 0xd08-0xd0b.7 (4)
0x00d00| 54 00 00 00| T...| capture_packet_length: 84 0xd0c-0xd0f.7 (4)
0x00d10|54 00 00 00 |T... | original_packet_length: 84 0xd10-0xd13.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xd14-0xd67.7 (84)
0x00d10| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xd14-0xd19.7 (6)
0x00d10| 94 10 3e 05 36 d3| ..>.6.| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xd1a-0xd1f.7 (6)
0x00d20|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xd20-0xd21.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xd22-0xd67.7 (70)
0x00d20| 45 | E | version: 4 0xd22-0xd22.3 (0.4)
0x00d20| 45 | E | ihl: 5 0xd22.4-0xd22.7 (0.4)
0x00d20| 28 | ( | dscp: 10 0xd23-0xd23.5 (0.6)
0x00d20| 28 | ( | ecn: 0 0xd23.6-0xd23.7 (0.2)
0x00d20| 00 46 | .F | total_length: 70 0xd24-0xd25.7 (2)
0x00d20| cb c6 | .. | identification: 52166 0xd26-0xd27.7 (2)
0x00d20| 00 | . | reserved: 0 0xd28-0xd28 (0.1)
0x00d20| 00 | . | dont_fragment: false 0xd28.1-0xd28.1 (0.1)
0x00d20| 00 | . | more_fragments: false 0xd28.2-0xd28.2 (0.1)
0x00d20| 00 00 | .. | fragment_offset: 0 0xd28.3-0xd29.7 (1.5)
0x00d20| 29 | ) | ttl: 41 0xd2a-0xd2a.7 (1)
0x00d20| 11 | . | protocol: "udp" (17) (User datagram protocol) 0xd2b-0xd2b.7 (1)
0x00d20| 89 05 | .. | header_checksum: 0x8905 (valid) 0xd2c-0xd2d.7 (2)
0x00d20| ad c2| ..| source_ip: "173.194.204.189" (0xadc2ccbd) 0xd2e-0xd31.7 (4)
0x00d30|cc bd |.. |
0x00d30| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0xd32-0xd35.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xd36-0xd67.7 (50)
0x00d30| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0xd36-0xd37.7 (2)
0x00d30| cc c9 | .. | destination_port: 52425 0xd38-0xd39.7 (2)
0x00d30| 00 32 | .2 | length: 50 0xd3a-0xd3b.7 (2)
0x00d30| e0 7e | .~ | checksum: 0xe07e 0xd3c-0xd3d.7 (2)
0x00d30| 10 ef| ..| payload: raw bits 0xd3e-0xd67.7 (42)
0x00d40|01 65 d8 b9 9d 48 7a 21 2c ba a9 0d b3 e7 5e bf|.e...Hz!,.....^.|
* |until 0xd67.7 (42) | |
| | | padding: raw bits 0xd68-NA (0)
| | | options[0:0]: 0xd68-NA (0)
0x00d60| 74 00 00 00 | t... | footer_length: 116 0xd68-0xd6b.7 (4)
| | | [25]{}: block 0xd6c-0xde3.7 (120)
0x00d60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xd6c-0xd6f.7 (4)
0x00d70|78 00 00 00 |x... | length: 120 0xd70-0xd73.7 (4)
0x00d70| 00 00 00 00 | .... | interface_id: 0 0xd74-0xd77.7 (4)
0x00d70| 72 1d 05 00 | r... | timestamp_high: 335218 0xd78-0xd7b.7 (4)
0x00d70| b7 e5 71 c9| ..q.| timestamp_low: 3379684791 0xd7c-0xd7f.7 (4)
0x00d80|56 00 00 00 |V... | capture_packet_length: 86 0xd80-0xd83.7 (4)
0x00d80| 56 00 00 00 | V... | original_packet_length: 86 0xd84-0xd87.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xd88-0xddd.7 (86)
0x00d80| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xd88-0xd8d.7 (6)
0x00d80| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xd8e-0xd93.7 (6)
0x00d90|60 f1 7d 93 |`.}. |
0x00d90| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xd94-0xd95.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xd96-0xddd.7 (72)
0x00d90| 45 | E | version: 4 0xd96-0xd96.3 (0.4)
0x00d90| 45 | E | ihl: 5 0xd96.4-0xd96.7 (0.4)
0x00d90| 00 | . | dscp: 0 0xd97-0xd97.5 (0.6)
0x00d90| 00 | . | ecn: 0 0xd97.6-0xd97.7 (0.2)
0x00d90| 00 48 | .H | total_length: 72 0xd98-0xd99.7 (2)
0x00d90| 67 34 | g4 | identification: 26420 0xd9a-0xd9b.7 (2)
0x00d90| 00 | . | reserved: 0 0xd9c-0xd9c (0.1)
0x00d90| 00 | . | dont_fragment: false 0xd9c.1-0xd9c.1 (0.1)
0x00d90| 00 | . | more_fragments: false 0xd9c.2-0xd9c.2 (0.1)
0x00d90| 00 00 | .. | fragment_offset: 0 0xd9c.3-0xd9d.7 (1.5)
0x00d90| ff | . | ttl: 255 0xd9e-0xd9e.7 (1)
0x00d90| 11| .| protocol: "udp" (17) (User datagram protocol) 0xd9f-0xd9f.7 (1)
0x00da0|d0 93 |.. | header_checksum: 0xd093 (valid) 0xda0-0xda1.7 (2)
0x00da0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0xda2-0xda5.7 (4)
0x00da0| c0 a8 01 01 | .... | destination_ip: "192.168.1.1" (0xc0a80101) 0xda6-0xda9.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xdaa-0xddd.7 (52)
0x00da0| c5 17 | .. | source_port: 50455 0xdaa-0xdab.7 (2)
0x00da0| 00 35 | .5 | destination_port: "domain" (53) (Domain Name Server) 0xdac-0xdad.7 (2)
0x00da0| 00 34| .4| length: 52 0xdae-0xdaf.7 (2)
0x00db0|2f 5a |/Z | checksum: 0x2f5a 0xdb0-0xdb1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0xdb2-0xddd.7 (44)
| | | header{}: 0xdb2-0xdb5.7 (4)
0x00db0| 6f ad | o. | id: 28589 0xdb2-0xdb3.7 (2)
0x00db0| 01 | . | qr: "query" (0) 0xdb4-0xdb4 (0.1)
0x00db0| 01 | . | opcode: "query" (0) 0xdb4.1-0xdb4.4 (0.4)
0x00db0| 01 | . | authoritative_answer: false 0xdb4.5-0xdb4.5 (0.1)
0x00db0| 01 | . | truncation: false 0xdb4.6-0xdb4.6 (0.1)
0x00db0| 01 | . | recursion_desired: true 0xdb4.7-0xdb4.7 (0.1)
0x00db0| 00 | . | recursion_available: false 0xdb5-0xdb5 (0.1)
0x00db0| 00 | . | z: 0 0xdb5.1-0xdb5.3 (0.3)
0x00db0| 00 | . | rcode: "no_error" (0) (No error) 0xdb5.4-0xdb5.7 (0.4)
0x00db0| 00 01 | .. | qd_count: 1 0xdb6-0xdb7.7 (2)
0x00db0| 00 00 | .. | an_count: 0 0xdb8-0xdb9.7 (2)
0x00db0| 00 00 | .. | ns_count: 0 0xdba-0xdbb.7 (2)
0x00db0| 00 00 | .. | ar_count: 0 0xdbc-0xdbd.7 (2)
| | | questions[0:1]: 0xdbe-0xddd.7 (32)
| | | [0]{}: question 0xdbe-0xddd.7 (32)
| | | name{}: 0xdbe-0xdd9.7 (28)
| | | labels[0:7]: 0xdbe-0xdd9.7 (28)
| | | [0]{}: label 0xdbe-0xdc1.7 (4)
0x00db0| 03 | . | length: 3 0xdbe-0xdbe.7 (1)
0x00db0| 32| 2| value: "253" 0xdbf-0xdc1.7 (3)
0x00dc0|35 33 |53 |
| | | [1]{}: label 0xdc2-0xdc4.7 (3)
0x00dc0| 02 | . | length: 2 0xdc2-0xdc2.7 (1)
0x00dc0| 31 32 | 12 | value: "12" 0xdc3-0xdc4.7 (2)
| | | [2]{}: label 0xdc5-0xdc8.7 (4)
0x00dc0| 03 | . | length: 3 0xdc5-0xdc5.7 (1)
0x00dc0| 32 35 33 | 253 | value: "253" 0xdc6-0xdc8.7 (3)
| | | [3]{}: label 0xdc9-0xdcb.7 (3)
0x00dc0| 02 | . | length: 2 0xdc9-0xdc9.7 (1)
0x00dc0| 31 37 | 17 | value: "17" 0xdca-0xdcb.7 (2)
| | | [4]{}: label 0xdcc-0xdd3.7 (8)
0x00dc0| 07 | . | length: 7 0xdcc-0xdcc.7 (1)
0x00dc0| 69 6e 2d| in-| value: "in-addr" 0xdcd-0xdd3.7 (7)
0x00dd0|61 64 64 72 |addr |
| | | [5]{}: label 0xdd4-0xdd8.7 (5)
0x00dd0| 04 | . | length: 4 0xdd4-0xdd4.7 (1)
0x00dd0| 61 72 70 61 | arpa | value: "arpa" 0xdd5-0xdd8.7 (4)
| | | [6]{}: label 0xdd9-0xdd9.7 (1)
0x00dd0| 00 | . | length: 0 0xdd9-0xdd9.7 (1)
| | | value: "253.12.253.17.in-addr.arpa" 0xdda-NA (0)
0x00dd0| 00 0c | .. | type: "ptr" (12) 0xdda-0xddb.7 (2)
0x00dd0| 00 01 | .. | class: "in" (1) (Internet) 0xddc-0xddd.7 (2)
| | | answers[0:0]: 0xdde-NA (0)
| | | nameservers[0:0]: 0xdde-NA (0)
| | | additionals[0:0]: 0xdde-NA (0)
0x00dd0| 00 00| ..| padding: raw bits 0xdde-0xddf.7 (2)
| | | options[0:0]: 0xde0-NA (0)
0x00de0|78 00 00 00 |x... | footer_length: 120 0xde0-0xde3.7 (4)
| | | [26]{}: block 0xde4-0xe57.7 (116)
0x00de0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xde4-0xde7.7 (4)
0x00de0| 74 00 00 00 | t... | length: 116 0xde8-0xdeb.7 (4)
0x00de0| 00 00 00 00| ....| interface_id: 0 0xdec-0xdef.7 (4)
0x00df0|72 1d 05 00 |r... | timestamp_high: 335218 0xdf0-0xdf3.7 (4)
0x00df0| 08 17 72 c9 | ..r. | timestamp_low: 3379697416 0xdf4-0xdf7.7 (4)
0x00df0| 54 00 00 00 | T... | capture_packet_length: 84 0xdf8-0xdfb.7 (4)
0x00df0| 54 00 00 00| T...| original_packet_length: 84 0xdfc-0xdff.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xe00-0xe53.7 (84)
0x00e00|a4 5e 60 f1 7d 93 |.^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xe00-0xe05.7 (6)
0x00e00| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xe06-0xe0b.7 (6)
0x00e00| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xe0c-0xe0d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xe0e-0xe53.7 (70)
0x00e00| 45 | E | version: 4 0xe0e-0xe0e.3 (0.4)
0x00e00| 45 | E | ihl: 5 0xe0e.4-0xe0e.7 (0.4)
0x00e00| 28| (| dscp: 10 0xe0f-0xe0f.5 (0.6)
0x00e00| 28| (| ecn: 0 0xe0f.6-0xe0f.7 (0.2)
0x00e10|00 46 |.F | total_length: 70 0xe10-0xe11.7 (2)
0x00e10| cc 72 | .r | identification: 52338 0xe12-0xe13.7 (2)
0x00e10| 00 | . | reserved: 0 0xe14-0xe14 (0.1)
0x00e10| 00 | . | dont_fragment: false 0xe14.1-0xe14.1 (0.1)
0x00e10| 00 | . | more_fragments: false 0xe14.2-0xe14.2 (0.1)
0x00e10| 00 00 | .. | fragment_offset: 0 0xe14.3-0xe15.7 (1.5)
0x00e10| 29 | ) | ttl: 41 0xe16-0xe16.7 (1)
0x00e10| 11 | . | protocol: "udp" (17) (User datagram protocol) 0xe17-0xe17.7 (1)
0x00e10| 88 59 | .Y | header_checksum: 0x8859 (valid) 0xe18-0xe19.7 (2)
0x00e10| ad c2 cc bd | .... | source_ip: "173.194.204.189" (0xadc2ccbd) 0xe1a-0xe1d.7 (4)
0x00e10| c0 a8| ..| destination_ip: "192.168.1.139" (0xc0a8018b) 0xe1e-0xe21.7 (4)
0x00e20|01 8b |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xe22-0xe53.7 (50)
0x00e20| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0xe22-0xe23.7 (2)
0x00e20| cc c9 | .. | destination_port: 52425 0xe24-0xe25.7 (2)
0x00e20| 00 32 | .2 | length: 50 0xe26-0xe27.7 (2)
0x00e20| 6f 9f | o. | checksum: 0x6f9f 0xe28-0xe29.7 (2)
0x00e20| 10 f0 01 a4 5a 64| ....Zd| payload: raw bits 0xe2a-0xe53.7 (42)
0x00e30|b9 ba e6 d0 23 9d 37 49 b0 99 fa 95 56 2f 71 80|....#.7I....V/q.|
* |until 0xe53.7 (42) | |
| | | padding: raw bits 0xe54-NA (0)
| | | options[0:0]: 0xe54-NA (0)
0x00e50| 74 00 00 00 | t... | footer_length: 116 0xe54-0xe57.7 (4)
| | | [27]{}: block 0xe58-0xecf.7 (120)
0x00e50| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xe58-0xe5b.7 (4)
0x00e50| 78 00 00 00| x...| length: 120 0xe5c-0xe5f.7 (4)
0x00e60|00 00 00 00 |.... | interface_id: 0 0xe60-0xe63.7 (4)
0x00e60| 72 1d 05 00 | r... | timestamp_high: 335218 0xe64-0xe67.7 (4)
0x00e60| cf 17 72 c9 | ..r. | timestamp_low: 3379697615 0xe68-0xe6b.7 (4)
0x00e60| 56 00 00 00| V...| capture_packet_length: 86 0xe6c-0xe6f.7 (4)
0x00e70|56 00 00 00 |V... | original_packet_length: 86 0xe70-0xe73.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xe74-0xec9.7 (86)
0x00e70| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xe74-0xe79.7 (6)
0x00e70| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xe7a-0xe7f.7 (6)
0x00e80|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xe80-0xe81.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xe82-0xec9.7 (72)
0x00e80| 45 | E | version: 4 0xe82-0xe82.3 (0.4)
0x00e80| 45 | E | ihl: 5 0xe82.4-0xe82.7 (0.4)
0x00e80| 00 | . | dscp: 0 0xe83-0xe83.5 (0.6)
0x00e80| 00 | . | ecn: 0 0xe83.6-0xe83.7 (0.2)
0x00e80| 00 48 | .H | total_length: 72 0xe84-0xe85.7 (2)
0x00e80| 94 5f | ._ | identification: 37983 0xe86-0xe87.7 (2)
0x00e80| 00 | . | reserved: 0 0xe88-0xe88 (0.1)
0x00e80| 00 | . | dont_fragment: false 0xe88.1-0xe88.1 (0.1)
0x00e80| 00 | . | more_fragments: false 0xe88.2-0xe88.2 (0.1)
0x00e80| 00 00 | .. | fragment_offset: 0 0xe88.3-0xe89.7 (1.5)
0x00e80| 40 | @ | ttl: 64 0xe8a-0xe8a.7 (1)
0x00e80| 11 | . | protocol: "udp" (17) (User datagram protocol) 0xe8b-0xe8b.7 (1)
0x00e80| a9 92 | .. | header_checksum: 0xa992 (valid) 0xe8c-0xe8d.7 (2)
0x00e80| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0xe8e-0xe91.7 (4)
0x00e90|01 8b |.. |
0x00e90| ad c2 cc bd | .... | destination_ip: "173.194.204.189" (0xadc2ccbd) 0xe92-0xe95.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xe96-0xec9.7 (52)
0x00e90| cc c9 | .. | source_port: 52425 0xe96-0xe97.7 (2)
0x00e90| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0xe98-0xe99.7 (2)
0x00e90| 00 34 | .4 | length: 52 0xe9a-0xe9b.7 (2)
0x00e90| 8a 9f | .. | checksum: 0x8a9f 0xe9c-0xe9d.7 (2)
0x00e90| 0c f3| ..| payload: raw bits 0xe9e-0xec9.7 (44)
0x00ea0|95 8f 95 ab 35 c2 ea 87 7e 63 12 43 74 c4 ff cb|....5...~c.Ct...|
* |until 0xec9.7 (44) | |
0x00ec0| 00 00 | .. | padding: raw bits 0xeca-0xecb.7 (2)
| | | options[0:0]: 0xecc-NA (0)
0x00ec0| 78 00 00 00| x...| footer_length: 120 0xecc-0xecf.7 (4)
| | | [28]{}: block 0xed0-0xf87.7 (184)
0x00ed0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xed0-0xed3.7 (4)
0x00ed0| b8 00 00 00 | .... | length: 184 0xed4-0xed7.7 (4)
0x00ed0| 00 00 00 00 | .... | interface_id: 0 0xed8-0xedb.7 (4)
0x00ed0| 72 1d 05 00| r...| timestamp_high: 335218 0xedc-0xedf.7 (4)
0x00ee0|bf 8e 73 c9 |..s. | timestamp_low: 3379793599 0xee0-0xee3.7 (4)
0x00ee0| 97 00 00 00 | .... | capture_packet_length: 151 0xee4-0xee7.7 (4)
0x00ee0| 97 00 00 00 | .... | original_packet_length: 151 0xee8-0xeeb.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xeec-0xf82.7 (151)
0x00ee0| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xeec-0xef1.7 (6)
0x00ef0|7d 93 |}. |
0x00ef0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xef2-0xef7.7 (6)
0x00ef0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xef8-0xef9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xefa-0xf82.7 (137)
0x00ef0| 45 | E | version: 4 0xefa-0xefa.3 (0.4)
0x00ef0| 45 | E | ihl: 5 0xefa.4-0xefa.7 (0.4)
0x00ef0| 00 | . | dscp: 0 0xefb-0xefb.5 (0.6)
0x00ef0| 00 | . | ecn: 0 0xefb.6-0xefb.7 (0.2)
0x00ef0| 00 89 | .. | total_length: 137 0xefc-0xefd.7 (2)
0x00ef0| 00 00| ..| identification: 0 0xefe-0xeff.7 (2)
0x00f00|40 |@ | reserved: 0 0xf00-0xf00 (0.1)
0x00f00|40 |@ | dont_fragment: true 0xf00.1-0xf00.1 (0.1)
0x00f00|40 |@ | more_fragments: false 0xf00.2-0xf00.2 (0.1)
0x00f00|40 00 |@. | fragment_offset: 0 0xf00.3-0xf01.7 (1.5)
0x00f00| 40 | @ | ttl: 64 0xf02-0xf02.7 (1)
0x00f00| 11 | . | protocol: "udp" (17) (User datagram protocol) 0xf03-0xf03.7 (1)
0x00f00| b6 87 | .. | header_checksum: 0xb687 (valid) 0xf04-0xf05.7 (2)
0x00f00| c0 a8 01 01 | .... | source_ip: "192.168.1.1" (0xc0a80101) 0xf06-0xf09.7 (4)
0x00f00| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0xf0a-0xf0d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xf0e-0xf82.7 (117)
0x00f00| 00 35| .5| source_port: "domain" (53) (Domain Name Server) 0xf0e-0xf0f.7 (2)
0x00f10|c5 17 |.. | destination_port: 50455 0xf10-0xf11.7 (2)
0x00f10| 00 75 | .u | length: 117 0xf12-0xf13.7 (2)
0x00f10| ef 63 | .c | checksum: 0xef63 0xf14-0xf15.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0xf16-0xf82.7 (109)
| | | header{}: 0xf16-0xf19.7 (4)
0x00f10| 6f ad | o. | id: 28589 0xf16-0xf17.7 (2)
0x00f10| 81 | . | qr: "response" (1) 0xf18-0xf18 (0.1)
0x00f10| 81 | . | opcode: "query" (0) 0xf18.1-0xf18.4 (0.4)
0x00f10| 81 | . | authoritative_answer: false 0xf18.5-0xf18.5 (0.1)
0x00f10| 81 | . | truncation: false 0xf18.6-0xf18.6 (0.1)
0x00f10| 81 | . | recursion_desired: true 0xf18.7-0xf18.7 (0.1)
0x00f10| 80 | . | recursion_available: true 0xf19-0xf19 (0.1)
0x00f10| 80 | . | z: 0 0xf19.1-0xf19.3 (0.3)
0x00f10| 80 | . | rcode: "no_error" (0) (No error) 0xf19.4-0xf19.7 (0.4)
0x00f10| 00 01 | .. | qd_count: 1 0xf1a-0xf1b.7 (2)
0x00f10| 00 02 | .. | an_count: 2 0xf1c-0xf1d.7 (2)
0x00f10| 00 00| ..| ns_count: 0 0xf1e-0xf1f.7 (2)
0x00f20|00 00 |.. | ar_count: 0 0xf20-0xf21.7 (2)
| | | questions[0:1]: 0xf22-0xf41.7 (32)
| | | [0]{}: question 0xf22-0xf41.7 (32)
| | | name{}: 0xf22-0xf3d.7 (28)
| | | labels[0:7]: 0xf22-0xf3d.7 (28)
| | | [0]{}: label 0xf22-0xf25.7 (4)
0x00f20| 03 | . | length: 3 0xf22-0xf22.7 (1)
0x00f20| 32 35 33 | 253 | value: "253" 0xf23-0xf25.7 (3)
| | | [1]{}: label 0xf26-0xf28.7 (3)
0x00f20| 02 | . | length: 2 0xf26-0xf26.7 (1)
0x00f20| 31 32 | 12 | value: "12" 0xf27-0xf28.7 (2)
| | | [2]{}: label 0xf29-0xf2c.7 (4)
0x00f20| 03 | . | length: 3 0xf29-0xf29.7 (1)
0x00f20| 32 35 33 | 253 | value: "253" 0xf2a-0xf2c.7 (3)
| | | [3]{}: label 0xf2d-0xf2f.7 (3)
0x00f20| 02 | . | length: 2 0xf2d-0xf2d.7 (1)
0x00f20| 31 37| 17| value: "17" 0xf2e-0xf2f.7 (2)
| | | [4]{}: label 0xf30-0xf37.7 (8)
0x00f30|07 |. | length: 7 0xf30-0xf30.7 (1)
0x00f30| 69 6e 2d 61 64 64 72 | in-addr | value: "in-addr" 0xf31-0xf37.7 (7)
| | | [5]{}: label 0xf38-0xf3c.7 (5)
0x00f30| 04 | . | length: 4 0xf38-0xf38.7 (1)
0x00f30| 61 72 70 61 | arpa | value: "arpa" 0xf39-0xf3c.7 (4)
| | | [6]{}: label 0xf3d-0xf3d.7 (1)
0x00f30| 00 | . | length: 0 0xf3d-0xf3d.7 (1)
| | | value: "253.12.253.17.in-addr.arpa" 0xf3e-NA (0)
0x00f30| 00 0c| ..| type: "ptr" (12) 0xf3e-0xf3f.7 (2)
0x00f40|00 01 |.. | class: "in" (1) (Internet) 0xf40-0xf41.7 (2)
| | | answers[0:2]: 0xf22-0xf82.7 (97)
| | | [0]{}: answer 0xf22-0xf69.7 (72)
| | | name{}: 0xf22-0xf43.7 (34)
| | | labels[0:7]: 0xf22-0xf43.7 (34)
| | | [0]{}: label 0xf22-0xf43.7 (34)
0x00f20| 03 | . | length: 3 0xf22-0xf22.7 (1)
0x00f20| 32 35 33 | 253 | value: "253" 0xf23-0xf25.7 (3)
0x00f40| c0 | . | is_pointer: 3 0xf42-0xf42.1 (0.2)
0x00f40| c0 0c | .. | pointer: 12 0xf42.2-0xf43.7 (1.6)
| | | [1]{}: label 0xf26-0xf28.7 (3)
0x00f20| 02 | . | length: 2 0xf26-0xf26.7 (1)
0x00f20| 31 32 | 12 | value: "12" 0xf27-0xf28.7 (2)
| | | [2]{}: label 0xf29-0xf2c.7 (4)
0x00f20| 03 | . | length: 3 0xf29-0xf29.7 (1)
0x00f20| 32 35 33 | 253 | value: "253" 0xf2a-0xf2c.7 (3)
| | | [3]{}: label 0xf2d-0xf2f.7 (3)
0x00f20| 02 | . | length: 2 0xf2d-0xf2d.7 (1)
0x00f20| 31 37| 17| value: "17" 0xf2e-0xf2f.7 (2)
| | | [4]{}: label 0xf30-0xf37.7 (8)
0x00f30|07 |. | length: 7 0xf30-0xf30.7 (1)
0x00f30| 69 6e 2d 61 64 64 72 | in-addr | value: "in-addr" 0xf31-0xf37.7 (7)
| | | [5]{}: label 0xf38-0xf3c.7 (5)
0x00f30| 04 | . | length: 4 0xf38-0xf38.7 (1)
0x00f30| 61 72 70 61 | arpa | value: "arpa" 0xf39-0xf3c.7 (4)
| | | [6]{}: label 0xf3d-0xf3d.7 (1)
0x00f30| 00 | . | length: 0 0xf3d-0xf3d.7 (1)
| | | value: "253.12.253.17.in-addr.arpa" 0xf3e-NA (0)
0x00f40| 00 0c | .. | type: "ptr" (12) 0xf44-0xf45.7 (2)
0x00f40| 00 01 | .. | class: "in" (1) (Internet) 0xf46-0xf47.7 (2)
0x00f40| 00 00 0a 8c | .... | ttl: 2700 0xf48-0xf4b.7 (4)
0x00f40| 00 1c | .. | rdlength: 28 0xf4c-0xf4d.7 (2)
| | | ptr{}: 0xf4e-0xf69.7 (28)
| | | labels[0:4]: 0xf4e-0xf69.7 (28)
| | | [0]{}: label 0xf4e-0xf5c.7 (15)
0x00f40| 0e | . | length: 14 0xf4e-0xf4e.7 (1)
0x00f40| 75| u| value: "usmia1-ntp-002" 0xf4f-0xf5c.7 (14)
0x00f50|73 6d 69 61 31 2d 6e 74 70 2d 30 30 32 |smia1-ntp-002 |
| | | [1]{}: label 0xf5d-0xf64.7 (8)
0x00f50| 07 | . | length: 7 0xf5d-0xf5d.7 (1)
0x00f50| 61 61| aa| value: "aaplimg" 0xf5e-0xf64.7 (7)
0x00f60|70 6c 69 6d 67 |plimg |
| | | [2]{}: label 0xf65-0xf68.7 (4)
0x00f60| 03 | . | length: 3 0xf65-0xf65.7 (1)
0x00f60| 63 6f 6d | com | value: "com" 0xf66-0xf68.7 (3)
| | | [3]{}: label 0xf69-0xf69.7 (1)
0x00f60| 00 | . | length: 0 0xf69-0xf69.7 (1)
| | | value: "usmia1-ntp-002.aaplimg.com" 0xf6a-NA (0)
| | | [1]{}: answer 0xf22-0xf82.7 (97)
| | | name{}: 0xf22-0xf6b.7 (74)
| | | labels[0:7]: 0xf22-0xf6b.7 (74)
| | | [0]{}: label 0xf22-0xf6b.7 (74)
0x00f20| 03 | . | length: 3 0xf22-0xf22.7 (1)
0x00f20| 32 35 33 | 253 | value: "253" 0xf23-0xf25.7 (3)
0x00f60| c0 | . | is_pointer: 3 0xf6a-0xf6a.1 (0.2)
0x00f60| c0 0c | .. | pointer: 12 0xf6a.2-0xf6b.7 (1.6)
| | | [1]{}: label 0xf26-0xf28.7 (3)
0x00f20| 02 | . | length: 2 0xf26-0xf26.7 (1)
0x00f20| 31 32 | 12 | value: "12" 0xf27-0xf28.7 (2)
| | | [2]{}: label 0xf29-0xf2c.7 (4)
0x00f20| 03 | . | length: 3 0xf29-0xf29.7 (1)
0x00f20| 32 35 33 | 253 | value: "253" 0xf2a-0xf2c.7 (3)
| | | [3]{}: label 0xf2d-0xf2f.7 (3)
0x00f20| 02 | . | length: 2 0xf2d-0xf2d.7 (1)
0x00f20| 31 37| 17| value: "17" 0xf2e-0xf2f.7 (2)
| | | [4]{}: label 0xf30-0xf37.7 (8)
0x00f30|07 |. | length: 7 0xf30-0xf30.7 (1)
0x00f30| 69 6e 2d 61 64 64 72 | in-addr | value: "in-addr" 0xf31-0xf37.7 (7)
| | | [5]{}: label 0xf38-0xf3c.7 (5)
0x00f30| 04 | . | length: 4 0xf38-0xf38.7 (1)
0x00f30| 61 72 70 61 | arpa | value: "arpa" 0xf39-0xf3c.7 (4)
| | | [6]{}: label 0xf3d-0xf3d.7 (1)
0x00f30| 00 | . | length: 0 0xf3d-0xf3d.7 (1)
| | | value: "253.12.253.17.in-addr.arpa" 0xf3e-NA (0)
| | | ptr{}: 0xf65-0xf82.7 (30)
| | | labels[0:4]: 0xf65-0xf82.7 (30)
| | | [0]{}: label 0xf76-0xf7a.7 (5)
0x00f70| 04 | . | length: 4 0xf76-0xf76.7 (1)
0x00f70| 74 69 6d 65 | time | value: "time" 0xf77-0xf7a.7 (4)
| | | [1]{}: label 0xf7b-0xf80.7 (6)
0x00f70| 05 | . | length: 5 0xf7b-0xf7b.7 (1)
0x00f70| 61 70 70 6c| appl| value: "apple" 0xf7c-0xf80.7 (5)
0x00f80|65 |e |
| | | [2]{}: label 0xf65-0xf82.7 (30)
0x00f60| 03 | . | length: 3 0xf65-0xf65.7 (1)
0x00f60| 63 6f 6d | com | value: "com" 0xf66-0xf68.7 (3)
0x00f80| c0 | . | is_pointer: 3 0xf81-0xf81.1 (0.2)
0x00f80| c0 4f | .O | pointer: 79 0xf81.2-0xf82.7 (1.6)
| | | [3]{}: label 0xf69-0xf69.7 (1)
0x00f60| 00 | . | length: 0 0xf69-0xf69.7 (1)
| | | value: "time.apple.com" 0xf6a-NA (0)
0x00f60| 00 0c | .. | type: "ptr" (12) 0xf6c-0xf6d.7 (2)
0x00f60| 00 01| ..| class: "in" (1) (Internet) 0xf6e-0xf6f.7 (2)
0x00f70|00 00 0a 8c |.... | ttl: 2700 0xf70-0xf73.7 (4)
0x00f70| 00 0d | .. | rdlength: 13 0xf74-0xf75.7 (2)
| | | nameservers[0:0]: 0xf83-NA (0)
| | | additionals[0:0]: 0xf83-NA (0)
0x00f80| 00 | . | padding: raw bits 0xf83-0xf83.7 (1)
| | | options[0:0]: 0xf84-NA (0)
0x00f80| b8 00 00 00 | .... | footer_length: 184 0xf84-0xf87.7 (4)
| | | [29]{}: block 0xf88-0xffb.7 (116)
0x00f80| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xf88-0xf8b.7 (4)
0x00f80| 74 00 00 00| t...| length: 116 0xf8c-0xf8f.7 (4)
0x00f90|00 00 00 00 |.... | interface_id: 0 0xf90-0xf93.7 (4)
0x00f90| 72 1d 05 00 | r... | timestamp_high: 335218 0xf94-0xf97.7 (4)
0x00f90| 9c a7 73 c9 | ..s. | timestamp_low: 3379799964 0xf98-0xf9b.7 (4)
0x00f90| 54 00 00 00| T...| capture_packet_length: 84 0xf9c-0xf9f.7 (4)
0x00fa0|54 00 00 00 |T... | original_packet_length: 84 0xfa0-0xfa3.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0xfa4-0xff7.7 (84)
0x00fa0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0xfa4-0xfa9.7 (6)
0x00fa0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0xfaa-0xfaf.7 (6)
0x00fb0|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xfb0-0xfb1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0xfb2-0xff7.7 (70)
0x00fb0| 45 | E | version: 4 0xfb2-0xfb2.3 (0.4)
0x00fb0| 45 | E | ihl: 5 0xfb2.4-0xfb2.7 (0.4)
0x00fb0| 00 | . | dscp: 0 0xfb3-0xfb3.5 (0.6)
0x00fb0| 00 | . | ecn: 0 0xfb3.6-0xfb3.7 (0.2)
0x00fb0| 00 46 | .F | total_length: 70 0xfb4-0xfb5.7 (2)
0x00fb0| 5e 74 | ^t | identification: 24180 0xfb6-0xfb7.7 (2)
0x00fb0| 00 | . | reserved: 0 0xfb8-0xfb8 (0.1)
0x00fb0| 00 | . | dont_fragment: false 0xfb8.1-0xfb8.1 (0.1)
0x00fb0| 00 | . | more_fragments: false 0xfb8.2-0xfb8.2 (0.1)
0x00fb0| 00 00 | .. | fragment_offset: 0 0xfb8.3-0xfb9.7 (1.5)
0x00fb0| ff | . | ttl: 255 0xfba-0xfba.7 (1)
0x00fb0| 11 | . | protocol: "udp" (17) (User datagram protocol) 0xfbb-0xfbb.7 (1)
0x00fb0| d9 55 | .U | header_checksum: 0xd955 (valid) 0xfbc-0xfbd.7 (2)
0x00fb0| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0xfbe-0xfc1.7 (4)
0x00fc0|01 8b |.. |
0x00fc0| c0 a8 01 01 | .... | destination_ip: "192.168.1.1" (0xc0a80101) 0xfc2-0xfc5.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0xfc6-0xff7.7 (50)
0x00fc0| f0 c6 | .. | source_port: 61638 0xfc6-0xfc7.7 (2)
0x00fc0| 00 35 | .5 | destination_port: "domain" (53) (Domain Name Server) 0xfc8-0xfc9.7 (2)
0x00fc0| 00 32 | .2 | length: 50 0xfca-0xfcb.7 (2)
0x00fc0| da a2 | .. | checksum: 0xdaa2 0xfcc-0xfcd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0xfce-0xff7.7 (42)
| | | header{}: 0xfce-0xfd1.7 (4)
0x00fc0| 23 93| #.| id: 9107 0xfce-0xfcf.7 (2)
0x00fd0|01 |. | qr: "query" (0) 0xfd0-0xfd0 (0.1)
0x00fd0|01 |. | opcode: "query" (0) 0xfd0.1-0xfd0.4 (0.4)
0x00fd0|01 |. | authoritative_answer: false 0xfd0.5-0xfd0.5 (0.1)
0x00fd0|01 |. | truncation: false 0xfd0.6-0xfd0.6 (0.1)
0x00fd0|01 |. | recursion_desired: true 0xfd0.7-0xfd0.7 (0.1)
0x00fd0| 00 | . | recursion_available: false 0xfd1-0xfd1 (0.1)
0x00fd0| 00 | . | z: 0 0xfd1.1-0xfd1.3 (0.3)
0x00fd0| 00 | . | rcode: "no_error" (0) (No error) 0xfd1.4-0xfd1.7 (0.4)
0x00fd0| 00 01 | .. | qd_count: 1 0xfd2-0xfd3.7 (2)
0x00fd0| 00 00 | .. | an_count: 0 0xfd4-0xfd5.7 (2)
0x00fd0| 00 00 | .. | ns_count: 0 0xfd6-0xfd7.7 (2)
0x00fd0| 00 00 | .. | ar_count: 0 0xfd8-0xfd9.7 (2)
| | | questions[0:1]: 0xfda-0xff7.7 (30)
| | | [0]{}: question 0xfda-0xff7.7 (30)
| | | name{}: 0xfda-0xff3.7 (26)
| | | labels[0:7]: 0xfda-0xff3.7 (26)
| | | [0]{}: label 0xfda-0xfdb.7 (2)
0x00fd0| 01 | . | length: 1 0xfda-0xfda.7 (1)
0x00fd0| 31 | 1 | value: "1" 0xfdb-0xfdb.7 (1)
| | | [1]{}: label 0xfdc-0xfdd.7 (2)
0x00fd0| 01 | . | length: 1 0xfdc-0xfdc.7 (1)
0x00fd0| 31 | 1 | value: "1" 0xfdd-0xfdd.7 (1)
| | | [2]{}: label 0xfde-0xfe1.7 (4)
0x00fd0| 03 | . | length: 3 0xfde-0xfde.7 (1)
0x00fd0| 31| 1| value: "168" 0xfdf-0xfe1.7 (3)
0x00fe0|36 38 |68 |
| | | [3]{}: label 0xfe2-0xfe5.7 (4)
0x00fe0| 03 | . | length: 3 0xfe2-0xfe2.7 (1)
0x00fe0| 31 39 32 | 192 | value: "192" 0xfe3-0xfe5.7 (3)
| | | [4]{}: label 0xfe6-0xfed.7 (8)
0x00fe0| 07 | . | length: 7 0xfe6-0xfe6.7 (1)
0x00fe0| 69 6e 2d 61 64 64 72 | in-addr | value: "in-addr" 0xfe7-0xfed.7 (7)
| | | [5]{}: label 0xfee-0xff2.7 (5)
0x00fe0| 04 | . | length: 4 0xfee-0xfee.7 (1)
0x00fe0| 61| a| value: "arpa" 0xfef-0xff2.7 (4)
0x00ff0|72 70 61 |rpa |
| | | [6]{}: label 0xff3-0xff3.7 (1)
0x00ff0| 00 | . | length: 0 0xff3-0xff3.7 (1)
| | | value: "1.1.168.192.in-addr.arpa" 0xff4-NA (0)
0x00ff0| 00 0c | .. | type: "ptr" (12) 0xff4-0xff5.7 (2)
0x00ff0| 00 01 | .. | class: "in" (1) (Internet) 0xff6-0xff7.7 (2)
| | | answers[0:0]: 0xff8-NA (0)
| | | nameservers[0:0]: 0xff8-NA (0)
| | | additionals[0:0]: 0xff8-NA (0)
| | | padding: raw bits 0xff8-NA (0)
| | | options[0:0]: 0xff8-NA (0)
0x00ff0| 74 00 00 00 | t... | footer_length: 116 0xff8-0xffb.7 (4)
| | | [30]{}: block 0xffc-0x1087.7 (140)
0x00ff0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xffc-0xfff.7 (4)
0x01000|8c 00 00 00 |.... | length: 140 0x1000-0x1003.7 (4)
0x01000| 00 00 00 00 | .... | interface_id: 0 0x1004-0x1007.7 (4)
0x01000| 72 1d 05 00 | r... | timestamp_high: 335218 0x1008-0x100b.7 (4)
0x01000| af ac 73 c9| ..s.| timestamp_low: 3379801263 0x100c-0x100f.7 (4)
0x01010|69 00 00 00 |i... | capture_packet_length: 105 0x1010-0x1013.7 (4)
0x01010| 69 00 00 00 | i... | original_packet_length: 105 0x1014-0x1017.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x1018-0x1080.7 (105)
0x01010| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1018-0x101d.7 (6)
0x01010| 94 10| ..| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x101e-0x1023.7 (6)
0x01020|3e 05 36 d3 |>.6. |
0x01020| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1024-0x1025.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1026-0x1080.7 (91)
0x01020| 45 | E | version: 4 0x1026-0x1026.3 (0.4)
0x01020| 45 | E | ihl: 5 0x1026.4-0x1026.7 (0.4)
0x01020| 00 | . | dscp: 0 0x1027-0x1027.5 (0.6)
0x01020| 00 | . | ecn: 0 0x1027.6-0x1027.7 (0.2)
0x01020| 00 5b | .[ | total_length: 91 0x1028-0x1029.7 (2)
0x01020| 00 00 | .. | identification: 0 0x102a-0x102b.7 (2)
0x01020| 40 | @ | reserved: 0 0x102c-0x102c (0.1)
0x01020| 40 | @ | dont_fragment: true 0x102c.1-0x102c.1 (0.1)
0x01020| 40 | @ | more_fragments: false 0x102c.2-0x102c.2 (0.1)
0x01020| 40 00 | @. | fragment_offset: 0 0x102c.3-0x102d.7 (1.5)
0x01020| 40 | @ | ttl: 64 0x102e-0x102e.7 (1)
0x01020| 11| .| protocol: "udp" (17) (User datagram protocol) 0x102f-0x102f.7 (1)
0x01030|b6 b5 |.. | header_checksum: 0xb6b5 (valid) 0x1030-0x1031.7 (2)
0x01030| c0 a8 01 01 | .... | source_ip: "192.168.1.1" (0xc0a80101) 0x1032-0x1035.7 (4)
0x01030| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x1036-0x1039.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x103a-0x1080.7 (71)
0x01030| 00 35 | .5 | source_port: "domain" (53) (Domain Name Server) 0x103a-0x103b.7 (2)
0x01030| f0 c6 | .. | destination_port: 61638 0x103c-0x103d.7 (2)
0x01030| 00 47| .G| length: 71 0x103e-0x103f.7 (2)
0x01040|55 32 |U2 | checksum: 0x5532 0x1040-0x1041.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0x1042-0x1080.7 (63)
| | | header{}: 0x1042-0x1045.7 (4)
0x01040| 23 93 | #. | id: 9107 0x1042-0x1043.7 (2)
0x01040| 85 | . | qr: "response" (1) 0x1044-0x1044 (0.1)
0x01040| 85 | . | opcode: "query" (0) 0x1044.1-0x1044.4 (0.4)
0x01040| 85 | . | authoritative_answer: true 0x1044.5-0x1044.5 (0.1)
0x01040| 85 | . | truncation: false 0x1044.6-0x1044.6 (0.1)
0x01040| 85 | . | recursion_desired: true 0x1044.7-0x1044.7 (0.1)
0x01040| 80 | . | recursion_available: true 0x1045-0x1045 (0.1)
0x01040| 80 | . | z: 0 0x1045.1-0x1045.3 (0.3)
0x01040| 80 | . | rcode: "no_error" (0) (No error) 0x1045.4-0x1045.7 (0.4)
0x01040| 00 01 | .. | qd_count: 1 0x1046-0x1047.7 (2)
0x01040| 00 01 | .. | an_count: 1 0x1048-0x1049.7 (2)
0x01040| 00 00 | .. | ns_count: 0 0x104a-0x104b.7 (2)
0x01040| 00 00 | .. | ar_count: 0 0x104c-0x104d.7 (2)
| | | questions[0:1]: 0x104e-0x106b.7 (30)
| | | [0]{}: question 0x104e-0x106b.7 (30)
| | | name{}: 0x104e-0x1067.7 (26)
| | | labels[0:7]: 0x104e-0x1067.7 (26)
| | | [0]{}: label 0x104e-0x104f.7 (2)
0x01040| 01 | . | length: 1 0x104e-0x104e.7 (1)
0x01040| 31| 1| value: "1" 0x104f-0x104f.7 (1)
| | | [1]{}: label 0x1050-0x1051.7 (2)
0x01050|01 |. | length: 1 0x1050-0x1050.7 (1)
0x01050| 31 | 1 | value: "1" 0x1051-0x1051.7 (1)
| | | [2]{}: label 0x1052-0x1055.7 (4)
0x01050| 03 | . | length: 3 0x1052-0x1052.7 (1)
0x01050| 31 36 38 | 168 | value: "168" 0x1053-0x1055.7 (3)
| | | [3]{}: label 0x1056-0x1059.7 (4)
0x01050| 03 | . | length: 3 0x1056-0x1056.7 (1)
0x01050| 31 39 32 | 192 | value: "192" 0x1057-0x1059.7 (3)
| | | [4]{}: label 0x105a-0x1061.7 (8)
0x01050| 07 | . | length: 7 0x105a-0x105a.7 (1)
0x01050| 69 6e 2d 61 64| in-ad| value: "in-addr" 0x105b-0x1061.7 (7)
0x01060|64 72 |dr |
| | | [5]{}: label 0x1062-0x1066.7 (5)
0x01060| 04 | . | length: 4 0x1062-0x1062.7 (1)
0x01060| 61 72 70 61 | arpa | value: "arpa" 0x1063-0x1066.7 (4)
| | | [6]{}: label 0x1067-0x1067.7 (1)
0x01060| 00 | . | length: 0 0x1067-0x1067.7 (1)
| | | value: "1.1.168.192.in-addr.arpa" 0x1068-NA (0)
0x01060| 00 0c | .. | type: "ptr" (12) 0x1068-0x1069.7 (2)
0x01060| 00 01 | .. | class: "in" (1) (Internet) 0x106a-0x106b.7 (2)
| | | answers[0:1]: 0x104e-0x1080.7 (51)
| | | [0]{}: answer 0x104e-0x1080.7 (51)
| | | name{}: 0x104e-0x106d.7 (32)
| | | labels[0:7]: 0x104e-0x106d.7 (32)
| | | [0]{}: label 0x104e-0x106d.7 (32)
0x01040| 01 | . | length: 1 0x104e-0x104e.7 (1)
0x01040| 31| 1| value: "1" 0x104f-0x104f.7 (1)
0x01060| c0 | . | is_pointer: 3 0x106c-0x106c.1 (0.2)
0x01060| c0 0c | .. | pointer: 12 0x106c.2-0x106d.7 (1.6)
| | | [1]{}: label 0x1050-0x1051.7 (2)
0x01050|01 |. | length: 1 0x1050-0x1050.7 (1)
0x01050| 31 | 1 | value: "1" 0x1051-0x1051.7 (1)
| | | [2]{}: label 0x1052-0x1055.7 (4)
0x01050| 03 | . | length: 3 0x1052-0x1052.7 (1)
0x01050| 31 36 38 | 168 | value: "168" 0x1053-0x1055.7 (3)
| | | [3]{}: label 0x1056-0x1059.7 (4)
0x01050| 03 | . | length: 3 0x1056-0x1056.7 (1)
0x01050| 31 39 32 | 192 | value: "192" 0x1057-0x1059.7 (3)
| | | [4]{}: label 0x105a-0x1061.7 (8)
0x01050| 07 | . | length: 7 0x105a-0x105a.7 (1)
0x01050| 69 6e 2d 61 64| in-ad| value: "in-addr" 0x105b-0x1061.7 (7)
0x01060|64 72 |dr |
| | | [5]{}: label 0x1062-0x1066.7 (5)
0x01060| 04 | . | length: 4 0x1062-0x1062.7 (1)
0x01060| 61 72 70 61 | arpa | value: "arpa" 0x1063-0x1066.7 (4)
| | | [6]{}: label 0x1067-0x1067.7 (1)
0x01060| 00 | . | length: 0 0x1067-0x1067.7 (1)
| | | value: "1.1.168.192.in-addr.arpa" 0x1068-NA (0)
0x01060| 00 0c| ..| type: "ptr" (12) 0x106e-0x106f.7 (2)
0x01070|00 01 |.. | class: "in" (1) (Internet) 0x1070-0x1071.7 (2)
0x01070| 00 00 00 00 | .... | ttl: 0 0x1072-0x1075.7 (4)
0x01070| 00 09 | .. | rdlength: 9 0x1076-0x1077.7 (2)
| | | ptr{}: 0x1078-0x1080.7 (9)
| | | labels[0:2]: 0x1078-0x1080.7 (9)
| | | [0]{}: label 0x1078-0x107f.7 (8)
0x01070| 07 | . | length: 7 0x1078-0x1078.7 (1)
0x01070| 6b 61 70 6c 61 6b 65| kaplake| value: "kaplake" 0x1079-0x107f.7 (7)
| | | [1]{}: label 0x1080-0x1080.7 (1)
0x01080|00 |. | length: 0 0x1080-0x1080.7 (1)
| | | value: "kaplake" 0x1081-NA (0)
| | | nameservers[0:0]: 0x1081-NA (0)
| | | additionals[0:0]: 0x1081-NA (0)
0x01080| 00 00 00 | ... | padding: raw bits 0x1081-0x1083.7 (3)
| | | options[0:0]: 0x1084-NA (0)
0x01080| 8c 00 00 00 | .... | footer_length: 140 0x1084-0x1087.7 (4)
| | | [31]{}: block 0x1088-0x10ff.7 (120)
0x01080| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1088-0x108b.7 (4)
0x01080| 78 00 00 00| x...| length: 120 0x108c-0x108f.7 (4)
0x01090|00 00 00 00 |.... | interface_id: 0 0x1090-0x1093.7 (4)
0x01090| 72 1d 05 00 | r... | timestamp_high: 335218 0x1094-0x1097.7 (4)
0x01090| b4 c8 73 c9 | ..s. | timestamp_low: 3379808436 0x1098-0x109b.7 (4)
0x01090| 58 00 00 00| X...| capture_packet_length: 88 0x109c-0x109f.7 (4)
0x010a0|58 00 00 00 |X... | original_packet_length: 88 0x10a0-0x10a3.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x10a4-0x10fb.7 (88)
0x010a0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x10a4-0x10a9.7 (6)
0x010a0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x10aa-0x10af.7 (6)
0x010b0|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x10b0-0x10b1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x10b2-0x10fb.7 (74)
0x010b0| 45 | E | version: 4 0x10b2-0x10b2.3 (0.4)
0x010b0| 45 | E | ihl: 5 0x10b2.4-0x10b2.7 (0.4)
0x010b0| 00 | . | dscp: 0 0x10b3-0x10b3.5 (0.6)
0x010b0| 00 | . | ecn: 0 0x10b3.6-0x10b3.7 (0.2)
0x010b0| 00 4a | .J | total_length: 74 0x10b4-0x10b5.7 (2)
0x010b0| 82 d8 | .. | identification: 33496 0x10b6-0x10b7.7 (2)
0x010b0| 00 | . | reserved: 0 0x10b8-0x10b8 (0.1)
0x010b0| 00 | . | dont_fragment: false 0x10b8.1-0x10b8.1 (0.1)
0x010b0| 00 | . | more_fragments: false 0x10b8.2-0x10b8.2 (0.1)
0x010b0| 00 00 | .. | fragment_offset: 0 0x10b8.3-0x10b9.7 (1.5)
0x010b0| ff | . | ttl: 255 0x10ba-0x10ba.7 (1)
0x010b0| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x10bb-0x10bb.7 (1)
0x010b0| b4 ed | .. | header_checksum: 0xb4ed (valid) 0x10bc-0x10bd.7 (2)
0x010b0| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0x10be-0x10c1.7 (4)
0x010c0|01 8b |.. |
0x010c0| c0 a8 01 01 | .... | destination_ip: "192.168.1.1" (0xc0a80101) 0x10c2-0x10c5.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x10c6-0x10fb.7 (54)
0x010c0| cc 06 | .. | source_port: 52230 0x10c6-0x10c7.7 (2)
0x010c0| 00 35 | .5 | destination_port: "domain" (53) (Domain Name Server) 0x10c8-0x10c9.7 (2)
0x010c0| 00 36 | .6 | length: 54 0x10ca-0x10cb.7 (2)
0x010c0| c9 4f | .O | checksum: 0xc94f 0x10cc-0x10cd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0x10ce-0x10fb.7 (46)
| | | header{}: 0x10ce-0x10d1.7 (4)
0x010c0| ec 32| .2| id: 60466 0x10ce-0x10cf.7 (2)
0x010d0|01 |. | qr: "query" (0) 0x10d0-0x10d0 (0.1)
0x010d0|01 |. | opcode: "query" (0) 0x10d0.1-0x10d0.4 (0.4)
0x010d0|01 |. | authoritative_answer: false 0x10d0.5-0x10d0.5 (0.1)
0x010d0|01 |. | truncation: false 0x10d0.6-0x10d0.6 (0.1)
0x010d0|01 |. | recursion_desired: true 0x10d0.7-0x10d0.7 (0.1)
0x010d0| 00 | . | recursion_available: false 0x10d1-0x10d1 (0.1)
0x010d0| 00 | . | z: 0 0x10d1.1-0x10d1.3 (0.3)
0x010d0| 00 | . | rcode: "no_error" (0) (No error) 0x10d1.4-0x10d1.7 (0.4)
0x010d0| 00 01 | .. | qd_count: 1 0x10d2-0x10d3.7 (2)
0x010d0| 00 00 | .. | an_count: 0 0x10d4-0x10d5.7 (2)
0x010d0| 00 00 | .. | ns_count: 0 0x10d6-0x10d7.7 (2)
0x010d0| 00 00 | .. | ar_count: 0 0x10d8-0x10d9.7 (2)
| | | questions[0:1]: 0x10da-0x10fb.7 (34)
| | | [0]{}: question 0x10da-0x10fb.7 (34)
| | | name{}: 0x10da-0x10f7.7 (30)
| | | labels[0:7]: 0x10da-0x10f7.7 (30)
| | | [0]{}: label 0x10da-0x10dd.7 (4)
0x010d0| 03 | . | length: 3 0x10da-0x10da.7 (1)
0x010d0| 31 38 39 | 189 | value: "189" 0x10db-0x10dd.7 (3)
| | | [1]{}: label 0x10de-0x10e1.7 (4)
0x010d0| 03 | . | length: 3 0x10de-0x10de.7 (1)
0x010d0| 32| 2| value: "204" 0x10df-0x10e1.7 (3)
0x010e0|30 34 |04 |
| | | [2]{}: label 0x10e2-0x10e5.7 (4)
0x010e0| 03 | . | length: 3 0x10e2-0x10e2.7 (1)
0x010e0| 31 39 34 | 194 | value: "194" 0x10e3-0x10e5.7 (3)
| | | [3]{}: label 0x10e6-0x10e9.7 (4)
0x010e0| 03 | . | length: 3 0x10e6-0x10e6.7 (1)
0x010e0| 31 37 33 | 173 | value: "173" 0x10e7-0x10e9.7 (3)
| | | [4]{}: label 0x10ea-0x10f1.7 (8)
0x010e0| 07 | . | length: 7 0x10ea-0x10ea.7 (1)
0x010e0| 69 6e 2d 61 64| in-ad| value: "in-addr" 0x10eb-0x10f1.7 (7)
0x010f0|64 72 |dr |
| | | [5]{}: label 0x10f2-0x10f6.7 (5)
0x010f0| 04 | . | length: 4 0x10f2-0x10f2.7 (1)
0x010f0| 61 72 70 61 | arpa | value: "arpa" 0x10f3-0x10f6.7 (4)
| | | [6]{}: label 0x10f7-0x10f7.7 (1)
0x010f0| 00 | . | length: 0 0x10f7-0x10f7.7 (1)
| | | value: "189.204.194.173.in-addr.arpa" 0x10f8-NA (0)
0x010f0| 00 0c | .. | type: "ptr" (12) 0x10f8-0x10f9.7 (2)
0x010f0| 00 01 | .. | class: "in" (1) (Internet) 0x10fa-0x10fb.7 (2)
| | | answers[0:0]: 0x10fc-NA (0)
| | | nameservers[0:0]: 0x10fc-NA (0)
| | | additionals[0:0]: 0x10fc-NA (0)
| | | padding: raw bits 0x10fc-NA (0)
| | | options[0:0]: 0x10fc-NA (0)
0x010f0| 78 00 00 00| x...| footer_length: 120 0x10fc-0x10ff.7 (4)
| | | [32]{}: block 0x1100-0x119b.7 (156)
0x01100|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1100-0x1103.7 (4)
0x01100| 9c 00 00 00 | .... | length: 156 0x1104-0x1107.7 (4)
0x01100| 00 00 00 00 | .... | interface_id: 0 0x1108-0x110b.7 (4)
0x01100| 72 1d 05 00| r...| timestamp_high: 335218 0x110c-0x110f.7 (4)
0x01110|3e 01 74 c9 |>.t. | timestamp_low: 3379822910 0x1110-0x1113.7 (4)
0x01110| 7a 00 00 00 | z... | capture_packet_length: 122 0x1114-0x1117.7 (4)
0x01110| 7a 00 00 00 | z... | original_packet_length: 122 0x1118-0x111b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x111c-0x1195.7 (122)
0x01110| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x111c-0x1121.7 (6)
0x01120|7d 93 |}. |
0x01120| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x1122-0x1127.7 (6)
0x01120| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1128-0x1129.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x112a-0x1195.7 (108)
0x01120| 45 | E | version: 4 0x112a-0x112a.3 (0.4)
0x01120| 45 | E | ihl: 5 0x112a.4-0x112a.7 (0.4)
0x01120| 00 | . | dscp: 0 0x112b-0x112b.5 (0.6)
0x01120| 00 | . | ecn: 0 0x112b.6-0x112b.7 (0.2)
0x01120| 00 6c | .l | total_length: 108 0x112c-0x112d.7 (2)
0x01120| 00 00| ..| identification: 0 0x112e-0x112f.7 (2)
0x01130|40 |@ | reserved: 0 0x1130-0x1130 (0.1)
0x01130|40 |@ | dont_fragment: true 0x1130.1-0x1130.1 (0.1)
0x01130|40 |@ | more_fragments: false 0x1130.2-0x1130.2 (0.1)
0x01130|40 00 |@. | fragment_offset: 0 0x1130.3-0x1131.7 (1.5)
0x01130| 40 | @ | ttl: 64 0x1132-0x1132.7 (1)
0x01130| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x1133-0x1133.7 (1)
0x01130| b6 a4 | .. | header_checksum: 0xb6a4 (valid) 0x1134-0x1135.7 (2)
0x01130| c0 a8 01 01 | .... | source_ip: "192.168.1.1" (0xc0a80101) 0x1136-0x1139.7 (4)
0x01130| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x113a-0x113d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x113e-0x1195.7 (88)
0x01130| 00 35| .5| source_port: "domain" (53) (Domain Name Server) 0x113e-0x113f.7 (2)
0x01140|cc 06 |.. | destination_port: 52230 0x1140-0x1141.7 (2)
0x01140| 00 58 | .X | length: 88 0x1142-0x1143.7 (2)
0x01140| 94 07 | .. | checksum: 0x9407 0x1144-0x1145.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0x1146-0x1195.7 (80)
| | | header{}: 0x1146-0x1149.7 (4)
0x01140| ec 32 | .2 | id: 60466 0x1146-0x1147.7 (2)
0x01140| 81 | . | qr: "response" (1) 0x1148-0x1148 (0.1)
0x01140| 81 | . | opcode: "query" (0) 0x1148.1-0x1148.4 (0.4)
0x01140| 81 | . | authoritative_answer: false 0x1148.5-0x1148.5 (0.1)
0x01140| 81 | . | truncation: false 0x1148.6-0x1148.6 (0.1)
0x01140| 81 | . | recursion_desired: true 0x1148.7-0x1148.7 (0.1)
0x01140| 80 | . | recursion_available: true 0x1149-0x1149 (0.1)
0x01140| 80 | . | z: 0 0x1149.1-0x1149.3 (0.3)
0x01140| 80 | . | rcode: "no_error" (0) (No error) 0x1149.4-0x1149.7 (0.4)
0x01140| 00 01 | .. | qd_count: 1 0x114a-0x114b.7 (2)
0x01140| 00 01 | .. | an_count: 1 0x114c-0x114d.7 (2)
0x01140| 00 00| ..| ns_count: 0 0x114e-0x114f.7 (2)
0x01150|00 00 |.. | ar_count: 0 0x1150-0x1151.7 (2)
| | | questions[0:1]: 0x1152-0x1173.7 (34)
| | | [0]{}: question 0x1152-0x1173.7 (34)
| | | name{}: 0x1152-0x116f.7 (30)
| | | labels[0:7]: 0x1152-0x116f.7 (30)
| | | [0]{}: label 0x1152-0x1155.7 (4)
0x01150| 03 | . | length: 3 0x1152-0x1152.7 (1)
0x01150| 31 38 39 | 189 | value: "189" 0x1153-0x1155.7 (3)
| | | [1]{}: label 0x1156-0x1159.7 (4)
0x01150| 03 | . | length: 3 0x1156-0x1156.7 (1)
0x01150| 32 30 34 | 204 | value: "204" 0x1157-0x1159.7 (3)
| | | [2]{}: label 0x115a-0x115d.7 (4)
0x01150| 03 | . | length: 3 0x115a-0x115a.7 (1)
0x01150| 31 39 34 | 194 | value: "194" 0x115b-0x115d.7 (3)
| | | [3]{}: label 0x115e-0x1161.7 (4)
0x01150| 03 | . | length: 3 0x115e-0x115e.7 (1)
0x01150| 31| 1| value: "173" 0x115f-0x1161.7 (3)
0x01160|37 33 |73 |
| | | [4]{}: label 0x1162-0x1169.7 (8)
0x01160| 07 | . | length: 7 0x1162-0x1162.7 (1)
0x01160| 69 6e 2d 61 64 64 72 | in-addr | value: "in-addr" 0x1163-0x1169.7 (7)
| | | [5]{}: label 0x116a-0x116e.7 (5)
0x01160| 04 | . | length: 4 0x116a-0x116a.7 (1)
0x01160| 61 72 70 61 | arpa | value: "arpa" 0x116b-0x116e.7 (4)
| | | [6]{}: label 0x116f-0x116f.7 (1)
0x01160| 00| .| length: 0 0x116f-0x116f.7 (1)
| | | value: "189.204.194.173.in-addr.arpa" 0x1170-NA (0)
0x01170|00 0c |.. | type: "ptr" (12) 0x1170-0x1171.7 (2)
0x01170| 00 01 | .. | class: "in" (1) (Internet) 0x1172-0x1173.7 (2)
| | | answers[0:1]: 0x1152-0x1195.7 (68)
| | | [0]{}: answer 0x1152-0x1195.7 (68)
| | | name{}: 0x1152-0x1175.7 (36)
| | | labels[0:7]: 0x1152-0x1175.7 (36)
| | | [0]{}: label 0x1152-0x1175.7 (36)
0x01150| 03 | . | length: 3 0x1152-0x1152.7 (1)
0x01150| 31 38 39 | 189 | value: "189" 0x1153-0x1155.7 (3)
0x01170| c0 | . | is_pointer: 3 0x1174-0x1174.1 (0.2)
0x01170| c0 0c | .. | pointer: 12 0x1174.2-0x1175.7 (1.6)
| | | [1]{}: label 0x1156-0x1159.7 (4)
0x01150| 03 | . | length: 3 0x1156-0x1156.7 (1)
0x01150| 32 30 34 | 204 | value: "204" 0x1157-0x1159.7 (3)
| | | [2]{}: label 0x115a-0x115d.7 (4)
0x01150| 03 | . | length: 3 0x115a-0x115a.7 (1)
0x01150| 31 39 34 | 194 | value: "194" 0x115b-0x115d.7 (3)
| | | [3]{}: label 0x115e-0x1161.7 (4)
0x01150| 03 | . | length: 3 0x115e-0x115e.7 (1)
0x01150| 31| 1| value: "173" 0x115f-0x1161.7 (3)
0x01160|37 33 |73 |
| | | [4]{}: label 0x1162-0x1169.7 (8)
0x01160| 07 | . | length: 7 0x1162-0x1162.7 (1)
0x01160| 69 6e 2d 61 64 64 72 | in-addr | value: "in-addr" 0x1163-0x1169.7 (7)
| | | [5]{}: label 0x116a-0x116e.7 (5)
0x01160| 04 | . | length: 4 0x116a-0x116a.7 (1)
0x01160| 61 72 70 61 | arpa | value: "arpa" 0x116b-0x116e.7 (4)
| | | [6]{}: label 0x116f-0x116f.7 (1)
0x01160| 00| .| length: 0 0x116f-0x116f.7 (1)
| | | value: "189.204.194.173.in-addr.arpa" 0x1170-NA (0)
0x01170| 00 0c | .. | type: "ptr" (12) 0x1176-0x1177.7 (2)
0x01170| 00 01 | .. | class: "in" (1) (Internet) 0x1178-0x1179.7 (2)
0x01170| 00 01 11 a3 | .... | ttl: 70051 0x117a-0x117d.7 (4)
0x01170| 00 16| ..| rdlength: 22 0x117e-0x117f.7 (2)
| | | ptr{}: 0x1180-0x1195.7 (22)
| | | labels[0:4]: 0x1180-0x1195.7 (22)
| | | [0]{}: label 0x1180-0x118a.7 (11)
0x01180|0a |. | length: 10 0x1180-0x1180.7 (1)
0x01180| 71 62 2d 69 6e 2d 66 31 38 39 | qb-in-f189 | value: "qb-in-f189" 0x1181-0x118a.7 (10)
| | | [1]{}: label 0x118b-0x1190.7 (6)
0x01180| 05 | . | length: 5 0x118b-0x118b.7 (1)
0x01180| 31 65 31 30| 1e10| value: "1e100" 0x118c-0x1190.7 (5)
0x01190|30 |0 |
| | | [2]{}: label 0x1191-0x1194.7 (4)
0x01190| 03 | . | length: 3 0x1191-0x1191.7 (1)
0x01190| 6e 65 74 | net | value: "net" 0x1192-0x1194.7 (3)
| | | [3]{}: label 0x1195-0x1195.7 (1)
0x01190| 00 | . | length: 0 0x1195-0x1195.7 (1)
| | | value: "qb-in-f189.1e100.net" 0x1196-NA (0)
| | | nameservers[0:0]: 0x1196-NA (0)
| | | additionals[0:0]: 0x1196-NA (0)
0x01190| 00 00 | .. | padding: raw bits 0x1196-0x1197.7 (2)
| | | options[0:0]: 0x1198-NA (0)
0x01190| 9c 00 00 00 | .... | footer_length: 156 0x1198-0x119b.7 (4)
| | | [33]{}: block 0x119c-0x120b.7 (112)
0x01190| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x119c-0x119f.7 (4)
0x011a0|70 00 00 00 |p... | length: 112 0x11a0-0x11a3.7 (4)
0x011a0| 00 00 00 00 | .... | interface_id: 0 0x11a4-0x11a7.7 (4)
0x011a0| 72 1d 05 00 | r... | timestamp_high: 335218 0x11a8-0x11ab.7 (4)
0x011a0| 98 10 84 c9| ....| timestamp_low: 3380875416 0x11ac-0x11af.7 (4)
0x011b0|4f 00 00 00 |O... | capture_packet_length: 79 0x11b0-0x11b3.7 (4)
0x011b0| 4f 00 00 00 | O... | original_packet_length: 79 0x11b4-0x11b7.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x11b8-0x1206.7 (79)
0x011b0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x11b8-0x11bd.7 (6)
0x011b0| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x11be-0x11c3.7 (6)
0x011c0|60 f1 7d 93 |`.}. |
0x011c0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x11c4-0x11c5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x11c6-0x1206.7 (65)
0x011c0| 45 | E | version: 4 0x11c6-0x11c6.3 (0.4)
0x011c0| 45 | E | ihl: 5 0x11c6.4-0x11c6.7 (0.4)
0x011c0| 00 | . | dscp: 0 0x11c7-0x11c7.5 (0.6)
0x011c0| 00 | . | ecn: 0 0x11c7.6-0x11c7.7 (0.2)
0x011c0| 00 41 | .A | total_length: 65 0x11c8-0x11c9.7 (2)
0x011c0| 95 5b | .[ | identification: 38235 0x11ca-0x11cb.7 (2)
0x011c0| 00 | . | reserved: 0 0x11cc-0x11cc (0.1)
0x011c0| 00 | . | dont_fragment: false 0x11cc.1-0x11cc.1 (0.1)
0x011c0| 00 | . | more_fragments: false 0x11cc.2-0x11cc.2 (0.1)
0x011c0| 00 00 | .. | fragment_offset: 0 0x11cc.3-0x11cd.7 (1.5)
0x011c0| 40 | @ | ttl: 64 0x11ce-0x11ce.7 (1)
0x011c0| 11| .| protocol: "udp" (17) (User datagram protocol) 0x11cf-0x11cf.7 (1)
0x011d0|61 74 |at | header_checksum: 0x6174 (valid) 0x11d0-0x11d1.7 (2)
0x011d0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x11d2-0x11d5.7 (4)
0x011d0| c0 a8 01 01 | .... | destination_ip: "192.168.1.1" (0xc0a80101) 0x11d6-0x11d9.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x11da-0x1206.7 (45)
0x011d0| 99 6c | .l | source_port: 39276 0x11da-0x11db.7 (2)
0x011d0| 00 35 | .5 | destination_port: "domain" (53) (Domain Name Server) 0x11dc-0x11dd.7 (2)
0x011d0| 00 2d| .-| length: 45 0x11de-0x11df.7 (2)
0x011e0|03 7a |.z | checksum: 0x37a 0x11e0-0x11e1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0x11e2-0x1206.7 (37)
| | | header{}: 0x11e2-0x11e5.7 (4)
0x011e0| a0 d9 | .. | id: 41177 0x11e2-0x11e3.7 (2)
0x011e0| 01 | . | qr: "query" (0) 0x11e4-0x11e4 (0.1)
0x011e0| 01 | . | opcode: "query" (0) 0x11e4.1-0x11e4.4 (0.4)
0x011e0| 01 | . | authoritative_answer: false 0x11e4.5-0x11e4.5 (0.1)
0x011e0| 01 | . | truncation: false 0x11e4.6-0x11e4.6 (0.1)
0x011e0| 01 | . | recursion_desired: true 0x11e4.7-0x11e4.7 (0.1)
0x011e0| 00 | . | recursion_available: false 0x11e5-0x11e5 (0.1)
0x011e0| 00 | . | z: 0 0x11e5.1-0x11e5.3 (0.3)
0x011e0| 00 | . | rcode: "no_error" (0) (No error) 0x11e5.4-0x11e5.7 (0.4)
0x011e0| 00 01 | .. | qd_count: 1 0x11e6-0x11e7.7 (2)
0x011e0| 00 00 | .. | an_count: 0 0x11e8-0x11e9.7 (2)
0x011e0| 00 00 | .. | ns_count: 0 0x11ea-0x11eb.7 (2)
0x011e0| 00 00 | .. | ar_count: 0 0x11ec-0x11ed.7 (2)
| | | questions[0:1]: 0x11ee-0x1206.7 (25)
| | | [0]{}: question 0x11ee-0x1206.7 (25)
| | | name{}: 0x11ee-0x1202.7 (21)
| | | labels[0:4]: 0x11ee-0x1202.7 (21)
| | | [0]{}: label 0x11ee-0x11f6.7 (9)
0x011e0| 08 | . | length: 8 0x11ee-0x11ee.7 (1)
0x011e0| 63| c| value: "clients6" 0x11ef-0x11f6.7 (8)
0x011f0|6c 69 65 6e 74 73 36 |lients6 |
| | | [1]{}: label 0x11f7-0x11fd.7 (7)
0x011f0| 06 | . | length: 6 0x11f7-0x11f7.7 (1)
0x011f0| 67 6f 6f 67 6c 65 | google | value: "google" 0x11f8-0x11fd.7 (6)
| | | [2]{}: label 0x11fe-0x1201.7 (4)
0x011f0| 03 | . | length: 3 0x11fe-0x11fe.7 (1)
0x011f0| 63| c| value: "com" 0x11ff-0x1201.7 (3)
0x01200|6f 6d |om |
| | | [3]{}: label 0x1202-0x1202.7 (1)
0x01200| 00 | . | length: 0 0x1202-0x1202.7 (1)
| | | value: "clients6.google.com" 0x1203-NA (0)
0x01200| 00 01 | .. | type: "a" (1) 0x1203-0x1204.7 (2)
0x01200| 00 01 | .. | class: "in" (1) (Internet) 0x1205-0x1206.7 (2)
| | | answers[0:0]: 0x1207-NA (0)
| | | nameservers[0:0]: 0x1207-NA (0)
| | | additionals[0:0]: 0x1207-NA (0)
0x01200| 00 | . | padding: raw bits 0x1207-0x1207.7 (1)
| | | options[0:0]: 0x1208-NA (0)
0x01200| 70 00 00 00 | p... | footer_length: 112 0x1208-0x120b.7 (4)
| | | [34]{}: block 0x120c-0x1343.7 (312)
0x01200| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x120c-0x120f.7 (4)
0x01210|38 01 00 00 |8... | length: 312 0x1210-0x1213.7 (4)
0x01210| 00 00 00 00 | .... | interface_id: 0 0x1214-0x1217.7 (4)
0x01210| 72 1d 05 00 | r... | timestamp_high: 335218 0x1218-0x121b.7 (4)
0x01210| 22 73 84 c9| "s..| timestamp_low: 3380900642 0x121c-0x121f.7 (4)
0x01220|17 01 00 00 |.... | capture_packet_length: 279 0x1220-0x1223.7 (4)
0x01220| 17 01 00 00 | .... | original_packet_length: 279 0x1224-0x1227.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x1228-0x133e.7 (279)
0x01220| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1228-0x122d.7 (6)
0x01220| 94 10| ..| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x122e-0x1233.7 (6)
0x01230|3e 05 36 d3 |>.6. |
0x01230| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1234-0x1235.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1236-0x133e.7 (265)
0x01230| 45 | E | version: 4 0x1236-0x1236.3 (0.4)
0x01230| 45 | E | ihl: 5 0x1236.4-0x1236.7 (0.4)
0x01230| 00 | . | dscp: 0 0x1237-0x1237.5 (0.6)
0x01230| 00 | . | ecn: 0 0x1237.6-0x1237.7 (0.2)
0x01230| 01 09 | .. | total_length: 265 0x1238-0x1239.7 (2)
0x01230| 00 00 | .. | identification: 0 0x123a-0x123b.7 (2)
0x01230| 40 | @ | reserved: 0 0x123c-0x123c (0.1)
0x01230| 40 | @ | dont_fragment: true 0x123c.1-0x123c.1 (0.1)
0x01230| 40 | @ | more_fragments: false 0x123c.2-0x123c.2 (0.1)
0x01230| 40 00 | @. | fragment_offset: 0 0x123c.3-0x123d.7 (1.5)
0x01230| 40 | @ | ttl: 64 0x123e-0x123e.7 (1)
0x01230| 11| .| protocol: "udp" (17) (User datagram protocol) 0x123f-0x123f.7 (1)
0x01240|b6 07 |.. | header_checksum: 0xb607 (valid) 0x1240-0x1241.7 (2)
0x01240| c0 a8 01 01 | .... | source_ip: "192.168.1.1" (0xc0a80101) 0x1242-0x1245.7 (4)
0x01240| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x1246-0x1249.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x124a-0x133e.7 (245)
0x01240| 00 35 | .5 | source_port: "domain" (53) (Domain Name Server) 0x124a-0x124b.7 (2)
0x01240| 99 6c | .l | destination_port: 39276 0x124c-0x124d.7 (2)
0x01240| 00 f5| ..| length: 245 0x124e-0x124f.7 (2)
0x01250|73 38 |s8 | checksum: 0x7338 0x1250-0x1251.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (dns) 0x1252-0x133e.7 (237)
| | | header{}: 0x1252-0x1255.7 (4)
0x01250| a0 d9 | .. | id: 41177 0x1252-0x1253.7 (2)
0x01250| 81 | . | qr: "response" (1) 0x1254-0x1254 (0.1)
0x01250| 81 | . | opcode: "query" (0) 0x1254.1-0x1254.4 (0.4)
0x01250| 81 | . | authoritative_answer: false 0x1254.5-0x1254.5 (0.1)
0x01250| 81 | . | truncation: false 0x1254.6-0x1254.6 (0.1)
0x01250| 81 | . | recursion_desired: true 0x1254.7-0x1254.7 (0.1)
0x01250| 80 | . | recursion_available: true 0x1255-0x1255 (0.1)
0x01250| 80 | . | z: 0 0x1255.1-0x1255.3 (0.3)
0x01250| 80 | . | rcode: "no_error" (0) (No error) 0x1255.4-0x1255.7 (0.4)
0x01250| 00 01 | .. | qd_count: 1 0x1256-0x1257.7 (2)
0x01250| 00 0c | .. | an_count: 12 0x1258-0x1259.7 (2)
0x01250| 00 00 | .. | ns_count: 0 0x125a-0x125b.7 (2)
0x01250| 00 00 | .. | ar_count: 0 0x125c-0x125d.7 (2)
| | | questions[0:1]: 0x125e-0x1276.7 (25)
| | | [0]{}: question 0x125e-0x1276.7 (25)
| | | name{}: 0x125e-0x1272.7 (21)
| | | labels[0:4]: 0x125e-0x1272.7 (21)
| | | [0]{}: label 0x125e-0x1266.7 (9)
0x01250| 08 | . | length: 8 0x125e-0x125e.7 (1)
0x01250| 63| c| value: "clients6" 0x125f-0x1266.7 (8)
0x01260|6c 69 65 6e 74 73 36 |lients6 |
| | | [1]{}: label 0x1267-0x126d.7 (7)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
| | | [2]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [3]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients6.google.com" 0x1273-NA (0)
0x01270| 00 01 | .. | type: "a" (1) 0x1273-0x1274.7 (2)
0x01270| 00 01 | .. | class: "in" (1) (Internet) 0x1275-0x1276.7 (2)
| | | answers[0:12]: 0x125e-0x133e.7 (225)
| | | [0]{}: answer 0x125e-0x128e.7 (49)
| | | name{}: 0x125e-0x1278.7 (27)
| | | labels[0:4]: 0x125e-0x1278.7 (27)
| | | [0]{}: label 0x125e-0x1278.7 (27)
0x01250| 08 | . | length: 8 0x125e-0x125e.7 (1)
0x01250| 63| c| value: "clients6" 0x125f-0x1266.7 (8)
0x01260|6c 69 65 6e 74 73 36 |lients6 |
0x01270| c0 | . | is_pointer: 3 0x1277-0x1277.1 (0.2)
0x01270| c0 0c | .. | pointer: 12 0x1277.2-0x1278.7 (1.6)
| | | [1]{}: label 0x1267-0x126d.7 (7)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
| | | [2]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [3]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients6.google.com" 0x1273-NA (0)
| | | cname{}: 0x1267-0x128e.7 (40)
| | | labels[0:5]: 0x1267-0x128e.7 (40)
| | | [0]{}: label 0x1283-0x128a.7 (8)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x01270| 00 05 | .. | type: "cname" (5) 0x1279-0x127a.7 (2)
0x01270| 00 01 | .. | class: "in" (1) (Internet) 0x127b-0x127c.7 (2)
0x01270| 00 00 00| ...| ttl: 16 0x127d-0x1280.7 (4)
0x01280|10 |. |
0x01280| 00 0c | .. | rdlength: 12 0x1281-0x1282.7 (2)
| | | [1]{}: answer 0x1267-0x129e.7 (56)
| | | name{}: 0x1267-0x1290.7 (42)
| | | labels[0:5]: 0x1267-0x1290.7 (42)
| | | [0]{}: label 0x1283-0x1290.7 (14)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x01280| c0| .| is_pointer: 3 0x128f-0x128f.1 (0.2)
0x01280| c0| .| pointer: 49 0x128f.2-0x1290.7 (1.6)
0x01290|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x01290| 00 01 | .. | type: "a" (1) 0x1291-0x1292.7 (2)
0x01290| 00 01 | .. | class: "in" (1) (Internet) 0x1293-0x1294.7 (2)
0x01290| 00 00 00 e9 | .... | ttl: 233 0x1295-0x1298.7 (4)
0x01290| 00 04 | .. | rdlength: 4 0x1299-0x129a.7 (2)
0x01290| 4a 7d e4 e3 | J}.. | address: "74.125.228.227" 0x129b-0x129e.7 (4)
| | | [2]{}: answer 0x1267-0x12ae.7 (72)
| | | name{}: 0x1267-0x12a0.7 (58)
| | | labels[0:5]: 0x1267-0x12a0.7 (58)
| | | [0]{}: label 0x1283-0x12a0.7 (30)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x01290| c0| .| is_pointer: 3 0x129f-0x129f.1 (0.2)
0x01290| c0| .| pointer: 49 0x129f.2-0x12a0.7 (1.6)
0x012a0|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x012a0| 00 01 | .. | type: "a" (1) 0x12a1-0x12a2.7 (2)
0x012a0| 00 01 | .. | class: "in" (1) (Internet) 0x12a3-0x12a4.7 (2)
0x012a0| 00 00 00 e9 | .... | ttl: 233 0x12a5-0x12a8.7 (4)
0x012a0| 00 04 | .. | rdlength: 4 0x12a9-0x12aa.7 (2)
0x012a0| 4a 7d e4 e0 | J}.. | address: "74.125.228.224" 0x12ab-0x12ae.7 (4)
| | | [3]{}: answer 0x1267-0x12be.7 (88)
| | | name{}: 0x1267-0x12b0.7 (74)
| | | labels[0:5]: 0x1267-0x12b0.7 (74)
| | | [0]{}: label 0x1283-0x12b0.7 (46)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x012a0| c0| .| is_pointer: 3 0x12af-0x12af.1 (0.2)
0x012a0| c0| .| pointer: 49 0x12af.2-0x12b0.7 (1.6)
0x012b0|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x012b0| 00 01 | .. | type: "a" (1) 0x12b1-0x12b2.7 (2)
0x012b0| 00 01 | .. | class: "in" (1) (Internet) 0x12b3-0x12b4.7 (2)
0x012b0| 00 00 00 e9 | .... | ttl: 233 0x12b5-0x12b8.7 (4)
0x012b0| 00 04 | .. | rdlength: 4 0x12b9-0x12ba.7 (2)
0x012b0| 4a 7d e4 e1 | J}.. | address: "74.125.228.225" 0x12bb-0x12be.7 (4)
| | | [4]{}: answer 0x1267-0x12ce.7 (104)
| | | name{}: 0x1267-0x12c0.7 (90)
| | | labels[0:5]: 0x1267-0x12c0.7 (90)
| | | [0]{}: label 0x1283-0x12c0.7 (62)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x012b0| c0| .| is_pointer: 3 0x12bf-0x12bf.1 (0.2)
0x012b0| c0| .| pointer: 49 0x12bf.2-0x12c0.7 (1.6)
0x012c0|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x012c0| 00 01 | .. | type: "a" (1) 0x12c1-0x12c2.7 (2)
0x012c0| 00 01 | .. | class: "in" (1) (Internet) 0x12c3-0x12c4.7 (2)
0x012c0| 00 00 00 e9 | .... | ttl: 233 0x12c5-0x12c8.7 (4)
0x012c0| 00 04 | .. | rdlength: 4 0x12c9-0x12ca.7 (2)
0x012c0| 4a 7d e4 e7 | J}.. | address: "74.125.228.231" 0x12cb-0x12ce.7 (4)
| | | [5]{}: answer 0x1267-0x12de.7 (120)
| | | name{}: 0x1267-0x12d0.7 (106)
| | | labels[0:5]: 0x1267-0x12d0.7 (106)
| | | [0]{}: label 0x1283-0x12d0.7 (78)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x012c0| c0| .| is_pointer: 3 0x12cf-0x12cf.1 (0.2)
0x012c0| c0| .| pointer: 49 0x12cf.2-0x12d0.7 (1.6)
0x012d0|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x012d0| 00 01 | .. | type: "a" (1) 0x12d1-0x12d2.7 (2)
0x012d0| 00 01 | .. | class: "in" (1) (Internet) 0x12d3-0x12d4.7 (2)
0x012d0| 00 00 00 e9 | .... | ttl: 233 0x12d5-0x12d8.7 (4)
0x012d0| 00 04 | .. | rdlength: 4 0x12d9-0x12da.7 (2)
0x012d0| 4a 7d e4 e2 | J}.. | address: "74.125.228.226" 0x12db-0x12de.7 (4)
| | | [6]{}: answer 0x1267-0x12ee.7 (136)
| | | name{}: 0x1267-0x12e0.7 (122)
| | | labels[0:5]: 0x1267-0x12e0.7 (122)
| | | [0]{}: label 0x1283-0x12e0.7 (94)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x012d0| c0| .| is_pointer: 3 0x12df-0x12df.1 (0.2)
0x012d0| c0| .| pointer: 49 0x12df.2-0x12e0.7 (1.6)
0x012e0|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x012e0| 00 01 | .. | type: "a" (1) 0x12e1-0x12e2.7 (2)
0x012e0| 00 01 | .. | class: "in" (1) (Internet) 0x12e3-0x12e4.7 (2)
0x012e0| 00 00 00 e9 | .... | ttl: 233 0x12e5-0x12e8.7 (4)
0x012e0| 00 04 | .. | rdlength: 4 0x12e9-0x12ea.7 (2)
0x012e0| 4a 7d e4 e8 | J}.. | address: "74.125.228.232" 0x12eb-0x12ee.7 (4)
| | | [7]{}: answer 0x1267-0x12fe.7 (152)
| | | name{}: 0x1267-0x12f0.7 (138)
| | | labels[0:5]: 0x1267-0x12f0.7 (138)
| | | [0]{}: label 0x1283-0x12f0.7 (110)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x012e0| c0| .| is_pointer: 3 0x12ef-0x12ef.1 (0.2)
0x012e0| c0| .| pointer: 49 0x12ef.2-0x12f0.7 (1.6)
0x012f0|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x012f0| 00 01 | .. | type: "a" (1) 0x12f1-0x12f2.7 (2)
0x012f0| 00 01 | .. | class: "in" (1) (Internet) 0x12f3-0x12f4.7 (2)
0x012f0| 00 00 00 e9 | .... | ttl: 233 0x12f5-0x12f8.7 (4)
0x012f0| 00 04 | .. | rdlength: 4 0x12f9-0x12fa.7 (2)
0x012f0| 4a 7d e4 e6 | J}.. | address: "74.125.228.230" 0x12fb-0x12fe.7 (4)
| | | [8]{}: answer 0x1267-0x130e.7 (168)
| | | name{}: 0x1267-0x1300.7 (154)
| | | labels[0:5]: 0x1267-0x1300.7 (154)
| | | [0]{}: label 0x1283-0x1300.7 (126)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x012f0| c0| .| is_pointer: 3 0x12ff-0x12ff.1 (0.2)
0x012f0| c0| .| pointer: 49 0x12ff.2-0x1300.7 (1.6)
0x01300|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x01300| 00 01 | .. | type: "a" (1) 0x1301-0x1302.7 (2)
0x01300| 00 01 | .. | class: "in" (1) (Internet) 0x1303-0x1304.7 (2)
0x01300| 00 00 00 e9 | .... | ttl: 233 0x1305-0x1308.7 (4)
0x01300| 00 04 | .. | rdlength: 4 0x1309-0x130a.7 (2)
0x01300| 4a 7d e4 e9 | J}.. | address: "74.125.228.233" 0x130b-0x130e.7 (4)
| | | [9]{}: answer 0x1267-0x131e.7 (184)
| | | name{}: 0x1267-0x1310.7 (170)
| | | labels[0:5]: 0x1267-0x1310.7 (170)
| | | [0]{}: label 0x1283-0x1310.7 (142)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x01300| c0| .| is_pointer: 3 0x130f-0x130f.1 (0.2)
0x01300| c0| .| pointer: 49 0x130f.2-0x1310.7 (1.6)
0x01310|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x01310| 00 01 | .. | type: "a" (1) 0x1311-0x1312.7 (2)
0x01310| 00 01 | .. | class: "in" (1) (Internet) 0x1313-0x1314.7 (2)
0x01310| 00 00 00 e9 | .... | ttl: 233 0x1315-0x1318.7 (4)
0x01310| 00 04 | .. | rdlength: 4 0x1319-0x131a.7 (2)
0x01310| 4a 7d e4 e4 | J}.. | address: "74.125.228.228" 0x131b-0x131e.7 (4)
| | | [10]{}: answer 0x1267-0x132e.7 (200)
| | | name{}: 0x1267-0x1320.7 (186)
| | | labels[0:5]: 0x1267-0x1320.7 (186)
| | | [0]{}: label 0x1283-0x1320.7 (158)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x01310| c0| .| is_pointer: 3 0x131f-0x131f.1 (0.2)
0x01310| c0| .| pointer: 49 0x131f.2-0x1320.7 (1.6)
0x01320|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x01320| 00 01 | .. | type: "a" (1) 0x1321-0x1322.7 (2)
0x01320| 00 01 | .. | class: "in" (1) (Internet) 0x1323-0x1324.7 (2)
0x01320| 00 00 00 e9 | .... | ttl: 233 0x1325-0x1328.7 (4)
0x01320| 00 04 | .. | rdlength: 4 0x1329-0x132a.7 (2)
0x01320| 4a 7d e4 e5 | J}.. | address: "74.125.228.229" 0x132b-0x132e.7 (4)
| | | [11]{}: answer 0x1267-0x133e.7 (216)
| | | name{}: 0x1267-0x1330.7 (202)
| | | labels[0:5]: 0x1267-0x1330.7 (202)
| | | [0]{}: label 0x1283-0x1330.7 (174)
0x01280| 07 | . | length: 7 0x1283-0x1283.7 (1)
0x01280| 63 6c 69 65 6e 74 73 | clients | value: "clients" 0x1284-0x128a.7 (7)
0x01320| c0| .| is_pointer: 3 0x132f-0x132f.1 (0.2)
0x01320| c0| .| pointer: 49 0x132f.2-0x1330.7 (1.6)
0x01330|31 |1 |
| | | [1]{}: label 0x128b-0x128c.7 (2)
0x01280| 01 | . | length: 1 0x128b-0x128b.7 (1)
0x01280| 6c | l | value: "l" 0x128c-0x128c.7 (1)
| | | [2]{}: label 0x1267-0x128e.7 (40)
0x01260| 06 | . | length: 6 0x1267-0x1267.7 (1)
0x01260| 67 6f 6f 67 6c 65 | google | value: "google" 0x1268-0x126d.7 (6)
0x01280| c0 | . | is_pointer: 3 0x128d-0x128d.1 (0.2)
0x01280| c0 15 | .. | pointer: 21 0x128d.2-0x128e.7 (1.6)
| | | [3]{}: label 0x126e-0x1271.7 (4)
0x01260| 03 | . | length: 3 0x126e-0x126e.7 (1)
0x01260| 63| c| value: "com" 0x126f-0x1271.7 (3)
0x01270|6f 6d |om |
| | | [4]{}: label 0x1272-0x1272.7 (1)
0x01270| 00 | . | length: 0 0x1272-0x1272.7 (1)
| | | value: "clients.l.google.com" 0x1273-NA (0)
0x01330| 00 01 | .. | type: "a" (1) 0x1331-0x1332.7 (2)
0x01330| 00 01 | .. | class: "in" (1) (Internet) 0x1333-0x1334.7 (2)
0x01330| 00 00 00 e9 | .... | ttl: 233 0x1335-0x1338.7 (4)
0x01330| 00 04 | .. | rdlength: 4 0x1339-0x133a.7 (2)
0x01330| 4a 7d e4 ee | J}.. | address: "74.125.228.238" 0x133b-0x133e.7 (4)
| | | nameservers[0:0]: 0x133f-NA (0)
| | | additionals[0:0]: 0x133f-NA (0)
0x01330| 00| .| padding: raw bits 0x133f-0x133f.7 (1)
| | | options[0:0]: 0x1340-NA (0)
0x01340|38 01 00 00 |8... | footer_length: 312 0x1340-0x1343.7 (4)
| | | [35]{}: block 0x1344-0x13b3.7 (112)
0x01340| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1344-0x1347.7 (4)
0x01340| 70 00 00 00 | p... | length: 112 0x1348-0x134b.7 (4)
0x01340| 00 00 00 00| ....| interface_id: 0 0x134c-0x134f.7 (4)
0x01350|72 1d 05 00 |r... | timestamp_high: 335218 0x1350-0x1353.7 (4)
0x01350| 82 74 84 c9 | .t.. | timestamp_low: 3380900994 0x1354-0x1357.7 (4)
0x01350| 4e 00 00 00 | N... | capture_packet_length: 78 0x1358-0x135b.7 (4)
0x01350| 4e 00 00 00| N...| original_packet_length: 78 0x135c-0x135f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x1360-0x13ad.7 (78)
0x01360|94 10 3e 05 36 d3 |..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x1360-0x1365.7 (6)
0x01360| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1366-0x136b.7 (6)
0x01360| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x136c-0x136d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x136e-0x13ad.7 (64)
0x01360| 45 | E | version: 4 0x136e-0x136e.3 (0.4)
0x01360| 45 | E | ihl: 5 0x136e.4-0x136e.7 (0.4)
0x01360| 00| .| dscp: 0 0x136f-0x136f.5 (0.6)
0x01360| 00| .| ecn: 0 0x136f.6-0x136f.7 (0.2)
0x01370|00 40 |.@ | total_length: 64 0x1370-0x1371.7 (2)
0x01370| 16 35 | .5 | identification: 5685 0x1372-0x1373.7 (2)
0x01370| 40 | @ | reserved: 0 0x1374-0x1374 (0.1)
0x01370| 40 | @ | dont_fragment: true 0x1374.1-0x1374.1 (0.1)
0x01370| 40 | @ | more_fragments: false 0x1374.2-0x1374.2 (0.1)
0x01370| 40 00 | @. | fragment_offset: 0 0x1374.3-0x1375.7 (1.5)
0x01370| 40 | @ | ttl: 64 0x1376-0x1376.7 (1)
0x01370| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x1377-0x1377.7 (1)
0x01370| 32 ef | 2. | header_checksum: 0x32ef (valid) 0x1378-0x1379.7 (2)
0x01370| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x137a-0x137d.7 (4)
0x01370| 4a 7d| J}| destination_ip: "74.125.228.227" (0x4a7de4e3) 0x137e-0x1381.7 (4)
0x01380|e4 e3 |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x1382-0x13ad.7 (44)
0x01380| c7 25 | .% | source_port: 50981 0x1382-0x1383.7 (2)
0x01380| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x1384-0x1385.7 (2)
0x01380| 2b ce 2e 8a | +... | sequence_number: 734932618 0x1386-0x1389.7 (4)
0x01380| 00 00 00 00 | .... | acknowledgment_number: 0 0x138a-0x138d.7 (4)
0x01380| b0 | . | data_offset: 11 0x138e-0x138e.3 (0.4)
0x01380| b0 | . | reserved: 0 0x138e.4-0x138e.6 (0.3)
0x01380| b0 | . | ns: false 0x138e.7-0x138e.7 (0.1)
0x01380| 02| .| cwr: false 0x138f-0x138f (0.1)
0x01380| 02| .| ece: false 0x138f.1-0x138f.1 (0.1)
0x01380| 02| .| urg: false 0x138f.2-0x138f.2 (0.1)
0x01380| 02| .| ack: false 0x138f.3-0x138f.3 (0.1)
0x01380| 02| .| psh: false 0x138f.4-0x138f.4 (0.1)
0x01380| 02| .| rst: false 0x138f.5-0x138f.5 (0.1)
0x01380| 02| .| syn: true 0x138f.6-0x138f.6 (0.1)
0x01380| 02| .| fin: false 0x138f.7-0x138f.7 (0.1)
0x01390|ff ff |.. | window_size: 65535 0x1390-0x1391.7 (2)
0x01390| 45 e4 | E. | checksum: 0x45e4 0x1392-0x1393.7 (2)
0x01390| 00 00 | .. | urgent_pointer: 0 0x1394-0x1395.7 (2)
| | | options[0:9]: 0x1396-0x13ad.7 (24)
| | | [0]{}: option 0x1396-0x1399.7 (4)
0x01390| 02 | . | kind: "maxseg" (2) (Maximum segment size) 0x1396-0x1396.7 (1)
0x01390| 04 | . | length: 4 0x1397-0x1397.7 (1)
0x01390| 05 b4 | .. | data: raw bits 0x1398-0x1399.7 (2)
| | | [1]{}: option 0x139a-0x139a.7 (1)
0x01390| 01 | . | kind: "nop" (1) (No operation) 0x139a-0x139a.7 (1)
| | | [2]{}: option 0x139b-0x139d.7 (3)
0x01390| 03 | . | kind: "winscale" (3) (Window scale) 0x139b-0x139b.7 (1)
0x01390| 03 | . | length: 3 0x139c-0x139c.7 (1)
0x01390| 05 | . | data: raw bits 0x139d-0x139d.7 (1)
| | | [3]{}: option 0x139e-0x139e.7 (1)
0x01390| 01 | . | kind: "nop" (1) (No operation) 0x139e-0x139e.7 (1)
| | | [4]{}: option 0x139f-0x139f.7 (1)
0x01390| 01| .| kind: "nop" (1) (No operation) 0x139f-0x139f.7 (1)
| | | [5]{}: option 0x13a0-0x13a9.7 (10)
0x013a0|08 |. | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x13a0-0x13a0.7 (1)
0x013a0| 0a | . | length: 10 0x13a1-0x13a1.7 (1)
0x013a0| 4b 2a 91 21 00 00 00 00 | K*.!.... | data: raw bits 0x13a2-0x13a9.7 (8)
| | | [6]{}: option 0x13aa-0x13ab.7 (2)
0x013a0| 04 | . | kind: "sack_permitted" (4) (Selective Acknowledgement permitted) 0x13aa-0x13aa.7 (1)
0x013a0| 02 | . | length: 2 0x13ab-0x13ab.7 (1)
| | | data: raw bits 0x13ac-NA (0)
| | | [7]{}: option 0x13ac-0x13ac.7 (1)
0x013a0| 00 | . | kind: "end" (0) (End of options list) 0x13ac-0x13ac.7 (1)
| | | [8]{}: option 0x13ad-0x13ad.7 (1)
0x013a0| 00 | . | kind: "end" (0) (End of options list) 0x13ad-0x13ad.7 (1)
| | | payload: raw bits 0x13ae-NA (0)
0x013a0| 00 00| ..| padding: raw bits 0x13ae-0x13af.7 (2)
| | | options[0:0]: 0x13b0-NA (0)
0x013b0|70 00 00 00 |p... | footer_length: 112 0x13b0-0x13b3.7 (4)
| | | [36]{}: block 0x13b4-0x141f.7 (108)
0x013b0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x13b4-0x13b7.7 (4)
0x013b0| 6c 00 00 00 | l... | length: 108 0x13b8-0x13bb.7 (4)
0x013b0| 00 00 00 00| ....| interface_id: 0 0x13bc-0x13bf.7 (4)
0x013c0|72 1d 05 00 |r... | timestamp_high: 335218 0x13c0-0x13c3.7 (4)
0x013c0| 83 db 84 c9 | .... | timestamp_low: 3380927363 0x13c4-0x13c7.7 (4)
0x013c0| 4a 00 00 00 | J... | capture_packet_length: 74 0x13c8-0x13cb.7 (4)
0x013c0| 4a 00 00 00| J...| original_packet_length: 74 0x13cc-0x13cf.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x13d0-0x1419.7 (74)
0x013d0|a4 5e 60 f1 7d 93 |.^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x13d0-0x13d5.7 (6)
0x013d0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x13d6-0x13db.7 (6)
0x013d0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x13dc-0x13dd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x13de-0x1419.7 (60)
0x013d0| 45 | E | version: 4 0x13de-0x13de.3 (0.4)
0x013d0| 45 | E | ihl: 5 0x13de.4-0x13de.7 (0.4)
0x013d0| 28| (| dscp: 10 0x13df-0x13df.5 (0.6)
0x013d0| 28| (| ecn: 0 0x13df.6-0x13df.7 (0.2)
0x013e0|00 3c |.< | total_length: 60 0x13e0-0x13e1.7 (2)
0x013e0| 40 e2 | @. | identification: 16610 0x13e2-0x13e3.7 (2)
0x013e0| 00 | . | reserved: 0 0x13e4-0x13e4 (0.1)
0x013e0| 00 | . | dont_fragment: false 0x13e4.1-0x13e4.1 (0.1)
0x013e0| 00 | . | more_fragments: false 0x13e4.2-0x13e4.2 (0.1)
0x013e0| 00 00 | .. | fragment_offset: 0 0x13e4.3-0x13e5.7 (1.5)
0x013e0| 35 | 5 | ttl: 53 0x13e6-0x13e6.7 (1)
0x013e0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x13e7-0x13e7.7 (1)
0x013e0| 53 1e | S. | header_checksum: 0x531e (valid) 0x13e8-0x13e9.7 (2)
0x013e0| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x13ea-0x13ed.7 (4)
0x013e0| c0 a8| ..| destination_ip: "192.168.1.139" (0xc0a8018b) 0x13ee-0x13f1.7 (4)
0x013f0|01 8b |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x13f2-0x1419.7 (40)
0x013f0| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0x13f2-0x13f3.7 (2)
0x013f0| c7 25 | .% | destination_port: 50981 0x13f4-0x13f5.7 (2)
0x013f0| 43 54 83 30 | CT.0 | sequence_number: 1129612080 0x13f6-0x13f9.7 (4)
0x013f0| 2b ce 2e 8b | +... | acknowledgment_number: 734932619 0x13fa-0x13fd.7 (4)
0x013f0| a0 | . | data_offset: 10 0x13fe-0x13fe.3 (0.4)
0x013f0| a0 | . | reserved: 0 0x13fe.4-0x13fe.6 (0.3)
0x013f0| a0 | . | ns: false 0x13fe.7-0x13fe.7 (0.1)
0x013f0| 12| .| cwr: false 0x13ff-0x13ff (0.1)
0x013f0| 12| .| ece: false 0x13ff.1-0x13ff.1 (0.1)
0x013f0| 12| .| urg: false 0x13ff.2-0x13ff.2 (0.1)
0x013f0| 12| .| ack: true 0x13ff.3-0x13ff.3 (0.1)
0x013f0| 12| .| psh: false 0x13ff.4-0x13ff.4 (0.1)
0x013f0| 12| .| rst: false 0x13ff.5-0x13ff.5 (0.1)
0x013f0| 12| .| syn: true 0x13ff.6-0x13ff.6 (0.1)
0x013f0| 12| .| fin: false 0x13ff.7-0x13ff.7 (0.1)
0x01400|a6 2c |., | window_size: 42540 0x1400-0x1401.7 (2)
0x01400| 8a 97 | .. | checksum: 0x8a97 0x1402-0x1403.7 (2)
0x01400| 00 00 | .. | urgent_pointer: 0 0x1404-0x1405.7 (2)
| | | options[0:5]: 0x1406-0x1419.7 (20)
| | | [0]{}: option 0x1406-0x1409.7 (4)
0x01400| 02 | . | kind: "maxseg" (2) (Maximum segment size) 0x1406-0x1406.7 (1)
0x01400| 04 | . | length: 4 0x1407-0x1407.7 (1)
0x01400| 05 96 | .. | data: raw bits 0x1408-0x1409.7 (2)
| | | [1]{}: option 0x140a-0x140b.7 (2)
0x01400| 04 | . | kind: "sack_permitted" (4) (Selective Acknowledgement permitted) 0x140a-0x140a.7 (1)
0x01400| 02 | . | length: 2 0x140b-0x140b.7 (1)
| | | data: raw bits 0x140c-NA (0)
| | | [2]{}: option 0x140c-0x1415.7 (10)
0x01400| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x140c-0x140c.7 (1)
0x01400| 0a | . | length: 10 0x140d-0x140d.7 (1)
0x01400| e4 57| .W| data: raw bits 0x140e-0x1415.7 (8)
0x01410|7b 53 4b 2a 91 21 |{SK*.! |
| | | [3]{}: option 0x1416-0x1416.7 (1)
0x01410| 01 | . | kind: "nop" (1) (No operation) 0x1416-0x1416.7 (1)
| | | [4]{}: option 0x1417-0x1419.7 (3)
0x01410| 03 | . | kind: "winscale" (3) (Window scale) 0x1417-0x1417.7 (1)
0x01410| 03 | . | length: 3 0x1418-0x1418.7 (1)
0x01410| 07 | . | data: raw bits 0x1419-0x1419.7 (1)
| | | payload: raw bits 0x141a-NA (0)
0x01410| 00 00 | .. | padding: raw bits 0x141a-0x141b.7 (2)
| | | options[0:0]: 0x141c-NA (0)
0x01410| 6c 00 00 00| l...| footer_length: 108 0x141c-0x141f.7 (4)
| | | [37]{}: block 0x1420-0x1483.7 (100)
0x01420|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1420-0x1423.7 (4)
0x01420| 64 00 00 00 | d... | length: 100 0x1424-0x1427.7 (4)
0x01420| 00 00 00 00 | .... | interface_id: 0 0x1428-0x142b.7 (4)
0x01420| 72 1d 05 00| r...| timestamp_high: 335218 0x142c-0x142f.7 (4)
0x01430|c1 db 84 c9 |.... | timestamp_low: 3380927425 0x1430-0x1433.7 (4)
0x01430| 42 00 00 00 | B... | capture_packet_length: 66 0x1434-0x1437.7 (4)
0x01430| 42 00 00 00 | B... | original_packet_length: 66 0x1438-0x143b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x143c-0x147d.7 (66)
0x01430| 94 10 3e 05| ..>.| destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x143c-0x1441.7 (6)
0x01440|36 d3 |6. |
0x01440| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1442-0x1447.7 (6)
0x01440| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1448-0x1449.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x144a-0x147d.7 (52)
0x01440| 45 | E | version: 4 0x144a-0x144a.3 (0.4)
0x01440| 45 | E | ihl: 5 0x144a.4-0x144a.7 (0.4)
0x01440| 00 | . | dscp: 0 0x144b-0x144b.5 (0.6)
0x01440| 00 | . | ecn: 0 0x144b.6-0x144b.7 (0.2)
0x01440| 00 34 | .4 | total_length: 52 0x144c-0x144d.7 (2)
0x01440| 2e 37| .7| identification: 11831 0x144e-0x144f.7 (2)
0x01450|40 |@ | reserved: 0 0x1450-0x1450 (0.1)
0x01450|40 |@ | dont_fragment: true 0x1450.1-0x1450.1 (0.1)
0x01450|40 |@ | more_fragments: false 0x1450.2-0x1450.2 (0.1)
0x01450|40 00 |@. | fragment_offset: 0 0x1450.3-0x1451.7 (1.5)
0x01450| 40 | @ | ttl: 64 0x1452-0x1452.7 (1)
0x01450| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x1453-0x1453.7 (1)
0x01450| 1a f9 | .. | header_checksum: 0x1af9 (valid) 0x1454-0x1455.7 (2)
0x01450| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x1456-0x1459.7 (4)
0x01450| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x145a-0x145d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x145e-0x147d.7 (32)
0x01450| c7 25| .%| source_port: 50981 0x145e-0x145f.7 (2)
0x01460|01 bb |.. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x1460-0x1461.7 (2)
0x01460| 2b ce 2e 8b | +... | sequence_number: 734932619 0x1462-0x1465.7 (4)
0x01460| 43 54 83 31 | CT.1 | acknowledgment_number: 1129612081 0x1466-0x1469.7 (4)
0x01460| 80 | . | data_offset: 8 0x146a-0x146a.3 (0.4)
0x01460| 80 | . | reserved: 0 0x146a.4-0x146a.6 (0.3)
0x01460| 80 | . | ns: false 0x146a.7-0x146a.7 (0.1)
0x01460| 10 | . | cwr: false 0x146b-0x146b (0.1)
0x01460| 10 | . | ece: false 0x146b.1-0x146b.1 (0.1)
0x01460| 10 | . | urg: false 0x146b.2-0x146b.2 (0.1)
0x01460| 10 | . | ack: true 0x146b.3-0x146b.3 (0.1)
0x01460| 10 | . | psh: false 0x146b.4-0x146b.4 (0.1)
0x01460| 10 | . | rst: false 0x146b.5-0x146b.5 (0.1)
0x01460| 10 | . | syn: false 0x146b.6-0x146b.6 (0.1)
0x01460| 10 | . | fin: false 0x146b.7-0x146b.7 (0.1)
0x01460| 10 19 | .. | window_size: 4121 0x146c-0x146d.7 (2)
0x01460| 4f 3f| O?| checksum: 0x4f3f 0x146e-0x146f.7 (2)
0x01470|00 00 |.. | urgent_pointer: 0 0x1470-0x1471.7 (2)
| | | options[0:3]: 0x1472-0x147d.7 (12)
| | | [0]{}: option 0x1472-0x1472.7 (1)
0x01470| 01 | . | kind: "nop" (1) (No operation) 0x1472-0x1472.7 (1)
| | | [1]{}: option 0x1473-0x1473.7 (1)
0x01470| 01 | . | kind: "nop" (1) (No operation) 0x1473-0x1473.7 (1)
| | | [2]{}: option 0x1474-0x147d.7 (10)
0x01470| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x1474-0x1474.7 (1)
0x01470| 0a | . | length: 10 0x1475-0x1475.7 (1)
0x01470| 4b 2a 91 3b e4 57 7b 53 | K*.;.W{S | data: raw bits 0x1476-0x147d.7 (8)
| | | payload: raw bits 0x147e-NA (0)
0x01470| 00 00| ..| padding: raw bits 0x147e-0x147f.7 (2)
| | | options[0:0]: 0x1480-NA (0)
0x01480|64 00 00 00 |d... | footer_length: 100 0x1480-0x1483.7 (4)
| | | [38]{}: block 0x1484-0x16eb.7 (616)
0x01480| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1484-0x1487.7 (4)
0x01480| 68 02 00 00 | h... | length: 616 0x1488-0x148b.7 (4)
0x01480| 00 00 00 00| ....| interface_id: 0 0x148c-0x148f.7 (4)
0x01490|72 1d 05 00 |r... | timestamp_high: 335218 0x1490-0x1493.7 (4)
0x01490| 6d dc 84 c9 | m... | timestamp_low: 3380927597 0x1494-0x1497.7 (4)
0x01490| 47 02 00 00 | G... | capture_packet_length: 583 0x1498-0x149b.7 (4)
0x01490| 47 02 00 00| G...| original_packet_length: 583 0x149c-0x149f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x14a0-0x16e6.7 (583)
0x014a0|94 10 3e 05 36 d3 |..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x14a0-0x14a5.7 (6)
0x014a0| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x14a6-0x14ab.7 (6)
0x014a0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x14ac-0x14ad.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x14ae-0x16e6.7 (569)
0x014a0| 45 | E | version: 4 0x14ae-0x14ae.3 (0.4)
0x014a0| 45 | E | ihl: 5 0x14ae.4-0x14ae.7 (0.4)
0x014a0| 00| .| dscp: 0 0x14af-0x14af.5 (0.6)
0x014a0| 00| .| ecn: 0 0x14af.6-0x14af.7 (0.2)
0x014b0|02 39 |.9 | total_length: 569 0x14b0-0x14b1.7 (2)
0x014b0| 8d a8 | .. | identification: 36264 0x14b2-0x14b3.7 (2)
0x014b0| 40 | @ | reserved: 0 0x14b4-0x14b4 (0.1)
0x014b0| 40 | @ | dont_fragment: true 0x14b4.1-0x14b4.1 (0.1)
0x014b0| 40 | @ | more_fragments: false 0x14b4.2-0x14b4.2 (0.1)
0x014b0| 40 00 | @. | fragment_offset: 0 0x14b4.3-0x14b5.7 (1.5)
0x014b0| 40 | @ | ttl: 64 0x14b6-0x14b6.7 (1)
0x014b0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x14b7-0x14b7.7 (1)
0x014b0| b9 82 | .. | header_checksum: 0xb982 (valid) 0x14b8-0x14b9.7 (2)
0x014b0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x14ba-0x14bd.7 (4)
0x014b0| 4a 7d| J}| destination_ip: "74.125.228.227" (0x4a7de4e3) 0x14be-0x14c1.7 (4)
0x014c0|e4 e3 |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x14c2-0x16e6.7 (549)
0x014c0| c7 25 | .% | source_port: 50981 0x14c2-0x14c3.7 (2)
0x014c0| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x14c4-0x14c5.7 (2)
0x014c0| 2b ce 2e 8b | +... | sequence_number: 734932619 0x14c6-0x14c9.7 (4)
0x014c0| 43 54 83 31 | CT.1 | acknowledgment_number: 1129612081 0x14ca-0x14cd.7 (4)
0x014c0| 80 | . | data_offset: 8 0x14ce-0x14ce.3 (0.4)
0x014c0| 80 | . | reserved: 0 0x14ce.4-0x14ce.6 (0.3)
0x014c0| 80 | . | ns: false 0x14ce.7-0x14ce.7 (0.1)
0x014c0| 18| .| cwr: false 0x14cf-0x14cf (0.1)
0x014c0| 18| .| ece: false 0x14cf.1-0x14cf.1 (0.1)
0x014c0| 18| .| urg: false 0x14cf.2-0x14cf.2 (0.1)
0x014c0| 18| .| ack: true 0x14cf.3-0x14cf.3 (0.1)
0x014c0| 18| .| psh: true 0x14cf.4-0x14cf.4 (0.1)
0x014c0| 18| .| rst: false 0x14cf.5-0x14cf.5 (0.1)
0x014c0| 18| .| syn: false 0x14cf.6-0x14cf.6 (0.1)
0x014c0| 18| .| fin: false 0x14cf.7-0x14cf.7 (0.1)
0x014d0|10 19 |.. | window_size: 4121 0x14d0-0x14d1.7 (2)
0x014d0| 15 03 | .. | checksum: 0x1503 0x14d2-0x14d3.7 (2)
0x014d0| 00 00 | .. | urgent_pointer: 0 0x14d4-0x14d5.7 (2)
| | | options[0:3]: 0x14d6-0x14e1.7 (12)
| | | [0]{}: option 0x14d6-0x14d6.7 (1)
0x014d0| 01 | . | kind: "nop" (1) (No operation) 0x14d6-0x14d6.7 (1)
| | | [1]{}: option 0x14d7-0x14d7.7 (1)
0x014d0| 01 | . | kind: "nop" (1) (No operation) 0x14d7-0x14d7.7 (1)
| | | [2]{}: option 0x14d8-0x14e1.7 (10)
0x014d0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x14d8-0x14d8.7 (1)
0x014d0| 0a | . | length: 10 0x14d9-0x14d9.7 (1)
0x014d0| 4b 2a 91 3b e4 57| K*.;.W| data: raw bits 0x14da-0x14e1.7 (8)
0x014e0|7b 53 |{S |
0x014e0| 16 03 01 02 00 01 00 01 fc 03 03 f0 91 bc| ..............| payload: raw bits 0x14e2-0x16e6.7 (517)
0x014f0|87 3e ed 9d cc 98 4a 6a 2e 84 3f 5c 1d 9b a9 e9|.>....Jj..?\....|
* |until 0x16e6.7 (517) | |
0x016e0| 00 | . | padding: raw bits 0x16e7-0x16e7.7 (1)
| | | options[0:0]: 0x16e8-NA (0)
0x016e0| 68 02 00 00 | h... | footer_length: 616 0x16e8-0x16eb.7 (4)
| | | [39]{}: block 0x16ec-0x174f.7 (100)
0x016e0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x16ec-0x16ef.7 (4)
0x016f0|64 00 00 00 |d... | length: 100 0x16f0-0x16f3.7 (4)
0x016f0| 00 00 00 00 | .... | interface_id: 0 0x16f4-0x16f7.7 (4)
0x016f0| 72 1d 05 00 | r... | timestamp_high: 335218 0x16f8-0x16fb.7 (4)
0x016f0| 70 40 85 c9| p@..| timestamp_low: 3380953200 0x16fc-0x16ff.7 (4)
0x01700|42 00 00 00 |B... | capture_packet_length: 66 0x1700-0x1703.7 (4)
0x01700| 42 00 00 00 | B... | original_packet_length: 66 0x1704-0x1707.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x1708-0x1749.7 (66)
0x01700| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1708-0x170d.7 (6)
0x01700| 94 10| ..| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x170e-0x1713.7 (6)
0x01710|3e 05 36 d3 |>.6. |
0x01710| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1714-0x1715.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1716-0x1749.7 (52)
0x01710| 45 | E | version: 4 0x1716-0x1716.3 (0.4)
0x01710| 45 | E | ihl: 5 0x1716.4-0x1716.7 (0.4)
0x01710| 28 | ( | dscp: 10 0x1717-0x1717.5 (0.6)
0x01710| 28 | ( | ecn: 0 0x1717.6-0x1717.7 (0.2)
0x01710| 00 34 | .4 | total_length: 52 0x1718-0x1719.7 (2)
0x01710| 40 ed | @. | identification: 16621 0x171a-0x171b.7 (2)
0x01710| 00 | . | reserved: 0 0x171c-0x171c (0.1)
0x01710| 00 | . | dont_fragment: false 0x171c.1-0x171c.1 (0.1)
0x01710| 00 | . | more_fragments: false 0x171c.2-0x171c.2 (0.1)
0x01710| 00 00 | .. | fragment_offset: 0 0x171c.3-0x171d.7 (1.5)
0x01710| 35 | 5 | ttl: 53 0x171e-0x171e.7 (1)
0x01710| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x171f-0x171f.7 (1)
0x01720|53 1b |S. | header_checksum: 0x531b (valid) 0x1720-0x1721.7 (2)
0x01720| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x1722-0x1725.7 (4)
0x01720| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x1726-0x1729.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x172a-0x1749.7 (32)
0x01720| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0x172a-0x172b.7 (2)
0x01720| c7 25 | .% | destination_port: 50981 0x172c-0x172d.7 (2)
0x01720| 43 54| CT| sequence_number: 1129612081 0x172e-0x1731.7 (4)
0x01730|83 31 |.1 |
0x01730| 2b ce 30 90 | +.0. | acknowledgment_number: 734933136 0x1732-0x1735.7 (4)
0x01730| 80 | . | data_offset: 8 0x1736-0x1736.3 (0.4)
0x01730| 80 | . | reserved: 0 0x1736.4-0x1736.6 (0.3)
0x01730| 80 | . | ns: false 0x1736.7-0x1736.7 (0.1)
0x01730| 10 | . | cwr: false 0x1737-0x1737 (0.1)
0x01730| 10 | . | ece: false 0x1737.1-0x1737.1 (0.1)
0x01730| 10 | . | urg: false 0x1737.2-0x1737.2 (0.1)
0x01730| 10 | . | ack: true 0x1737.3-0x1737.3 (0.1)
0x01730| 10 | . | psh: false 0x1737.4-0x1737.4 (0.1)
0x01730| 10 | . | rst: false 0x1737.5-0x1737.5 (0.1)
0x01730| 10 | . | syn: false 0x1737.6-0x1737.6 (0.1)
0x01730| 10 | . | fin: false 0x1737.7-0x1737.7 (0.1)
0x01730| 01 55 | .U | window_size: 341 0x1738-0x1739.7 (2)
0x01730| 5b e3 | [. | checksum: 0x5be3 0x173a-0x173b.7 (2)
0x01730| 00 00 | .. | urgent_pointer: 0 0x173c-0x173d.7 (2)
| | | options[0:3]: 0x173e-0x1749.7 (12)
| | | [0]{}: option 0x173e-0x173e.7 (1)
0x01730| 01 | . | kind: "nop" (1) (No operation) 0x173e-0x173e.7 (1)
| | | [1]{}: option 0x173f-0x173f.7 (1)
0x01730| 01| .| kind: "nop" (1) (No operation) 0x173f-0x173f.7 (1)
| | | [2]{}: option 0x1740-0x1749.7 (10)
0x01740|08 |. | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x1740-0x1740.7 (1)
0x01740| 0a | . | length: 10 0x1741-0x1741.7 (1)
0x01740| e4 57 7b 6e 4b 2a 91 3b | .W{nK*.; | data: raw bits 0x1742-0x1749.7 (8)
| | | payload: raw bits 0x174a-NA (0)
0x01740| 00 00 | .. | padding: raw bits 0x174a-0x174b.7 (2)
| | | options[0:0]: 0x174c-NA (0)
0x01740| 64 00 00 00| d...| footer_length: 100 0x174c-0x174f.7 (4)
| | | [40]{}: block 0x1750-0x1843.7 (244)
0x01750|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1750-0x1753.7 (4)
0x01750| f4 00 00 00 | .... | length: 244 0x1754-0x1757.7 (4)
0x01750| 00 00 00 00 | .... | interface_id: 0 0x1758-0x175b.7 (4)
0x01750| 72 1d 05 00| r...| timestamp_high: 335218 0x175c-0x175f.7 (4)
0x01760|5d 45 85 c9 |]E.. | timestamp_low: 3380954461 0x1760-0x1763.7 (4)
0x01760| d4 00 00 00 | .... | capture_packet_length: 212 0x1764-0x1767.7 (4)
0x01760| d4 00 00 00 | .... | original_packet_length: 212 0x1768-0x176b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x176c-0x183f.7 (212)
0x01760| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x176c-0x1771.7 (6)
0x01770|7d 93 |}. |
0x01770| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x1772-0x1777.7 (6)
0x01770| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1778-0x1779.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x177a-0x183f.7 (198)
0x01770| 45 | E | version: 4 0x177a-0x177a.3 (0.4)
0x01770| 45 | E | ihl: 5 0x177a.4-0x177a.7 (0.4)
0x01770| 28 | ( | dscp: 10 0x177b-0x177b.5 (0.6)
0x01770| 28 | ( | ecn: 0 0x177b.6-0x177b.7 (0.2)
0x01770| 00 c6 | .. | total_length: 198 0x177c-0x177d.7 (2)
0x01770| 40 ee| @.| identification: 16622 0x177e-0x177f.7 (2)
0x01780|00 |. | reserved: 0 0x1780-0x1780 (0.1)
0x01780|00 |. | dont_fragment: false 0x1780.1-0x1780.1 (0.1)
0x01780|00 |. | more_fragments: false 0x1780.2-0x1780.2 (0.1)
0x01780|00 00 |.. | fragment_offset: 0 0x1780.3-0x1781.7 (1.5)
0x01780| 35 | 5 | ttl: 53 0x1782-0x1782.7 (1)
0x01780| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x1783-0x1783.7 (1)
0x01780| 52 88 | R. | header_checksum: 0x5288 (valid) 0x1784-0x1785.7 (2)
0x01780| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x1786-0x1789.7 (4)
0x01780| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x178a-0x178d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x178e-0x183f.7 (178)
0x01780| 01 bb| ..| source_port: "https" (443) (http protocol over TLS/SSL) 0x178e-0x178f.7 (2)
0x01790|c7 25 |.% | destination_port: 50981 0x1790-0x1791.7 (2)
0x01790| 43 54 83 31 | CT.1 | sequence_number: 1129612081 0x1792-0x1795.7 (4)
0x01790| 2b ce 30 90 | +.0. | acknowledgment_number: 734933136 0x1796-0x1799.7 (4)
0x01790| 80 | . | data_offset: 8 0x179a-0x179a.3 (0.4)
0x01790| 80 | . | reserved: 0 0x179a.4-0x179a.6 (0.3)
0x01790| 80 | . | ns: false 0x179a.7-0x179a.7 (0.1)
0x01790| 18 | . | cwr: false 0x179b-0x179b (0.1)
0x01790| 18 | . | ece: false 0x179b.1-0x179b.1 (0.1)
0x01790| 18 | . | urg: false 0x179b.2-0x179b.2 (0.1)
0x01790| 18 | . | ack: true 0x179b.3-0x179b.3 (0.1)
0x01790| 18 | . | psh: true 0x179b.4-0x179b.4 (0.1)
0x01790| 18 | . | rst: false 0x179b.5-0x179b.5 (0.1)
0x01790| 18 | . | syn: false 0x179b.6-0x179b.6 (0.1)
0x01790| 18 | . | fin: false 0x179b.7-0x179b.7 (0.1)
0x01790| 01 55 | .U | window_size: 341 0x179c-0x179d.7 (2)
0x01790| bf 9c| ..| checksum: 0xbf9c 0x179e-0x179f.7 (2)
0x017a0|00 00 |.. | urgent_pointer: 0 0x17a0-0x17a1.7 (2)
| | | options[0:3]: 0x17a2-0x17ad.7 (12)
| | | [0]{}: option 0x17a2-0x17a2.7 (1)
0x017a0| 01 | . | kind: "nop" (1) (No operation) 0x17a2-0x17a2.7 (1)
| | | [1]{}: option 0x17a3-0x17a3.7 (1)
0x017a0| 01 | . | kind: "nop" (1) (No operation) 0x17a3-0x17a3.7 (1)
| | | [2]{}: option 0x17a4-0x17ad.7 (10)
0x017a0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x17a4-0x17a4.7 (1)
0x017a0| 0a | . | length: 10 0x17a5-0x17a5.7 (1)
0x017a0| e4 57 7b 6e 4b 2a 91 3b | .W{nK*.; | data: raw bits 0x17a6-0x17ad.7 (8)
0x017a0| 16 03| ..| payload: raw bits 0x17ae-0x183f.7 (146)
0x017b0|03 00 5a 02 00 00 56 03 03 55 d0 e5 ff ab 64 a2|..Z...V..U....d.|
* |until 0x183f.7 (146) | |
| | | padding: raw bits 0x1840-NA (0)
| | | options[0:0]: 0x1840-NA (0)
0x01840|f4 00 00 00 |.... | footer_length: 244 0x1840-0x1843.7 (4)
| | | [41]{}: block 0x1844-0x18a7.7 (100)
0x01840| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1844-0x1847.7 (4)
0x01840| 64 00 00 00 | d... | length: 100 0x1848-0x184b.7 (4)
0x01840| 00 00 00 00| ....| interface_id: 0 0x184c-0x184f.7 (4)
0x01850|72 1d 05 00 |r... | timestamp_high: 335218 0x1850-0x1853.7 (4)
0x01850| 94 45 85 c9 | .E.. | timestamp_low: 3380954516 0x1854-0x1857.7 (4)
0x01850| 42 00 00 00 | B... | capture_packet_length: 66 0x1858-0x185b.7 (4)
0x01850| 42 00 00 00| B...| original_packet_length: 66 0x185c-0x185f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x1860-0x18a1.7 (66)
0x01860|94 10 3e 05 36 d3 |..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x1860-0x1865.7 (6)
0x01860| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1866-0x186b.7 (6)
0x01860| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x186c-0x186d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x186e-0x18a1.7 (52)
0x01860| 45 | E | version: 4 0x186e-0x186e.3 (0.4)
0x01860| 45 | E | ihl: 5 0x186e.4-0x186e.7 (0.4)
0x01860| 00| .| dscp: 0 0x186f-0x186f.5 (0.6)
0x01860| 00| .| ecn: 0 0x186f.6-0x186f.7 (0.2)
0x01870|00 34 |.4 | total_length: 52 0x1870-0x1871.7 (2)
0x01870| d9 7a | .z | identification: 55674 0x1872-0x1873.7 (2)
0x01870| 40 | @ | reserved: 0 0x1874-0x1874 (0.1)
0x01870| 40 | @ | dont_fragment: true 0x1874.1-0x1874.1 (0.1)
0x01870| 40 | @ | more_fragments: false 0x1874.2-0x1874.2 (0.1)
0x01870| 40 00 | @. | fragment_offset: 0 0x1874.3-0x1875.7 (1.5)
0x01870| 40 | @ | ttl: 64 0x1876-0x1876.7 (1)
0x01870| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x1877-0x1877.7 (1)
0x01870| 6f b5 | o. | header_checksum: 0x6fb5 (valid) 0x1878-0x1879.7 (2)
0x01870| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x187a-0x187d.7 (4)
0x01870| 4a 7d| J}| destination_ip: "74.125.228.227" (0x4a7de4e3) 0x187e-0x1881.7 (4)
0x01880|e4 e3 |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x1882-0x18a1.7 (32)
0x01880| c7 25 | .% | source_port: 50981 0x1882-0x1883.7 (2)
0x01880| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x1884-0x1885.7 (2)
0x01880| 2b ce 30 90 | +.0. | sequence_number: 734933136 0x1886-0x1889.7 (4)
0x01880| 43 54 83 c3 | CT.. | acknowledgment_number: 1129612227 0x188a-0x188d.7 (4)
0x01880| 80 | . | data_offset: 8 0x188e-0x188e.3 (0.4)
0x01880| 80 | . | reserved: 0 0x188e.4-0x188e.6 (0.3)
0x01880| 80 | . | ns: false 0x188e.7-0x188e.7 (0.1)
0x01880| 10| .| cwr: false 0x188f-0x188f (0.1)
0x01880| 10| .| ece: false 0x188f.1-0x188f.1 (0.1)
0x01880| 10| .| urg: false 0x188f.2-0x188f.2 (0.1)
0x01880| 10| .| ack: true 0x188f.3-0x188f.3 (0.1)
0x01880| 10| .| psh: false 0x188f.4-0x188f.4 (0.1)
0x01880| 10| .| rst: false 0x188f.5-0x188f.5 (0.1)
0x01880| 10| .| syn: false 0x188f.6-0x188f.6 (0.1)
0x01880| 10| .| fin: false 0x188f.7-0x188f.7 (0.1)
0x01890|10 14 |.. | window_size: 4116 0x1890-0x1891.7 (2)
0x01890| 4c 78 | Lx | checksum: 0x4c78 0x1892-0x1893.7 (2)
0x01890| 00 00 | .. | urgent_pointer: 0 0x1894-0x1895.7 (2)
| | | options[0:3]: 0x1896-0x18a1.7 (12)
| | | [0]{}: option 0x1896-0x1896.7 (1)
0x01890| 01 | . | kind: "nop" (1) (No operation) 0x1896-0x1896.7 (1)
| | | [1]{}: option 0x1897-0x1897.7 (1)
0x01890| 01 | . | kind: "nop" (1) (No operation) 0x1897-0x1897.7 (1)
| | | [2]{}: option 0x1898-0x18a1.7 (10)
0x01890| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x1898-0x1898.7 (1)
0x01890| 0a | . | length: 10 0x1899-0x1899.7 (1)
0x01890| 4b 2a 91 55 e4 57| K*.U.W| data: raw bits 0x189a-0x18a1.7 (8)
0x018a0|7b 6e |{n |
| | | payload: raw bits 0x18a2-NA (0)
0x018a0| 00 00 | .. | padding: raw bits 0x18a2-0x18a3.7 (2)
| | | options[0:0]: 0x18a4-NA (0)
0x018a0| 64 00 00 00 | d... | footer_length: 100 0x18a4-0x18a7.7 (4)
| | | [42]{}: block 0x18a8-0x193f.7 (152)
0x018a0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x18a8-0x18ab.7 (4)
0x018a0| 98 00 00 00| ....| length: 152 0x18ac-0x18af.7 (4)
0x018b0|00 00 00 00 |.... | interface_id: 0 0x18b0-0x18b3.7 (4)
0x018b0| 72 1d 05 00 | r... | timestamp_high: 335218 0x18b4-0x18b7.7 (4)
0x018b0| 4b 46 85 c9 | KF.. | timestamp_low: 3380954699 0x18b8-0x18bb.7 (4)
0x018b0| 75 00 00 00| u...| capture_packet_length: 117 0x18bc-0x18bf.7 (4)
0x018c0|75 00 00 00 |u... | original_packet_length: 117 0x18c0-0x18c3.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x18c4-0x1938.7 (117)
0x018c0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x18c4-0x18c9.7 (6)
0x018c0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x18ca-0x18cf.7 (6)
0x018d0|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x18d0-0x18d1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x18d2-0x1938.7 (103)
0x018d0| 45 | E | version: 4 0x18d2-0x18d2.3 (0.4)
0x018d0| 45 | E | ihl: 5 0x18d2.4-0x18d2.7 (0.4)
0x018d0| 00 | . | dscp: 0 0x18d3-0x18d3.5 (0.6)
0x018d0| 00 | . | ecn: 0 0x18d3.6-0x18d3.7 (0.2)
0x018d0| 00 67 | .g | total_length: 103 0x18d4-0x18d5.7 (2)
0x018d0| 7c a2 | |. | identification: 31906 0x18d6-0x18d7.7 (2)
0x018d0| 40 | @ | reserved: 0 0x18d8-0x18d8 (0.1)
0x018d0| 40 | @ | dont_fragment: true 0x18d8.1-0x18d8.1 (0.1)
0x018d0| 40 | @ | more_fragments: false 0x18d8.2-0x18d8.2 (0.1)
0x018d0| 40 00 | @. | fragment_offset: 0 0x18d8.3-0x18d9.7 (1.5)
0x018d0| 40 | @ | ttl: 64 0x18da-0x18da.7 (1)
0x018d0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x18db-0x18db.7 (1)
0x018d0| cc 5a | .Z | header_checksum: 0xcc5a (valid) 0x18dc-0x18dd.7 (2)
0x018d0| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0x18de-0x18e1.7 (4)
0x018e0|01 8b |.. |
0x018e0| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x18e2-0x18e5.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x18e6-0x1938.7 (83)
0x018e0| c7 25 | .% | source_port: 50981 0x18e6-0x18e7.7 (2)
0x018e0| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x18e8-0x18e9.7 (2)
0x018e0| 2b ce 30 90 | +.0. | sequence_number: 734933136 0x18ea-0x18ed.7 (4)
0x018e0| 43 54| CT| acknowledgment_number: 1129612227 0x18ee-0x18f1.7 (4)
0x018f0|83 c3 |.. |
0x018f0| 80 | . | data_offset: 8 0x18f2-0x18f2.3 (0.4)
0x018f0| 80 | . | reserved: 0 0x18f2.4-0x18f2.6 (0.3)
0x018f0| 80 | . | ns: false 0x18f2.7-0x18f2.7 (0.1)
0x018f0| 18 | . | cwr: false 0x18f3-0x18f3 (0.1)
0x018f0| 18 | . | ece: false 0x18f3.1-0x18f3.1 (0.1)
0x018f0| 18 | . | urg: false 0x18f3.2-0x18f3.2 (0.1)
0x018f0| 18 | . | ack: true 0x18f3.3-0x18f3.3 (0.1)
0x018f0| 18 | . | psh: true 0x18f3.4-0x18f3.4 (0.1)
0x018f0| 18 | . | rst: false 0x18f3.5-0x18f3.5 (0.1)
0x018f0| 18 | . | syn: false 0x18f3.6-0x18f3.6 (0.1)
0x018f0| 18 | . | fin: false 0x18f3.7-0x18f3.7 (0.1)
0x018f0| 10 14 | .. | window_size: 4116 0x18f4-0x18f5.7 (2)
0x018f0| 9a 08 | .. | checksum: 0x9a08 0x18f6-0x18f7.7 (2)
0x018f0| 00 00 | .. | urgent_pointer: 0 0x18f8-0x18f9.7 (2)
| | | options[0:3]: 0x18fa-0x1905.7 (12)
| | | [0]{}: option 0x18fa-0x18fa.7 (1)
0x018f0| 01 | . | kind: "nop" (1) (No operation) 0x18fa-0x18fa.7 (1)
| | | [1]{}: option 0x18fb-0x18fb.7 (1)
0x018f0| 01 | . | kind: "nop" (1) (No operation) 0x18fb-0x18fb.7 (1)
| | | [2]{}: option 0x18fc-0x1905.7 (10)
0x018f0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x18fc-0x18fc.7 (1)
0x018f0| 0a | . | length: 10 0x18fd-0x18fd.7 (1)
0x018f0| 4b 2a| K*| data: raw bits 0x18fe-0x1905.7 (8)
0x01900|91 55 e4 57 7b 6e |.U.W{n |
0x01900| 14 03 03 00 01 01 16 03 03 00| ..........| payload: raw bits 0x1906-0x1938.7 (51)
0x01910|28 00 00 00 00 00 00 00 00 2f 64 40 f5 c5 eb af|(......../d@....|
* |until 0x1938.7 (51) | |
0x01930| 00 00 00 | ... | padding: raw bits 0x1939-0x193b.7 (3)
| | | options[0:0]: 0x193c-NA (0)
0x01930| 98 00 00 00| ....| footer_length: 152 0x193c-0x193f.7 (4)
| | | [43]{}: block 0x1940-0x19d7.7 (152)
0x01940|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1940-0x1943.7 (4)
0x01940| 98 00 00 00 | .... | length: 152 0x1944-0x1947.7 (4)
0x01940| 00 00 00 00 | .... | interface_id: 0 0x1948-0x194b.7 (4)
0x01940| 72 1d 05 00| r...| timestamp_high: 335218 0x194c-0x194f.7 (4)
0x01950|7e 4d 85 c9 |~M.. | timestamp_low: 3380956542 0x1950-0x1953.7 (4)
0x01950| 77 00 00 00 | w... | capture_packet_length: 119 0x1954-0x1957.7 (4)
0x01950| 77 00 00 00 | w... | original_packet_length: 119 0x1958-0x195b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x195c-0x19d2.7 (119)
0x01950| 94 10 3e 05| ..>.| destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x195c-0x1961.7 (6)
0x01960|36 d3 |6. |
0x01960| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1962-0x1967.7 (6)
0x01960| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1968-0x1969.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x196a-0x19d2.7 (105)
0x01960| 45 | E | version: 4 0x196a-0x196a.3 (0.4)
0x01960| 45 | E | ihl: 5 0x196a.4-0x196a.7 (0.4)
0x01960| 00 | . | dscp: 0 0x196b-0x196b.5 (0.6)
0x01960| 00 | . | ecn: 0 0x196b.6-0x196b.7 (0.2)
0x01960| 00 69 | .i | total_length: 105 0x196c-0x196d.7 (2)
0x01960| c4 1b| ..| identification: 50203 0x196e-0x196f.7 (2)
0x01970|40 |@ | reserved: 0 0x1970-0x1970 (0.1)
0x01970|40 |@ | dont_fragment: true 0x1970.1-0x1970.1 (0.1)
0x01970|40 |@ | more_fragments: false 0x1970.2-0x1970.2 (0.1)
0x01970|40 00 |@. | fragment_offset: 0 0x1970.3-0x1971.7 (1.5)
0x01970| 40 | @ | ttl: 64 0x1972-0x1972.7 (1)
0x01970| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x1973-0x1973.7 (1)
0x01970| 84 df | .. | header_checksum: 0x84df (valid) 0x1974-0x1975.7 (2)
0x01970| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x1976-0x1979.7 (4)
0x01970| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x197a-0x197d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x197e-0x19d2.7 (85)
0x01970| c7 25| .%| source_port: 50981 0x197e-0x197f.7 (2)
0x01980|01 bb |.. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x1980-0x1981.7 (2)
0x01980| 2b ce 30 c3 | +.0. | sequence_number: 734933187 0x1982-0x1985.7 (4)
0x01980| 43 54 83 c3 | CT.. | acknowledgment_number: 1129612227 0x1986-0x1989.7 (4)
0x01980| 80 | . | data_offset: 8 0x198a-0x198a.3 (0.4)
0x01980| 80 | . | reserved: 0 0x198a.4-0x198a.6 (0.3)
0x01980| 80 | . | ns: false 0x198a.7-0x198a.7 (0.1)
0x01980| 18 | . | cwr: false 0x198b-0x198b (0.1)
0x01980| 18 | . | ece: false 0x198b.1-0x198b.1 (0.1)
0x01980| 18 | . | urg: false 0x198b.2-0x198b.2 (0.1)
0x01980| 18 | . | ack: true 0x198b.3-0x198b.3 (0.1)
0x01980| 18 | . | psh: true 0x198b.4-0x198b.4 (0.1)
0x01980| 18 | . | rst: false 0x198b.5-0x198b.5 (0.1)
0x01980| 18 | . | syn: false 0x198b.6-0x198b.6 (0.1)
0x01980| 18 | . | fin: false 0x198b.7-0x198b.7 (0.1)
0x01980| 10 14 | .. | window_size: 4116 0x198c-0x198d.7 (2)
0x01980| 2a 6b| *k| checksum: 0x2a6b 0x198e-0x198f.7 (2)
0x01990|00 00 |.. | urgent_pointer: 0 0x1990-0x1991.7 (2)
| | | options[0:3]: 0x1992-0x199d.7 (12)
| | | [0]{}: option 0x1992-0x1992.7 (1)
0x01990| 01 | . | kind: "nop" (1) (No operation) 0x1992-0x1992.7 (1)
| | | [1]{}: option 0x1993-0x1993.7 (1)
0x01990| 01 | . | kind: "nop" (1) (No operation) 0x1993-0x1993.7 (1)
| | | [2]{}: option 0x1994-0x199d.7 (10)
0x01990| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x1994-0x1994.7 (1)
0x01990| 0a | . | length: 10 0x1995-0x1995.7 (1)
0x01990| 4b 2a 91 57 e4 57 7b 6e | K*.W.W{n | data: raw bits 0x1996-0x199d.7 (8)
0x01990| 17 03| ..| payload: raw bits 0x199e-0x19d2.7 (53)
0x019a0|03 00 30 00 00 00 00 00 00 00 01 51 98 2a 12 b0|..0........Q.*..|
* |until 0x19d2.7 (53) | |
0x019d0| 00 | . | padding: raw bits 0x19d3-0x19d3.7 (1)
| | | options[0:0]: 0x19d4-NA (0)
0x019d0| 98 00 00 00 | .... | footer_length: 152 0x19d4-0x19d7.7 (4)
| | | [44]{}: block 0x19d8-0x1a6b.7 (148)
0x019d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x19d8-0x19db.7 (4)
0x019d0| 94 00 00 00| ....| length: 148 0x19dc-0x19df.7 (4)
0x019e0|00 00 00 00 |.... | interface_id: 0 0x19e0-0x19e3.7 (4)
0x019e0| 72 1d 05 00 | r... | timestamp_high: 335218 0x19e4-0x19e7.7 (4)
0x019e0| 7f 4d 85 c9 | .M.. | timestamp_low: 3380956543 0x19e8-0x19eb.7 (4)
0x019e0| 74 00 00 00| t...| capture_packet_length: 116 0x19ec-0x19ef.7 (4)
0x019f0|74 00 00 00 |t... | original_packet_length: 116 0x19f0-0x19f3.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x19f4-0x1a67.7 (116)
0x019f0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x19f4-0x19f9.7 (6)
0x019f0| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x19fa-0x19ff.7 (6)
0x01a00|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1a00-0x1a01.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1a02-0x1a67.7 (102)
0x01a00| 45 | E | version: 4 0x1a02-0x1a02.3 (0.4)
0x01a00| 45 | E | ihl: 5 0x1a02.4-0x1a02.7 (0.4)
0x01a00| 00 | . | dscp: 0 0x1a03-0x1a03.5 (0.6)
0x01a00| 00 | . | ecn: 0 0x1a03.6-0x1a03.7 (0.2)
0x01a00| 00 66 | .f | total_length: 102 0x1a04-0x1a05.7 (2)
0x01a00| e3 b8 | .. | identification: 58296 0x1a06-0x1a07.7 (2)
0x01a00| 40 | @ | reserved: 0 0x1a08-0x1a08 (0.1)
0x01a00| 40 | @ | dont_fragment: true 0x1a08.1-0x1a08.1 (0.1)
0x01a00| 40 | @ | more_fragments: false 0x1a08.2-0x1a08.2 (0.1)
0x01a00| 40 00 | @. | fragment_offset: 0 0x1a08.3-0x1a09.7 (1.5)
0x01a00| 40 | @ | ttl: 64 0x1a0a-0x1a0a.7 (1)
0x01a00| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x1a0b-0x1a0b.7 (1)
0x01a00| 65 45 | eE | header_checksum: 0x6545 (valid) 0x1a0c-0x1a0d.7 (2)
0x01a00| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0x1a0e-0x1a11.7 (4)
0x01a10|01 8b |.. |
0x01a10| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x1a12-0x1a15.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x1a16-0x1a67.7 (82)
0x01a10| c7 25 | .% | source_port: 50981 0x1a16-0x1a17.7 (2)
0x01a10| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x1a18-0x1a19.7 (2)
0x01a10| 2b ce 30 f8 | +.0. | sequence_number: 734933240 0x1a1a-0x1a1d.7 (4)
0x01a10| 43 54| CT| acknowledgment_number: 1129612227 0x1a1e-0x1a21.7 (4)
0x01a20|83 c3 |.. |
0x01a20| 80 | . | data_offset: 8 0x1a22-0x1a22.3 (0.4)
0x01a20| 80 | . | reserved: 0 0x1a22.4-0x1a22.6 (0.3)
0x01a20| 80 | . | ns: false 0x1a22.7-0x1a22.7 (0.1)
0x01a20| 18 | . | cwr: false 0x1a23-0x1a23 (0.1)
0x01a20| 18 | . | ece: false 0x1a23.1-0x1a23.1 (0.1)
0x01a20| 18 | . | urg: false 0x1a23.2-0x1a23.2 (0.1)
0x01a20| 18 | . | ack: true 0x1a23.3-0x1a23.3 (0.1)
0x01a20| 18 | . | psh: true 0x1a23.4-0x1a23.4 (0.1)
0x01a20| 18 | . | rst: false 0x1a23.5-0x1a23.5 (0.1)
0x01a20| 18 | . | syn: false 0x1a23.6-0x1a23.6 (0.1)
0x01a20| 18 | . | fin: false 0x1a23.7-0x1a23.7 (0.1)
0x01a20| 10 14 | .. | window_size: 4116 0x1a24-0x1a25.7 (2)
0x01a20| f2 bb | .. | checksum: 0xf2bb 0x1a26-0x1a27.7 (2)
0x01a20| 00 00 | .. | urgent_pointer: 0 0x1a28-0x1a29.7 (2)
| | | options[0:3]: 0x1a2a-0x1a35.7 (12)
| | | [0]{}: option 0x1a2a-0x1a2a.7 (1)
0x01a20| 01 | . | kind: "nop" (1) (No operation) 0x1a2a-0x1a2a.7 (1)
| | | [1]{}: option 0x1a2b-0x1a2b.7 (1)
0x01a20| 01 | . | kind: "nop" (1) (No operation) 0x1a2b-0x1a2b.7 (1)
| | | [2]{}: option 0x1a2c-0x1a35.7 (10)
0x01a20| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x1a2c-0x1a2c.7 (1)
0x01a20| 0a | . | length: 10 0x1a2d-0x1a2d.7 (1)
0x01a20| 4b 2a| K*| data: raw bits 0x1a2e-0x1a35.7 (8)
0x01a30|91 57 e4 57 7b 6e |.W.W{n |
0x01a30| 17 03 03 00 2d 00 00 00 00 00| ....-.....| payload: raw bits 0x1a36-0x1a67.7 (50)
0x01a40|00 00 02 f0 bc fa 7b fe 22 8d 11 11 1b 0b 72 db|......{.".....r.|
* |until 0x1a67.7 (50) | |
| | | padding: raw bits 0x1a68-NA (0)
| | | options[0:0]: 0x1a68-NA (0)
0x01a60| 94 00 00 00 | .... | footer_length: 148 0x1a68-0x1a6b.7 (4)
| | | [45]{}: block 0x1a6c-0x1af7.7 (140)
0x01a60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1a6c-0x1a6f.7 (4)
0x01a70|8c 00 00 00 |.... | length: 140 0x1a70-0x1a73.7 (4)
0x01a70| 00 00 00 00 | .... | interface_id: 0 0x1a74-0x1a77.7 (4)
0x01a70| 72 1d 05 00 | r... | timestamp_high: 335218 0x1a78-0x1a7b.7 (4)
0x01a70| 80 4d 85 c9| .M..| timestamp_low: 3380956544 0x1a7c-0x1a7f.7 (4)
0x01a80|6c 00 00 00 |l... | capture_packet_length: 108 0x1a80-0x1a83.7 (4)
0x01a80| 6c 00 00 00 | l... | original_packet_length: 108 0x1a84-0x1a87.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x1a88-0x1af3.7 (108)
0x01a80| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x1a88-0x1a8d.7 (6)
0x01a80| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1a8e-0x1a93.7 (6)
0x01a90|60 f1 7d 93 |`.}. |
0x01a90| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1a94-0x1a95.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1a96-0x1af3.7 (94)
0x01a90| 45 | E | version: 4 0x1a96-0x1a96.3 (0.4)
0x01a90| 45 | E | ihl: 5 0x1a96.4-0x1a96.7 (0.4)
0x01a90| 00 | . | dscp: 0 0x1a97-0x1a97.5 (0.6)
0x01a90| 00 | . | ecn: 0 0x1a97.6-0x1a97.7 (0.2)
0x01a90| 00 5e | .^ | total_length: 94 0x1a98-0x1a99.7 (2)
0x01a90| 03 80 | .. | identification: 896 0x1a9a-0x1a9b.7 (2)
0x01a90| 40 | @ | reserved: 0 0x1a9c-0x1a9c (0.1)
0x01a90| 40 | @ | dont_fragment: true 0x1a9c.1-0x1a9c.1 (0.1)
0x01a90| 40 | @ | more_fragments: false 0x1a9c.2-0x1a9c.2 (0.1)
0x01a90| 40 00 | @. | fragment_offset: 0 0x1a9c.3-0x1a9d.7 (1.5)
0x01a90| 40 | @ | ttl: 64 0x1a9e-0x1a9e.7 (1)
0x01a90| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x1a9f-0x1a9f.7 (1)
0x01aa0|45 86 |E. | header_checksum: 0x4586 (valid) 0x1aa0-0x1aa1.7 (2)
0x01aa0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x1aa2-0x1aa5.7 (4)
0x01aa0| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x1aa6-0x1aa9.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x1aaa-0x1af3.7 (74)
0x01aa0| c7 25 | .% | source_port: 50981 0x1aaa-0x1aab.7 (2)
0x01aa0| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x1aac-0x1aad.7 (2)
0x01aa0| 2b ce| +.| sequence_number: 734933290 0x1aae-0x1ab1.7 (4)
0x01ab0|31 2a |1* |
0x01ab0| 43 54 83 c3 | CT.. | acknowledgment_number: 1129612227 0x1ab2-0x1ab5.7 (4)
0x01ab0| 80 | . | data_offset: 8 0x1ab6-0x1ab6.3 (0.4)
0x01ab0| 80 | . | reserved: 0 0x1ab6.4-0x1ab6.6 (0.3)
0x01ab0| 80 | . | ns: false 0x1ab6.7-0x1ab6.7 (0.1)
0x01ab0| 18 | . | cwr: false 0x1ab7-0x1ab7 (0.1)
0x01ab0| 18 | . | ece: false 0x1ab7.1-0x1ab7.1 (0.1)
0x01ab0| 18 | . | urg: false 0x1ab7.2-0x1ab7.2 (0.1)
0x01ab0| 18 | . | ack: true 0x1ab7.3-0x1ab7.3 (0.1)
0x01ab0| 18 | . | psh: true 0x1ab7.4-0x1ab7.4 (0.1)
0x01ab0| 18 | . | rst: false 0x1ab7.5-0x1ab7.5 (0.1)
0x01ab0| 18 | . | syn: false 0x1ab7.6-0x1ab7.6 (0.1)
0x01ab0| 18 | . | fin: false 0x1ab7.7-0x1ab7.7 (0.1)
0x01ab0| 10 14 | .. | window_size: 4116 0x1ab8-0x1ab9.7 (2)
0x01ab0| 17 a0 | .. | checksum: 0x17a0 0x1aba-0x1abb.7 (2)
0x01ab0| 00 00 | .. | urgent_pointer: 0 0x1abc-0x1abd.7 (2)
| | | options[0:3]: 0x1abe-0x1ac9.7 (12)
| | | [0]{}: option 0x1abe-0x1abe.7 (1)
0x01ab0| 01 | . | kind: "nop" (1) (No operation) 0x1abe-0x1abe.7 (1)
| | | [1]{}: option 0x1abf-0x1abf.7 (1)
0x01ab0| 01| .| kind: "nop" (1) (No operation) 0x1abf-0x1abf.7 (1)
| | | [2]{}: option 0x1ac0-0x1ac9.7 (10)
0x01ac0|08 |. | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x1ac0-0x1ac0.7 (1)
0x01ac0| 0a | . | length: 10 0x1ac1-0x1ac1.7 (1)
0x01ac0| 4b 2a 91 57 e4 57 7b 6e | K*.W.W{n | data: raw bits 0x1ac2-0x1ac9.7 (8)
0x01ac0| 17 03 03 00 25 00| ....%.| payload: raw bits 0x1aca-0x1af3.7 (42)
0x01ad0|00 00 00 00 00 00 03 91 f4 86 be 5b 2a 4f 9f 3e|...........[*O.>|
* |until 0x1af3.7 (42) | |
| | | padding: raw bits 0x1af4-NA (0)
| | | options[0:0]: 0x1af4-NA (0)
0x01af0| 8c 00 00 00 | .... | footer_length: 140 0x1af4-0x1af7.7 (4)
| | | [46]{}: block 0x1af8-0x1fef.7 (1272)
0x01af0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1af8-0x1afb.7 (4)
0x01af0| f8 04 00 00| ....| length: 1272 0x1afc-0x1aff.7 (4)
0x01b00|00 00 00 00 |.... | interface_id: 0 0x1b00-0x1b03.7 (4)
0x01b00| 72 1d 05 00 | r... | timestamp_high: 335218 0x1b04-0x1b07.7 (4)
0x01b00| 58 4e 85 c9 | XN.. | timestamp_low: 3380956760 0x1b08-0x1b0b.7 (4)
0x01b00| d6 04 00 00| ....| capture_packet_length: 1238 0x1b0c-0x1b0f.7 (4)
0x01b10|d6 04 00 00 |.... | original_packet_length: 1238 0x1b10-0x1b13.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x1b14-0x1fe9.7 (1238)
0x01b10| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x1b14-0x1b19.7 (6)
0x01b10| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x1b1a-0x1b1f.7 (6)
0x01b20|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x1b20-0x1b21.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x1b22-0x1fe9.7 (1224)
0x01b20| 45 | E | version: 4 0x1b22-0x1b22.3 (0.4)
0x01b20| 45 | E | ihl: 5 0x1b22.4-0x1b22.7 (0.4)
0x01b20| 00 | . | dscp: 0 0x1b23-0x1b23.5 (0.6)
0x01b20| 00 | . | ecn: 0 0x1b23.6-0x1b23.7 (0.2)
0x01b20| 04 c8 | .. | total_length: 1224 0x1b24-0x1b25.7 (2)
0x01b20| b8 1a | .. | identification: 47130 0x1b26-0x1b27.7 (2)
0x01b20| 40 | @ | reserved: 0 0x1b28-0x1b28 (0.1)
0x01b20| 40 | @ | dont_fragment: true 0x1b28.1-0x1b28.1 (0.1)
0x01b20| 40 | @ | more_fragments: false 0x1b28.2-0x1b28.2 (0.1)
0x01b20| 40 00 | @. | fragment_offset: 0 0x1b28.3-0x1b29.7 (1.5)
0x01b20| 40 | @ | ttl: 64 0x1b2a-0x1b2a.7 (1)
0x01b20| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x1b2b-0x1b2b.7 (1)
0x01b20| 8c 81 | .. | header_checksum: 0x8c81 (valid) 0x1b2c-0x1b2d.7 (2)
0x01b20| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0x1b2e-0x1b31.7 (4)
0x01b30|01 8b |.. |
0x01b30| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x1b32-0x1b35.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x1b36-0x1fe9.7 (1204)
0x01b30| c7 25 | .% | source_port: 50981 0x1b36-0x1b37.7 (2)
0x01b30| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x1b38-0x1b39.7 (2)
0x01b30| 2b ce 31 54 | +.1T | sequence_number: 734933332 0x1b3a-0x1b3d.7 (4)
0x01b30| 43 54| CT| acknowledgment_number: 1129612227 0x1b3e-0x1b41.7 (4)
0x01b40|83 c3 |.. |
0x01b40| 80 | . | data_offset: 8 0x1b42-0x1b42.3 (0.4)
0x01b40| 80 | . | reserved: 0 0x1b42.4-0x1b42.6 (0.3)
0x01b40| 80 | . | ns: false 0x1b42.7-0x1b42.7 (0.1)
0x01b40| 18 | . | cwr: false 0x1b43-0x1b43 (0.1)
0x01b40| 18 | . | ece: false 0x1b43.1-0x1b43.1 (0.1)
0x01b40| 18 | . | urg: false 0x1b43.2-0x1b43.2 (0.1)
0x01b40| 18 | . | ack: true 0x1b43.3-0x1b43.3 (0.1)
0x01b40| 18 | . | psh: true 0x1b43.4-0x1b43.4 (0.1)
0x01b40| 18 | . | rst: false 0x1b43.5-0x1b43.5 (0.1)
0x01b40| 18 | . | syn: false 0x1b43.6-0x1b43.6 (0.1)
0x01b40| 18 | . | fin: false 0x1b43.7-0x1b43.7 (0.1)
0x01b40| 10 14 | .. | window_size: 4116 0x1b44-0x1b45.7 (2)
0x01b40| 4e 99 | N. | checksum: 0x4e99 0x1b46-0x1b47.7 (2)
0x01b40| 00 00 | .. | urgent_pointer: 0 0x1b48-0x1b49.7 (2)
| | | options[0:3]: 0x1b4a-0x1b55.7 (12)
| | | [0]{}: option 0x1b4a-0x1b4a.7 (1)
0x01b40| 01 | . | kind: "nop" (1) (No operation) 0x1b4a-0x1b4a.7 (1)
| | | [1]{}: option 0x1b4b-0x1b4b.7 (1)
0x01b40| 01 | . | kind: "nop" (1) (No operation) 0x1b4b-0x1b4b.7 (1)
| | | [2]{}: option 0x1b4c-0x1b55.7 (10)
0x01b40| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x1b4c-0x1b4c.7 (1)
0x01b40| 0a | . | length: 10 0x1b4d-0x1b4d.7 (1)
0x01b40| 4b 2a| K*| data: raw bits 0x1b4e-0x1b55.7 (8)
0x01b50|91 57 e4 57 7b 6e |.W.W{n |
0x01b50| 17 03 03 04 8f 00 00 00 00 00| ..........| payload: raw bits 0x1b56-0x1fe9.7 (1172)
0x01b60|00 00 04 98 59 fb 7c d9 ba ce c7 cc 54 de 7c d1|....Y.|.....T.|.|
* |until 0x1fe9.7 (1172) | |
0x01fe0| 00 00 | .. | padding: raw bits 0x1fea-0x1feb.7 (2)
| | | options[0:0]: 0x1fec-NA (0)
0x01fe0| f8 04 00 00| ....| footer_length: 1272 0x1fec-0x1fef.7 (4)
| | | [47]{}: block 0x1ff0-0x2053.7 (100)
0x01ff0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1ff0-0x1ff3.7 (4)
0x01ff0| 64 00 00 00 | d... | length: 100 0x1ff4-0x1ff7.7 (4)
0x01ff0| 00 00 00 00 | .... | interface_id: 0 0x1ff8-0x1ffb.7 (4)
0x01ff0| 72 1d 05 00| r...| timestamp_high: 335218 0x1ffc-0x1fff.7 (4)
0x02000|56 fc 85 c9 |V... | timestamp_low: 3381001302 0x2000-0x2003.7 (4)
0x02000| 42 00 00 00 | B... | capture_packet_length: 66 0x2004-0x2007.7 (4)
0x02000| 42 00 00 00 | B... | original_packet_length: 66 0x2008-0x200b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x200c-0x204d.7 (66)
0x02000| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x200c-0x2011.7 (6)
0x02010|7d 93 |}. |
0x02010| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2012-0x2017.7 (6)
0x02010| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2018-0x2019.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x201a-0x204d.7 (52)
0x02010| 45 | E | version: 4 0x201a-0x201a.3 (0.4)
0x02010| 45 | E | ihl: 5 0x201a.4-0x201a.7 (0.4)
0x02010| 28 | ( | dscp: 10 0x201b-0x201b.5 (0.6)
0x02010| 28 | ( | ecn: 0 0x201b.6-0x201b.7 (0.2)
0x02010| 00 34 | .4 | total_length: 52 0x201c-0x201d.7 (2)
0x02010| 40 fc| @.| identification: 16636 0x201e-0x201f.7 (2)
0x02020|00 |. | reserved: 0 0x2020-0x2020 (0.1)
0x02020|00 |. | dont_fragment: false 0x2020.1-0x2020.1 (0.1)
0x02020|00 |. | more_fragments: false 0x2020.2-0x2020.2 (0.1)
0x02020|00 00 |.. | fragment_offset: 0 0x2020.3-0x2021.7 (1.5)
0x02020| 35 | 5 | ttl: 53 0x2022-0x2022.7 (1)
0x02020| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x2023-0x2023.7 (1)
0x02020| 53 0c | S. | header_checksum: 0x530c (valid) 0x2024-0x2025.7 (2)
0x02020| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x2026-0x2029.7 (4)
0x02020| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x202a-0x202d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x202e-0x204d.7 (32)
0x02020| 01 bb| ..| source_port: "https" (443) (http protocol over TLS/SSL) 0x202e-0x202f.7 (2)
0x02030|c7 25 |.% | destination_port: 50981 0x2030-0x2031.7 (2)
0x02030| 43 54 83 c3 | CT.. | sequence_number: 1129612227 0x2032-0x2035.7 (4)
0x02030| 2b ce 35 e8 | +.5. | acknowledgment_number: 734934504 0x2036-0x2039.7 (4)
0x02030| 80 | . | data_offset: 8 0x203a-0x203a.3 (0.4)
0x02030| 80 | . | reserved: 0 0x203a.4-0x203a.6 (0.3)
0x02030| 80 | . | ns: false 0x203a.7-0x203a.7 (0.1)
0x02030| 10 | . | cwr: false 0x203b-0x203b (0.1)
0x02030| 10 | . | ece: false 0x203b.1-0x203b.1 (0.1)
0x02030| 10 | . | urg: false 0x203b.2-0x203b.2 (0.1)
0x02030| 10 | . | ack: true 0x203b.3-0x203b.3 (0.1)
0x02030| 10 | . | psh: false 0x203b.4-0x203b.4 (0.1)
0x02030| 10 | . | rst: false 0x203b.5-0x203b.5 (0.1)
0x02030| 10 | . | syn: false 0x203b.6-0x203b.6 (0.1)
0x02030| 10 | . | fin: false 0x203b.7-0x203b.7 (0.1)
0x02030| 01 68 | .h | window_size: 360 0x203c-0x203d.7 (2)
0x02030| 55 ae| U.| checksum: 0x55ae 0x203e-0x203f.7 (2)
0x02040|00 00 |.. | urgent_pointer: 0 0x2040-0x2041.7 (2)
| | | options[0:3]: 0x2042-0x204d.7 (12)
| | | [0]{}: option 0x2042-0x2042.7 (1)
0x02040| 01 | . | kind: "nop" (1) (No operation) 0x2042-0x2042.7 (1)
| | | [1]{}: option 0x2043-0x2043.7 (1)
0x02040| 01 | . | kind: "nop" (1) (No operation) 0x2043-0x2043.7 (1)
| | | [2]{}: option 0x2044-0x204d.7 (10)
0x02040| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2044-0x2044.7 (1)
0x02040| 0a | . | length: 10 0x2045-0x2045.7 (1)
0x02040| e4 57 7b 8c 4b 2a 91 55 | .W{.K*.U | data: raw bits 0x2046-0x204d.7 (8)
| | | payload: raw bits 0x204e-NA (0)
0x02040| 00 00| ..| padding: raw bits 0x204e-0x204f.7 (2)
| | | options[0:0]: 0x2050-NA (0)
0x02050|64 00 00 00 |d... | footer_length: 100 0x2050-0x2053.7 (4)
| | | [48]{}: block 0x2054-0x20ef.7 (156)
0x02050| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2054-0x2057.7 (4)
0x02050| 9c 00 00 00 | .... | length: 156 0x2058-0x205b.7 (4)
0x02050| 00 00 00 00| ....| interface_id: 0 0x205c-0x205f.7 (4)
0x02060|72 1d 05 00 |r... | timestamp_high: 335218 0x2060-0x2063.7 (4)
0x02060| 3e 00 86 c9 | >... | timestamp_low: 3381002302 0x2064-0x2067.7 (4)
0x02060| 7a 00 00 00 | z... | capture_packet_length: 122 0x2068-0x206b.7 (4)
0x02060| 7a 00 00 00| z...| original_packet_length: 122 0x206c-0x206f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2070-0x20e9.7 (122)
0x02070|a4 5e 60 f1 7d 93 |.^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2070-0x2075.7 (6)
0x02070| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2076-0x207b.7 (6)
0x02070| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x207c-0x207d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x207e-0x20e9.7 (108)
0x02070| 45 | E | version: 4 0x207e-0x207e.3 (0.4)
0x02070| 45 | E | ihl: 5 0x207e.4-0x207e.7 (0.4)
0x02070| 28| (| dscp: 10 0x207f-0x207f.5 (0.6)
0x02070| 28| (| ecn: 0 0x207f.6-0x207f.7 (0.2)
0x02080|00 6c |.l | total_length: 108 0x2080-0x2081.7 (2)
0x02080| 40 fd | @. | identification: 16637 0x2082-0x2083.7 (2)
0x02080| 00 | . | reserved: 0 0x2084-0x2084 (0.1)
0x02080| 00 | . | dont_fragment: false 0x2084.1-0x2084.1 (0.1)
0x02080| 00 | . | more_fragments: false 0x2084.2-0x2084.2 (0.1)
0x02080| 00 00 | .. | fragment_offset: 0 0x2084.3-0x2085.7 (1.5)
0x02080| 35 | 5 | ttl: 53 0x2086-0x2086.7 (1)
0x02080| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x2087-0x2087.7 (1)
0x02080| 52 d3 | R. | header_checksum: 0x52d3 (valid) 0x2088-0x2089.7 (2)
0x02080| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x208a-0x208d.7 (4)
0x02080| c0 a8| ..| destination_ip: "192.168.1.139" (0xc0a8018b) 0x208e-0x2091.7 (4)
0x02090|01 8b |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x2092-0x20e9.7 (88)
0x02090| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0x2092-0x2093.7 (2)
0x02090| c7 25 | .% | destination_port: 50981 0x2094-0x2095.7 (2)
0x02090| 43 54 83 c3 | CT.. | sequence_number: 1129612227 0x2096-0x2099.7 (4)
0x02090| 2b ce 35 e8 | +.5. | acknowledgment_number: 734934504 0x209a-0x209d.7 (4)
0x02090| 80 | . | data_offset: 8 0x209e-0x209e.3 (0.4)
0x02090| 80 | . | reserved: 0 0x209e.4-0x209e.6 (0.3)
0x02090| 80 | . | ns: false 0x209e.7-0x209e.7 (0.1)
0x02090| 18| .| cwr: false 0x209f-0x209f (0.1)
0x02090| 18| .| ece: false 0x209f.1-0x209f.1 (0.1)
0x02090| 18| .| urg: false 0x209f.2-0x209f.2 (0.1)
0x02090| 18| .| ack: true 0x209f.3-0x209f.3 (0.1)
0x02090| 18| .| psh: true 0x209f.4-0x209f.4 (0.1)
0x02090| 18| .| rst: false 0x209f.5-0x209f.5 (0.1)
0x02090| 18| .| syn: false 0x209f.6-0x209f.6 (0.1)
0x02090| 18| .| fin: false 0x209f.7-0x209f.7 (0.1)
0x020a0|01 68 |.h | window_size: 360 0x20a0-0x20a1.7 (2)
0x020a0| 94 d1 | .. | checksum: 0x94d1 0x20a2-0x20a3.7 (2)
0x020a0| 00 00 | .. | urgent_pointer: 0 0x20a4-0x20a5.7 (2)
| | | options[0:3]: 0x20a6-0x20b1.7 (12)
| | | [0]{}: option 0x20a6-0x20a6.7 (1)
0x020a0| 01 | . | kind: "nop" (1) (No operation) 0x20a6-0x20a6.7 (1)
| | | [1]{}: option 0x20a7-0x20a7.7 (1)
0x020a0| 01 | . | kind: "nop" (1) (No operation) 0x20a7-0x20a7.7 (1)
| | | [2]{}: option 0x20a8-0x20b1.7 (10)
0x020a0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x20a8-0x20a8.7 (1)
0x020a0| 0a | . | length: 10 0x20a9-0x20a9.7 (1)
0x020a0| e4 57 7b 8d 4b 2a| .W{.K*| data: raw bits 0x20aa-0x20b1.7 (8)
0x020b0|91 55 |.U |
0x020b0| 17 03 03 00 33 00 00 00 00 00 00 00 01 84| ....3.........| payload: raw bits 0x20b2-0x20e9.7 (56)
0x020c0|43 dc 31 8d ea 84 17 37 3d ee 7d 47 7d a0 24 3f|C.1....7=.}G}.$?|
* |until 0x20e9.7 (56) | |
0x020e0| 00 00 | .. | padding: raw bits 0x20ea-0x20eb.7 (2)
| | | options[0:0]: 0x20ec-NA (0)
0x020e0| 9c 00 00 00| ....| footer_length: 156 0x20ec-0x20ef.7 (4)
| | | [49]{}: block 0x20f0-0x217b.7 (140)
0x020f0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x20f0-0x20f3.7 (4)
0x020f0| 8c 00 00 00 | .... | length: 140 0x20f4-0x20f7.7 (4)
0x020f0| 00 00 00 00 | .... | interface_id: 0 0x20f8-0x20fb.7 (4)
0x020f0| 72 1d 05 00| r...| timestamp_high: 335218 0x20fc-0x20ff.7 (4)
0x02100|43 00 86 c9 |C... | timestamp_low: 3381002307 0x2100-0x2103.7 (4)
0x02100| 6c 00 00 00 | l... | capture_packet_length: 108 0x2104-0x2107.7 (4)
0x02100| 6c 00 00 00 | l... | original_packet_length: 108 0x2108-0x210b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x210c-0x2177.7 (108)
0x02100| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x210c-0x2111.7 (6)
0x02110|7d 93 |}. |
0x02110| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2112-0x2117.7 (6)
0x02110| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2118-0x2119.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x211a-0x2177.7 (94)
0x02110| 45 | E | version: 4 0x211a-0x211a.3 (0.4)
0x02110| 45 | E | ihl: 5 0x211a.4-0x211a.7 (0.4)
0x02110| 28 | ( | dscp: 10 0x211b-0x211b.5 (0.6)
0x02110| 28 | ( | ecn: 0 0x211b.6-0x211b.7 (0.2)
0x02110| 00 5e | .^ | total_length: 94 0x211c-0x211d.7 (2)
0x02110| 40 fe| @.| identification: 16638 0x211e-0x211f.7 (2)
0x02120|00 |. | reserved: 0 0x2120-0x2120 (0.1)
0x02120|00 |. | dont_fragment: false 0x2120.1-0x2120.1 (0.1)
0x02120|00 |. | more_fragments: false 0x2120.2-0x2120.2 (0.1)
0x02120|00 00 |.. | fragment_offset: 0 0x2120.3-0x2121.7 (1.5)
0x02120| 35 | 5 | ttl: 53 0x2122-0x2122.7 (1)
0x02120| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x2123-0x2123.7 (1)
0x02120| 52 e0 | R. | header_checksum: 0x52e0 (valid) 0x2124-0x2125.7 (2)
0x02120| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x2126-0x2129.7 (4)
0x02120| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x212a-0x212d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x212e-0x2177.7 (74)
0x02120| 01 bb| ..| source_port: "https" (443) (http protocol over TLS/SSL) 0x212e-0x212f.7 (2)
0x02130|c7 25 |.% | destination_port: 50981 0x2130-0x2131.7 (2)
0x02130| 43 54 83 fb | CT.. | sequence_number: 1129612283 0x2132-0x2135.7 (4)
0x02130| 2b ce 35 e8 | +.5. | acknowledgment_number: 734934504 0x2136-0x2139.7 (4)
0x02130| 80 | . | data_offset: 8 0x213a-0x213a.3 (0.4)
0x02130| 80 | . | reserved: 0 0x213a.4-0x213a.6 (0.3)
0x02130| 80 | . | ns: false 0x213a.7-0x213a.7 (0.1)
0x02130| 18 | . | cwr: false 0x213b-0x213b (0.1)
0x02130| 18 | . | ece: false 0x213b.1-0x213b.1 (0.1)
0x02130| 18 | . | urg: false 0x213b.2-0x213b.2 (0.1)
0x02130| 18 | . | ack: true 0x213b.3-0x213b.3 (0.1)
0x02130| 18 | . | psh: true 0x213b.4-0x213b.4 (0.1)
0x02130| 18 | . | rst: false 0x213b.5-0x213b.5 (0.1)
0x02130| 18 | . | syn: false 0x213b.6-0x213b.6 (0.1)
0x02130| 18 | . | fin: false 0x213b.7-0x213b.7 (0.1)
0x02130| 01 68 | .h | window_size: 360 0x213c-0x213d.7 (2)
0x02130| fb 2c| .,| checksum: 0xfb2c 0x213e-0x213f.7 (2)
0x02140|00 00 |.. | urgent_pointer: 0 0x2140-0x2141.7 (2)
| | | options[0:3]: 0x2142-0x214d.7 (12)
| | | [0]{}: option 0x2142-0x2142.7 (1)
0x02140| 01 | . | kind: "nop" (1) (No operation) 0x2142-0x2142.7 (1)
| | | [1]{}: option 0x2143-0x2143.7 (1)
0x02140| 01 | . | kind: "nop" (1) (No operation) 0x2143-0x2143.7 (1)
| | | [2]{}: option 0x2144-0x214d.7 (10)
0x02140| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2144-0x2144.7 (1)
0x02140| 0a | . | length: 10 0x2145-0x2145.7 (1)
0x02140| e4 57 7b 8d 4b 2a 91 55 | .W{.K*.U | data: raw bits 0x2146-0x214d.7 (8)
0x02140| 17 03| ..| payload: raw bits 0x214e-0x2177.7 (42)
0x02150|03 00 25 00 00 00 00 00 00 00 02 a8 2a 53 77 c7|..%.........*Sw.|
* |until 0x2177.7 (42) | |
| | | padding: raw bits 0x2178-NA (0)
| | | options[0:0]: 0x2178-NA (0)
0x02170| 8c 00 00 00 | .... | footer_length: 140 0x2178-0x217b.7 (4)
| | | [50]{}: block 0x217c-0x2203.7 (136)
0x02170| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x217c-0x217f.7 (4)
0x02180|88 00 00 00 |.... | length: 136 0x2180-0x2183.7 (4)
0x02180| 00 00 00 00 | .... | interface_id: 0 0x2184-0x2187.7 (4)
0x02180| 72 1d 05 00 | r... | timestamp_high: 335218 0x2188-0x218b.7 (4)
0x02180| 44 00 86 c9| D...| timestamp_low: 3381002308 0x218c-0x218f.7 (4)
0x02190|68 00 00 00 |h... | capture_packet_length: 104 0x2190-0x2193.7 (4)
0x02190| 68 00 00 00 | h... | original_packet_length: 104 0x2194-0x2197.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2198-0x21ff.7 (104)
0x02190| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2198-0x219d.7 (6)
0x02190| 94 10| ..| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x219e-0x21a3.7 (6)
0x021a0|3e 05 36 d3 |>.6. |
0x021a0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x21a4-0x21a5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x21a6-0x21ff.7 (90)
0x021a0| 45 | E | version: 4 0x21a6-0x21a6.3 (0.4)
0x021a0| 45 | E | ihl: 5 0x21a6.4-0x21a6.7 (0.4)
0x021a0| 28 | ( | dscp: 10 0x21a7-0x21a7.5 (0.6)
0x021a0| 28 | ( | ecn: 0 0x21a7.6-0x21a7.7 (0.2)
0x021a0| 00 5a | .Z | total_length: 90 0x21a8-0x21a9.7 (2)
0x021a0| 40 ff | @. | identification: 16639 0x21aa-0x21ab.7 (2)
0x021a0| 00 | . | reserved: 0 0x21ac-0x21ac (0.1)
0x021a0| 00 | . | dont_fragment: false 0x21ac.1-0x21ac.1 (0.1)
0x021a0| 00 | . | more_fragments: false 0x21ac.2-0x21ac.2 (0.1)
0x021a0| 00 00 | .. | fragment_offset: 0 0x21ac.3-0x21ad.7 (1.5)
0x021a0| 35 | 5 | ttl: 53 0x21ae-0x21ae.7 (1)
0x021a0| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x21af-0x21af.7 (1)
0x021b0|52 e3 |R. | header_checksum: 0x52e3 (valid) 0x21b0-0x21b1.7 (2)
0x021b0| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x21b2-0x21b5.7 (4)
0x021b0| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x21b6-0x21b9.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x21ba-0x21ff.7 (70)
0x021b0| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0x21ba-0x21bb.7 (2)
0x021b0| c7 25 | .% | destination_port: 50981 0x21bc-0x21bd.7 (2)
0x021b0| 43 54| CT| sequence_number: 1129612325 0x21be-0x21c1.7 (4)
0x021c0|84 25 |.% |
0x021c0| 2b ce 35 e8 | +.5. | acknowledgment_number: 734934504 0x21c2-0x21c5.7 (4)
0x021c0| 80 | . | data_offset: 8 0x21c6-0x21c6.3 (0.4)
0x021c0| 80 | . | reserved: 0 0x21c6.4-0x21c6.6 (0.3)
0x021c0| 80 | . | ns: false 0x21c6.7-0x21c6.7 (0.1)
0x021c0| 18 | . | cwr: false 0x21c7-0x21c7 (0.1)
0x021c0| 18 | . | ece: false 0x21c7.1-0x21c7.1 (0.1)
0x021c0| 18 | . | urg: false 0x21c7.2-0x21c7.2 (0.1)
0x021c0| 18 | . | ack: true 0x21c7.3-0x21c7.3 (0.1)
0x021c0| 18 | . | psh: true 0x21c7.4-0x21c7.4 (0.1)
0x021c0| 18 | . | rst: false 0x21c7.5-0x21c7.5 (0.1)
0x021c0| 18 | . | syn: false 0x21c7.6-0x21c7.6 (0.1)
0x021c0| 18 | . | fin: false 0x21c7.7-0x21c7.7 (0.1)
0x021c0| 01 68 | .h | window_size: 360 0x21c8-0x21c9.7 (2)
0x021c0| 01 de | .. | checksum: 0x1de 0x21ca-0x21cb.7 (2)
0x021c0| 00 00 | .. | urgent_pointer: 0 0x21cc-0x21cd.7 (2)
| | | options[0:3]: 0x21ce-0x21d9.7 (12)
| | | [0]{}: option 0x21ce-0x21ce.7 (1)
0x021c0| 01 | . | kind: "nop" (1) (No operation) 0x21ce-0x21ce.7 (1)
| | | [1]{}: option 0x21cf-0x21cf.7 (1)
0x021c0| 01| .| kind: "nop" (1) (No operation) 0x21cf-0x21cf.7 (1)
| | | [2]{}: option 0x21d0-0x21d9.7 (10)
0x021d0|08 |. | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x21d0-0x21d0.7 (1)
0x021d0| 0a | . | length: 10 0x21d1-0x21d1.7 (1)
0x021d0| e4 57 7b 8e 4b 2a 91 55 | .W{.K*.U | data: raw bits 0x21d2-0x21d9.7 (8)
0x021d0| 17 03 03 00 21 00| ....!.| payload: raw bits 0x21da-0x21ff.7 (38)
0x021e0|00 00 00 00 00 00 03 bd 10 a7 a4 4e 7d 28 b4 4a|...........N}(.J|
0x021f0|55 a3 39 db 64 b3 7a ae 3d e4 2e fc eb 8e 66 c5|U.9.d.z.=.....f.|
| | | padding: raw bits 0x2200-NA (0)
| | | options[0:0]: 0x2200-NA (0)
0x02200|88 00 00 00 |.... | footer_length: 136 0x2200-0x2203.7 (4)
| | | [51]{}: block 0x2204-0x2267.7 (100)
0x02200| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2204-0x2207.7 (4)
0x02200| 64 00 00 00 | d... | length: 100 0x2208-0x220b.7 (4)
0x02200| 00 00 00 00| ....| interface_id: 0 0x220c-0x220f.7 (4)
0x02210|72 1d 05 00 |r... | timestamp_high: 335218 0x2210-0x2213.7 (4)
0x02210| 9b 00 86 c9 | .... | timestamp_low: 3381002395 0x2214-0x2217.7 (4)
0x02210| 42 00 00 00 | B... | capture_packet_length: 66 0x2218-0x221b.7 (4)
0x02210| 42 00 00 00| B...| original_packet_length: 66 0x221c-0x221f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2220-0x2261.7 (66)
0x02220|94 10 3e 05 36 d3 |..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2220-0x2225.7 (6)
0x02220| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2226-0x222b.7 (6)
0x02220| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x222c-0x222d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x222e-0x2261.7 (52)
0x02220| 45 | E | version: 4 0x222e-0x222e.3 (0.4)
0x02220| 45 | E | ihl: 5 0x222e.4-0x222e.7 (0.4)
0x02220| 00| .| dscp: 0 0x222f-0x222f.5 (0.6)
0x02220| 00| .| ecn: 0 0x222f.6-0x222f.7 (0.2)
0x02230|00 34 |.4 | total_length: 52 0x2230-0x2231.7 (2)
0x02230| 59 73 | Ys | identification: 22899 0x2232-0x2233.7 (2)
0x02230| 40 | @ | reserved: 0 0x2234-0x2234 (0.1)
0x02230| 40 | @ | dont_fragment: true 0x2234.1-0x2234.1 (0.1)
0x02230| 40 | @ | more_fragments: false 0x2234.2-0x2234.2 (0.1)
0x02230| 40 00 | @. | fragment_offset: 0 0x2234.3-0x2235.7 (1.5)
0x02230| 40 | @ | ttl: 64 0x2236-0x2236.7 (1)
0x02230| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x2237-0x2237.7 (1)
0x02230| ef bc | .. | header_checksum: 0xefbc (valid) 0x2238-0x2239.7 (2)
0x02230| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x223a-0x223d.7 (4)
0x02230| 4a 7d| J}| destination_ip: "74.125.228.227" (0x4a7de4e3) 0x223e-0x2241.7 (4)
0x02240|e4 e3 |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x2242-0x2261.7 (32)
0x02240| c7 25 | .% | source_port: 50981 0x2242-0x2243.7 (2)
0x02240| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x2244-0x2245.7 (2)
0x02240| 2b ce 35 e8 | +.5. | sequence_number: 734934504 0x2246-0x2249.7 (4)
0x02240| 43 54 83 fb | CT.. | acknowledgment_number: 1129612283 0x224a-0x224d.7 (4)
0x02240| 80 | . | data_offset: 8 0x224e-0x224e.3 (0.4)
0x02240| 80 | . | reserved: 0 0x224e.4-0x224e.6 (0.3)
0x02240| 80 | . | ns: false 0x224e.7-0x224e.7 (0.1)
0x02240| 10| .| cwr: false 0x224f-0x224f (0.1)
0x02240| 10| .| ece: false 0x224f.1-0x224f.1 (0.1)
0x02240| 10| .| urg: false 0x224f.2-0x224f.2 (0.1)
0x02240| 10| .| ack: true 0x224f.3-0x224f.3 (0.1)
0x02240| 10| .| psh: false 0x224f.4-0x224f.4 (0.1)
0x02240| 10| .| rst: false 0x224f.5-0x224f.5 (0.1)
0x02240| 10| .| syn: false 0x224f.6-0x224f.6 (0.1)
0x02240| 10| .| fin: false 0x224f.7-0x224f.7 (0.1)
0x02250|10 12 |.. | window_size: 4114 0x2250-0x2251.7 (2)
0x02250| 46 9c | F. | checksum: 0x469c 0x2252-0x2253.7 (2)
0x02250| 00 00 | .. | urgent_pointer: 0 0x2254-0x2255.7 (2)
| | | options[0:3]: 0x2256-0x2261.7 (12)
| | | [0]{}: option 0x2256-0x2256.7 (1)
0x02250| 01 | . | kind: "nop" (1) (No operation) 0x2256-0x2256.7 (1)
| | | [1]{}: option 0x2257-0x2257.7 (1)
0x02250| 01 | . | kind: "nop" (1) (No operation) 0x2257-0x2257.7 (1)
| | | [2]{}: option 0x2258-0x2261.7 (10)
0x02250| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2258-0x2258.7 (1)
0x02250| 0a | . | length: 10 0x2259-0x2259.7 (1)
0x02250| 4b 2a 91 84 e4 57| K*...W| data: raw bits 0x225a-0x2261.7 (8)
0x02260|7b 8d |{. |
| | | payload: raw bits 0x2262-NA (0)
0x02260| 00 00 | .. | padding: raw bits 0x2262-0x2263.7 (2)
| | | options[0:0]: 0x2264-NA (0)
0x02260| 64 00 00 00 | d... | footer_length: 100 0x2264-0x2267.7 (4)
| | | [52]{}: block 0x2268-0x22cb.7 (100)
0x02260| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2268-0x226b.7 (4)
0x02260| 64 00 00 00| d...| length: 100 0x226c-0x226f.7 (4)
0x02270|00 00 00 00 |.... | interface_id: 0 0x2270-0x2273.7 (4)
0x02270| 72 1d 05 00 | r... | timestamp_high: 335218 0x2274-0x2277.7 (4)
0x02270| 9b 00 86 c9 | .... | timestamp_low: 3381002395 0x2278-0x227b.7 (4)
0x02270| 42 00 00 00| B...| capture_packet_length: 66 0x227c-0x227f.7 (4)
0x02280|42 00 00 00 |B... | original_packet_length: 66 0x2280-0x2283.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2284-0x22c5.7 (66)
0x02280| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2284-0x2289.7 (6)
0x02280| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x228a-0x228f.7 (6)
0x02290|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2290-0x2291.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2292-0x22c5.7 (52)
0x02290| 45 | E | version: 4 0x2292-0x2292.3 (0.4)
0x02290| 45 | E | ihl: 5 0x2292.4-0x2292.7 (0.4)
0x02290| 00 | . | dscp: 0 0x2293-0x2293.5 (0.6)
0x02290| 00 | . | ecn: 0 0x2293.6-0x2293.7 (0.2)
0x02290| 00 34 | .4 | total_length: 52 0x2294-0x2295.7 (2)
0x02290| a5 b5 | .. | identification: 42421 0x2296-0x2297.7 (2)
0x02290| 40 | @ | reserved: 0 0x2298-0x2298 (0.1)
0x02290| 40 | @ | dont_fragment: true 0x2298.1-0x2298.1 (0.1)
0x02290| 40 | @ | more_fragments: false 0x2298.2-0x2298.2 (0.1)
0x02290| 40 00 | @. | fragment_offset: 0 0x2298.3-0x2299.7 (1.5)
0x02290| 40 | @ | ttl: 64 0x229a-0x229a.7 (1)
0x02290| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x229b-0x229b.7 (1)
0x02290| a3 7a | .z | header_checksum: 0xa37a (valid) 0x229c-0x229d.7 (2)
0x02290| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0x229e-0x22a1.7 (4)
0x022a0|01 8b |.. |
0x022a0| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x22a2-0x22a5.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x22a6-0x22c5.7 (32)
0x022a0| c7 25 | .% | source_port: 50981 0x22a6-0x22a7.7 (2)
0x022a0| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x22a8-0x22a9.7 (2)
0x022a0| 2b ce 35 e8 | +.5. | sequence_number: 734934504 0x22aa-0x22ad.7 (4)
0x022a0| 43 54| CT| acknowledgment_number: 1129612325 0x22ae-0x22b1.7 (4)
0x022b0|84 25 |.% |
0x022b0| 80 | . | data_offset: 8 0x22b2-0x22b2.3 (0.4)
0x022b0| 80 | . | reserved: 0 0x22b2.4-0x22b2.6 (0.3)
0x022b0| 80 | . | ns: false 0x22b2.7-0x22b2.7 (0.1)
0x022b0| 10 | . | cwr: false 0x22b3-0x22b3 (0.1)
0x022b0| 10 | . | ece: false 0x22b3.1-0x22b3.1 (0.1)
0x022b0| 10 | . | urg: false 0x22b3.2-0x22b3.2 (0.1)
0x022b0| 10 | . | ack: true 0x22b3.3-0x22b3.3 (0.1)
0x022b0| 10 | . | psh: false 0x22b3.4-0x22b3.4 (0.1)
0x022b0| 10 | . | rst: false 0x22b3.5-0x22b3.5 (0.1)
0x022b0| 10 | . | syn: false 0x22b3.6-0x22b3.6 (0.1)
0x022b0| 10 | . | fin: false 0x22b3.7-0x22b3.7 (0.1)
0x022b0| 10 11 | .. | window_size: 4113 0x22b4-0x22b5.7 (2)
0x022b0| 46 73 | Fs | checksum: 0x4673 0x22b6-0x22b7.7 (2)
0x022b0| 00 00 | .. | urgent_pointer: 0 0x22b8-0x22b9.7 (2)
| | | options[0:3]: 0x22ba-0x22c5.7 (12)
| | | [0]{}: option 0x22ba-0x22ba.7 (1)
0x022b0| 01 | . | kind: "nop" (1) (No operation) 0x22ba-0x22ba.7 (1)
| | | [1]{}: option 0x22bb-0x22bb.7 (1)
0x022b0| 01 | . | kind: "nop" (1) (No operation) 0x22bb-0x22bb.7 (1)
| | | [2]{}: option 0x22bc-0x22c5.7 (10)
0x022b0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x22bc-0x22bc.7 (1)
0x022b0| 0a | . | length: 10 0x22bd-0x22bd.7 (1)
0x022b0| 4b 2a| K*| data: raw bits 0x22be-0x22c5.7 (8)
0x022c0|91 84 e4 57 7b 8d |...W{. |
| | | payload: raw bits 0x22c6-NA (0)
0x022c0| 00 00 | .. | padding: raw bits 0x22c6-0x22c7.7 (2)
| | | options[0:0]: 0x22c8-NA (0)
0x022c0| 64 00 00 00 | d... | footer_length: 100 0x22c8-0x22cb.7 (4)
| | | [53]{}: block 0x22cc-0x232f.7 (100)
0x022c0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x22cc-0x22cf.7 (4)
0x022d0|64 00 00 00 |d... | length: 100 0x22d0-0x22d3.7 (4)
0x022d0| 00 00 00 00 | .... | interface_id: 0 0x22d4-0x22d7.7 (4)
0x022d0| 72 1d 05 00 | r... | timestamp_high: 335218 0x22d8-0x22db.7 (4)
0x022d0| 9c 00 86 c9| ....| timestamp_low: 3381002396 0x22dc-0x22df.7 (4)
0x022e0|42 00 00 00 |B... | capture_packet_length: 66 0x22e0-0x22e3.7 (4)
0x022e0| 42 00 00 00 | B... | original_packet_length: 66 0x22e4-0x22e7.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x22e8-0x2329.7 (66)
0x022e0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x22e8-0x22ed.7 (6)
0x022e0| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x22ee-0x22f3.7 (6)
0x022f0|60 f1 7d 93 |`.}. |
0x022f0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x22f4-0x22f5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x22f6-0x2329.7 (52)
0x022f0| 45 | E | version: 4 0x22f6-0x22f6.3 (0.4)
0x022f0| 45 | E | ihl: 5 0x22f6.4-0x22f6.7 (0.4)
0x022f0| 00 | . | dscp: 0 0x22f7-0x22f7.5 (0.6)
0x022f0| 00 | . | ecn: 0 0x22f7.6-0x22f7.7 (0.2)
0x022f0| 00 34 | .4 | total_length: 52 0x22f8-0x22f9.7 (2)
0x022f0| 80 93 | .. | identification: 32915 0x22fa-0x22fb.7 (2)
0x022f0| 40 | @ | reserved: 0 0x22fc-0x22fc (0.1)
0x022f0| 40 | @ | dont_fragment: true 0x22fc.1-0x22fc.1 (0.1)
0x022f0| 40 | @ | more_fragments: false 0x22fc.2-0x22fc.2 (0.1)
0x022f0| 40 00 | @. | fragment_offset: 0 0x22fc.3-0x22fd.7 (1.5)
0x022f0| 40 | @ | ttl: 64 0x22fe-0x22fe.7 (1)
0x022f0| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x22ff-0x22ff.7 (1)
0x02300|c8 9c |.. | header_checksum: 0xc89c (valid) 0x2300-0x2301.7 (2)
0x02300| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x2302-0x2305.7 (4)
0x02300| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x2306-0x2309.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x230a-0x2329.7 (32)
0x02300| c7 25 | .% | source_port: 50981 0x230a-0x230b.7 (2)
0x02300| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x230c-0x230d.7 (2)
0x02300| 2b ce| +.| sequence_number: 734934504 0x230e-0x2311.7 (4)
0x02310|35 e8 |5. |
0x02310| 43 54 84 4b | CT.K | acknowledgment_number: 1129612363 0x2312-0x2315.7 (4)
0x02310| 80 | . | data_offset: 8 0x2316-0x2316.3 (0.4)
0x02310| 80 | . | reserved: 0 0x2316.4-0x2316.6 (0.3)
0x02310| 80 | . | ns: false 0x2316.7-0x2316.7 (0.1)
0x02310| 10 | . | cwr: false 0x2317-0x2317 (0.1)
0x02310| 10 | . | ece: false 0x2317.1-0x2317.1 (0.1)
0x02310| 10 | . | urg: false 0x2317.2-0x2317.2 (0.1)
0x02310| 10 | . | ack: true 0x2317.3-0x2317.3 (0.1)
0x02310| 10 | . | psh: false 0x2317.4-0x2317.4 (0.1)
0x02310| 10 | . | rst: false 0x2317.5-0x2317.5 (0.1)
0x02310| 10 | . | syn: false 0x2317.6-0x2317.6 (0.1)
0x02310| 10 | . | fin: false 0x2317.7-0x2317.7 (0.1)
0x02310| 10 10 | .. | window_size: 4112 0x2318-0x2319.7 (2)
0x02310| 46 4d | FM | checksum: 0x464d 0x231a-0x231b.7 (2)
0x02310| 00 00 | .. | urgent_pointer: 0 0x231c-0x231d.7 (2)
| | | options[0:3]: 0x231e-0x2329.7 (12)
| | | [0]{}: option 0x231e-0x231e.7 (1)
0x02310| 01 | . | kind: "nop" (1) (No operation) 0x231e-0x231e.7 (1)
| | | [1]{}: option 0x231f-0x231f.7 (1)
0x02310| 01| .| kind: "nop" (1) (No operation) 0x231f-0x231f.7 (1)
| | | [2]{}: option 0x2320-0x2329.7 (10)
0x02320|08 |. | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2320-0x2320.7 (1)
0x02320| 0a | . | length: 10 0x2321-0x2321.7 (1)
0x02320| 4b 2a 91 84 e4 57 7b 8e | K*...W{. | data: raw bits 0x2322-0x2329.7 (8)
| | | payload: raw bits 0x232a-NA (0)
0x02320| 00 00 | .. | padding: raw bits 0x232a-0x232b.7 (2)
| | | options[0:0]: 0x232c-NA (0)
0x02320| 64 00 00 00| d...| footer_length: 100 0x232c-0x232f.7 (4)
| | | [54]{}: block 0x2330-0x23b7.7 (136)
0x02330|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2330-0x2333.7 (4)
0x02330| 88 00 00 00 | .... | length: 136 0x2334-0x2337.7 (4)
0x02330| 00 00 00 00 | .... | interface_id: 0 0x2338-0x233b.7 (4)
0x02330| 72 1d 05 00| r...| timestamp_high: 335218 0x233c-0x233f.7 (4)
0x02340|5e 01 86 c9 |^... | timestamp_low: 3381002590 0x2340-0x2343.7 (4)
0x02340| 68 00 00 00 | h... | capture_packet_length: 104 0x2344-0x2347.7 (4)
0x02340| 68 00 00 00 | h... | original_packet_length: 104 0x2348-0x234b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x234c-0x23b3.7 (104)
0x02340| 94 10 3e 05| ..>.| destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x234c-0x2351.7 (6)
0x02350|36 d3 |6. |
0x02350| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2352-0x2357.7 (6)
0x02350| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2358-0x2359.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x235a-0x23b3.7 (90)
0x02350| 45 | E | version: 4 0x235a-0x235a.3 (0.4)
0x02350| 45 | E | ihl: 5 0x235a.4-0x235a.7 (0.4)
0x02350| 00 | . | dscp: 0 0x235b-0x235b.5 (0.6)
0x02350| 00 | . | ecn: 0 0x235b.6-0x235b.7 (0.2)
0x02350| 00 5a | .Z | total_length: 90 0x235c-0x235d.7 (2)
0x02350| 1b 47| .G| identification: 6983 0x235e-0x235f.7 (2)
0x02360|40 |@ | reserved: 0 0x2360-0x2360 (0.1)
0x02360|40 |@ | dont_fragment: true 0x2360.1-0x2360.1 (0.1)
0x02360|40 |@ | more_fragments: false 0x2360.2-0x2360.2 (0.1)
0x02360|40 00 |@. | fragment_offset: 0 0x2360.3-0x2361.7 (1.5)
0x02360| 40 | @ | ttl: 64 0x2362-0x2362.7 (1)
0x02360| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x2363-0x2363.7 (1)
0x02360| 2d c3 | -. | header_checksum: 0x2dc3 (valid) 0x2364-0x2365.7 (2)
0x02360| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x2366-0x2369.7 (4)
0x02360| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x236a-0x236d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x236e-0x23b3.7 (70)
0x02360| c7 25| .%| source_port: 50981 0x236e-0x236f.7 (2)
0x02370|01 bb |.. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x2370-0x2371.7 (2)
0x02370| 2b ce 35 e8 | +.5. | sequence_number: 734934504 0x2372-0x2375.7 (4)
0x02370| 43 54 84 4b | CT.K | acknowledgment_number: 1129612363 0x2376-0x2379.7 (4)
0x02370| 80 | . | data_offset: 8 0x237a-0x237a.3 (0.4)
0x02370| 80 | . | reserved: 0 0x237a.4-0x237a.6 (0.3)
0x02370| 80 | . | ns: false 0x237a.7-0x237a.7 (0.1)
0x02370| 18 | . | cwr: false 0x237b-0x237b (0.1)
0x02370| 18 | . | ece: false 0x237b.1-0x237b.1 (0.1)
0x02370| 18 | . | urg: false 0x237b.2-0x237b.2 (0.1)
0x02370| 18 | . | ack: true 0x237b.3-0x237b.3 (0.1)
0x02370| 18 | . | psh: true 0x237b.4-0x237b.4 (0.1)
0x02370| 18 | . | rst: false 0x237b.5-0x237b.5 (0.1)
0x02370| 18 | . | syn: false 0x237b.6-0x237b.6 (0.1)
0x02370| 18 | . | fin: false 0x237b.7-0x237b.7 (0.1)
0x02370| 10 10 | .. | window_size: 4112 0x237c-0x237d.7 (2)
0x02370| c1 14| ..| checksum: 0xc114 0x237e-0x237f.7 (2)
0x02380|00 00 |.. | urgent_pointer: 0 0x2380-0x2381.7 (2)
| | | options[0:3]: 0x2382-0x238d.7 (12)
| | | [0]{}: option 0x2382-0x2382.7 (1)
0x02380| 01 | . | kind: "nop" (1) (No operation) 0x2382-0x2382.7 (1)
| | | [1]{}: option 0x2383-0x2383.7 (1)
0x02380| 01 | . | kind: "nop" (1) (No operation) 0x2383-0x2383.7 (1)
| | | [2]{}: option 0x2384-0x238d.7 (10)
0x02380| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2384-0x2384.7 (1)
0x02380| 0a | . | length: 10 0x2385-0x2385.7 (1)
0x02380| 4b 2a 91 84 e4 57 7b 8e | K*...W{. | data: raw bits 0x2386-0x238d.7 (8)
0x02380| 17 03| ..| payload: raw bits 0x238e-0x23b3.7 (38)
0x02390|03 00 21 00 00 00 00 00 00 00 05 04 b0 d9 88 2d|..!............-|
* |until 0x23b3.7 (38) | |
| | | padding: raw bits 0x23b4-NA (0)
| | | options[0:0]: 0x23b4-NA (0)
0x023b0| 88 00 00 00 | .... | footer_length: 136 0x23b4-0x23b7.7 (4)
| | | [55]{}: block 0x23b8-0x2607.7 (592)
0x023b0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x23b8-0x23bb.7 (4)
0x023b0| 50 02 00 00| P...| length: 592 0x23bc-0x23bf.7 (4)
0x023c0|00 00 00 00 |.... | interface_id: 0 0x23c0-0x23c3.7 (4)
0x023c0| 72 1d 05 00 | r... | timestamp_high: 335218 0x23c4-0x23c7.7 (4)
0x023c0| 31 06 86 c9 | 1... | timestamp_low: 3381003825 0x23c8-0x23cb.7 (4)
0x023c0| 30 02 00 00| 0...| capture_packet_length: 560 0x23cc-0x23cf.7 (4)
0x023d0|30 02 00 00 |0... | original_packet_length: 560 0x23d0-0x23d3.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x23d4-0x2603.7 (560)
0x023d0| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x23d4-0x23d9.7 (6)
0x023d0| 94 10 3e 05 36 d3| ..>.6.| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x23da-0x23df.7 (6)
0x023e0|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x23e0-0x23e1.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x23e2-0x2603.7 (546)
0x023e0| 45 | E | version: 4 0x23e2-0x23e2.3 (0.4)
0x023e0| 45 | E | ihl: 5 0x23e2.4-0x23e2.7 (0.4)
0x023e0| 28 | ( | dscp: 10 0x23e3-0x23e3.5 (0.6)
0x023e0| 28 | ( | ecn: 0 0x23e3.6-0x23e3.7 (0.2)
0x023e0| 02 22 | ." | total_length: 546 0x23e4-0x23e5.7 (2)
0x023e0| 41 00 | A. | identification: 16640 0x23e6-0x23e7.7 (2)
0x023e0| 00 | . | reserved: 0 0x23e8-0x23e8 (0.1)
0x023e0| 00 | . | dont_fragment: false 0x23e8.1-0x23e8.1 (0.1)
0x023e0| 00 | . | more_fragments: false 0x23e8.2-0x23e8.2 (0.1)
0x023e0| 00 00 | .. | fragment_offset: 0 0x23e8.3-0x23e9.7 (1.5)
0x023e0| 35 | 5 | ttl: 53 0x23ea-0x23ea.7 (1)
0x023e0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x23eb-0x23eb.7 (1)
0x023e0| 51 1a | Q. | header_checksum: 0x511a (valid) 0x23ec-0x23ed.7 (2)
0x023e0| 4a 7d| J}| source_ip: "74.125.228.227" (0x4a7de4e3) 0x23ee-0x23f1.7 (4)
0x023f0|e4 e3 |.. |
0x023f0| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x23f2-0x23f5.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x23f6-0x2603.7 (526)
0x023f0| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0x23f6-0x23f7.7 (2)
0x023f0| c7 25 | .% | destination_port: 50981 0x23f8-0x23f9.7 (2)
0x023f0| 43 54 84 4b | CT.K | sequence_number: 1129612363 0x23fa-0x23fd.7 (4)
0x023f0| 2b ce| +.| acknowledgment_number: 734934504 0x23fe-0x2401.7 (4)
0x02400|35 e8 |5. |
0x02400| 80 | . | data_offset: 8 0x2402-0x2402.3 (0.4)
0x02400| 80 | . | reserved: 0 0x2402.4-0x2402.6 (0.3)
0x02400| 80 | . | ns: false 0x2402.7-0x2402.7 (0.1)
0x02400| 18 | . | cwr: false 0x2403-0x2403 (0.1)
0x02400| 18 | . | ece: false 0x2403.1-0x2403.1 (0.1)
0x02400| 18 | . | urg: false 0x2403.2-0x2403.2 (0.1)
0x02400| 18 | . | ack: true 0x2403.3-0x2403.3 (0.1)
0x02400| 18 | . | psh: true 0x2403.4-0x2403.4 (0.1)
0x02400| 18 | . | rst: false 0x2403.5-0x2403.5 (0.1)
0x02400| 18 | . | syn: false 0x2403.6-0x2403.6 (0.1)
0x02400| 18 | . | fin: false 0x2403.7-0x2403.7 (0.1)
0x02400| 01 68 | .h | window_size: 360 0x2404-0x2405.7 (2)
0x02400| 6c 2b | l+ | checksum: 0x6c2b 0x2406-0x2407.7 (2)
0x02400| 00 00 | .. | urgent_pointer: 0 0x2408-0x2409.7 (2)
| | | options[0:3]: 0x240a-0x2415.7 (12)
| | | [0]{}: option 0x240a-0x240a.7 (1)
0x02400| 01 | . | kind: "nop" (1) (No operation) 0x240a-0x240a.7 (1)
| | | [1]{}: option 0x240b-0x240b.7 (1)
0x02400| 01 | . | kind: "nop" (1) (No operation) 0x240b-0x240b.7 (1)
| | | [2]{}: option 0x240c-0x2415.7 (10)
0x02400| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x240c-0x240c.7 (1)
0x02400| 0a | . | length: 10 0x240d-0x240d.7 (1)
0x02400| e4 57| .W| data: raw bits 0x240e-0x2415.7 (8)
0x02410|7b 99 4b 2a 91 55 |{.K*.U |
0x02410| 17 03 03 01 e9 00 00 00 00 00| ..........| payload: raw bits 0x2416-0x2603.7 (494)
0x02420|00 00 04 cf 1d 4f e3 82 9a 07 84 9e f6 6f 6c 9c|.....O.......ol.|
* |until 0x2603.7 (494) | |
| | | padding: raw bits 0x2604-NA (0)
| | | options[0:0]: 0x2604-NA (0)
0x02600| 50 02 00 00 | P... | footer_length: 592 0x2604-0x2607.7 (4)
| | | [56]{}: block 0x2608-0x268f.7 (136)
0x02600| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2608-0x260b.7 (4)
0x02600| 88 00 00 00| ....| length: 136 0x260c-0x260f.7 (4)
0x02610|00 00 00 00 |.... | interface_id: 0 0x2610-0x2613.7 (4)
0x02610| 72 1d 05 00 | r... | timestamp_high: 335218 0x2614-0x2617.7 (4)
0x02610| 34 06 86 c9 | 4... | timestamp_low: 3381003828 0x2618-0x261b.7 (4)
0x02610| 68 00 00 00| h...| capture_packet_length: 104 0x261c-0x261f.7 (4)
0x02620|68 00 00 00 |h... | original_packet_length: 104 0x2620-0x2623.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2624-0x268b.7 (104)
0x02620| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2624-0x2629.7 (6)
0x02620| 94 10 3e 05 36 d3| ..>.6.| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x262a-0x262f.7 (6)
0x02630|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2630-0x2631.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2632-0x268b.7 (90)
0x02630| 45 | E | version: 4 0x2632-0x2632.3 (0.4)
0x02630| 45 | E | ihl: 5 0x2632.4-0x2632.7 (0.4)
0x02630| 28 | ( | dscp: 10 0x2633-0x2633.5 (0.6)
0x02630| 28 | ( | ecn: 0 0x2633.6-0x2633.7 (0.2)
0x02630| 00 5a | .Z | total_length: 90 0x2634-0x2635.7 (2)
0x02630| 41 01 | A. | identification: 16641 0x2636-0x2637.7 (2)
0x02630| 00 | . | reserved: 0 0x2638-0x2638 (0.1)
0x02630| 00 | . | dont_fragment: false 0x2638.1-0x2638.1 (0.1)
0x02630| 00 | . | more_fragments: false 0x2638.2-0x2638.2 (0.1)
0x02630| 00 00 | .. | fragment_offset: 0 0x2638.3-0x2639.7 (1.5)
0x02630| 35 | 5 | ttl: 53 0x263a-0x263a.7 (1)
0x02630| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x263b-0x263b.7 (1)
0x02630| 52 e1 | R. | header_checksum: 0x52e1 (valid) 0x263c-0x263d.7 (2)
0x02630| 4a 7d| J}| source_ip: "74.125.228.227" (0x4a7de4e3) 0x263e-0x2641.7 (4)
0x02640|e4 e3 |.. |
0x02640| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x2642-0x2645.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x2646-0x268b.7 (70)
0x02640| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0x2646-0x2647.7 (2)
0x02640| c7 25 | .% | destination_port: 50981 0x2648-0x2649.7 (2)
0x02640| 43 54 86 39 | CT.9 | sequence_number: 1129612857 0x264a-0x264d.7 (4)
0x02640| 2b ce| +.| acknowledgment_number: 734934504 0x264e-0x2651.7 (4)
0x02650|35 e8 |5. |
0x02650| 80 | . | data_offset: 8 0x2652-0x2652.3 (0.4)
0x02650| 80 | . | reserved: 0 0x2652.4-0x2652.6 (0.3)
0x02650| 80 | . | ns: false 0x2652.7-0x2652.7 (0.1)
0x02650| 18 | . | cwr: false 0x2653-0x2653 (0.1)
0x02650| 18 | . | ece: false 0x2653.1-0x2653.1 (0.1)
0x02650| 18 | . | urg: false 0x2653.2-0x2653.2 (0.1)
0x02650| 18 | . | ack: true 0x2653.3-0x2653.3 (0.1)
0x02650| 18 | . | psh: true 0x2653.4-0x2653.4 (0.1)
0x02650| 18 | . | rst: false 0x2653.5-0x2653.5 (0.1)
0x02650| 18 | . | syn: false 0x2653.6-0x2653.6 (0.1)
0x02650| 18 | . | fin: false 0x2653.7-0x2653.7 (0.1)
0x02650| 01 68 | .h | window_size: 360 0x2654-0x2655.7 (2)
0x02650| 2a ae | *. | checksum: 0x2aae 0x2656-0x2657.7 (2)
0x02650| 00 00 | .. | urgent_pointer: 0 0x2658-0x2659.7 (2)
| | | options[0:3]: 0x265a-0x2665.7 (12)
| | | [0]{}: option 0x265a-0x265a.7 (1)
0x02650| 01 | . | kind: "nop" (1) (No operation) 0x265a-0x265a.7 (1)
| | | [1]{}: option 0x265b-0x265b.7 (1)
0x02650| 01 | . | kind: "nop" (1) (No operation) 0x265b-0x265b.7 (1)
| | | [2]{}: option 0x265c-0x2665.7 (10)
0x02650| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x265c-0x265c.7 (1)
0x02650| 0a | . | length: 10 0x265d-0x265d.7 (1)
0x02650| e4 57| .W| data: raw bits 0x265e-0x2665.7 (8)
0x02660|7b 99 4b 2a 91 55 |{.K*.U |
0x02660| 17 03 03 00 21 00 00 00 00 00| ....!.....| payload: raw bits 0x2666-0x268b.7 (38)
0x02670|00 00 05 d5 71 fb a3 87 9f 58 83 90 15 c7 2d 65|....q....X....-e|
0x02680|52 df 40 13 ee cb 7f d6 30 c8 39 81 |R.@.....0.9. |
| | | padding: raw bits 0x268c-NA (0)
| | | options[0:0]: 0x268c-NA (0)
0x02680| 88 00 00 00| ....| footer_length: 136 0x268c-0x268f.7 (4)
| | | [57]{}: block 0x2690-0x271f.7 (144)
0x02690|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2690-0x2693.7 (4)
0x02690| 90 00 00 00 | .... | length: 144 0x2694-0x2697.7 (4)
0x02690| 00 00 00 00 | .... | interface_id: 0 0x2698-0x269b.7 (4)
0x02690| 72 1d 05 00| r...| timestamp_high: 335218 0x269c-0x269f.7 (4)
0x026a0|35 06 86 c9 |5... | timestamp_low: 3381003829 0x26a0-0x26a3.7 (4)
0x026a0| 70 00 00 00 | p... | capture_packet_length: 112 0x26a4-0x26a7.7 (4)
0x026a0| 70 00 00 00 | p... | original_packet_length: 112 0x26a8-0x26ab.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x26ac-0x271b.7 (112)
0x026a0| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x26ac-0x26b1.7 (6)
0x026b0|7d 93 |}. |
0x026b0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x26b2-0x26b7.7 (6)
0x026b0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x26b8-0x26b9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x26ba-0x271b.7 (98)
0x026b0| 45 | E | version: 4 0x26ba-0x26ba.3 (0.4)
0x026b0| 45 | E | ihl: 5 0x26ba.4-0x26ba.7 (0.4)
0x026b0| 28 | ( | dscp: 10 0x26bb-0x26bb.5 (0.6)
0x026b0| 28 | ( | ecn: 0 0x26bb.6-0x26bb.7 (0.2)
0x026b0| 00 62 | .b | total_length: 98 0x26bc-0x26bd.7 (2)
0x026b0| 41 02| A.| identification: 16642 0x26be-0x26bf.7 (2)
0x026c0|00 |. | reserved: 0 0x26c0-0x26c0 (0.1)
0x026c0|00 |. | dont_fragment: false 0x26c0.1-0x26c0.1 (0.1)
0x026c0|00 |. | more_fragments: false 0x26c0.2-0x26c0.2 (0.1)
0x026c0|00 00 |.. | fragment_offset: 0 0x26c0.3-0x26c1.7 (1.5)
0x026c0| 35 | 5 | ttl: 53 0x26c2-0x26c2.7 (1)
0x026c0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x26c3-0x26c3.7 (1)
0x026c0| 52 d8 | R. | header_checksum: 0x52d8 (valid) 0x26c4-0x26c5.7 (2)
0x026c0| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x26c6-0x26c9.7 (4)
0x026c0| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x26ca-0x26cd.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x26ce-0x271b.7 (78)
0x026c0| 01 bb| ..| source_port: "https" (443) (http protocol over TLS/SSL) 0x26ce-0x26cf.7 (2)
0x026d0|c7 25 |.% | destination_port: 50981 0x26d0-0x26d1.7 (2)
0x026d0| 43 54 86 5f | CT._ | sequence_number: 1129612895 0x26d2-0x26d5.7 (4)
0x026d0| 2b ce 35 e8 | +.5. | acknowledgment_number: 734934504 0x26d6-0x26d9.7 (4)
0x026d0| 80 | . | data_offset: 8 0x26da-0x26da.3 (0.4)
0x026d0| 80 | . | reserved: 0 0x26da.4-0x26da.6 (0.3)
0x026d0| 80 | . | ns: false 0x26da.7-0x26da.7 (0.1)
0x026d0| 18 | . | cwr: false 0x26db-0x26db (0.1)
0x026d0| 18 | . | ece: false 0x26db.1-0x26db.1 (0.1)
0x026d0| 18 | . | urg: false 0x26db.2-0x26db.2 (0.1)
0x026d0| 18 | . | ack: true 0x26db.3-0x26db.3 (0.1)
0x026d0| 18 | . | psh: true 0x26db.4-0x26db.4 (0.1)
0x026d0| 18 | . | rst: false 0x26db.5-0x26db.5 (0.1)
0x026d0| 18 | . | syn: false 0x26db.6-0x26db.6 (0.1)
0x026d0| 18 | . | fin: false 0x26db.7-0x26db.7 (0.1)
0x026d0| 01 68 | .h | window_size: 360 0x26dc-0x26dd.7 (2)
0x026d0| f9 18| ..| checksum: 0xf918 0x26de-0x26df.7 (2)
0x026e0|00 00 |.. | urgent_pointer: 0 0x26e0-0x26e1.7 (2)
| | | options[0:3]: 0x26e2-0x26ed.7 (12)
| | | [0]{}: option 0x26e2-0x26e2.7 (1)
0x026e0| 01 | . | kind: "nop" (1) (No operation) 0x26e2-0x26e2.7 (1)
| | | [1]{}: option 0x26e3-0x26e3.7 (1)
0x026e0| 01 | . | kind: "nop" (1) (No operation) 0x26e3-0x26e3.7 (1)
| | | [2]{}: option 0x26e4-0x26ed.7 (10)
0x026e0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x26e4-0x26e4.7 (1)
0x026e0| 0a | . | length: 10 0x26e5-0x26e5.7 (1)
0x026e0| e4 57 7b 99 4b 2a 91 55 | .W{.K*.U | data: raw bits 0x26e6-0x26ed.7 (8)
0x026e0| 17 03| ..| payload: raw bits 0x26ee-0x271b.7 (46)
0x026f0|03 00 29 00 00 00 00 00 00 00 06 a7 fa e5 cc 23|..)............#|
* |until 0x271b.7 (46) | |
| | | padding: raw bits 0x271c-NA (0)
| | | options[0:0]: 0x271c-NA (0)
0x02710| 90 00 00 00| ....| footer_length: 144 0x271c-0x271f.7 (4)
| | | [58]{}: block 0x2720-0x2783.7 (100)
0x02720|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2720-0x2723.7 (4)
0x02720| 64 00 00 00 | d... | length: 100 0x2724-0x2727.7 (4)
0x02720| 00 00 00 00 | .... | interface_id: 0 0x2728-0x272b.7 (4)
0x02720| 72 1d 05 00| r...| timestamp_high: 335218 0x272c-0x272f.7 (4)
0x02730|70 06 86 c9 |p... | timestamp_low: 3381003888 0x2730-0x2733.7 (4)
0x02730| 42 00 00 00 | B... | capture_packet_length: 66 0x2734-0x2737.7 (4)
0x02730| 42 00 00 00 | B... | original_packet_length: 66 0x2738-0x273b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x273c-0x277d.7 (66)
0x02730| 94 10 3e 05| ..>.| destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x273c-0x2741.7 (6)
0x02740|36 d3 |6. |
0x02740| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2742-0x2747.7 (6)
0x02740| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2748-0x2749.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x274a-0x277d.7 (52)
0x02740| 45 | E | version: 4 0x274a-0x274a.3 (0.4)
0x02740| 45 | E | ihl: 5 0x274a.4-0x274a.7 (0.4)
0x02740| 00 | . | dscp: 0 0x274b-0x274b.5 (0.6)
0x02740| 00 | . | ecn: 0 0x274b.6-0x274b.7 (0.2)
0x02740| 00 34 | .4 | total_length: 52 0x274c-0x274d.7 (2)
0x02740| b7 12| ..| identification: 46866 0x274e-0x274f.7 (2)
0x02750|40 |@ | reserved: 0 0x2750-0x2750 (0.1)
0x02750|40 |@ | dont_fragment: true 0x2750.1-0x2750.1 (0.1)
0x02750|40 |@ | more_fragments: false 0x2750.2-0x2750.2 (0.1)
0x02750|40 00 |@. | fragment_offset: 0 0x2750.3-0x2751.7 (1.5)
0x02750| 40 | @ | ttl: 64 0x2752-0x2752.7 (1)
0x02750| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x2753-0x2753.7 (1)
0x02750| 92 1d | .. | header_checksum: 0x921d (valid) 0x2754-0x2755.7 (2)
0x02750| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x2756-0x2759.7 (4)
0x02750| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x275a-0x275d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x275e-0x277d.7 (32)
0x02750| c7 25| .%| source_port: 50981 0x275e-0x275f.7 (2)
0x02760|01 bb |.. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x2760-0x2761.7 (2)
0x02760| 2b ce 36 0e | +.6. | sequence_number: 734934542 0x2762-0x2765.7 (4)
0x02760| 43 54 86 39 | CT.9 | acknowledgment_number: 1129612857 0x2766-0x2769.7 (4)
0x02760| 80 | . | data_offset: 8 0x276a-0x276a.3 (0.4)
0x02760| 80 | . | reserved: 0 0x276a.4-0x276a.6 (0.3)
0x02760| 80 | . | ns: false 0x276a.7-0x276a.7 (0.1)
0x02760| 10 | . | cwr: false 0x276b-0x276b (0.1)
0x02760| 10 | . | ece: false 0x276b.1-0x276b.1 (0.1)
0x02760| 10 | . | urg: false 0x276b.2-0x276b.2 (0.1)
0x02760| 10 | . | ack: true 0x276b.3-0x276b.3 (0.1)
0x02760| 10 | . | psh: false 0x276b.4-0x276b.4 (0.1)
0x02760| 10 | . | rst: false 0x276b.5-0x276b.5 (0.1)
0x02760| 10 | . | syn: false 0x276b.6-0x276b.6 (0.1)
0x02760| 10 | . | fin: false 0x276b.7-0x276b.7 (0.1)
0x02760| 10 00 | .. | window_size: 4096 0x276c-0x276d.7 (2)
0x02760| 44 3d| D=| checksum: 0x443d 0x276e-0x276f.7 (2)
0x02770|00 00 |.. | urgent_pointer: 0 0x2770-0x2771.7 (2)
| | | options[0:3]: 0x2772-0x277d.7 (12)
| | | [0]{}: option 0x2772-0x2772.7 (1)
0x02770| 01 | . | kind: "nop" (1) (No operation) 0x2772-0x2772.7 (1)
| | | [1]{}: option 0x2773-0x2773.7 (1)
0x02770| 01 | . | kind: "nop" (1) (No operation) 0x2773-0x2773.7 (1)
| | | [2]{}: option 0x2774-0x277d.7 (10)
0x02770| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2774-0x2774.7 (1)
0x02770| 0a | . | length: 10 0x2775-0x2775.7 (1)
0x02770| 4b 2a 91 85 e4 57 7b 99 | K*...W{. | data: raw bits 0x2776-0x277d.7 (8)
| | | payload: raw bits 0x277e-NA (0)
0x02770| 00 00| ..| padding: raw bits 0x277e-0x277f.7 (2)
| | | options[0:0]: 0x2780-NA (0)
0x02780|64 00 00 00 |d... | footer_length: 100 0x2780-0x2783.7 (4)
| | | [59]{}: block 0x2784-0x27e7.7 (100)
0x02780| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2784-0x2787.7 (4)
0x02780| 64 00 00 00 | d... | length: 100 0x2788-0x278b.7 (4)
0x02780| 00 00 00 00| ....| interface_id: 0 0x278c-0x278f.7 (4)
0x02790|72 1d 05 00 |r... | timestamp_high: 335218 0x2790-0x2793.7 (4)
0x02790| 70 06 86 c9 | p... | timestamp_low: 3381003888 0x2794-0x2797.7 (4)
0x02790| 42 00 00 00 | B... | capture_packet_length: 66 0x2798-0x279b.7 (4)
0x02790| 42 00 00 00| B...| original_packet_length: 66 0x279c-0x279f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x27a0-0x27e1.7 (66)
0x027a0|94 10 3e 05 36 d3 |..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x27a0-0x27a5.7 (6)
0x027a0| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x27a6-0x27ab.7 (6)
0x027a0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x27ac-0x27ad.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x27ae-0x27e1.7 (52)
0x027a0| 45 | E | version: 4 0x27ae-0x27ae.3 (0.4)
0x027a0| 45 | E | ihl: 5 0x27ae.4-0x27ae.7 (0.4)
0x027a0| 00| .| dscp: 0 0x27af-0x27af.5 (0.6)
0x027a0| 00| .| ecn: 0 0x27af.6-0x27af.7 (0.2)
0x027b0|00 34 |.4 | total_length: 52 0x27b0-0x27b1.7 (2)
0x027b0| ba 9a | .. | identification: 47770 0x27b2-0x27b3.7 (2)
0x027b0| 40 | @ | reserved: 0 0x27b4-0x27b4 (0.1)
0x027b0| 40 | @ | dont_fragment: true 0x27b4.1-0x27b4.1 (0.1)
0x027b0| 40 | @ | more_fragments: false 0x27b4.2-0x27b4.2 (0.1)
0x027b0| 40 00 | @. | fragment_offset: 0 0x27b4.3-0x27b5.7 (1.5)
0x027b0| 40 | @ | ttl: 64 0x27b6-0x27b6.7 (1)
0x027b0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x27b7-0x27b7.7 (1)
0x027b0| 8e 95 | .. | header_checksum: 0x8e95 (valid) 0x27b8-0x27b9.7 (2)
0x027b0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x27ba-0x27bd.7 (4)
0x027b0| 4a 7d| J}| destination_ip: "74.125.228.227" (0x4a7de4e3) 0x27be-0x27c1.7 (4)
0x027c0|e4 e3 |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x27c2-0x27e1.7 (32)
0x027c0| c7 25 | .% | source_port: 50981 0x27c2-0x27c3.7 (2)
0x027c0| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x27c4-0x27c5.7 (2)
0x027c0| 2b ce 36 0e | +.6. | sequence_number: 734934542 0x27c6-0x27c9.7 (4)
0x027c0| 43 54 86 5f | CT._ | acknowledgment_number: 1129612895 0x27ca-0x27cd.7 (4)
0x027c0| 80 | . | data_offset: 8 0x27ce-0x27ce.3 (0.4)
0x027c0| 80 | . | reserved: 0 0x27ce.4-0x27ce.6 (0.3)
0x027c0| 80 | . | ns: false 0x27ce.7-0x27ce.7 (0.1)
0x027c0| 10| .| cwr: false 0x27cf-0x27cf (0.1)
0x027c0| 10| .| ece: false 0x27cf.1-0x27cf.1 (0.1)
0x027c0| 10| .| urg: false 0x27cf.2-0x27cf.2 (0.1)
0x027c0| 10| .| ack: true 0x27cf.3-0x27cf.3 (0.1)
0x027c0| 10| .| psh: false 0x27cf.4-0x27cf.4 (0.1)
0x027c0| 10| .| rst: false 0x27cf.5-0x27cf.5 (0.1)
0x027c0| 10| .| syn: false 0x27cf.6-0x27cf.6 (0.1)
0x027c0| 10| .| fin: false 0x27cf.7-0x27cf.7 (0.1)
0x027d0|0f ff |.. | window_size: 4095 0x27d0-0x27d1.7 (2)
0x027d0| 44 18 | D. | checksum: 0x4418 0x27d2-0x27d3.7 (2)
0x027d0| 00 00 | .. | urgent_pointer: 0 0x27d4-0x27d5.7 (2)
| | | options[0:3]: 0x27d6-0x27e1.7 (12)
| | | [0]{}: option 0x27d6-0x27d6.7 (1)
0x027d0| 01 | . | kind: "nop" (1) (No operation) 0x27d6-0x27d6.7 (1)
| | | [1]{}: option 0x27d7-0x27d7.7 (1)
0x027d0| 01 | . | kind: "nop" (1) (No operation) 0x27d7-0x27d7.7 (1)
| | | [2]{}: option 0x27d8-0x27e1.7 (10)
0x027d0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x27d8-0x27d8.7 (1)
0x027d0| 0a | . | length: 10 0x27d9-0x27d9.7 (1)
0x027d0| 4b 2a 91 85 e4 57| K*...W| data: raw bits 0x27da-0x27e1.7 (8)
0x027e0|7b 99 |{. |
| | | payload: raw bits 0x27e2-NA (0)
0x027e0| 00 00 | .. | padding: raw bits 0x27e2-0x27e3.7 (2)
| | | options[0:0]: 0x27e4-NA (0)
0x027e0| 64 00 00 00 | d... | footer_length: 100 0x27e4-0x27e7.7 (4)
| | | [60]{}: block 0x27e8-0x284b.7 (100)
0x027e0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x27e8-0x27eb.7 (4)
0x027e0| 64 00 00 00| d...| length: 100 0x27ec-0x27ef.7 (4)
0x027f0|00 00 00 00 |.... | interface_id: 0 0x27f0-0x27f3.7 (4)
0x027f0| 72 1d 05 00 | r... | timestamp_high: 335218 0x27f4-0x27f7.7 (4)
0x027f0| 7c 06 86 c9 | |... | timestamp_low: 3381003900 0x27f8-0x27fb.7 (4)
0x027f0| 42 00 00 00| B...| capture_packet_length: 66 0x27fc-0x27ff.7 (4)
0x02800|42 00 00 00 |B... | original_packet_length: 66 0x2800-0x2803.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2804-0x2845.7 (66)
0x02800| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2804-0x2809.7 (6)
0x02800| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x280a-0x280f.7 (6)
0x02810|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2810-0x2811.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2812-0x2845.7 (52)
0x02810| 45 | E | version: 4 0x2812-0x2812.3 (0.4)
0x02810| 45 | E | ihl: 5 0x2812.4-0x2812.7 (0.4)
0x02810| 00 | . | dscp: 0 0x2813-0x2813.5 (0.6)
0x02810| 00 | . | ecn: 0 0x2813.6-0x2813.7 (0.2)
0x02810| 00 34 | .4 | total_length: 52 0x2814-0x2815.7 (2)
0x02810| 99 89 | .. | identification: 39305 0x2816-0x2817.7 (2)
0x02810| 40 | @ | reserved: 0 0x2818-0x2818 (0.1)
0x02810| 40 | @ | dont_fragment: true 0x2818.1-0x2818.1 (0.1)
0x02810| 40 | @ | more_fragments: false 0x2818.2-0x2818.2 (0.1)
0x02810| 40 00 | @. | fragment_offset: 0 0x2818.3-0x2819.7 (1.5)
0x02810| 40 | @ | ttl: 64 0x281a-0x281a.7 (1)
0x02810| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x281b-0x281b.7 (1)
0x02810| af a6 | .. | header_checksum: 0xafa6 (valid) 0x281c-0x281d.7 (2)
0x02810| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0x281e-0x2821.7 (4)
0x02820|01 8b |.. |
0x02820| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x2822-0x2825.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x2826-0x2845.7 (32)
0x02820| c7 25 | .% | source_port: 50981 0x2826-0x2827.7 (2)
0x02820| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x2828-0x2829.7 (2)
0x02820| 2b ce 36 0e | +.6. | sequence_number: 734934542 0x282a-0x282d.7 (4)
0x02820| 43 54| CT| acknowledgment_number: 1129612941 0x282e-0x2831.7 (4)
0x02830|86 8d |.. |
0x02830| 80 | . | data_offset: 8 0x2832-0x2832.3 (0.4)
0x02830| 80 | . | reserved: 0 0x2832.4-0x2832.6 (0.3)
0x02830| 80 | . | ns: false 0x2832.7-0x2832.7 (0.1)
0x02830| 10 | . | cwr: false 0x2833-0x2833 (0.1)
0x02830| 10 | . | ece: false 0x2833.1-0x2833.1 (0.1)
0x02830| 10 | . | urg: false 0x2833.2-0x2833.2 (0.1)
0x02830| 10 | . | ack: true 0x2833.3-0x2833.3 (0.1)
0x02830| 10 | . | psh: false 0x2833.4-0x2833.4 (0.1)
0x02830| 10 | . | rst: false 0x2833.5-0x2833.5 (0.1)
0x02830| 10 | . | syn: false 0x2833.6-0x2833.6 (0.1)
0x02830| 10 | . | fin: false 0x2833.7-0x2833.7 (0.1)
0x02830| 0f fe | .. | window_size: 4094 0x2834-0x2835.7 (2)
0x02830| 43 eb | C. | checksum: 0x43eb 0x2836-0x2837.7 (2)
0x02830| 00 00 | .. | urgent_pointer: 0 0x2838-0x2839.7 (2)
| | | options[0:3]: 0x283a-0x2845.7 (12)
| | | [0]{}: option 0x283a-0x283a.7 (1)
0x02830| 01 | . | kind: "nop" (1) (No operation) 0x283a-0x283a.7 (1)
| | | [1]{}: option 0x283b-0x283b.7 (1)
0x02830| 01 | . | kind: "nop" (1) (No operation) 0x283b-0x283b.7 (1)
| | | [2]{}: option 0x283c-0x2845.7 (10)
0x02830| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x283c-0x283c.7 (1)
0x02830| 0a | . | length: 10 0x283d-0x283d.7 (1)
0x02830| 4b 2a| K*| data: raw bits 0x283e-0x2845.7 (8)
0x02840|91 85 e4 57 7b 99 |...W{. |
| | | payload: raw bits 0x2846-NA (0)
0x02840| 00 00 | .. | padding: raw bits 0x2846-0x2847.7 (2)
| | | options[0:0]: 0x2848-NA (0)
0x02840| 64 00 00 00 | d... | footer_length: 100 0x2848-0x284b.7 (4)
| | | [61]{}: block 0x284c-0x28db.7 (144)
0x02840| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x284c-0x284f.7 (4)
0x02850|90 00 00 00 |.... | length: 144 0x2850-0x2853.7 (4)
0x02850| 00 00 00 00 | .... | interface_id: 0 0x2854-0x2857.7 (4)
0x02850| 72 1d 05 00 | r... | timestamp_high: 335218 0x2858-0x285b.7 (4)
0x02850| dc 0a 86 c9| ....| timestamp_low: 3381005020 0x285c-0x285f.7 (4)
0x02860|70 00 00 00 |p... | capture_packet_length: 112 0x2860-0x2863.7 (4)
0x02860| 70 00 00 00 | p... | original_packet_length: 112 0x2864-0x2867.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2868-0x28d7.7 (112)
0x02860| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2868-0x286d.7 (6)
0x02860| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x286e-0x2873.7 (6)
0x02870|60 f1 7d 93 |`.}. |
0x02870| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2874-0x2875.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2876-0x28d7.7 (98)
0x02870| 45 | E | version: 4 0x2876-0x2876.3 (0.4)
0x02870| 45 | E | ihl: 5 0x2876.4-0x2876.7 (0.4)
0x02870| 00 | . | dscp: 0 0x2877-0x2877.5 (0.6)
0x02870| 00 | . | ecn: 0 0x2877.6-0x2877.7 (0.2)
0x02870| 00 62 | .b | total_length: 98 0x2878-0x2879.7 (2)
0x02870| 8d 8b | .. | identification: 36235 0x287a-0x287b.7 (2)
0x02870| 40 | @ | reserved: 0 0x287c-0x287c (0.1)
0x02870| 40 | @ | dont_fragment: true 0x287c.1-0x287c.1 (0.1)
0x02870| 40 | @ | more_fragments: false 0x287c.2-0x287c.2 (0.1)
0x02870| 40 00 | @. | fragment_offset: 0 0x287c.3-0x287d.7 (1.5)
0x02870| 40 | @ | ttl: 64 0x287e-0x287e.7 (1)
0x02870| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x287f-0x287f.7 (1)
0x02880|bb 76 |.v | header_checksum: 0xbb76 (valid) 0x2880-0x2881.7 (2)
0x02880| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x2882-0x2885.7 (4)
0x02880| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x2886-0x2889.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x288a-0x28d7.7 (78)
0x02880| c7 25 | .% | source_port: 50981 0x288a-0x288b.7 (2)
0x02880| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x288c-0x288d.7 (2)
0x02880| 2b ce| +.| sequence_number: 734934542 0x288e-0x2891.7 (4)
0x02890|36 0e |6. |
0x02890| 43 54 86 8d | CT.. | acknowledgment_number: 1129612941 0x2892-0x2895.7 (4)
0x02890| 80 | . | data_offset: 8 0x2896-0x2896.3 (0.4)
0x02890| 80 | . | reserved: 0 0x2896.4-0x2896.6 (0.3)
0x02890| 80 | . | ns: false 0x2896.7-0x2896.7 (0.1)
0x02890| 18 | . | cwr: false 0x2897-0x2897 (0.1)
0x02890| 18 | . | ece: false 0x2897.1-0x2897.1 (0.1)
0x02890| 18 | . | urg: false 0x2897.2-0x2897.2 (0.1)
0x02890| 18 | . | ack: true 0x2897.3-0x2897.3 (0.1)
0x02890| 18 | . | psh: true 0x2897.4-0x2897.4 (0.1)
0x02890| 18 | . | rst: false 0x2897.5-0x2897.5 (0.1)
0x02890| 18 | . | syn: false 0x2897.6-0x2897.6 (0.1)
0x02890| 18 | . | fin: false 0x2897.7-0x2897.7 (0.1)
0x02890| 10 00 | .. | window_size: 4096 0x2898-0x2899.7 (2)
0x02890| 3f 60 | ?` | checksum: 0x3f60 0x289a-0x289b.7 (2)
0x02890| 00 00 | .. | urgent_pointer: 0 0x289c-0x289d.7 (2)
| | | options[0:3]: 0x289e-0x28a9.7 (12)
| | | [0]{}: option 0x289e-0x289e.7 (1)
0x02890| 01 | . | kind: "nop" (1) (No operation) 0x289e-0x289e.7 (1)
| | | [1]{}: option 0x289f-0x289f.7 (1)
0x02890| 01| .| kind: "nop" (1) (No operation) 0x289f-0x289f.7 (1)
| | | [2]{}: option 0x28a0-0x28a9.7 (10)
0x028a0|08 |. | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x28a0-0x28a0.7 (1)
0x028a0| 0a | . | length: 10 0x28a1-0x28a1.7 (1)
0x028a0| 4b 2a 91 86 e4 57 7b 99 | K*...W{. | data: raw bits 0x28a2-0x28a9.7 (8)
0x028a0| 17 03 03 00 29 00| ....).| payload: raw bits 0x28aa-0x28d7.7 (46)
0x028b0|00 00 00 00 00 00 06 96 50 96 ef 10 f4 be e9 a0|........P.......|
* |until 0x28d7.7 (46) | |
| | | padding: raw bits 0x28d8-NA (0)
| | | options[0:0]: 0x28d8-NA (0)
0x028d0| 90 00 00 00 | .... | footer_length: 144 0x28d8-0x28db.7 (4)
| | | [62]{}: block 0x28dc-0x2e6b.7 (1424)
0x028d0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x28dc-0x28df.7 (4)
0x028e0|90 05 00 00 |.... | length: 1424 0x28e0-0x28e3.7 (4)
0x028e0| 00 00 00 00 | .... | interface_id: 0 0x28e4-0x28e7.7 (4)
0x028e0| 72 1d 05 00 | r... | timestamp_high: 335218 0x28e8-0x28eb.7 (4)
0x028e0| f8 17 86 c9| ....| timestamp_low: 3381008376 0x28ec-0x28ef.7 (4)
0x028f0|70 05 00 00 |p... | capture_packet_length: 1392 0x28f0-0x28f3.7 (4)
0x028f0| 70 05 00 00 | p... | original_packet_length: 1392 0x28f4-0x28f7.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x28f8-0x2e67.7 (1392)
0x028f0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x28f8-0x28fd.7 (6)
0x028f0| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x28fe-0x2903.7 (6)
0x02900|60 f1 7d 93 |`.}. |
0x02900| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2904-0x2905.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2906-0x2e67.7 (1378)
0x02900| 45 | E | version: 4 0x2906-0x2906.3 (0.4)
0x02900| 45 | E | ihl: 5 0x2906.4-0x2906.7 (0.4)
0x02900| 00 | . | dscp: 0 0x2907-0x2907.5 (0.6)
0x02900| 00 | . | ecn: 0 0x2907.6-0x2907.7 (0.2)
0x02900| 05 62 | .b | total_length: 1378 0x2908-0x2909.7 (2)
0x02900| e1 51 | .Q | identification: 57681 0x290a-0x290b.7 (2)
0x02900| 00 | . | reserved: 0 0x290c-0x290c (0.1)
0x02900| 00 | . | dont_fragment: false 0x290c.1-0x290c.1 (0.1)
0x02900| 00 | . | more_fragments: false 0x290c.2-0x290c.2 (0.1)
0x02900| 00 00 | .. | fragment_offset: 0 0x290c.3-0x290d.7 (1.5)
0x02900| 40 | @ | ttl: 64 0x290e-0x290e.7 (1)
0x02900| 11| .| protocol: "udp" (17) (User datagram protocol) 0x290f-0x290f.7 (1)
0x02910|a2 a5 |.. | header_checksum: 0xa2a5 (valid) 0x2910-0x2911.7 (2)
0x02910| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x2912-0x2915.7 (4)
0x02910| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x2916-0x2919.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x291a-0x2e67.7 (1358)
0x02910| fa 90 | .. | source_port: 64144 0x291a-0x291b.7 (2)
0x02910| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x291c-0x291d.7 (2)
0x02910| 05 4e| .N| length: 1358 0x291e-0x291f.7 (2)
0x02920|1e 57 |.W | checksum: 0x1e57 0x2920-0x2921.7 (2)
0x02920| 0d 48 4a 3d 55 c4 39 cd 13 51 30 32 35 01| .HJ=U.9..Q025.| payload: raw bits 0x2922-0x2e67.7 (1350)
0x02930|0b f5 37 e5 76 ae 5f 9e 40 35 6f 33 01 a0 01 00|..7.v._.@5o3....|
* |until 0x2e67.7 (1350) | |
| | | padding: raw bits 0x2e68-NA (0)
| | | options[0:0]: 0x2e68-NA (0)
0x02e60| 90 05 00 00 | .... | footer_length: 1424 0x2e68-0x2e6b.7 (4)
| | | [63]{}: block 0x2e6c-0x2edb.7 (112)
0x02e60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2e6c-0x2e6f.7 (4)
0x02e70|70 00 00 00 |p... | length: 112 0x2e70-0x2e73.7 (4)
0x02e70| 00 00 00 00 | .... | interface_id: 0 0x2e74-0x2e77.7 (4)
0x02e70| 72 1d 05 00 | r... | timestamp_high: 335218 0x2e78-0x2e7b.7 (4)
0x02e70| 62 18 86 c9| b...| timestamp_low: 3381008482 0x2e7c-0x2e7f.7 (4)
0x02e80|4e 00 00 00 |N... | capture_packet_length: 78 0x2e80-0x2e83.7 (4)
0x02e80| 4e 00 00 00 | N... | original_packet_length: 78 0x2e84-0x2e87.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2e88-0x2ed5.7 (78)
0x02e80| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2e88-0x2e8d.7 (6)
0x02e80| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2e8e-0x2e93.7 (6)
0x02e90|60 f1 7d 93 |`.}. |
0x02e90| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2e94-0x2e95.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2e96-0x2ed5.7 (64)
0x02e90| 45 | E | version: 4 0x2e96-0x2e96.3 (0.4)
0x02e90| 45 | E | ihl: 5 0x2e96.4-0x2e96.7 (0.4)
0x02e90| 00 | . | dscp: 0 0x2e97-0x2e97.5 (0.6)
0x02e90| 00 | . | ecn: 0 0x2e97.6-0x2e97.7 (0.2)
0x02e90| 00 40 | .@ | total_length: 64 0x2e98-0x2e99.7 (2)
0x02e90| 7b 9e | {. | identification: 31646 0x2e9a-0x2e9b.7 (2)
0x02e90| 40 | @ | reserved: 0 0x2e9c-0x2e9c (0.1)
0x02e90| 40 | @ | dont_fragment: true 0x2e9c.1-0x2e9c.1 (0.1)
0x02e90| 40 | @ | more_fragments: false 0x2e9c.2-0x2e9c.2 (0.1)
0x02e90| 40 00 | @. | fragment_offset: 0 0x2e9c.3-0x2e9d.7 (1.5)
0x02e90| 40 | @ | ttl: 64 0x2e9e-0x2e9e.7 (1)
0x02e90| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x2e9f-0x2e9f.7 (1)
0x02ea0|cd 85 |.. | header_checksum: 0xcd85 (valid) 0x2ea0-0x2ea1.7 (2)
0x02ea0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x2ea2-0x2ea5.7 (4)
0x02ea0| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x2ea6-0x2ea9.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x2eaa-0x2ed5.7 (44)
0x02ea0| c7 26 | .& | source_port: 50982 0x2eaa-0x2eab.7 (2)
0x02ea0| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x2eac-0x2ead.7 (2)
0x02ea0| 91 0a| ..| sequence_number: 2433367640 0x2eae-0x2eb1.7 (4)
0x02eb0|3e 58 |>X |
0x02eb0| 00 00 00 00 | .... | acknowledgment_number: 0 0x2eb2-0x2eb5.7 (4)
0x02eb0| b0 | . | data_offset: 11 0x2eb6-0x2eb6.3 (0.4)
0x02eb0| b0 | . | reserved: 0 0x2eb6.4-0x2eb6.6 (0.3)
0x02eb0| b0 | . | ns: false 0x2eb6.7-0x2eb6.7 (0.1)
0x02eb0| 02 | . | cwr: false 0x2eb7-0x2eb7 (0.1)
0x02eb0| 02 | . | ece: false 0x2eb7.1-0x2eb7.1 (0.1)
0x02eb0| 02 | . | urg: false 0x2eb7.2-0x2eb7.2 (0.1)
0x02eb0| 02 | . | ack: false 0x2eb7.3-0x2eb7.3 (0.1)
0x02eb0| 02 | . | psh: false 0x2eb7.4-0x2eb7.4 (0.1)
0x02eb0| 02 | . | rst: false 0x2eb7.5-0x2eb7.5 (0.1)
0x02eb0| 02 | . | syn: true 0x2eb7.6-0x2eb7.6 (0.1)
0x02eb0| 02 | . | fin: false 0x2eb7.7-0x2eb7.7 (0.1)
0x02eb0| ff ff | .. | window_size: 65535 0x2eb8-0x2eb9.7 (2)
0x02eb0| d0 70 | .p | checksum: 0xd070 0x2eba-0x2ebb.7 (2)
0x02eb0| 00 00 | .. | urgent_pointer: 0 0x2ebc-0x2ebd.7 (2)
| | | options[0:9]: 0x2ebe-0x2ed5.7 (24)
| | | [0]{}: option 0x2ebe-0x2ec1.7 (4)
0x02eb0| 02 | . | kind: "maxseg" (2) (Maximum segment size) 0x2ebe-0x2ebe.7 (1)
0x02eb0| 04| .| length: 4 0x2ebf-0x2ebf.7 (1)
0x02ec0|05 b4 |.. | data: raw bits 0x2ec0-0x2ec1.7 (2)
| | | [1]{}: option 0x2ec2-0x2ec2.7 (1)
0x02ec0| 01 | . | kind: "nop" (1) (No operation) 0x2ec2-0x2ec2.7 (1)
| | | [2]{}: option 0x2ec3-0x2ec5.7 (3)
0x02ec0| 03 | . | kind: "winscale" (3) (Window scale) 0x2ec3-0x2ec3.7 (1)
0x02ec0| 03 | . | length: 3 0x2ec4-0x2ec4.7 (1)
0x02ec0| 05 | . | data: raw bits 0x2ec5-0x2ec5.7 (1)
| | | [3]{}: option 0x2ec6-0x2ec6.7 (1)
0x02ec0| 01 | . | kind: "nop" (1) (No operation) 0x2ec6-0x2ec6.7 (1)
| | | [4]{}: option 0x2ec7-0x2ec7.7 (1)
0x02ec0| 01 | . | kind: "nop" (1) (No operation) 0x2ec7-0x2ec7.7 (1)
| | | [5]{}: option 0x2ec8-0x2ed1.7 (10)
0x02ec0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2ec8-0x2ec8.7 (1)
0x02ec0| 0a | . | length: 10 0x2ec9-0x2ec9.7 (1)
0x02ec0| 4b 2a 91 89 00 00| K*....| data: raw bits 0x2eca-0x2ed1.7 (8)
0x02ed0|00 00 |.. |
| | | [6]{}: option 0x2ed2-0x2ed3.7 (2)
0x02ed0| 04 | . | kind: "sack_permitted" (4) (Selective Acknowledgement permitted) 0x2ed2-0x2ed2.7 (1)
0x02ed0| 02 | . | length: 2 0x2ed3-0x2ed3.7 (1)
| | | data: raw bits 0x2ed4-NA (0)
| | | [7]{}: option 0x2ed4-0x2ed4.7 (1)
0x02ed0| 00 | . | kind: "end" (0) (End of options list) 0x2ed4-0x2ed4.7 (1)
| | | [8]{}: option 0x2ed5-0x2ed5.7 (1)
0x02ed0| 00 | . | kind: "end" (0) (End of options list) 0x2ed5-0x2ed5.7 (1)
| | | payload: raw bits 0x2ed6-NA (0)
0x02ed0| 00 00 | .. | padding: raw bits 0x2ed6-0x2ed7.7 (2)
| | | options[0:0]: 0x2ed8-NA (0)
0x02ed0| 70 00 00 00 | p... | footer_length: 112 0x2ed8-0x2edb.7 (4)
| | | [64]{}: block 0x2edc-0x2f3f.7 (100)
0x02ed0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2edc-0x2edf.7 (4)
0x02ee0|64 00 00 00 |d... | length: 100 0x2ee0-0x2ee3.7 (4)
0x02ee0| 00 00 00 00 | .... | interface_id: 0 0x2ee4-0x2ee7.7 (4)
0x02ee0| 72 1d 05 00 | r... | timestamp_high: 335218 0x2ee8-0x2eeb.7 (4)
0x02ee0| 23 7e 86 c9| #~..| timestamp_low: 3381034531 0x2eec-0x2eef.7 (4)
0x02ef0|42 00 00 00 |B... | capture_packet_length: 66 0x2ef0-0x2ef3.7 (4)
0x02ef0| 42 00 00 00 | B... | original_packet_length: 66 0x2ef4-0x2ef7.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2ef8-0x2f39.7 (66)
0x02ef0| a4 5e 60 f1 7d 93 | .^`.}. | destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2ef8-0x2efd.7 (6)
0x02ef0| 94 10| ..| source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2efe-0x2f03.7 (6)
0x02f00|3e 05 36 d3 |>.6. |
0x02f00| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2f04-0x2f05.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2f06-0x2f39.7 (52)
0x02f00| 45 | E | version: 4 0x2f06-0x2f06.3 (0.4)
0x02f00| 45 | E | ihl: 5 0x2f06.4-0x2f06.7 (0.4)
0x02f00| 28 | ( | dscp: 10 0x2f07-0x2f07.5 (0.6)
0x02f00| 28 | ( | ecn: 0 0x2f07.6-0x2f07.7 (0.2)
0x02f00| 00 34 | .4 | total_length: 52 0x2f08-0x2f09.7 (2)
0x02f00| 41 28 | A( | identification: 16680 0x2f0a-0x2f0b.7 (2)
0x02f00| 00 | . | reserved: 0 0x2f0c-0x2f0c (0.1)
0x02f00| 00 | . | dont_fragment: false 0x2f0c.1-0x2f0c.1 (0.1)
0x02f00| 00 | . | more_fragments: false 0x2f0c.2-0x2f0c.2 (0.1)
0x02f00| 00 00 | .. | fragment_offset: 0 0x2f0c.3-0x2f0d.7 (1.5)
0x02f00| 35 | 5 | ttl: 53 0x2f0e-0x2f0e.7 (1)
0x02f00| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x2f0f-0x2f0f.7 (1)
0x02f10|52 e0 |R. | header_checksum: 0x52e0 (valid) 0x2f10-0x2f11.7 (2)
0x02f10| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x2f12-0x2f15.7 (4)
0x02f10| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x2f16-0x2f19.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x2f1a-0x2f39.7 (32)
0x02f10| 01 bb | .. | source_port: "https" (443) (http protocol over TLS/SSL) 0x2f1a-0x2f1b.7 (2)
0x02f10| c7 25 | .% | destination_port: 50981 0x2f1c-0x2f1d.7 (2)
0x02f10| 43 54| CT| sequence_number: 1129612941 0x2f1e-0x2f21.7 (4)
0x02f20|86 8d |.. |
0x02f20| 2b ce 36 3c | +.6< | acknowledgment_number: 734934588 0x2f22-0x2f25.7 (4)
0x02f20| 80 | . | data_offset: 8 0x2f26-0x2f26.3 (0.4)
0x02f20| 80 | . | reserved: 0 0x2f26.4-0x2f26.6 (0.3)
0x02f20| 80 | . | ns: false 0x2f26.7-0x2f26.7 (0.1)
0x02f20| 10 | . | cwr: false 0x2f27-0x2f27 (0.1)
0x02f20| 10 | . | ece: false 0x2f27.1-0x2f27.1 (0.1)
0x02f20| 10 | . | urg: false 0x2f27.2-0x2f27.2 (0.1)
0x02f20| 10 | . | ack: true 0x2f27.3-0x2f27.3 (0.1)
0x02f20| 10 | . | psh: false 0x2f27.4-0x2f27.4 (0.1)
0x02f20| 10 | . | rst: false 0x2f27.5-0x2f27.5 (0.1)
0x02f20| 10 | . | syn: false 0x2f27.6-0x2f27.6 (0.1)
0x02f20| 10 | . | fin: false 0x2f27.7-0x2f27.7 (0.1)
0x02f20| 01 68 | .h | window_size: 360 0x2f28-0x2f29.7 (2)
0x02f20| 52 2e | R. | checksum: 0x522e 0x2f2a-0x2f2b.7 (2)
0x02f20| 00 00 | .. | urgent_pointer: 0 0x2f2c-0x2f2d.7 (2)
| | | options[0:3]: 0x2f2e-0x2f39.7 (12)
| | | [0]{}: option 0x2f2e-0x2f2e.7 (1)
0x02f20| 01 | . | kind: "nop" (1) (No operation) 0x2f2e-0x2f2e.7 (1)
| | | [1]{}: option 0x2f2f-0x2f2f.7 (1)
0x02f20| 01| .| kind: "nop" (1) (No operation) 0x2f2f-0x2f2f.7 (1)
| | | [2]{}: option 0x2f30-0x2f39.7 (10)
0x02f30|08 |. | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2f30-0x2f30.7 (1)
0x02f30| 0a | . | length: 10 0x2f31-0x2f31.7 (1)
0x02f30| e4 57 7b bf 4b 2a 91 84 | .W{.K*.. | data: raw bits 0x2f32-0x2f39.7 (8)
| | | payload: raw bits 0x2f3a-NA (0)
0x02f30| 00 00 | .. | padding: raw bits 0x2f3a-0x2f3b.7 (2)
| | | options[0:0]: 0x2f3c-NA (0)
0x02f30| 64 00 00 00| d...| footer_length: 100 0x2f3c-0x2f3f.7 (4)
| | | [65]{}: block 0x2f40-0x2fab.7 (108)
0x02f40|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2f40-0x2f43.7 (4)
0x02f40| 6c 00 00 00 | l... | length: 108 0x2f44-0x2f47.7 (4)
0x02f40| 00 00 00 00 | .... | interface_id: 0 0x2f48-0x2f4b.7 (4)
0x02f40| 72 1d 05 00| r...| timestamp_high: 335218 0x2f4c-0x2f4f.7 (4)
0x02f50|b4 ec 89 c9 |.... | timestamp_low: 3381259444 0x2f50-0x2f53.7 (4)
0x02f50| 4a 00 00 00 | J... | capture_packet_length: 74 0x2f54-0x2f57.7 (4)
0x02f50| 4a 00 00 00 | J... | original_packet_length: 74 0x2f58-0x2f5b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2f5c-0x2fa5.7 (74)
0x02f50| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2f5c-0x2f61.7 (6)
0x02f60|7d 93 |}. |
0x02f60| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2f62-0x2f67.7 (6)
0x02f60| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2f68-0x2f69.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2f6a-0x2fa5.7 (60)
0x02f60| 45 | E | version: 4 0x2f6a-0x2f6a.3 (0.4)
0x02f60| 45 | E | ihl: 5 0x2f6a.4-0x2f6a.7 (0.4)
0x02f60| 28 | ( | dscp: 10 0x2f6b-0x2f6b.5 (0.6)
0x02f60| 28 | ( | ecn: 0 0x2f6b.6-0x2f6b.7 (0.2)
0x02f60| 00 3c | .< | total_length: 60 0x2f6c-0x2f6d.7 (2)
0x02f60| 41 2b| A+| identification: 16683 0x2f6e-0x2f6f.7 (2)
0x02f70|00 |. | reserved: 0 0x2f70-0x2f70 (0.1)
0x02f70|00 |. | dont_fragment: false 0x2f70.1-0x2f70.1 (0.1)
0x02f70|00 |. | more_fragments: false 0x2f70.2-0x2f70.2 (0.1)
0x02f70|00 00 |.. | fragment_offset: 0 0x2f70.3-0x2f71.7 (1.5)
0x02f70| 35 | 5 | ttl: 53 0x2f72-0x2f72.7 (1)
0x02f70| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x2f73-0x2f73.7 (1)
0x02f70| 52 d5 | R. | header_checksum: 0x52d5 (valid) 0x2f74-0x2f75.7 (2)
0x02f70| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x2f76-0x2f79.7 (4)
0x02f70| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x2f7a-0x2f7d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x2f7e-0x2fa5.7 (40)
0x02f70| 01 bb| ..| source_port: "https" (443) (http protocol over TLS/SSL) 0x2f7e-0x2f7f.7 (2)
0x02f80|c7 26 |.& | destination_port: 50982 0x2f80-0x2f81.7 (2)
0x02f80| 85 02 5f f5 | .._. | sequence_number: 2231525365 0x2f82-0x2f85.7 (4)
0x02f80| 91 0a 3e 59 | ..>Y | acknowledgment_number: 2433367641 0x2f86-0x2f89.7 (4)
0x02f80| a0 | . | data_offset: 10 0x2f8a-0x2f8a.3 (0.4)
0x02f80| a0 | . | reserved: 0 0x2f8a.4-0x2f8a.6 (0.3)
0x02f80| a0 | . | ns: false 0x2f8a.7-0x2f8a.7 (0.1)
0x02f80| 12 | . | cwr: false 0x2f8b-0x2f8b (0.1)
0x02f80| 12 | . | ece: false 0x2f8b.1-0x2f8b.1 (0.1)
0x02f80| 12 | . | urg: false 0x2f8b.2-0x2f8b.2 (0.1)
0x02f80| 12 | . | ack: true 0x2f8b.3-0x2f8b.3 (0.1)
0x02f80| 12 | . | psh: false 0x2f8b.4-0x2f8b.4 (0.1)
0x02f80| 12 | . | rst: false 0x2f8b.5-0x2f8b.5 (0.1)
0x02f80| 12 | . | syn: true 0x2f8b.6-0x2f8b.6 (0.1)
0x02f80| 12 | . | fin: false 0x2f8b.7-0x2f8b.7 (0.1)
0x02f80| a6 2c | ., | window_size: 42540 0x2f8c-0x2f8d.7 (2)
0x02f80| f6 3f| .?| checksum: 0xf63f 0x2f8e-0x2f8f.7 (2)
0x02f90|00 00 |.. | urgent_pointer: 0 0x2f90-0x2f91.7 (2)
| | | options[0:5]: 0x2f92-0x2fa5.7 (20)
| | | [0]{}: option 0x2f92-0x2f95.7 (4)
0x02f90| 02 | . | kind: "maxseg" (2) (Maximum segment size) 0x2f92-0x2f92.7 (1)
0x02f90| 04 | . | length: 4 0x2f93-0x2f93.7 (1)
0x02f90| 05 96 | .. | data: raw bits 0x2f94-0x2f95.7 (2)
| | | [1]{}: option 0x2f96-0x2f97.7 (2)
0x02f90| 04 | . | kind: "sack_permitted" (4) (Selective Acknowledgement permitted) 0x2f96-0x2f96.7 (1)
0x02f90| 02 | . | length: 2 0x2f97-0x2f97.7 (1)
| | | data: raw bits 0x2f98-NA (0)
| | | [2]{}: option 0x2f98-0x2fa1.7 (10)
0x02f90| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x2f98-0x2f98.7 (1)
0x02f90| 0a | . | length: 10 0x2f99-0x2f99.7 (1)
0x02f90| e4 57 7b c4 4b 2a| .W{.K*| data: raw bits 0x2f9a-0x2fa1.7 (8)
0x02fa0|91 89 |.. |
| | | [3]{}: option 0x2fa2-0x2fa2.7 (1)
0x02fa0| 01 | . | kind: "nop" (1) (No operation) 0x2fa2-0x2fa2.7 (1)
| | | [4]{}: option 0x2fa3-0x2fa5.7 (3)
0x02fa0| 03 | . | kind: "winscale" (3) (Window scale) 0x2fa3-0x2fa3.7 (1)
0x02fa0| 03 | . | length: 3 0x2fa4-0x2fa4.7 (1)
0x02fa0| 07 | . | data: raw bits 0x2fa5-0x2fa5.7 (1)
| | | payload: raw bits 0x2fa6-NA (0)
0x02fa0| 00 00 | .. | padding: raw bits 0x2fa6-0x2fa7.7 (2)
| | | options[0:0]: 0x2fa8-NA (0)
0x02fa0| 6c 00 00 00 | l... | footer_length: 108 0x2fa8-0x2fab.7 (4)
| | | [66]{}: block 0x2fac-0x300f.7 (100)
0x02fa0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2fac-0x2faf.7 (4)
0x02fb0|64 00 00 00 |d... | length: 100 0x2fb0-0x2fb3.7 (4)
0x02fb0| 00 00 00 00 | .... | interface_id: 0 0x2fb4-0x2fb7.7 (4)
0x02fb0| 72 1d 05 00 | r... | timestamp_high: 335218 0x2fb8-0x2fbb.7 (4)
0x02fb0| e8 ec 89 c9| ....| timestamp_low: 3381259496 0x2fbc-0x2fbf.7 (4)
0x02fc0|42 00 00 00 |B... | capture_packet_length: 66 0x2fc0-0x2fc3.7 (4)
0x02fc0| 42 00 00 00 | B... | original_packet_length: 66 0x2fc4-0x2fc7.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x2fc8-0x3009.7 (66)
0x02fc0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x2fc8-0x2fcd.7 (6)
0x02fc0| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x2fce-0x2fd3.7 (6)
0x02fd0|60 f1 7d 93 |`.}. |
0x02fd0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x2fd4-0x2fd5.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x2fd6-0x3009.7 (52)
0x02fd0| 45 | E | version: 4 0x2fd6-0x2fd6.3 (0.4)
0x02fd0| 45 | E | ihl: 5 0x2fd6.4-0x2fd6.7 (0.4)
0x02fd0| 00 | . | dscp: 0 0x2fd7-0x2fd7.5 (0.6)
0x02fd0| 00 | . | ecn: 0 0x2fd7.6-0x2fd7.7 (0.2)
0x02fd0| 00 34 | .4 | total_length: 52 0x2fd8-0x2fd9.7 (2)
0x02fd0| 5a b9 | Z. | identification: 23225 0x2fda-0x2fdb.7 (2)
0x02fd0| 40 | @ | reserved: 0 0x2fdc-0x2fdc (0.1)
0x02fd0| 40 | @ | dont_fragment: true 0x2fdc.1-0x2fdc.1 (0.1)
0x02fd0| 40 | @ | more_fragments: false 0x2fdc.2-0x2fdc.2 (0.1)
0x02fd0| 40 00 | @. | fragment_offset: 0 0x2fdc.3-0x2fdd.7 (1.5)
0x02fd0| 40 | @ | ttl: 64 0x2fde-0x2fde.7 (1)
0x02fd0| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x2fdf-0x2fdf.7 (1)
0x02fe0|ee 76 |.v | header_checksum: 0xee76 (valid) 0x2fe0-0x2fe1.7 (2)
0x02fe0| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x2fe2-0x2fe5.7 (4)
0x02fe0| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x2fe6-0x2fe9.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x2fea-0x3009.7 (32)
0x02fe0| c7 26 | .& | source_port: 50982 0x2fea-0x2feb.7 (2)
0x02fe0| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x2fec-0x2fed.7 (2)
0x02fe0| 91 0a| ..| sequence_number: 2433367641 0x2fee-0x2ff1.7 (4)
0x02ff0|3e 59 |>Y |
0x02ff0| 85 02 5f f6 | .._. | acknowledgment_number: 2231525366 0x2ff2-0x2ff5.7 (4)
0x02ff0| 80 | . | data_offset: 8 0x2ff6-0x2ff6.3 (0.4)
0x02ff0| 80 | . | reserved: 0 0x2ff6.4-0x2ff6.6 (0.3)
0x02ff0| 80 | . | ns: false 0x2ff6.7-0x2ff6.7 (0.1)
0x02ff0| 10 | . | cwr: false 0x2ff7-0x2ff7 (0.1)
0x02ff0| 10 | . | ece: false 0x2ff7.1-0x2ff7.1 (0.1)
0x02ff0| 10 | . | urg: false 0x2ff7.2-0x2ff7.2 (0.1)
0x02ff0| 10 | . | ack: true 0x2ff7.3-0x2ff7.3 (0.1)
0x02ff0| 10 | . | psh: false 0x2ff7.4-0x2ff7.4 (0.1)
0x02ff0| 10 | . | rst: false 0x2ff7.5-0x2ff7.5 (0.1)
0x02ff0| 10 | . | syn: false 0x2ff7.6-0x2ff7.6 (0.1)
0x02ff0| 10 | . | fin: false 0x2ff7.7-0x2ff7.7 (0.1)
0x02ff0| 10 19 | .. | window_size: 4121 0x2ff8-0x2ff9.7 (2)
0x02ff0| ba 07 | .. | checksum: 0xba07 0x2ffa-0x2ffb.7 (2)
0x02ff0| 00 00 | .. | urgent_pointer: 0 0x2ffc-0x2ffd.7 (2)
| | | options[0:3]: 0x2ffe-0x3009.7 (12)
| | | [0]{}: option 0x2ffe-0x2ffe.7 (1)
0x02ff0| 01 | . | kind: "nop" (1) (No operation) 0x2ffe-0x2ffe.7 (1)
| | | [1]{}: option 0x2fff-0x2fff.7 (1)
0x02ff0| 01| .| kind: "nop" (1) (No operation) 0x2fff-0x2fff.7 (1)
| | | [2]{}: option 0x3000-0x3009.7 (10)
0x03000|08 |. | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x3000-0x3000.7 (1)
0x03000| 0a | . | length: 10 0x3001-0x3001.7 (1)
0x03000| 4b 2a 92 83 e4 57 7b c4 | K*...W{. | data: raw bits 0x3002-0x3009.7 (8)
| | | payload: raw bits 0x300a-NA (0)
0x03000| 00 00 | .. | padding: raw bits 0x300a-0x300b.7 (2)
| | | options[0:0]: 0x300c-NA (0)
0x03000| 64 00 00 00| d...| footer_length: 100 0x300c-0x300f.7 (4)
| | | [67]{}: block 0x3010-0x314b.7 (316)
0x03010|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x3010-0x3013.7 (4)
0x03010| 3c 01 00 00 | <... | length: 316 0x3014-0x3017.7 (4)
0x03010| 00 00 00 00 | .... | interface_id: 0 0x3018-0x301b.7 (4)
0x03010| 72 1d 05 00| r...| timestamp_high: 335218 0x301c-0x301f.7 (4)
0x03020|6e ee 89 c9 |n... | timestamp_low: 3381259886 0x3020-0x3023.7 (4)
0x03020| 1a 01 00 00 | .... | capture_packet_length: 282 0x3024-0x3027.7 (4)
0x03020| 1a 01 00 00 | .... | original_packet_length: 282 0x3028-0x302b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x302c-0x3145.7 (282)
0x03020| 94 10 3e 05| ..>.| destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x302c-0x3031.7 (6)
0x03030|36 d3 |6. |
0x03030| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x3032-0x3037.7 (6)
0x03030| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3038-0x3039.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x303a-0x3145.7 (268)
0x03030| 45 | E | version: 4 0x303a-0x303a.3 (0.4)
0x03030| 45 | E | ihl: 5 0x303a.4-0x303a.7 (0.4)
0x03030| 00 | . | dscp: 0 0x303b-0x303b.5 (0.6)
0x03030| 00 | . | ecn: 0 0x303b.6-0x303b.7 (0.2)
0x03030| 01 0c | .. | total_length: 268 0x303c-0x303d.7 (2)
0x03030| 70 0f| p.| identification: 28687 0x303e-0x303f.7 (2)
0x03040|40 |@ | reserved: 0 0x3040-0x3040 (0.1)
0x03040|40 |@ | dont_fragment: true 0x3040.1-0x3040.1 (0.1)
0x03040|40 |@ | more_fragments: false 0x3040.2-0x3040.2 (0.1)
0x03040|40 00 |@. | fragment_offset: 0 0x3040.3-0x3041.7 (1.5)
0x03040| 40 | @ | ttl: 64 0x3042-0x3042.7 (1)
0x03040| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x3043-0x3043.7 (1)
0x03040| d8 48 | .H | header_checksum: 0xd848 (valid) 0x3044-0x3045.7 (2)
0x03040| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x3046-0x3049.7 (4)
0x03040| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x304a-0x304d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (tcp_segment) 0x304e-0x3145.7 (248)
0x03040| c7 26| .&| source_port: 50982 0x304e-0x304f.7 (2)
0x03050|01 bb |.. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x3050-0x3051.7 (2)
0x03050| 91 0a 3e 59 | ..>Y | sequence_number: 2433367641 0x3052-0x3055.7 (4)
0x03050| 85 02 5f f6 | .._. | acknowledgment_number: 2231525366 0x3056-0x3059.7 (4)
0x03050| 80 | . | data_offset: 8 0x305a-0x305a.3 (0.4)
0x03050| 80 | . | reserved: 0 0x305a.4-0x305a.6 (0.3)
0x03050| 80 | . | ns: false 0x305a.7-0x305a.7 (0.1)
0x03050| 18 | . | cwr: false 0x305b-0x305b (0.1)
0x03050| 18 | . | ece: false 0x305b.1-0x305b.1 (0.1)
0x03050| 18 | . | urg: false 0x305b.2-0x305b.2 (0.1)
0x03050| 18 | . | ack: true 0x305b.3-0x305b.3 (0.1)
0x03050| 18 | . | psh: true 0x305b.4-0x305b.4 (0.1)
0x03050| 18 | . | rst: false 0x305b.5-0x305b.5 (0.1)
0x03050| 18 | . | syn: false 0x305b.6-0x305b.6 (0.1)
0x03050| 18 | . | fin: false 0x305b.7-0x305b.7 (0.1)
0x03050| 10 19 | .. | window_size: 4121 0x305c-0x305d.7 (2)
0x03050| b0 b8| ..| checksum: 0xb0b8 0x305e-0x305f.7 (2)
0x03060|00 00 |.. | urgent_pointer: 0 0x3060-0x3061.7 (2)
| | | options[0:3]: 0x3062-0x306d.7 (12)
| | | [0]{}: option 0x3062-0x3062.7 (1)
0x03060| 01 | . | kind: "nop" (1) (No operation) 0x3062-0x3062.7 (1)
| | | [1]{}: option 0x3063-0x3063.7 (1)
0x03060| 01 | . | kind: "nop" (1) (No operation) 0x3063-0x3063.7 (1)
| | | [2]{}: option 0x3064-0x306d.7 (10)
0x03060| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x3064-0x3064.7 (1)
0x03060| 0a | . | length: 10 0x3065-0x3065.7 (1)
0x03060| 4b 2a 92 83 e4 57 7b c4 | K*...W{. | data: raw bits 0x3066-0x306d.7 (8)
0x03060| 16 03| ..| payload: raw bits 0x306e-0x3145.7 (216)
0x03070|01 00 d3 01 00 00 cf 03 03 c0 a6 33 83 e1 1e ec|...........3....|
* |until 0x3145.7 (216) | |
0x03140| 00 00 | .. | padding: raw bits 0x3146-0x3147.7 (2)
| | | options[0:0]: 0x3148-NA (0)
0x03140| 3c 01 00 00 | <... | footer_length: 316 0x3148-0x314b.7 (4)
| | | [68]{}: block 0x314c-0x36db.7 (1424)
0x03140| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x314c-0x314f.7 (4)
0x03150|90 05 00 00 |.... | length: 1424 0x3150-0x3153.7 (4)
0x03150| 00 00 00 00 | .... | interface_id: 0 0x3154-0x3157.7 (4)
0x03150| 72 1d 05 00 | r... | timestamp_high: 335218 0x3158-0x315b.7 (4)
0x03150| a2 ee 89 c9| ....| timestamp_low: 3381259938 0x315c-0x315f.7 (4)
0x03160|70 05 00 00 |p... | capture_packet_length: 1392 0x3160-0x3163.7 (4)
0x03160| 70 05 00 00 | p... | original_packet_length: 1392 0x3164-0x3167.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x3168-0x36d7.7 (1392)
0x03160| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x3168-0x316d.7 (6)
0x03160| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x316e-0x3173.7 (6)
0x03170|60 f1 7d 93 |`.}. |
0x03170| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3174-0x3175.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x3176-0x36d7.7 (1378)
0x03170| 45 | E | version: 4 0x3176-0x3176.3 (0.4)
0x03170| 45 | E | ihl: 5 0x3176.4-0x3176.7 (0.4)
0x03170| 00 | . | dscp: 0 0x3177-0x3177.5 (0.6)
0x03170| 00 | . | ecn: 0 0x3177.6-0x3177.7 (0.2)
0x03170| 05 62 | .b | total_length: 1378 0x3178-0x3179.7 (2)
0x03170| ca 75 | .u | identification: 51829 0x317a-0x317b.7 (2)
0x03170| 00 | . | reserved: 0 0x317c-0x317c (0.1)
0x03170| 00 | . | dont_fragment: false 0x317c.1-0x317c.1 (0.1)
0x03170| 00 | . | more_fragments: false 0x317c.2-0x317c.2 (0.1)
0x03170| 00 00 | .. | fragment_offset: 0 0x317c.3-0x317d.7 (1.5)
0x03170| 40 | @ | ttl: 64 0x317e-0x317e.7 (1)
0x03170| 11| .| protocol: "udp" (17) (User datagram protocol) 0x317f-0x317f.7 (1)
0x03180|b9 81 |.. | header_checksum: 0xb981 (valid) 0x3180-0x3181.7 (2)
0x03180| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x3182-0x3185.7 (4)
0x03180| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x3186-0x3189.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x318a-0x36d7.7 (1358)
0x03180| fa 90 | .. | source_port: 64144 0x318a-0x318b.7 (2)
0x03180| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x318c-0x318d.7 (2)
0x03180| 05 4e| .N| length: 1358 0x318e-0x318f.7 (2)
0x03190|95 e9 |.. | checksum: 0x95e9 0x3190-0x3191.7 (2)
0x03190| 0d 48 4a 3d 55 c4 39 cd 13 51 30 32 35 02| .HJ=U.9..Q025.| payload: raw bits 0x3192-0x36d7.7 (1350)
0x031a0|2a 82 7d 60 fe 3d e8 fa a2 6e 20 72 01 a0 01 00|*.}`.=...n r....|
* |until 0x36d7.7 (1350) | |
| | | padding: raw bits 0x36d8-NA (0)
| | | options[0:0]: 0x36d8-NA (0)
0x036d0| 90 05 00 00 | .... | footer_length: 1424 0x36d8-0x36db.7 (4)
| | | [69]{}: block 0x36dc-0x373f.7 (100)
0x036d0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x36dc-0x36df.7 (4)
0x036e0|64 00 00 00 |d... | length: 100 0x36e0-0x36e3.7 (4)
0x036e0| 00 00 00 00 | .... | interface_id: 0 0x36e4-0x36e7.7 (4)
0x036e0| 72 1d 05 00 | r... | timestamp_high: 335218 0x36e8-0x36eb.7 (4)
0x036e0| 52 ef 89 c9| R...| timestamp_low: 3381260114 0x36ec-0x36ef.7 (4)
0x036f0|43 00 00 00 |C... | capture_packet_length: 67 0x36f0-0x36f3.7 (4)
0x036f0| 43 00 00 00 | C... | original_packet_length: 67 0x36f4-0x36f7.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x36f8-0x373a.7 (67)
0x036f0| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x36f8-0x36fd.7 (6)
0x036f0| a4 5e| .^| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x36fe-0x3703.7 (6)
0x03700|60 f1 7d 93 |`.}. |
0x03700| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3704-0x3705.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x3706-0x373a.7 (53)
0x03700| 45 | E | version: 4 0x3706-0x3706.3 (0.4)
0x03700| 45 | E | ihl: 5 0x3706.4-0x3706.7 (0.4)
0x03700| 00 | . | dscp: 0 0x3707-0x3707.5 (0.6)
0x03700| 00 | . | ecn: 0 0x3707.6-0x3707.7 (0.2)
0x03700| 00 35 | .5 | total_length: 53 0x3708-0x3709.7 (2)
0x03700| 5a 29 | Z) | identification: 23081 0x370a-0x370b.7 (2)
0x03700| 00 | . | reserved: 0 0x370c-0x370c (0.1)
0x03700| 00 | . | dont_fragment: false 0x370c.1-0x370c.1 (0.1)
0x03700| 00 | . | more_fragments: false 0x370c.2-0x370c.2 (0.1)
0x03700| 00 00 | .. | fragment_offset: 0 0x370c.3-0x370d.7 (1.5)
0x03700| 40 | @ | ttl: 64 0x370e-0x370e.7 (1)
0x03700| 11| .| protocol: "udp" (17) (User datagram protocol) 0x370f-0x370f.7 (1)
0x03710|37 63 |7c | header_checksum: 0x3763 (valid) 0x3710-0x3711.7 (2)
0x03710| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x3712-0x3715.7 (4)
0x03710| ad c2 79 36 | ..y6 | destination_ip: "173.194.121.54" (0xadc27936) 0x3716-0x3719.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x371a-0x373a.7 (33)
0x03710| c7 2d | .- | source_port: 50989 0x371a-0x371b.7 (2)
0x03710| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x371c-0x371d.7 (2)
0x03710| 00 21| .!| length: 33 0x371e-0x371f.7 (2)
0x03720|82 94 |.. | checksum: 0x8294 0x3720-0x3721.7 (2)
0x03720| 1c e0 57 42 2b 58 7f c5 3f bc 11 58 7c 40| ..WB+X..?..X|@| payload: raw bits 0x3722-0x373a.7 (25)
0x03730|13 78 17 d5 b1 13 d4 7f 63 8c ca |.x......c.. |
0x03730| 00 | . | padding: raw bits 0x373b-0x373b.7 (1)
| | | options[0:0]: 0x373c-NA (0)
0x03730| 64 00 00 00| d...| footer_length: 100 0x373c-0x373f.7 (4)
| | | [70]{}: block 0x3740-0x3ccf.7 (1424)
0x03740|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x3740-0x3743.7 (4)
0x03740| 90 05 00 00 | .... | length: 1424 0x3744-0x3747.7 (4)
0x03740| 00 00 00 00 | .... | interface_id: 0 0x3748-0x374b.7 (4)
0x03740| 72 1d 05 00| r...| timestamp_high: 335218 0x374c-0x374f.7 (4)
0x03750|96 f2 89 c9 |.... | timestamp_low: 3381260950 0x3750-0x3753.7 (4)
0x03750| 70 05 00 00 | p... | capture_packet_length: 1392 0x3754-0x3757.7 (4)
0x03750| 70 05 00 00 | p... | original_packet_length: 1392 0x3758-0x375b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x375c-0x3ccb.7 (1392)
0x03750| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x375c-0x3761.7 (6)
0x03760|7d 93 |}. |
0x03760| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x3762-0x3767.7 (6)
0x03760| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3768-0x3769.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x376a-0x3ccb.7 (1378)
0x03760| 45 | E | version: 4 0x376a-0x376a.3 (0.4)
0x03760| 45 | E | ihl: 5 0x376a.4-0x376a.7 (0.4)
0x03760| 28 | ( | dscp: 10 0x376b-0x376b.5 (0.6)
0x03760| 28 | ( | ecn: 0 0x376b.6-0x376b.7 (0.2)
0x03760| 05 62 | .b | total_length: 1378 0x376c-0x376d.7 (2)
0x03760| 99 06| ..| identification: 39174 0x376e-0x376f.7 (2)
0x03770|00 |. | reserved: 0 0x3770-0x3770 (0.1)
0x03770|00 |. | dont_fragment: false 0x3770.1-0x3770.1 (0.1)
0x03770|00 |. | more_fragments: false 0x3770.2-0x3770.2 (0.1)
0x03770|00 00 |.. | fragment_offset: 0 0x3770.3-0x3771.7 (1.5)
0x03770| 35 | 5 | ttl: 53 0x3772-0x3772.7 (1)
0x03770| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x3773-0x3773.7 (1)
0x03770| f5 c8 | .. | header_checksum: 0xf5c8 (valid) 0x3774-0x3775.7 (2)
0x03770| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x3776-0x3779.7 (4)
0x03770| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x377a-0x377d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x377e-0x3ccb.7 (1358)
0x03770| 01 bb| ..| source_port: "https" (443) (http protocol over TLS/SSL) 0x377e-0x377f.7 (2)
0x03780|fa 90 |.. | destination_port: 64144 0x3780-0x3781.7 (2)
0x03780| 05 4e | .N | length: 1358 0x3782-0x3783.7 (2)
0x03780| 1c 92 | .. | checksum: 0x1c92 0x3784-0x3785.7 (2)
0x03780| 00 01 8f d0 ba 82 41 2f e5 db| ......A/..| payload: raw bits 0x3786-0x3ccb.7 (1350)
0x03790|1a d3 aa 5e 10 5f b8 8d 0f 72 8d 0d ea a9 f6 ac|...^._...r......|
* |until 0x3ccb.7 (1350) | |
| | | padding: raw bits 0x3ccc-NA (0)
| | | options[0:0]: 0x3ccc-NA (0)
0x03cc0| 90 05 00 00| ....| footer_length: 1424 0x3ccc-0x3ccf.7 (4)
| | | [71]{}: block 0x3cd0-0x425f.7 (1424)
0x03cd0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x3cd0-0x3cd3.7 (4)
0x03cd0| 90 05 00 00 | .... | length: 1424 0x3cd4-0x3cd7.7 (4)
0x03cd0| 00 00 00 00 | .... | interface_id: 0 0x3cd8-0x3cdb.7 (4)
0x03cd0| 72 1d 05 00| r...| timestamp_high: 335218 0x3cdc-0x3cdf.7 (4)
0x03ce0|bc f3 89 c9 |.... | timestamp_low: 3381261244 0x3ce0-0x3ce3.7 (4)
0x03ce0| 70 05 00 00 | p... | capture_packet_length: 1392 0x3ce4-0x3ce7.7 (4)
0x03ce0| 70 05 00 00 | p... | original_packet_length: 1392 0x3ce8-0x3ceb.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x3cec-0x425b.7 (1392)
0x03ce0| a4 5e 60 f1| .^`.| destination: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x3cec-0x3cf1.7 (6)
0x03cf0|7d 93 |}. |
0x03cf0| 94 10 3e 05 36 d3 | ..>.6. | source: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x3cf2-0x3cf7.7 (6)
0x03cf0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x3cf8-0x3cf9.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x3cfa-0x425b.7 (1378)
0x03cf0| 45 | E | version: 4 0x3cfa-0x3cfa.3 (0.4)
0x03cf0| 45 | E | ihl: 5 0x3cfa.4-0x3cfa.7 (0.4)
0x03cf0| 28 | ( | dscp: 10 0x3cfb-0x3cfb.5 (0.6)
0x03cf0| 28 | ( | ecn: 0 0x3cfb.6-0x3cfb.7 (0.2)
0x03cf0| 05 62 | .b | total_length: 1378 0x3cfc-0x3cfd.7 (2)
0x03cf0| 99 37| .7| identification: 39223 0x3cfe-0x3cff.7 (2)
0x03d00|00 |. | reserved: 0 0x3d00-0x3d00 (0.1)
0x03d00|00 |. | dont_fragment: false 0x3d00.1-0x3d00.1 (0.1)
0x03d00|00 |. | more_fragments: false 0x3d00.2-0x3d00.2 (0.1)
0x03d00|00 00 |.. | fragment_offset: 0 0x3d00.3-0x3d01.7 (1.5)
0x03d00| 35 | 5 | ttl: 53 0x3d02-0x3d02.7 (1)
0x03d00| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x3d03-0x3d03.7 (1)
0x03d00| f5 97 | .. | header_checksum: 0xf597 (valid) 0x3d04-0x3d05.7 (2)
0x03d00| 4a 7d e4 e3 | J}.. | source_ip: "74.125.228.227" (0x4a7de4e3) 0x3d06-0x3d09.7 (4)
0x03d00| c0 a8 01 8b | .... | destination_ip: "192.168.1.139" (0xc0a8018b) 0x3d0a-0x3d0d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x3d0e-0x425b.7 (1358)
0x03d00| 01 bb| ..| source_port: "https" (443) (http protocol over TLS/SSL) 0x3d0e-0x3d0f.7 (2)
0x03d10|fa 90 |.. | destination_port: 64144 0x3d10-0x3d11.7 (2)
0x03d10| 05 4e | .N | length: 1358 0x3d12-0x3d13.7 (2)
0x03d10| cd b8 | .. | checksum: 0xcdb8 0x3d14-0x3d15.7 (2)
0x03d10| 00 02 d0 95 f4 2d 7a 1e e0 62| .....-z..b| payload: raw bits 0x3d16-0x425b.7 (1350)
0x03d20|95 43 de c9 13 1e ac 8e 74 9c 4f 1b 2c 89 f9 93|.C......t.O.,...|
* |until 0x425b.7 (1350) | |
| | | padding: raw bits 0x425c-NA (0)
| | | options[0:0]: 0x425c-NA (0)
0x04250| 90 05 00 00| ....| footer_length: 1424 0x425c-0x425f.7 (4)
| | | [72]{}: block 0x4260-0x42d3.7 (116)
0x04260|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x4260-0x4263.7 (4)
0x04260| 74 00 00 00 | t... | length: 116 0x4264-0x4267.7 (4)
0x04260| 00 00 00 00 | .... | interface_id: 0 0x4268-0x426b.7 (4)
0x04260| 72 1d 05 00| r...| timestamp_high: 335218 0x426c-0x426f.7 (4)
0x04270|52 f4 89 c9 |R... | timestamp_low: 3381261394 0x4270-0x4273.7 (4)
0x04270| 52 00 00 00 | R... | capture_packet_length: 82 0x4274-0x4277.7 (4)
0x04270| 52 00 00 00 | R... | original_packet_length: 82 0x4278-0x427b.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x427c-0x42cd.7 (82)
0x04270| 94 10 3e 05| ..>.| destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x427c-0x4281.7 (6)
0x04280|36 d3 |6. |
0x04280| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x4282-0x4287.7 (6)
0x04280| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x4288-0x4289.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x428a-0x42cd.7 (68)
0x04280| 45 | E | version: 4 0x428a-0x428a.3 (0.4)
0x04280| 45 | E | ihl: 5 0x428a.4-0x428a.7 (0.4)
0x04280| 00 | . | dscp: 0 0x428b-0x428b.5 (0.6)
0x04280| 00 | . | ecn: 0 0x428b.6-0x428b.7 (0.2)
0x04280| 00 44 | .D | total_length: 68 0x428c-0x428d.7 (2)
0x04280| 99 84| ..| identification: 39300 0x428e-0x428f.7 (2)
0x04290|00 |. | reserved: 0 0x4290-0x4290 (0.1)
0x04290|00 |. | dont_fragment: false 0x4290.1-0x4290.1 (0.1)
0x04290|00 |. | more_fragments: false 0x4290.2-0x4290.2 (0.1)
0x04290|00 00 |.. | fragment_offset: 0 0x4290.3-0x4291.7 (1.5)
0x04290| 40 | @ | ttl: 64 0x4292-0x4292.7 (1)
0x04290| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x4293-0x4293.7 (1)
0x04290| ef 90 | .. | header_checksum: 0xef90 (valid) 0x4294-0x4295.7 (2)
0x04290| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x4296-0x4299.7 (4)
0x04290| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x429a-0x429d.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x429e-0x42cd.7 (48)
0x04290| fa 90| ..| source_port: 64144 0x429e-0x429f.7 (2)
0x042a0|01 bb |.. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x42a0-0x42a1.7 (2)
0x042a0| 00 30 | .0 | length: 48 0x42a2-0x42a3.7 (2)
0x042a0| b6 39 | .9 | checksum: 0xb639 0x42a4-0x42a5.7 (2)
0x042a0| 0c 48 4a 3d 55 c4 39 cd 13 03| .HJ=U.9...| payload: raw bits 0x42a6-0x42cd.7 (40)
0x042b0|07 5f f3 2a 24 ab f0 88 33 52 36 56 b5 b4 8d d4|._.*$...3R6V....|
0x042c0|50 71 5d 32 5d 13 6a 91 e7 33 a1 30 a7 bd |Pq]2].j..3.0.. |
0x042c0| 00 00| ..| padding: raw bits 0x42ce-0x42cf.7 (2)
| | | options[0:0]: 0x42d0-NA (0)
0x042d0|74 00 00 00 |t... | footer_length: 116 0x42d0-0x42d3.7 (4)
| | | [73]{}: block 0x42d4-0x4863.7 (1424)
0x042d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x42d4-0x42d7.7 (4)
0x042d0| 90 05 00 00 | .... | length: 1424 0x42d8-0x42db.7 (4)
0x042d0| 00 00 00 00| ....| interface_id: 0 0x42dc-0x42df.7 (4)
0x042e0|72 1d 05 00 |r... | timestamp_high: 335218 0x42e0-0x42e3.7 (4)
0x042e0| be f5 89 c9 | .... | timestamp_low: 3381261758 0x42e4-0x42e7.7 (4)
0x042e0| 70 05 00 00 | p... | capture_packet_length: 1392 0x42e8-0x42eb.7 (4)
0x042e0| 70 05 00 00| p...| original_packet_length: 1392 0x42ec-0x42ef.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x42f0-0x485f.7 (1392)
0x042f0|94 10 3e 05 36 d3 |..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x42f0-0x42f5.7 (6)
0x042f0| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x42f6-0x42fb.7 (6)
0x042f0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x42fc-0x42fd.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x42fe-0x485f.7 (1378)
0x042f0| 45 | E | version: 4 0x42fe-0x42fe.3 (0.4)
0x042f0| 45 | E | ihl: 5 0x42fe.4-0x42fe.7 (0.4)
0x042f0| 00| .| dscp: 0 0x42ff-0x42ff.5 (0.6)
0x042f0| 00| .| ecn: 0 0x42ff.6-0x42ff.7 (0.2)
0x04300|05 62 |.b | total_length: 1378 0x4300-0x4301.7 (2)
0x04300| 40 10 | @. | identification: 16400 0x4302-0x4303.7 (2)
0x04300| 00 | . | reserved: 0 0x4304-0x4304 (0.1)
0x04300| 00 | . | dont_fragment: false 0x4304.1-0x4304.1 (0.1)
0x04300| 00 | . | more_fragments: false 0x4304.2-0x4304.2 (0.1)
0x04300| 00 00 | .. | fragment_offset: 0 0x4304.3-0x4305.7 (1.5)
0x04300| 40 | @ | ttl: 64 0x4306-0x4306.7 (1)
0x04300| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x4307-0x4307.7 (1)
0x04300| 43 e7 | C. | header_checksum: 0x43e7 (valid) 0x4308-0x4309.7 (2)
0x04300| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x430a-0x430d.7 (4)
0x04300| 4a 7d| J}| destination_ip: "74.125.228.227" (0x4a7de4e3) 0x430e-0x4311.7 (4)
0x04310|e4 e3 |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x4312-0x485f.7 (1358)
0x04310| fa 90 | .. | source_port: 64144 0x4312-0x4313.7 (2)
0x04310| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x4314-0x4315.7 (2)
0x04310| 05 4e | .N | length: 1358 0x4316-0x4317.7 (2)
0x04310| 49 d2 | I. | checksum: 0x49d2 0x4318-0x4319.7 (2)
0x04310| 0c 48 4a 3d 55 c4| .HJ=U.| payload: raw bits 0x431a-0x485f.7 (1350)
0x04320|39 cd 13 04 6f 4c 6d 50 81 9f d3 3c 13 d9 36 57|9...oLmP...<..6W|
* |until 0x485f.7 (1350) | |
| | | padding: raw bits 0x4860-NA (0)
| | | options[0:0]: 0x4860-NA (0)
0x04860|90 05 00 00 |.... | footer_length: 1424 0x4860-0x4863.7 (4)
| | | [74]{}: block 0x4864-0x4b57.7 (756)
0x04860| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x4864-0x4867.7 (4)
0x04860| f4 02 00 00 | .... | length: 756 0x4868-0x486b.7 (4)
0x04860| 00 00 00 00| ....| interface_id: 0 0x486c-0x486f.7 (4)
0x04870|72 1d 05 00 |r... | timestamp_high: 335218 0x4870-0x4873.7 (4)
0x04870| f8 f5 89 c9 | .... | timestamp_low: 3381261816 0x4874-0x4877.7 (4)
0x04870| d4 02 00 00 | .... | capture_packet_length: 724 0x4878-0x487b.7 (4)
0x04870| d4 02 00 00| ....| original_packet_length: 724 0x487c-0x487f.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x4880-0x4b53.7 (724)
0x04880|94 10 3e 05 36 d3 |..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x4880-0x4885.7 (6)
0x04880| a4 5e 60 f1 7d 93 | .^`.}. | source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x4886-0x488b.7 (6)
0x04880| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x488c-0x488d.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x488e-0x4b53.7 (710)
0x04880| 45 | E | version: 4 0x488e-0x488e.3 (0.4)
0x04880| 45 | E | ihl: 5 0x488e.4-0x488e.7 (0.4)
0x04880| 00| .| dscp: 0 0x488f-0x488f.5 (0.6)
0x04880| 00| .| ecn: 0 0x488f.6-0x488f.7 (0.2)
0x04890|02 c6 |.. | total_length: 710 0x4890-0x4891.7 (2)
0x04890| 03 ac | .. | identification: 940 0x4892-0x4893.7 (2)
0x04890| 00 | . | reserved: 0 0x4894-0x4894 (0.1)
0x04890| 00 | . | dont_fragment: false 0x4894.1-0x4894.1 (0.1)
0x04890| 00 | . | more_fragments: false 0x4894.2-0x4894.2 (0.1)
0x04890| 00 00 | .. | fragment_offset: 0 0x4894.3-0x4895.7 (1.5)
0x04890| 40 | @ | ttl: 64 0x4896-0x4896.7 (1)
0x04890| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x4897-0x4897.7 (1)
0x04890| 82 e7 | .. | header_checksum: 0x82e7 (valid) 0x4898-0x4899.7 (2)
0x04890| c0 a8 01 8b | .... | source_ip: "192.168.1.139" (0xc0a8018b) 0x489a-0x489d.7 (4)
0x04890| 4a 7d| J}| destination_ip: "74.125.228.227" (0x4a7de4e3) 0x489e-0x48a1.7 (4)
0x048a0|e4 e3 |.. |
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x48a2-0x4b53.7 (690)
0x048a0| fa 90 | .. | source_port: 64144 0x48a2-0x48a3.7 (2)
0x048a0| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x48a4-0x48a5.7 (2)
0x048a0| 02 b2 | .. | length: 690 0x48a6-0x48a7.7 (2)
0x048a0| 31 58 | 1X | checksum: 0x3158 0x48a8-0x48a9.7 (2)
0x048a0| 0c 48 4a 3d 55 c4| .HJ=U.| payload: raw bits 0x48aa-0x4b53.7 (682)
0x048b0|39 cd 13 05 02 33 9a 73 17 03 94 a4 a1 ac ca e1|9....3.s........|
* |until 0x4b53.7 (682) | |
| | | padding: raw bits 0x4b54-NA (0)
| | | options[0:0]: 0x4b54-NA (0)
0x04b50| f4 02 00 00 | .... | footer_length: 756 0x4b54-0x4b57.7 (4)
| | | [75]{}: block 0x4b58-0x4c3b.7 (228)
0x04b50| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x4b58-0x4b5b.7 (4)
0x04b50| e4 00 00 00| ....| length: 228 0x4b5c-0x4b5f.7 (4)
0x04b60|00 00 00 00 |.... | interface_id: 0 0x4b60-0x4b63.7 (4)
0x04b60| 72 1d 05 00 | r... | timestamp_high: 335218 0x4b64-0x4b67.7 (4)
0x04b60| f9 f5 89 c9 | .... | timestamp_low: 3381261817 0x4b68-0x4b6b.7 (4)
0x04b60| c3 00 00 00| ....| capture_packet_length: 195 0x4b6c-0x4b6f.7 (4)
0x04b70|c3 00 00 00 |.... | original_packet_length: 195 0x4b70-0x4b73.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| packet{}: (ether8023_frame) 0x4b74-0x4c36.7 (195)
0x04b70| 94 10 3e 05 36 d3 | ..>.6. | destination: "94:10:3e:05:36:d3" (0x94103e0536d3) 0x4b74-0x4b79.7 (6)
0x04b70| a4 5e 60 f1 7d 93| .^`.}.| source: "a4:5e:60:f1:7d:93" (0xa45e60f17d93) 0x4b7a-0x4b7f.7 (6)
0x04b80|08 00 |.. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x4b80-0x4b81.7 (2)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (ipv4_packet) 0x4b82-0x4c36.7 (181)
0x04b80| 45 | E | version: 4 0x4b82-0x4b82.3 (0.4)
0x04b80| 45 | E | ihl: 5 0x4b82.4-0x4b82.7 (0.4)
0x04b80| 00 | . | dscp: 0 0x4b83-0x4b83.5 (0.6)
0x04b80| 00 | . | ecn: 0 0x4b83.6-0x4b83.7 (0.2)
0x04b80| 00 b5 | .. | total_length: 181 0x4b84-0x4b85.7 (2)
0x04b80| 2d 68 | -h | identification: 11624 0x4b86-0x4b87.7 (2)
0x04b80| 00 | . | reserved: 0 0x4b88-0x4b88 (0.1)
0x04b80| 00 | . | dont_fragment: false 0x4b88.1-0x4b88.1 (0.1)
0x04b80| 00 | . | more_fragments: false 0x4b88.2-0x4b88.2 (0.1)
0x04b80| 00 00 | .. | fragment_offset: 0 0x4b88.3-0x4b89.7 (1.5)
0x04b80| 40 | @ | ttl: 64 0x4b8a-0x4b8a.7 (1)
0x04b80| 11 | . | protocol: "udp" (17) (User datagram protocol) 0x4b8b-0x4b8b.7 (1)
0x04b80| 5b 3c | [< | header_checksum: 0x5b3c (valid) 0x4b8c-0x4b8d.7 (2)
0x04b80| c0 a8| ..| source_ip: "192.168.1.139" (0xc0a8018b) 0x4b8e-0x4b91.7 (4)
0x04b90|01 8b |.. |
0x04b90| 4a 7d e4 e3 | J}.. | destination_ip: "74.125.228.227" (0x4a7de4e3) 0x4b92-0x4b95.7 (4)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef| payload{}: (udp_datagram) 0x4b96-0x4c36.7 (161)
0x04b90| fa 90 | .. | source_port: 64144 0x4b96-0x4b97.7 (2)
0x04b90| 01 bb | .. | destination_port: "https" (443) (http protocol over TLS/SSL) 0x4b98-0x4b99.7 (2)
0x04b90| 00 a1 | .. | length: 161 0x4b9a-0x4b9b.7 (2)
0x04b90| 14 92 | .. | checksum: 0x1492 0x4b9c-0x4b9d.7 (2)
0x04b90| 0c 48| .H| payload: raw bits 0x4b9e-0x4c36.7 (153)
0x04ba0|4a 3d 55 c4 39 cd 13 06 d6 ed 7f 96 60 64 e0 90|J=U.9.......`d..|
* |until 0x4c36.7 (153) | |
0x04c30| 00 | . | padding: raw bits 0x4c37-0x4c37.7 (1)
| | | options[0:0]: 0x4c38-NA (0)
0x04c30| e4 00 00 00 | .... | footer_length: 228 0x4c38-0x4c3b.7 (4)
| | | [76]{}: block 0x4c3c-0x4d13.7 (216)
0x04c30| 04 00 00 00| ....| type: "name_resolution" (0x4) (Name Resolution Block) 0x4c3c-0x4c3f.7 (4)
0x04c40|d8 00 00 00 |.... | length: 216 0x4c40-0x4c43.7 (4)
| | | records[0:8]: 0x4c44-0x4d0f.7 (204)
| | | [0]{}: record 0x4c44-0x4c63.7 (32)
0x04c40| 01 00 | .. | type: "ipv4" (1) 0x4c44-0x4c45.7 (2)
0x04c40| 19 00 | .. | length: 25 0x4c46-0x4c47.7 (2)
0x04c40| 4a 7d e4 e3 | J}.. | address: "74.125.228.227" (0x4a7de4e3) 0x4c48-0x4c4b.7 (4)
| | | entries[0:1]: 0x4c4c-0x4c60.7 (21)
0x04c40| 63 6c 69 65| clie| [0]: "clients.l.google.com" string 0x4c4c-0x4c60.7 (21)
0x04c50|6e 74 73 2e 6c 2e 67 6f 6f 67 6c 65 2e 63 6f 6d|nts.l.google.com|
0x04c60|00 |. |
0x04c60| 00 00 00 | ... | padding: raw bits 0x4c61-0x4c63.7 (3)
| | | [1]{}: record 0x4c64-0x4c83.7 (32)
0x04c60| 01 00 | .. | type: "ipv4" (1) 0x4c64-0x4c65.7 (2)
0x04c60| 19 00 | .. | length: 25 0x4c66-0x4c67.7 (2)
0x04c60| ad c2 cc bd | .... | address: "173.194.204.189" (0xadc2ccbd) 0x4c68-0x4c6b.7 (4)
| | | entries[0:1]: 0x4c6c-0x4c80.7 (21)
0x04c60| 71 62 2d 69| qb-i| [0]: "qb-in-f189.1e100.net" string 0x4c6c-0x4c80.7 (21)
0x04c70|6e 2d 66 31 38 39 2e 31 65 31 30 30 2e 6e 65 74|n-f189.1e100.net|
0x04c80|00 |. |
0x04c80| 00 00 00 | ... | padding: raw bits 0x4c81-0x4c83.7 (3)
| | | [2]{}: record 0x4c84-0x4c9b.7 (24)
0x04c80| 01 00 | .. | type: "ipv4" (1) 0x4c84-0x4c85.7 (2)
0x04c80| 11 00 | .. | length: 17 0x4c86-0x4c87.7 (2)
0x04c80| c0 a8 01 8b | .... | address: "192.168.1.139" (0xc0a8018b) 0x4c88-0x4c8b.7 (4)
| | | entries[0:1]: 0x4c8c-0x4c98.7 (13)
0x04c80| 68 61 64 72| hadr| [0]: "hadriels-mbp" string 0x4c8c-0x4c98.7 (13)
0x04c90|69 65 6c 73 2d 6d 62 70 00 |iels-mbp. |
0x04c90| 00 00 00 | ... | padding: raw bits 0x4c99-0x4c9b.7 (3)
| | | [3]{}: record 0x4c9c-0x4cbf.7 (36)
0x04c90| 01 00 | .. | type: "ipv4" (1) 0x4c9c-0x4c9d.7 (2)
0x04c90| 1e 00| ..| length: 30 0x4c9e-0x4c9f.7 (2)
0x04ca0|ad c2 79 36 |..y6 | address: "173.194.121.54" (0xadc27936) 0x4ca0-0x4ca3.7 (4)
| | | entries[0:1]: 0x4ca4-0x4cbd.7 (26)
0x04ca0| 69 61 64 32 33 73 32 36 2d 69 6e 2d| iad23s26-in-| [0]: "iad23s26-in-f22.1e100.net" string 0x4ca4-0x4cbd.7 (26)
0x04cb0|66 32 32 2e 31 65 31 30 30 2e 6e 65 74 00 |f22.1e100.net. |
0x04cb0| 00 00| ..| padding: raw bits 0x4cbe-0x4cbf.7 (2)
| | | [4]{}: record 0x4cc0-0x4ce3.7 (36)
0x04cc0|01 00 |.. | type: "ipv4" (1) 0x4cc0-0x4cc1.7 (2)
0x04cc0| 1f 00 | .. | length: 31 0x4cc2-0x4cc3.7 (2)
0x04cc0| 11 fd 0c fd | .... | address: "17.253.12.253" (0x11fd0cfd) 0x4cc4-0x4cc7.7 (4)
| | | entries[0:1]: 0x4cc8-0x4ce2.7 (27)
0x04cc0| 75 73 6d 69 61 31 2d 6e| usmia1-n| [0]: "usmia1-ntp-002.aaplimg.com" string 0x4cc8-0x4ce2.7 (27)
0x04cd0|74 70 2d 30 30 32 2e 61 61 70 6c 69 6d 67 2e 63|tp-002.aaplimg.c|
0x04ce0|6f 6d 00 |om. |
0x04ce0| 00 | . | padding: raw bits 0x4ce3-0x4ce3.7 (1)
| | | [5]{}: record 0x4ce4-0x4cf3.7 (16)
0x04ce0| 01 00 | .. | type: "ipv4" (1) 0x4ce4-0x4ce5.7 (2)
0x04ce0| 0c 00 | .. | length: 12 0x4ce6-0x4ce7.7 (2)
0x04ce0| c0 a8 01 01 | .... | address: "192.168.1.1" (0xc0a80101) 0x4ce8-0x4ceb.7 (4)
| | | entries[0:1]: 0x4cec-0x4cf3.7 (8)
0x04ce0| 6b 61 70 6c| kapl| [0]: "kaplake" string 0x4cec-0x4cf3.7 (8)
0x04cf0|61 6b 65 00 |ake. |
| | | padding: raw bits 0x4cf4-NA (0)
| | | [6]{}: record 0x4cf4-0x4d0b.7 (24)
0x04cf0| 01 00 | .. | type: "ipv4" (1) 0x4cf4-0x4cf5.7 (2)
0x04cf0| 12 00 | .. | length: 18 0x4cf6-0x4cf7.7 (2)
0x04cf0| ff ff ff ff | .... | address: "255.255.255.255" (0xffffffff) 0x4cf8-0x4cfb.7 (4)
| | | entries[0:1]: 0x4cfc-0x4d09.7 (14)
0x04cf0| 62 72 6f 61| broa| [0]: "broadcasthost" string 0x4cfc-0x4d09.7 (14)
0x04d00|64 63 61 73 74 68 6f 73 74 00 |dcasthost. |
0x04d00| 00 00 | .. | padding: raw bits 0x4d0a-0x4d0b.7 (2)
| | | [7]{}: record 0x4d0c-0x4d0f.7 (4)
0x04d00| 00 00 | .. | type: "end" (0) 0x4d0c-0x4d0d.7 (2)
0x04d00| 00 00| ..| length: 0 0x4d0e-0x4d0f.7 (2)
| | | options[0:0]: 0x4d10-NA (0)
0x04d10|d8 00 00 00 |.... | footer_length: 216 0x4d10-0x4d13.7 (4)
| | | [77]{}: block 0x4d14-0x4d7f.7 (108)
0x04d10| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4d14-0x4d17.7 (4)
0x04d10| 6c 00 00 00 | l... | length: 108 0x4d18-0x4d1b.7 (4)
0x04d10| 00 00 00 00| ....| interface_id: 0 0x4d1c-0x4d1f.7 (4)
0x04d20|72 1d 05 00 |r... | timestamp_high: 335218 0x4d20-0x4d23.7 (4)
0x04d20| 34 ed 8e c9 | 4... | timestamp_low: 3381587252 0x4d24-0x4d27.7 (4)
| | | padding: raw bits 0x4d28-NA (0)
| | | options[0:6]: 0x4d28-0x4d7b.7 (84)
| | | [0]{}: option 0x4d28-0x4d47.7 (32)
0x04d20| 01 00 | .. | code: "comment" (1) (Comment) 0x4d28-0x4d29.7 (2)
0x04d20| 1c 00 | .. | length: 28 0x4d2a-0x4d2b.7 (2)
0x04d20| 43 6f 75 6e| Coun| value: "Counters provided by dumpcap" 0x4d2c-0x4d47.7 (28)
0x04d30|74 65 72 73 20 70 72 6f 76 69 64 65 64 20 62 79|ters provided by|
0x04d40|20 64 75 6d 70 63 61 70 | dumpcap |
| | | padding: raw bits 0x4d48-NA (0)
| | | [1]{}: option 0x4d48-0x4d53.7 (12)
0x04d40| 02 00 | .. | code: "starttime" (2) 0x4d48-0x4d49.7 (2)
0x04d40| 08 00 | .. | length: 8 0x4d4a-0x4d4b.7 (2)
0x04d40| 72 1d 05 00| r...| value: "r\x1d\x05" 0x4d4c-0x4d53.7 (8)
0x04d50|24 66 e9 c8 |$f.. |
| | | padding: raw bits 0x4d54-NA (0)
| | | [2]{}: option 0x4d54-0x4d5f.7 (12)
0x04d50| 03 00 | .. | code: "endtime" (3) 0x4d54-0x4d55.7 (2)
0x04d50| 08 00 | .. | length: 8 0x4d56-0x4d57.7 (2)
0x04d50| 72 1d 05 00 24 ed 8e c9| r...$...| value: "r\x1d\x05" 0x4d58-0x4d5f.7 (8)
| | | padding: raw bits 0x4d60-NA (0)
| | | [3]{}: option 0x4d60-0x4d6b.7 (12)
0x04d60|04 00 |.. | code: "ifrecv" (4) 0x4d60-0x4d61.7 (2)
0x04d60| 08 00 | .. | length: 8 0x4d62-0x4d63.7 (2)
0x04d60| 7c 00 00 00 00 00 00 00 | |....... | value: "|" 0x4d64-0x4d6b.7 (8)
| | | padding: raw bits 0x4d6c-NA (0)
| | | [4]{}: option 0x4d6c-0x4d77.7 (12)
0x04d60| 05 00 | .. | code: "ifdrop" (5) 0x4d6c-0x4d6d.7 (2)
0x04d60| 08 00| ..| length: 8 0x4d6e-0x4d6f.7 (2)
0x04d70|00 00 00 00 00 00 00 00 |........ | value: "" 0x4d70-0x4d77.7 (8)
| | | padding: raw bits 0x4d78-NA (0)
| | | [5]{}: option 0x4d78-0x4d7b.7 (4)
0x04d70| 00 00 | .. | code: "end" (0) (End of options) 0x4d78-0x4d79.7 (2)
0x04d70| 00 00 | .. | length: 0 0x4d7a-0x4d7b.7 (2)
0x04d70| 6c 00 00 00| l...| footer_length: 108 0x4d7c-0x4d7f.7 (4)
| | | [78]{}: block 0x4d80-0x4deb.7 (108)
0x04d80|05 00 00 00 |.... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4d80-0x4d83.7 (4)
0x04d80| 6c 00 00 00 | l... | length: 108 0x4d84-0x4d87.7 (4)
0x04d80| 01 00 00 00 | .... | interface_id: 1 0x4d88-0x4d8b.7 (4)
0x04d80| 72 1d 05 00| r...| timestamp_high: 335218 0x4d8c-0x4d8f.7 (4)
0x04d90|3b ed 8e c9 |;... | timestamp_low: 3381587259 0x4d90-0x4d93.7 (4)
| | | padding: raw bits 0x4d94-NA (0)
| | | options[0:6]: 0x4d94-0x4de7.7 (84)
| | | [0]{}: option 0x4d94-0x4db3.7 (32)
0x04d90| 01 00 | .. | code: "comment" (1) (Comment) 0x4d94-0x4d95.7 (2)
0x04d90| 1c 00 | .. | length: 28 0x4d96-0x4d97.7 (2)
0x04d90| 43 6f 75 6e 74 65 72 73| Counters| value: "Counters provided by dumpcap" 0x4d98-0x4db3.7 (28)
0x04da0|20 70 72 6f 76 69 64 65 64 20 62 79 20 64 75 6d| provided by dum|
0x04db0|70 63 61 70 |pcap |
| | | padding: raw bits 0x4db4-NA (0)
| | | [1]{}: option 0x4db4-0x4dbf.7 (12)
0x04db0| 02 00 | .. | code: "starttime" (2) 0x4db4-0x4db5.7 (2)
0x04db0| 08 00 | .. | length: 8 0x4db6-0x4db7.7 (2)
0x04db0| 72 1d 05 00 24 66 e9 c8| r...$f..| value: "r\x1d\x05" 0x4db8-0x4dbf.7 (8)
| | | padding: raw bits 0x4dc0-NA (0)
| | | [2]{}: option 0x4dc0-0x4dcb.7 (12)
0x04dc0|03 00 |.. | code: "endtime" (3) 0x4dc0-0x4dc1.7 (2)
0x04dc0| 08 00 | .. | length: 8 0x4dc2-0x4dc3.7 (2)
0x04dc0| 72 1d 05 00 24 ed 8e c9 | r...$... | value: "r\x1d\x05" 0x4dc4-0x4dcb.7 (8)
| | | padding: raw bits 0x4dcc-NA (0)
| | | [3]{}: option 0x4dcc-0x4dd7.7 (12)
0x04dc0| 04 00 | .. | code: "ifrecv" (4) 0x4dcc-0x4dcd.7 (2)
0x04dc0| 08 00| ..| length: 8 0x4dce-0x4dcf.7 (2)
0x04dd0|00 00 00 00 00 00 00 00 |........ | value: "" 0x4dd0-0x4dd7.7 (8)
| | | padding: raw bits 0x4dd8-NA (0)
| | | [4]{}: option 0x4dd8-0x4de3.7 (12)
0x04dd0| 05 00 | .. | code: "ifdrop" (5) 0x4dd8-0x4dd9.7 (2)
0x04dd0| 08 00 | .. | length: 8 0x4dda-0x4ddb.7 (2)
0x04dd0| 00 00 00 00| ....| value: "" 0x4ddc-0x4de3.7 (8)
0x04de0|00 00 00 00 |.... |
| | | padding: raw bits 0x4de4-NA (0)
| | | [5]{}: option 0x4de4-0x4de7.7 (4)
0x04de0| 00 00 | .. | code: "end" (0) (End of options) 0x4de4-0x4de5.7 (2)
0x04de0| 00 00 | .. | length: 0 0x4de6-0x4de7.7 (2)
0x04de0| 6c 00 00 00 | l... | footer_length: 108 0x4de8-0x4deb.7 (4)
| | | [79]{}: block 0x4dec-0x4e57.7 (108)
0x04de0| 05 00 00 00| ....| type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4dec-0x4def.7 (4)
0x04df0|6c 00 00 00 |l... | length: 108 0x4df0-0x4df3.7 (4)
0x04df0| 02 00 00 00 | .... | interface_id: 2 0x4df4-0x4df7.7 (4)
0x04df0| 72 1d 05 00 | r... | timestamp_high: 335218 0x4df8-0x4dfb.7 (4)
0x04df0| 40 ed 8e c9| @...| timestamp_low: 3381587264 0x4dfc-0x4dff.7 (4)
| | | padding: raw bits 0x4e00-NA (0)
| | | options[0:6]: 0x4e00-0x4e53.7 (84)
| | | [0]{}: option 0x4e00-0x4e1f.7 (32)
0x04e00|01 00 |.. | code: "comment" (1) (Comment) 0x4e00-0x4e01.7 (2)
0x04e00| 1c 00 | .. | length: 28 0x4e02-0x4e03.7 (2)
0x04e00| 43 6f 75 6e 74 65 72 73 20 70 72 6f| Counters pro| value: "Counters provided by dumpcap" 0x4e04-0x4e1f.7 (28)
0x04e10|76 69 64 65 64 20 62 79 20 64 75 6d 70 63 61 70|vided by dumpcap|
| | | padding: raw bits 0x4e20-NA (0)
| | | [1]{}: option 0x4e20-0x4e2b.7 (12)
0x04e20|02 00 |.. | code: "starttime" (2) 0x4e20-0x4e21.7 (2)
0x04e20| 08 00 | .. | length: 8 0x4e22-0x4e23.7 (2)
0x04e20| 72 1d 05 00 24 66 e9 c8 | r...$f.. | value: "r\x1d\x05" 0x4e24-0x4e2b.7 (8)
| | | padding: raw bits 0x4e2c-NA (0)
| | | [2]{}: option 0x4e2c-0x4e37.7 (12)
0x04e20| 03 00 | .. | code: "endtime" (3) 0x4e2c-0x4e2d.7 (2)
0x04e20| 08 00| ..| length: 8 0x4e2e-0x4e2f.7 (2)
0x04e30|72 1d 05 00 24 ed 8e c9 |r...$... | value: "r\x1d\x05" 0x4e30-0x4e37.7 (8)
| | | padding: raw bits 0x4e38-NA (0)
| | | [3]{}: option 0x4e38-0x4e43.7 (12)
0x04e30| 04 00 | .. | code: "ifrecv" (4) 0x4e38-0x4e39.7 (2)
0x04e30| 08 00 | .. | length: 8 0x4e3a-0x4e3b.7 (2)
0x04e30| 00 00 00 00| ....| value: "" 0x4e3c-0x4e43.7 (8)
0x04e40|00 00 00 00 |.... |
| | | padding: raw bits 0x4e44-NA (0)
| | | [4]{}: option 0x4e44-0x4e4f.7 (12)
0x04e40| 05 00 | .. | code: "ifdrop" (5) 0x4e44-0x4e45.7 (2)
0x04e40| 08 00 | .. | length: 8 0x4e46-0x4e47.7 (2)
0x04e40| 00 00 00 00 00 00 00 00| ........| value: "" 0x4e48-0x4e4f.7 (8)
| | | padding: raw bits 0x4e50-NA (0)
| | | [5]{}: option 0x4e50-0x4e53.7 (4)
0x04e50|00 00 |.. | code: "end" (0) (End of options) 0x4e50-0x4e51.7 (2)
0x04e50| 00 00 | .. | length: 0 0x4e52-0x4e53.7 (2)
0x04e50| 6c 00 00 00 | l... | footer_length: 108 0x4e54-0x4e57.7 (4)
| | | [80]{}: block 0x4e58-0x4ec3.7 (108)
0x04e50| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4e58-0x4e5b.7 (4)
0x04e50| 6c 00 00 00| l...| length: 108 0x4e5c-0x4e5f.7 (4)
0x04e60|03 00 00 00 |.... | interface_id: 3 0x4e60-0x4e63.7 (4)
0x04e60| 72 1d 05 00 | r... | timestamp_high: 335218 0x4e64-0x4e67.7 (4)
0x04e60| 46 ed 8e c9 | F... | timestamp_low: 3381587270 0x4e68-0x4e6b.7 (4)
| | | padding: raw bits 0x4e6c-NA (0)
| | | options[0:6]: 0x4e6c-0x4ebf.7 (84)
| | | [0]{}: option 0x4e6c-0x4e8b.7 (32)
0x04e60| 01 00 | .. | code: "comment" (1) (Comment) 0x4e6c-0x4e6d.7 (2)
0x04e60| 1c 00| ..| length: 28 0x4e6e-0x4e6f.7 (2)
0x04e70|43 6f 75 6e 74 65 72 73 20 70 72 6f 76 69 64 65|Counters provide| value: "Counters provided by dumpcap" 0x4e70-0x4e8b.7 (28)
0x04e80|64 20 62 79 20 64 75 6d 70 63 61 70 |d by dumpcap |
| | | padding: raw bits 0x4e8c-NA (0)
| | | [1]{}: option 0x4e8c-0x4e97.7 (12)
0x04e80| 02 00 | .. | code: "starttime" (2) 0x4e8c-0x4e8d.7 (2)
0x04e80| 08 00| ..| length: 8 0x4e8e-0x4e8f.7 (2)
0x04e90|72 1d 05 00 24 66 e9 c8 |r...$f.. | value: "r\x1d\x05" 0x4e90-0x4e97.7 (8)
| | | padding: raw bits 0x4e98-NA (0)
| | | [2]{}: option 0x4e98-0x4ea3.7 (12)
0x04e90| 03 00 | .. | code: "endtime" (3) 0x4e98-0x4e99.7 (2)
0x04e90| 08 00 | .. | length: 8 0x4e9a-0x4e9b.7 (2)
0x04e90| 72 1d 05 00| r...| value: "r\x1d\x05" 0x4e9c-0x4ea3.7 (8)
0x04ea0|24 ed 8e c9 |$... |
| | | padding: raw bits 0x4ea4-NA (0)
| | | [3]{}: option 0x4ea4-0x4eaf.7 (12)
0x04ea0| 04 00 | .. | code: "ifrecv" (4) 0x4ea4-0x4ea5.7 (2)
0x04ea0| 08 00 | .. | length: 8 0x4ea6-0x4ea7.7 (2)
0x04ea0| 00 00 00 00 00 00 00 00| ........| value: "" 0x4ea8-0x4eaf.7 (8)
| | | padding: raw bits 0x4eb0-NA (0)
| | | [4]{}: option 0x4eb0-0x4ebb.7 (12)
0x04eb0|05 00 |.. | code: "ifdrop" (5) 0x4eb0-0x4eb1.7 (2)
0x04eb0| 08 00 | .. | length: 8 0x4eb2-0x4eb3.7 (2)
0x04eb0| 00 00 00 00 00 00 00 00 | ........ | value: "" 0x4eb4-0x4ebb.7 (8)
| | | padding: raw bits 0x4ebc-NA (0)
| | | [5]{}: option 0x4ebc-0x4ebf.7 (4)
0x04eb0| 00 00 | .. | code: "end" (0) (End of options) 0x4ebc-0x4ebd.7 (2)
0x04eb0| 00 00| ..| length: 0 0x4ebe-0x4ebf.7 (2)
0x04ec0|6c 00 00 00 |l... | footer_length: 108 0x4ec0-0x4ec3.7 (4)
| | | [81]{}: block 0x4ec4-0x4f2f.7 (108)
0x04ec0| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4ec4-0x4ec7.7 (4)
0x04ec0| 6c 00 00 00 | l... | length: 108 0x4ec8-0x4ecb.7 (4)
0x04ec0| 04 00 00 00| ....| interface_id: 4 0x4ecc-0x4ecf.7 (4)
0x04ed0|72 1d 05 00 |r... | timestamp_high: 335218 0x4ed0-0x4ed3.7 (4)
0x04ed0| 4c ed 8e c9 | L... | timestamp_low: 3381587276 0x4ed4-0x4ed7.7 (4)
| | | padding: raw bits 0x4ed8-NA (0)
| | | options[0:6]: 0x4ed8-0x4f2b.7 (84)
| | | [0]{}: option 0x4ed8-0x4ef7.7 (32)
0x04ed0| 01 00 | .. | code: "comment" (1) (Comment) 0x4ed8-0x4ed9.7 (2)
0x04ed0| 1c 00 | .. | length: 28 0x4eda-0x4edb.7 (2)
0x04ed0| 43 6f 75 6e| Coun| value: "Counters provided by dumpcap" 0x4edc-0x4ef7.7 (28)
0x04ee0|74 65 72 73 20 70 72 6f 76 69 64 65 64 20 62 79|ters provided by|
0x04ef0|20 64 75 6d 70 63 61 70 | dumpcap |
| | | padding: raw bits 0x4ef8-NA (0)
| | | [1]{}: option 0x4ef8-0x4f03.7 (12)
0x04ef0| 02 00 | .. | code: "starttime" (2) 0x4ef8-0x4ef9.7 (2)
0x04ef0| 08 00 | .. | length: 8 0x4efa-0x4efb.7 (2)
0x04ef0| 72 1d 05 00| r...| value: "r\x1d\x05" 0x4efc-0x4f03.7 (8)
0x04f00|24 66 e9 c8 |$f.. |
| | | padding: raw bits 0x4f04-NA (0)
| | | [2]{}: option 0x4f04-0x4f0f.7 (12)
0x04f00| 03 00 | .. | code: "endtime" (3) 0x4f04-0x4f05.7 (2)
0x04f00| 08 00 | .. | length: 8 0x4f06-0x4f07.7 (2)
0x04f00| 72 1d 05 00 24 ed 8e c9| r...$...| value: "r\x1d\x05" 0x4f08-0x4f0f.7 (8)
| | | padding: raw bits 0x4f10-NA (0)
| | | [3]{}: option 0x4f10-0x4f1b.7 (12)
0x04f10|04 00 |.. | code: "ifrecv" (4) 0x4f10-0x4f11.7 (2)
0x04f10| 08 00 | .. | length: 8 0x4f12-0x4f13.7 (2)
0x04f10| 00 00 00 00 00 00 00 00 | ........ | value: "" 0x4f14-0x4f1b.7 (8)
| | | padding: raw bits 0x4f1c-NA (0)
| | | [4]{}: option 0x4f1c-0x4f27.7 (12)
0x04f10| 05 00 | .. | code: "ifdrop" (5) 0x4f1c-0x4f1d.7 (2)
0x04f10| 08 00| ..| length: 8 0x4f1e-0x4f1f.7 (2)
0x04f20|00 00 00 00 00 00 00 00 |........ | value: "" 0x4f20-0x4f27.7 (8)
| | | padding: raw bits 0x4f28-NA (0)
| | | [5]{}: option 0x4f28-0x4f2b.7 (4)
0x04f20| 00 00 | .. | code: "end" (0) (End of options) 0x4f28-0x4f29.7 (2)
0x04f20| 00 00 | .. | length: 0 0x4f2a-0x4f2b.7 (2)
0x04f20| 6c 00 00 00| l...| footer_length: 108 0x4f2c-0x4f2f.7 (4)
| | | [82]{}: block 0x4f30-0x4f9b.7 (108)
0x04f30|05 00 00 00 |.... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4f30-0x4f33.7 (4)
0x04f30| 6c 00 00 00 | l... | length: 108 0x4f34-0x4f37.7 (4)
0x04f30| 05 00 00 00 | .... | interface_id: 5 0x4f38-0x4f3b.7 (4)
0x04f30| 72 1d 05 00| r...| timestamp_high: 335218 0x4f3c-0x4f3f.7 (4)
0x04f40|51 ed 8e c9 |Q... | timestamp_low: 3381587281 0x4f40-0x4f43.7 (4)
| | | padding: raw bits 0x4f44-NA (0)
| | | options[0:6]: 0x4f44-0x4f97.7 (84)
| | | [0]{}: option 0x4f44-0x4f63.7 (32)
0x04f40| 01 00 | .. | code: "comment" (1) (Comment) 0x4f44-0x4f45.7 (2)
0x04f40| 1c 00 | .. | length: 28 0x4f46-0x4f47.7 (2)
0x04f40| 43 6f 75 6e 74 65 72 73| Counters| value: "Counters provided by dumpcap" 0x4f48-0x4f63.7 (28)
0x04f50|20 70 72 6f 76 69 64 65 64 20 62 79 20 64 75 6d| provided by dum|
0x04f60|70 63 61 70 |pcap |
| | | padding: raw bits 0x4f64-NA (0)
| | | [1]{}: option 0x4f64-0x4f6f.7 (12)
0x04f60| 02 00 | .. | code: "starttime" (2) 0x4f64-0x4f65.7 (2)
0x04f60| 08 00 | .. | length: 8 0x4f66-0x4f67.7 (2)
0x04f60| 72 1d 05 00 24 66 e9 c8| r...$f..| value: "r\x1d\x05" 0x4f68-0x4f6f.7 (8)
| | | padding: raw bits 0x4f70-NA (0)
| | | [2]{}: option 0x4f70-0x4f7b.7 (12)
0x04f70|03 00 |.. | code: "endtime" (3) 0x4f70-0x4f71.7 (2)
0x04f70| 08 00 | .. | length: 8 0x4f72-0x4f73.7 (2)
0x04f70| 72 1d 05 00 24 ed 8e c9 | r...$... | value: "r\x1d\x05" 0x4f74-0x4f7b.7 (8)
| | | padding: raw bits 0x4f7c-NA (0)
| | | [3]{}: option 0x4f7c-0x4f87.7 (12)
0x04f70| 04 00 | .. | code: "ifrecv" (4) 0x4f7c-0x4f7d.7 (2)
0x04f70| 08 00| ..| length: 8 0x4f7e-0x4f7f.7 (2)
0x04f80|00 00 00 00 00 00 00 00 |........ | value: "" 0x4f80-0x4f87.7 (8)
| | | padding: raw bits 0x4f88-NA (0)
| | | [4]{}: option 0x4f88-0x4f93.7 (12)
0x04f80| 05 00 | .. | code: "ifdrop" (5) 0x4f88-0x4f89.7 (2)
0x04f80| 08 00 | .. | length: 8 0x4f8a-0x4f8b.7 (2)
0x04f80| 00 00 00 00| ....| value: "" 0x4f8c-0x4f93.7 (8)
0x04f90|00 00 00 00 |.... |
| | | padding: raw bits 0x4f94-NA (0)
| | | [5]{}: option 0x4f94-0x4f97.7 (4)
0x04f90| 00 00 | .. | code: "end" (0) (End of options) 0x4f94-0x4f95.7 (2)
0x04f90| 00 00 | .. | length: 0 0x4f96-0x4f97.7 (2)
0x04f90| 6c 00 00 00 | l... | footer_length: 108 0x4f98-0x4f9b.7 (4)
| | | [83]{}: block 0x4f9c-0x5007.7 (108)
0x04f90| 05 00 00 00| ....| type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4f9c-0x4f9f.7 (4)
0x04fa0|6c 00 00 00 |l... | length: 108 0x4fa0-0x4fa3.7 (4)
0x04fa0| 06 00 00 00 | .... | interface_id: 6 0x4fa4-0x4fa7.7 (4)
0x04fa0| 72 1d 05 00 | r... | timestamp_high: 335218 0x4fa8-0x4fab.7 (4)
0x04fa0| 56 ed 8e c9| V...| timestamp_low: 3381587286 0x4fac-0x4faf.7 (4)
| | | padding: raw bits 0x4fb0-NA (0)
| | | options[0:6]: 0x4fb0-0x5003.7 (84)
| | | [0]{}: option 0x4fb0-0x4fcf.7 (32)
0x04fb0|01 00 |.. | code: "comment" (1) (Comment) 0x4fb0-0x4fb1.7 (2)
0x04fb0| 1c 00 | .. | length: 28 0x4fb2-0x4fb3.7 (2)
0x04fb0| 43 6f 75 6e 74 65 72 73 20 70 72 6f| Counters pro| value: "Counters provided by dumpcap" 0x4fb4-0x4fcf.7 (28)
0x04fc0|76 69 64 65 64 20 62 79 20 64 75 6d 70 63 61 70|vided by dumpcap|
| | | padding: raw bits 0x4fd0-NA (0)
| | | [1]{}: option 0x4fd0-0x4fdb.7 (12)
0x04fd0|02 00 |.. | code: "starttime" (2) 0x4fd0-0x4fd1.7 (2)
0x04fd0| 08 00 | .. | length: 8 0x4fd2-0x4fd3.7 (2)
0x04fd0| 72 1d 05 00 24 66 e9 c8 | r...$f.. | value: "r\x1d\x05" 0x4fd4-0x4fdb.7 (8)
| | | padding: raw bits 0x4fdc-NA (0)
| | | [2]{}: option 0x4fdc-0x4fe7.7 (12)
0x04fd0| 03 00 | .. | code: "endtime" (3) 0x4fdc-0x4fdd.7 (2)
0x04fd0| 08 00| ..| length: 8 0x4fde-0x4fdf.7 (2)
0x04fe0|72 1d 05 00 24 ed 8e c9 |r...$... | value: "r\x1d\x05" 0x4fe0-0x4fe7.7 (8)
| | | padding: raw bits 0x4fe8-NA (0)
| | | [3]{}: option 0x4fe8-0x4ff3.7 (12)
0x04fe0| 04 00 | .. | code: "ifrecv" (4) 0x4fe8-0x4fe9.7 (2)
0x04fe0| 08 00 | .. | length: 8 0x4fea-0x4feb.7 (2)
0x04fe0| 00 00 00 00| ....| value: "" 0x4fec-0x4ff3.7 (8)
0x04ff0|00 00 00 00 |.... |
| | | padding: raw bits 0x4ff4-NA (0)
| | | [4]{}: option 0x4ff4-0x4fff.7 (12)
0x04ff0| 05 00 | .. | code: "ifdrop" (5) 0x4ff4-0x4ff5.7 (2)
0x04ff0| 08 00 | .. | length: 8 0x4ff6-0x4ff7.7 (2)
0x04ff0| 00 00 00 00 00 00 00 00| ........| value: "" 0x4ff8-0x4fff.7 (8)
| | | padding: raw bits 0x5000-NA (0)
| | | [5]{}: option 0x5000-0x5003.7 (4)
0x05000|00 00 |.. | code: "end" (0) (End of options) 0x5000-0x5001.7 (2)
0x05000| 00 00 | .. | length: 0 0x5002-0x5003.7 (2)
0x05000| 6c 00 00 00 | l... | footer_length: 108 0x5004-0x5007.7 (4)
| | | [84]{}: block 0x5008-0x5073.7 (108)
0x05000| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x5008-0x500b.7 (4)
0x05000| 6c 00 00 00| l...| length: 108 0x500c-0x500f.7 (4)
0x05010|07 00 00 00 |.... | interface_id: 7 0x5010-0x5013.7 (4)
0x05010| 72 1d 05 00 | r... | timestamp_high: 335218 0x5014-0x5017.7 (4)
0x05010| 84 ed 8e c9 | .... | timestamp_low: 3381587332 0x5018-0x501b.7 (4)
| | | padding: raw bits 0x501c-NA (0)
| | | options[0:6]: 0x501c-0x506f.7 (84)
| | | [0]{}: option 0x501c-0x503b.7 (32)
0x05010| 01 00 | .. | code: "comment" (1) (Comment) 0x501c-0x501d.7 (2)
0x05010| 1c 00| ..| length: 28 0x501e-0x501f.7 (2)
0x05020|43 6f 75 6e 74 65 72 73 20 70 72 6f 76 69 64 65|Counters provide| value: "Counters provided by dumpcap" 0x5020-0x503b.7 (28)
0x05030|64 20 62 79 20 64 75 6d 70 63 61 70 |d by dumpcap |
| | | padding: raw bits 0x503c-NA (0)
| | | [1]{}: option 0x503c-0x5047.7 (12)
0x05030| 02 00 | .. | code: "starttime" (2) 0x503c-0x503d.7 (2)
0x05030| 08 00| ..| length: 8 0x503e-0x503f.7 (2)
0x05040|72 1d 05 00 24 66 e9 c8 |r...$f.. | value: "r\x1d\x05" 0x5040-0x5047.7 (8)
| | | padding: raw bits 0x5048-NA (0)
| | | [2]{}: option 0x5048-0x5053.7 (12)
0x05040| 03 00 | .. | code: "endtime" (3) 0x5048-0x5049.7 (2)
0x05040| 08 00 | .. | length: 8 0x504a-0x504b.7 (2)
0x05040| 72 1d 05 00| r...| value: "r\x1d\x05" 0x504c-0x5053.7 (8)
0x05050|24 ed 8e c9 |$... |
| | | padding: raw bits 0x5054-NA (0)
| | | [3]{}: option 0x5054-0x505f.7 (12)
0x05050| 04 00 | .. | code: "ifrecv" (4) 0x5054-0x5055.7 (2)
0x05050| 08 00 | .. | length: 8 0x5056-0x5057.7 (2)
0x05050| 00 00 00 00 00 00 00 00| ........| value: "" 0x5058-0x505f.7 (8)
| | | padding: raw bits 0x5060-NA (0)
| | | [4]{}: option 0x5060-0x506b.7 (12)
0x05060|05 00 |.. | code: "ifdrop" (5) 0x5060-0x5061.7 (2)
0x05060| 08 00 | .. | length: 8 0x5062-0x5063.7 (2)
0x05060| 00 00 00 00 00 00 00 00 | ........ | value: "" 0x5064-0x506b.7 (8)
| | | padding: raw bits 0x506c-NA (0)
| | | [5]{}: option 0x506c-0x506f.7 (4)
0x05060| 00 00 | .. | code: "end" (0) (End of options) 0x506c-0x506d.7 (2)
0x05060| 00 00| ..| length: 0 0x506e-0x506f.7 (2)
0x05070|6c 00 00 00 |l... | footer_length: 108 0x5070-0x5073.7 (4)
| | | [85]{}: block 0x5074-0x50df.7 (108)
0x05070| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x5074-0x5077.7 (4)
0x05070| 6c 00 00 00 | l... | length: 108 0x5078-0x507b.7 (4)
0x05070| 08 00 00 00| ....| interface_id: 8 0x507c-0x507f.7 (4)
0x05080|72 1d 05 00 |r... | timestamp_high: 335218 0x5080-0x5083.7 (4)
0x05080| 89 ed 8e c9 | .... | timestamp_low: 3381587337 0x5084-0x5087.7 (4)
| | | padding: raw bits 0x5088-NA (0)
| | | options[0:6]: 0x5088-0x50db.7 (84)
| | | [0]{}: option 0x5088-0x50a7.7 (32)
0x05080| 01 00 | .. | code: "comment" (1) (Comment) 0x5088-0x5089.7 (2)
0x05080| 1c 00 | .. | length: 28 0x508a-0x508b.7 (2)
0x05080| 43 6f 75 6e| Coun| value: "Counters provided by dumpcap" 0x508c-0x50a7.7 (28)
0x05090|74 65 72 73 20 70 72 6f 76 69 64 65 64 20 62 79|ters provided by|
0x050a0|20 64 75 6d 70 63 61 70 | dumpcap |
| | | padding: raw bits 0x50a8-NA (0)
| | | [1]{}: option 0x50a8-0x50b3.7 (12)
0x050a0| 02 00 | .. | code: "starttime" (2) 0x50a8-0x50a9.7 (2)
0x050a0| 08 00 | .. | length: 8 0x50aa-0x50ab.7 (2)
0x050a0| 72 1d 05 00| r...| value: "r\x1d\x05" 0x50ac-0x50b3.7 (8)
0x050b0|24 66 e9 c8 |$f.. |
| | | padding: raw bits 0x50b4-NA (0)
| | | [2]{}: option 0x50b4-0x50bf.7 (12)
0x050b0| 03 00 | .. | code: "endtime" (3) 0x50b4-0x50b5.7 (2)
0x050b0| 08 00 | .. | length: 8 0x50b6-0x50b7.7 (2)
0x050b0| 72 1d 05 00 24 ed 8e c9| r...$...| value: "r\x1d\x05" 0x50b8-0x50bf.7 (8)
| | | padding: raw bits 0x50c0-NA (0)
| | | [3]{}: option 0x50c0-0x50cb.7 (12)
0x050c0|04 00 |.. | code: "ifrecv" (4) 0x50c0-0x50c1.7 (2)
0x050c0| 08 00 | .. | length: 8 0x50c2-0x50c3.7 (2)
0x050c0| 00 00 00 00 00 00 00 00 | ........ | value: "" 0x50c4-0x50cb.7 (8)
| | | padding: raw bits 0x50cc-NA (0)
| | | [4]{}: option 0x50cc-0x50d7.7 (12)
0x050c0| 05 00 | .. | code: "ifdrop" (5) 0x50cc-0x50cd.7 (2)
0x050c0| 08 00| ..| length: 8 0x50ce-0x50cf.7 (2)
0x050d0|00 00 00 00 00 00 00 00 |........ | value: "" 0x50d0-0x50d7.7 (8)
| | | padding: raw bits 0x50d8-NA (0)
| | | [5]{}: option 0x50d8-0x50db.7 (4)
0x050d0| 00 00 | .. | code: "end" (0) (End of options) 0x50d8-0x50d9.7 (2)
0x050d0| 00 00 | .. | length: 0 0x50da-0x50db.7 (2)
0x050d0| 6c 00 00 00| l...| footer_length: 108 0x50dc-0x50df.7 (4)
| | | [86]{}: block 0x50e0-0x514b.7 (108)
0x050e0|05 00 00 00 |.... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x50e0-0x50e3.7 (4)
0x050e0| 6c 00 00 00 | l... | length: 108 0x50e4-0x50e7.7 (4)
0x050e0| 09 00 00 00 | .... | interface_id: 9 0x50e8-0x50eb.7 (4)
0x050e0| 72 1d 05 00| r...| timestamp_high: 335218 0x50ec-0x50ef.7 (4)
0x050f0|8e ed 8e c9 |.... | timestamp_low: 3381587342 0x50f0-0x50f3.7 (4)
| | | padding: raw bits 0x50f4-NA (0)
| | | options[0:6]: 0x50f4-0x5147.7 (84)
| | | [0]{}: option 0x50f4-0x5113.7 (32)
0x050f0| 01 00 | .. | code: "comment" (1) (Comment) 0x50f4-0x50f5.7 (2)
0x050f0| 1c 00 | .. | length: 28 0x50f6-0x50f7.7 (2)
0x050f0| 43 6f 75 6e 74 65 72 73| Counters| value: "Counters provided by dumpcap" 0x50f8-0x5113.7 (28)
0x05100|20 70 72 6f 76 69 64 65 64 20 62 79 20 64 75 6d| provided by dum|
0x05110|70 63 61 70 |pcap |
| | | padding: raw bits 0x5114-NA (0)
| | | [1]{}: option 0x5114-0x511f.7 (12)
0x05110| 02 00 | .. | code: "starttime" (2) 0x5114-0x5115.7 (2)
0x05110| 08 00 | .. | length: 8 0x5116-0x5117.7 (2)
0x05110| 72 1d 05 00 24 66 e9 c8| r...$f..| value: "r\x1d\x05" 0x5118-0x511f.7 (8)
| | | padding: raw bits 0x5120-NA (0)
| | | [2]{}: option 0x5120-0x512b.7 (12)
0x05120|03 00 |.. | code: "endtime" (3) 0x5120-0x5121.7 (2)
0x05120| 08 00 | .. | length: 8 0x5122-0x5123.7 (2)
0x05120| 72 1d 05 00 24 ed 8e c9 | r...$... | value: "r\x1d\x05" 0x5124-0x512b.7 (8)
| | | padding: raw bits 0x512c-NA (0)
| | | [3]{}: option 0x512c-0x5137.7 (12)
0x05120| 04 00 | .. | code: "ifrecv" (4) 0x512c-0x512d.7 (2)
0x05120| 08 00| ..| length: 8 0x512e-0x512f.7 (2)
0x05130|00 00 00 00 00 00 00 00 |........ | value: "" 0x5130-0x5137.7 (8)
| | | padding: raw bits 0x5138-NA (0)
| | | [4]{}: option 0x5138-0x5143.7 (12)
0x05130| 05 00 | .. | code: "ifdrop" (5) 0x5138-0x5139.7 (2)
0x05130| 08 00 | .. | length: 8 0x513a-0x513b.7 (2)
0x05130| 00 00 00 00| ....| value: "" 0x513c-0x5143.7 (8)
0x05140|00 00 00 00 |.... |
| | | padding: raw bits 0x5144-NA (0)
| | | [5]{}: option 0x5144-0x5147.7 (4)
0x05140| 00 00 | .. | code: "end" (0) (End of options) 0x5144-0x5145.7 (2)
0x05140| 00 00 | .. | length: 0 0x5146-0x5147.7 (2)
0x05140| 6c 00 00 00 | l... | footer_length: 108 0x5148-0x514b.7 (4)
| | | [87]{}: block 0x514c-0x51b7.7 (108)
0x05140| 05 00 00 00| ....| type: "interface_statistics" (0x5) (Interface Statistics Block) 0x514c-0x514f.7 (4)
0x05150|6c 00 00 00 |l... | length: 108 0x5150-0x5153.7 (4)
0x05150| 0a 00 00 00 | .... | interface_id: 10 0x5154-0x5157.7 (4)
0x05150| 72 1d 05 00 | r... | timestamp_high: 335218 0x5158-0x515b.7 (4)
0x05150| 93 ed 8e c9| ....| timestamp_low: 3381587347 0x515c-0x515f.7 (4)
| | | padding: raw bits 0x5160-NA (0)
| | | options[0:6]: 0x5160-0x51b3.7 (84)
| | | [0]{}: option 0x5160-0x517f.7 (32)
0x05160|01 00 |.. | code: "comment" (1) (Comment) 0x5160-0x5161.7 (2)
0x05160| 1c 00 | .. | length: 28 0x5162-0x5163.7 (2)
0x05160| 43 6f 75 6e 74 65 72 73 20 70 72 6f| Counters pro| value: "Counters provided by dumpcap" 0x5164-0x517f.7 (28)
0x05170|76 69 64 65 64 20 62 79 20 64 75 6d 70 63 61 70|vided by dumpcap|
| | | padding: raw bits 0x5180-NA (0)
| | | [1]{}: option 0x5180-0x518b.7 (12)
0x05180|02 00 |.. | code: "starttime" (2) 0x5180-0x5181.7 (2)
0x05180| 08 00 | .. | length: 8 0x5182-0x5183.7 (2)
0x05180| 72 1d 05 00 24 66 e9 c8 | r...$f.. | value: "r\x1d\x05" 0x5184-0x518b.7 (8)
| | | padding: raw bits 0x518c-NA (0)
| | | [2]{}: option 0x518c-0x5197.7 (12)
0x05180| 03 00 | .. | code: "endtime" (3) 0x518c-0x518d.7 (2)
0x05180| 08 00| ..| length: 8 0x518e-0x518f.7 (2)
0x05190|72 1d 05 00 24 ed 8e c9 |r...$... | value: "r\x1d\x05" 0x5190-0x5197.7 (8)
| | | padding: raw bits 0x5198-NA (0)
| | | [3]{}: option 0x5198-0x51a3.7 (12)
0x05190| 04 00 | .. | code: "ifrecv" (4) 0x5198-0x5199.7 (2)
0x05190| 08 00 | .. | length: 8 0x519a-0x519b.7 (2)
0x05190| 04 00 00 00| ....| value: "\x04" 0x519c-0x51a3.7 (8)
0x051a0|00 00 00 00 |.... |
| | | padding: raw bits 0x51a4-NA (0)
| | | [4]{}: option 0x51a4-0x51af.7 (12)
0x051a0| 05 00 | .. | code: "ifdrop" (5) 0x51a4-0x51a5.7 (2)
0x051a0| 08 00 | .. | length: 8 0x51a6-0x51a7.7 (2)
0x051a0| 00 00 00 00 00 00 00 00| ........| value: "" 0x51a8-0x51af.7 (8)
| | | padding: raw bits 0x51b0-NA (0)
| | | [5]{}: option 0x51b0-0x51b3.7 (4)
0x051b0|00 00 |.. | code: "end" (0) (End of options) 0x51b0-0x51b1.7 (2)
0x051b0| 00 00 | .. | length: 0 0x51b2-0x51b3.7 (2)
0x051b0| 6c 00 00 00| | l...| | footer_length: 108 0x51b4-0x51b7.7 (4)
| | | ipv4_reassembled[0:0]: 0x51b8-NA (0)
| | | tcp_connections[0:2]: 0x51b8-NA (0)
| | | [0]{}: tcp_connection 0x51b8-NA (0)
| | | client{}: 0x51b8-NA (0)
| | | ip: "192.168.1.139" 0x51b8-NA (0)
| | | port: 50981 0x51b8-NA (0)
| | | has_start: true 0x51b8-NA (0)
| | | has_end: false 0x51b8-NA (0)
| | | skipped_bytes: 0 0x51b8-NA (0)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
0x000|16 03 01 02 00 01 00 01 fc 03 03 f0 91 bc 87 3e|...............>| stream: raw bits 0x0-0x7b0.7 (1969)
* |until 0x7b0.7 (end) (1969) | |
| | | server{}: 0x51b8-NA (0)
| | | ip: "74.125.228.227" 0x51b8-NA (0)
| | | port: "https" (443) (http protocol over TLS/SSL) 0x51b8-NA (0)
| | | has_start: true 0x51b8-NA (0)
| | | has_end: false 0x51b8-NA (0)
| | | skipped_bytes: 0 0x51b8-NA (0)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
0x000|16 03 03 00 5a 02 00 00 56 03 03 55 d0 e5 ff ab|....Z...V..U....| stream: raw bits 0x0-0x35b.7 (860)
* |until 0x35b.7 (end) (860) | |
| | | [1]{}: tcp_connection 0x51b8-NA (0)
| | | client{}: 0x51b8-NA (0)
| | | ip: "192.168.1.139" 0x51b8-NA (0)
| | | port: 50982 0x51b8-NA (0)
| | | has_start: true 0x51b8-NA (0)
| | | has_end: false 0x51b8-NA (0)
| | | skipped_bytes: 0 0x51b8-NA (0)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
0x000|16 03 01 00 d3 01 00 00 cf 03 03 c0 a6 33 83 e1|.............3..| stream: raw bits 0x0-0xd7.7 (216)
* |until 0xd7.7 (end) (216) | |
| | | server{}: 0x51b8-NA (0)
| | | ip: "74.125.228.227" 0x51b8-NA (0)
| | | port: "https" (443) (http protocol over TLS/SSL) 0x51b8-NA (0)
| | | has_start: true 0x51b8-NA (0)
| | | has_end: false 0x51b8-NA (0)
| | | skipped_bytes: 0 0x51b8-NA (0)
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|
| | | stream: raw bits 0x0-NA (0)
Reference in New Issue View Git Blame Copy Permalink