mirror of
https://github.com/wader/fq.git
synced 2024-12-29 00:22:38 +03:00
630 lines
73 KiB
Plaintext
630 lines
73 KiB
Plaintext
# from https://wiki.wireshark.org/SampleCaptures
|
|
$ fq -d pcap verbose /http_gzip.cap
|
|
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.: {} /http_gzip.cap (pcap) 0x0-0x6aa.7 (1707)
|
|
0x0000|d4 c3 b2 a1 |.... | magic: "little_endian" (0xd4c3b2a1) (valid) 0x0-0x3.7 (4)
|
|
0x0000| 02 00 | .. | version_major: 2 0x4-0x5.7 (2)
|
|
0x0000| 04 00 | .. | version_minor: 4 0x6-0x7.7 (2)
|
|
0x0000| 00 00 00 00 | .... | thiszone: 0 0x8-0xb.7 (4)
|
|
0x0000| 00 00 00 00| ....| sigfigs: 0 0xc-0xf.7 (4)
|
|
0x0010|ff ff 00 00 |.... | snaplen: 65535 0x10-0x13.7 (4)
|
|
0x0010| 01 00 00 00 | .... | network: "ethernet" (1) (IEEE 802.3 Ethernet) 0x14-0x17.7 (4)
|
|
| | | packets: [10] 0x18-0x6aa.7 (1683)
|
|
| | | [0]: packet {} 0x18-0x71.7 (90)
|
|
0x0010| 3c d3 81 41 | <..A | ts_sec: 1099027260 0x18-0x1b.7 (4)
|
|
0x0010| f0 23 06 00| .#..| ts_usec: 402416 0x1c-0x1f.7 (4)
|
|
0x0020|4a 00 00 00 |J... | incl_len: 74 0x20-0x23.7 (4)
|
|
0x0020| 4a 00 00 00 | J... | orig_len: 74 0x24-0x27.7 (4)
|
|
| | | packet: {} (ether8023_frame) 0x28-0x71.7 (74)
|
|
0x0020| 00 c0 f0 2d 4a a3 | ...-J. | destination: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x28-0x2d.7 (6)
|
|
0x0020| 00 0a| ..| source: "00:0a:95:67:49:3c" (0xa9567493c) 0x2e-0x33.7 (6)
|
|
0x0030|95 67 49 3c |.gI< |
|
|
0x0030| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x34-0x35.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0x36-0x71.7 (60)
|
|
0x0030| 45 | E | version: 4 0x36-0x36.3 (0.4)
|
|
0x0030| 45 | E | ihl: 5 0x36.4-0x36.7 (0.4)
|
|
0x0030| 00 | . | dscp: 0 0x37-0x37.5 (0.6)
|
|
0x0030| 00 | . | ecn: 0 0x37.6-0x37.7 (0.2)
|
|
0x0030| 00 3c | .< | total_length: 60 0x38-0x39.7 (2)
|
|
0x0030| f5 d9 | .. | identification: 62937 0x3a-0x3b.7 (2)
|
|
0x0030| 40 | @ | reserved: 0 0x3c-0x3c (0.1)
|
|
0x0030| 40 | @ | dont_fragment: true 0x3c.1-0x3c.1 (0.1)
|
|
0x0030| 40 | @ | more_fragments: false 0x3c.2-0x3c.2 (0.1)
|
|
0x0030| 40 00 | @. | fragment_offset: 0 0x3c.3-0x3d.7 (1.5)
|
|
0x0030| 40 | @ | ttl: 64 0x3e-0x3e.7 (1)
|
|
0x0030| 06| .| protocol: "tcp" (6) (Transmission control protocol) 0x3f-0x3f.7 (1)
|
|
0x0040|39 8e |9. | header_checksum: 0x398e (valid) 0x40-0x41.7 (2)
|
|
0x0040| c0 a8 45 02 | ..E. | source_ip: "192.168.69.2" (0xc0a84502) 0x42-0x45.7 (4)
|
|
0x0040| c0 a8 45 01 | ..E. | destination_ip: "192.168.69.1" (0xc0a84501) 0x46-0x49.7 (4)
|
|
| | | data: {} (tcp_segment) 0x4a-0x71.7 (40)
|
|
0x0040| 85 0b | .. | source_port: 34059 0x4a-0x4b.7 (2)
|
|
0x0040| 00 50 | .P | destination_port: "http" (80) (World Wide Web HTTP) 0x4c-0x4d.7 (2)
|
|
0x0040| 8f f5| ..| sequence_number: 2415239730 0x4e-0x51.7 (4)
|
|
0x0050|a2 32 |.2 |
|
|
0x0050| 00 00 00 00 | .... | acknowledgment_number: 0 0x52-0x55.7 (4)
|
|
0x0050| a0 | . | data_offset: 10 0x56-0x56.3 (0.4)
|
|
0x0050| a0 | . | reserved: 0 0x56.4-0x56.6 (0.3)
|
|
0x0050| a0 | . | ns: false 0x56.7-0x56.7 (0.1)
|
|
0x0050| 02 | . | cwr: false 0x57-0x57 (0.1)
|
|
0x0050| 02 | . | ece: false 0x57.1-0x57.1 (0.1)
|
|
0x0050| 02 | . | urg: false 0x57.2-0x57.2 (0.1)
|
|
0x0050| 02 | . | ack: false 0x57.3-0x57.3 (0.1)
|
|
0x0050| 02 | . | psh: false 0x57.4-0x57.4 (0.1)
|
|
0x0050| 02 | . | rst: false 0x57.5-0x57.5 (0.1)
|
|
0x0050| 02 | . | syn: true 0x57.6-0x57.6 (0.1)
|
|
0x0050| 02 | . | fin: false 0x57.7-0x57.7 (0.1)
|
|
0x0050| 16 d0 | .. | window_size: 5840 0x58-0x59.7 (2)
|
|
0x0050| 9e 89 | .. | checksum: 0x9e89 0x5a-0x5b.7 (2)
|
|
0x0050| 00 00 | .. | urgent_pointer: 0 0x5c-0x5d.7 (2)
|
|
| | | options: [5] 0x5e-0x71.7 (20)
|
|
| | | [0]: option {} 0x5e-0x61.7 (4)
|
|
0x0050| 02 | . | kind: "maxseg" (2) (Maximum segment size) 0x5e-0x5e.7 (1)
|
|
0x0050| 04| .| length: 4 0x5f-0x5f.7 (1)
|
|
0x0060|05 b4 |.. | data: raw bits 0x60-0x61.7 (2)
|
|
| | | [1]: option {} 0x62-0x63.7 (2)
|
|
0x0060| 04 | . | kind: "sack_permitted" (4) (Selective Acknowledgement permitted) 0x62-0x62.7 (1)
|
|
0x0060| 02 | . | length: 2 0x63-0x63.7 (1)
|
|
| | | data: raw bits 0x64-NA (0)
|
|
| | | [2]: option {} 0x64-0x6d.7 (10)
|
|
0x0060| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x64-0x64.7 (1)
|
|
0x0060| 0a | . | length: 10 0x65-0x65.7 (1)
|
|
0x0060| 77 e3 57 eb 00 00 00 00 | w.W..... | data: raw bits 0x66-0x6d.7 (8)
|
|
| | | [3]: option {} 0x6e-0x6e.7 (1)
|
|
0x0060| 01 | . | kind: "nop" (1) (No operation) 0x6e-0x6e.7 (1)
|
|
| | | [4]: option {} 0x6f-0x71.7 (3)
|
|
0x0060| 03| .| kind: "winscale" (3) (Window scale) 0x6f-0x6f.7 (1)
|
|
0x0070|03 |. | length: 3 0x70-0x70.7 (1)
|
|
0x0070| 07 | . | data: raw bits 0x71-0x71.7 (1)
|
|
| | | data: raw bits 0x72-NA (0)
|
|
| | | capture_padding: raw bits 0x72-NA (0)
|
|
| | | [1]: packet {} 0x72-0xcb.7 (90)
|
|
0x0070| 3c d3 81 41 | <..A | ts_sec: 1099027260 0x72-0x75.7 (4)
|
|
0x0070| 2b 24 06 00 | +$.. | ts_usec: 402475 0x76-0x79.7 (4)
|
|
0x0070| 4a 00 00 00 | J... | incl_len: 74 0x7a-0x7d.7 (4)
|
|
0x0070| 4a 00| J.| orig_len: 74 0x7e-0x81.7 (4)
|
|
0x0080|00 00 |.. |
|
|
| | | packet: {} (ether8023_frame) 0x82-0xcb.7 (74)
|
|
0x0080| 00 0a 95 67 49 3c | ...gI< | destination: "00:0a:95:67:49:3c" (0xa9567493c) 0x82-0x87.7 (6)
|
|
0x0080| 00 c0 f0 2d 4a a3 | ...-J. | source: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x88-0x8d.7 (6)
|
|
0x0080| 08 00| ..| ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x8e-0x8f.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0x90-0xcb.7 (60)
|
|
0x0090|45 |E | version: 4 0x90-0x90.3 (0.4)
|
|
0x0090|45 |E | ihl: 5 0x90.4-0x90.7 (0.4)
|
|
0x0090| 00 | . | dscp: 0 0x91-0x91.5 (0.6)
|
|
0x0090| 00 | . | ecn: 0 0x91.6-0x91.7 (0.2)
|
|
0x0090| 00 3c | .< | total_length: 60 0x92-0x93.7 (2)
|
|
0x0090| 00 00 | .. | identification: 0 0x94-0x95.7 (2)
|
|
0x0090| 40 | @ | reserved: 0 0x96-0x96 (0.1)
|
|
0x0090| 40 | @ | dont_fragment: true 0x96.1-0x96.1 (0.1)
|
|
0x0090| 40 | @ | more_fragments: false 0x96.2-0x96.2 (0.1)
|
|
0x0090| 40 00 | @. | fragment_offset: 0 0x96.3-0x97.7 (1.5)
|
|
0x0090| 40 | @ | ttl: 64 0x98-0x98.7 (1)
|
|
0x0090| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x99-0x99.7 (1)
|
|
0x0090| 2f 68 | /h | header_checksum: 0x2f68 (valid) 0x9a-0x9b.7 (2)
|
|
0x0090| c0 a8 45 01| ..E.| source_ip: "192.168.69.1" (0xc0a84501) 0x9c-0x9f.7 (4)
|
|
0x00a0|c0 a8 45 02 |..E. | destination_ip: "192.168.69.2" (0xc0a84502) 0xa0-0xa3.7 (4)
|
|
| | | data: {} (tcp_segment) 0xa4-0xcb.7 (40)
|
|
0x00a0| 00 50 | .P | source_port: "http" (80) (World Wide Web HTTP) 0xa4-0xa5.7 (2)
|
|
0x00a0| 85 0b | .. | destination_port: 34059 0xa6-0xa7.7 (2)
|
|
0x00a0| 96 18 93 26 | ...& | sequence_number: 2518192934 0xa8-0xab.7 (4)
|
|
0x00a0| 8f f5 a2 33| ...3| acknowledgment_number: 2415239731 0xac-0xaf.7 (4)
|
|
0x00b0|a0 |. | data_offset: 10 0xb0-0xb0.3 (0.4)
|
|
0x00b0|a0 |. | reserved: 0 0xb0.4-0xb0.6 (0.3)
|
|
0x00b0|a0 |. | ns: false 0xb0.7-0xb0.7 (0.1)
|
|
0x00b0| 12 | . | cwr: false 0xb1-0xb1 (0.1)
|
|
0x00b0| 12 | . | ece: false 0xb1.1-0xb1.1 (0.1)
|
|
0x00b0| 12 | . | urg: false 0xb1.2-0xb1.2 (0.1)
|
|
0x00b0| 12 | . | ack: true 0xb1.3-0xb1.3 (0.1)
|
|
0x00b0| 12 | . | psh: false 0xb1.4-0xb1.4 (0.1)
|
|
0x00b0| 12 | . | rst: false 0xb1.5-0xb1.5 (0.1)
|
|
0x00b0| 12 | . | syn: true 0xb1.6-0xb1.6 (0.1)
|
|
0x00b0| 12 | . | fin: false 0xb1.7-0xb1.7 (0.1)
|
|
0x00b0| 16 a0 | .. | window_size: 5792 0xb2-0xb3.7 (2)
|
|
0x00b0| 2e c3 | .. | checksum: 0x2ec3 0xb4-0xb5.7 (2)
|
|
0x00b0| 00 00 | .. | urgent_pointer: 0 0xb6-0xb7.7 (2)
|
|
| | | options: [5] 0xb8-0xcb.7 (20)
|
|
| | | [0]: option {} 0xb8-0xbb.7 (4)
|
|
0x00b0| 02 | . | kind: "maxseg" (2) (Maximum segment size) 0xb8-0xb8.7 (1)
|
|
0x00b0| 04 | . | length: 4 0xb9-0xb9.7 (1)
|
|
0x00b0| 05 b4 | .. | data: raw bits 0xba-0xbb.7 (2)
|
|
| | | [1]: option {} 0xbc-0xbd.7 (2)
|
|
0x00b0| 04 | . | kind: "sack_permitted" (4) (Selective Acknowledgement permitted) 0xbc-0xbc.7 (1)
|
|
0x00b0| 02 | . | length: 2 0xbd-0xbd.7 (1)
|
|
| | | data: raw bits 0xbe-NA (0)
|
|
| | | [2]: option {} 0xbe-0xc7.7 (10)
|
|
0x00b0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0xbe-0xbe.7 (1)
|
|
0x00b0| 0a| .| length: 10 0xbf-0xbf.7 (1)
|
|
0x00c0|19 c9 2c e4 77 e3 57 eb |..,.w.W. | data: raw bits 0xc0-0xc7.7 (8)
|
|
| | | [3]: option {} 0xc8-0xc8.7 (1)
|
|
0x00c0| 01 | . | kind: "nop" (1) (No operation) 0xc8-0xc8.7 (1)
|
|
| | | [4]: option {} 0xc9-0xcb.7 (3)
|
|
0x00c0| 03 | . | kind: "winscale" (3) (Window scale) 0xc9-0xc9.7 (1)
|
|
0x00c0| 03 | . | length: 3 0xca-0xca.7 (1)
|
|
0x00c0| 00 | . | data: raw bits 0xcb-0xcb.7 (1)
|
|
| | | data: raw bits 0xcc-NA (0)
|
|
| | | capture_padding: raw bits 0xcc-NA (0)
|
|
| | | [2]: packet {} 0xcc-0x11d.7 (82)
|
|
0x00c0| 3c d3 81 41| <..A| ts_sec: 1099027260 0xcc-0xcf.7 (4)
|
|
0x00d0|89 24 06 00 |.$.. | ts_usec: 402569 0xd0-0xd3.7 (4)
|
|
0x00d0| 42 00 00 00 | B... | incl_len: 66 0xd4-0xd7.7 (4)
|
|
0x00d0| 42 00 00 00 | B... | orig_len: 66 0xd8-0xdb.7 (4)
|
|
| | | packet: {} (ether8023_frame) 0xdc-0x11d.7 (66)
|
|
0x00d0| 00 c0 f0 2d| ...-| destination: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0xdc-0xe1.7 (6)
|
|
0x00e0|4a a3 |J. |
|
|
0x00e0| 00 0a 95 67 49 3c | ...gI< | source: "00:0a:95:67:49:3c" (0xa9567493c) 0xe2-0xe7.7 (6)
|
|
0x00e0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0xe8-0xe9.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0xea-0x11d.7 (52)
|
|
0x00e0| 45 | E | version: 4 0xea-0xea.3 (0.4)
|
|
0x00e0| 45 | E | ihl: 5 0xea.4-0xea.7 (0.4)
|
|
0x00e0| 00 | . | dscp: 0 0xeb-0xeb.5 (0.6)
|
|
0x00e0| 00 | . | ecn: 0 0xeb.6-0xeb.7 (0.2)
|
|
0x00e0| 00 34 | .4 | total_length: 52 0xec-0xed.7 (2)
|
|
0x00e0| f5 da| ..| identification: 62938 0xee-0xef.7 (2)
|
|
0x00f0|40 |@ | reserved: 0 0xf0-0xf0 (0.1)
|
|
0x00f0|40 |@ | dont_fragment: true 0xf0.1-0xf0.1 (0.1)
|
|
0x00f0|40 |@ | more_fragments: false 0xf0.2-0xf0.2 (0.1)
|
|
0x00f0|40 00 |@. | fragment_offset: 0 0xf0.3-0xf1.7 (1.5)
|
|
0x00f0| 40 | @ | ttl: 64 0xf2-0xf2.7 (1)
|
|
0x00f0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0xf3-0xf3.7 (1)
|
|
0x00f0| 39 95 | 9. | header_checksum: 0x3995 (valid) 0xf4-0xf5.7 (2)
|
|
0x00f0| c0 a8 45 02 | ..E. | source_ip: "192.168.69.2" (0xc0a84502) 0xf6-0xf9.7 (4)
|
|
0x00f0| c0 a8 45 01 | ..E. | destination_ip: "192.168.69.1" (0xc0a84501) 0xfa-0xfd.7 (4)
|
|
| | | data: {} (tcp_segment) 0xfe-0x11d.7 (32)
|
|
0x00f0| 85 0b| ..| source_port: 34059 0xfe-0xff.7 (2)
|
|
0x0100|00 50 |.P | destination_port: "http" (80) (World Wide Web HTTP) 0x100-0x101.7 (2)
|
|
0x0100| 8f f5 a2 33 | ...3 | sequence_number: 2415239731 0x102-0x105.7 (4)
|
|
0x0100| 96 18 93 27 | ...' | acknowledgment_number: 2518192935 0x106-0x109.7 (4)
|
|
0x0100| 80 | . | data_offset: 8 0x10a-0x10a.3 (0.4)
|
|
0x0100| 80 | . | reserved: 0 0x10a.4-0x10a.6 (0.3)
|
|
0x0100| 80 | . | ns: false 0x10a.7-0x10a.7 (0.1)
|
|
0x0100| 10 | . | cwr: false 0x10b-0x10b (0.1)
|
|
0x0100| 10 | . | ece: false 0x10b.1-0x10b.1 (0.1)
|
|
0x0100| 10 | . | urg: false 0x10b.2-0x10b.2 (0.1)
|
|
0x0100| 10 | . | ack: true 0x10b.3-0x10b.3 (0.1)
|
|
0x0100| 10 | . | psh: false 0x10b.4-0x10b.4 (0.1)
|
|
0x0100| 10 | . | rst: false 0x10b.5-0x10b.5 (0.1)
|
|
0x0100| 10 | . | syn: false 0x10b.6-0x10b.6 (0.1)
|
|
0x0100| 10 | . | fin: false 0x10b.7-0x10b.7 (0.1)
|
|
0x0100| 00 2e | .. | window_size: 46 0x10c-0x10d.7 (2)
|
|
0x0100| 73 fa| s.| checksum: 0x73fa 0x10e-0x10f.7 (2)
|
|
0x0110|00 00 |.. | urgent_pointer: 0 0x110-0x111.7 (2)
|
|
| | | options: [3] 0x112-0x11d.7 (12)
|
|
| | | [0]: option {} 0x112-0x112.7 (1)
|
|
0x0110| 01 | . | kind: "nop" (1) (No operation) 0x112-0x112.7 (1)
|
|
| | | [1]: option {} 0x113-0x113.7 (1)
|
|
0x0110| 01 | . | kind: "nop" (1) (No operation) 0x113-0x113.7 (1)
|
|
| | | [2]: option {} 0x114-0x11d.7 (10)
|
|
0x0110| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x114-0x114.7 (1)
|
|
0x0110| 0a | . | length: 10 0x115-0x115.7 (1)
|
|
0x0110| 77 e3 57 eb 19 c9 2c e4 | w.W...,. | data: raw bits 0x116-0x11d.7 (8)
|
|
| | | data: raw bits 0x11e-NA (0)
|
|
| | | capture_padding: raw bits 0x11e-NA (0)
|
|
| | | [3]: packet {} 0x11e-0x32c.7 (527)
|
|
0x0110| 3c d3| <.| ts_sec: 1099027260 0x11e-0x121.7 (4)
|
|
0x0120|81 41 |.A |
|
|
0x0120| 0a 25 06 00 | .%.. | ts_usec: 402698 0x122-0x125.7 (4)
|
|
0x0120| ff 01 00 00 | .... | incl_len: 511 0x126-0x129.7 (4)
|
|
0x0120| ff 01 00 00 | .... | orig_len: 511 0x12a-0x12d.7 (4)
|
|
| | | packet: {} (ether8023_frame) 0x12e-0x32c.7 (511)
|
|
0x0120| 00 c0| ..| destination: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x12e-0x133.7 (6)
|
|
0x0130|f0 2d 4a a3 |.-J. |
|
|
0x0130| 00 0a 95 67 49 3c | ...gI< | source: "00:0a:95:67:49:3c" (0xa9567493c) 0x134-0x139.7 (6)
|
|
0x0130| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x13a-0x13b.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0x13c-0x32c.7 (497)
|
|
0x0130| 45 | E | version: 4 0x13c-0x13c.3 (0.4)
|
|
0x0130| 45 | E | ihl: 5 0x13c.4-0x13c.7 (0.4)
|
|
0x0130| 00 | . | dscp: 0 0x13d-0x13d.5 (0.6)
|
|
0x0130| 00 | . | ecn: 0 0x13d.6-0x13d.7 (0.2)
|
|
0x0130| 01 f1| ..| total_length: 497 0x13e-0x13f.7 (2)
|
|
0x0140|f5 db |.. | identification: 62939 0x140-0x141.7 (2)
|
|
0x0140| 40 | @ | reserved: 0 0x142-0x142 (0.1)
|
|
0x0140| 40 | @ | dont_fragment: true 0x142.1-0x142.1 (0.1)
|
|
0x0140| 40 | @ | more_fragments: false 0x142.2-0x142.2 (0.1)
|
|
0x0140| 40 00 | @. | fragment_offset: 0 0x142.3-0x143.7 (1.5)
|
|
0x0140| 40 | @ | ttl: 64 0x144-0x144.7 (1)
|
|
0x0140| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x145-0x145.7 (1)
|
|
0x0140| 37 d7 | 7. | header_checksum: 0x37d7 (valid) 0x146-0x147.7 (2)
|
|
0x0140| c0 a8 45 02 | ..E. | source_ip: "192.168.69.2" (0xc0a84502) 0x148-0x14b.7 (4)
|
|
0x0140| c0 a8 45 01| ..E.| destination_ip: "192.168.69.1" (0xc0a84501) 0x14c-0x14f.7 (4)
|
|
| | | data: {} (tcp_segment) 0x150-0x32c.7 (477)
|
|
0x0150|85 0b |.. | source_port: 34059 0x150-0x151.7 (2)
|
|
0x0150| 00 50 | .P | destination_port: "http" (80) (World Wide Web HTTP) 0x152-0x153.7 (2)
|
|
0x0150| 8f f5 a2 33 | ...3 | sequence_number: 2415239731 0x154-0x157.7 (4)
|
|
0x0150| 96 18 93 27 | ...' | acknowledgment_number: 2518192935 0x158-0x15b.7 (4)
|
|
0x0150| 80 | . | data_offset: 8 0x15c-0x15c.3 (0.4)
|
|
0x0150| 80 | . | reserved: 0 0x15c.4-0x15c.6 (0.3)
|
|
0x0150| 80 | . | ns: false 0x15c.7-0x15c.7 (0.1)
|
|
0x0150| 18 | . | cwr: false 0x15d-0x15d (0.1)
|
|
0x0150| 18 | . | ece: false 0x15d.1-0x15d.1 (0.1)
|
|
0x0150| 18 | . | urg: false 0x15d.2-0x15d.2 (0.1)
|
|
0x0150| 18 | . | ack: true 0x15d.3-0x15d.3 (0.1)
|
|
0x0150| 18 | . | psh: true 0x15d.4-0x15d.4 (0.1)
|
|
0x0150| 18 | . | rst: false 0x15d.5-0x15d.5 (0.1)
|
|
0x0150| 18 | . | syn: false 0x15d.6-0x15d.6 (0.1)
|
|
0x0150| 18 | . | fin: false 0x15d.7-0x15d.7 (0.1)
|
|
0x0150| 00 2e| ..| window_size: 46 0x15e-0x15f.7 (2)
|
|
0x0160|16 ca |.. | checksum: 0x16ca 0x160-0x161.7 (2)
|
|
0x0160| 00 00 | .. | urgent_pointer: 0 0x162-0x163.7 (2)
|
|
| | | options: [3] 0x164-0x16f.7 (12)
|
|
| | | [0]: option {} 0x164-0x164.7 (1)
|
|
0x0160| 01 | . | kind: "nop" (1) (No operation) 0x164-0x164.7 (1)
|
|
| | | [1]: option {} 0x165-0x165.7 (1)
|
|
0x0160| 01 | . | kind: "nop" (1) (No operation) 0x165-0x165.7 (1)
|
|
| | | [2]: option {} 0x166-0x16f.7 (10)
|
|
0x0160| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x166-0x166.7 (1)
|
|
0x0160| 0a | . | length: 10 0x167-0x167.7 (1)
|
|
0x0160| 77 e3 57 eb 19 c9 2c e4| w.W...,.| data: raw bits 0x168-0x16f.7 (8)
|
|
0x0170|47 45 54 20 2f 74 65 73 74 2f 65 74 68 65 72 65|GET /test/ethere| data: raw bits 0x170-0x32c.7 (445)
|
|
* |until 0x32c.7 (445) | |
|
|
| | | capture_padding: raw bits 0x32d-NA (0)
|
|
| | | [4]: packet {} 0x32d-0x37e.7 (82)
|
|
0x0320| 3c d3 81| <..| ts_sec: 1099027260 0x32d-0x330.7 (4)
|
|
0x0330|41 |A |
|
|
0x0330| 3a 25 06 00 | :%.. | ts_usec: 402746 0x331-0x334.7 (4)
|
|
0x0330| 42 00 00 00 | B... | incl_len: 66 0x335-0x338.7 (4)
|
|
0x0330| 42 00 00 00 | B... | orig_len: 66 0x339-0x33c.7 (4)
|
|
| | | packet: {} (ether8023_frame) 0x33d-0x37e.7 (66)
|
|
0x0330| 00 0a 95| ...| destination: "00:0a:95:67:49:3c" (0xa9567493c) 0x33d-0x342.7 (6)
|
|
0x0340|67 49 3c |gI< |
|
|
0x0340| 00 c0 f0 2d 4a a3 | ...-J. | source: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x343-0x348.7 (6)
|
|
0x0340| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x349-0x34a.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0x34b-0x37e.7 (52)
|
|
0x0340| 45 | E | version: 4 0x34b-0x34b.3 (0.4)
|
|
0x0340| 45 | E | ihl: 5 0x34b.4-0x34b.7 (0.4)
|
|
0x0340| 00 | . | dscp: 0 0x34c-0x34c.5 (0.6)
|
|
0x0340| 00 | . | ecn: 0 0x34c.6-0x34c.7 (0.2)
|
|
0x0340| 00 34 | .4 | total_length: 52 0x34d-0x34e.7 (2)
|
|
0x0340| bf| .| identification: 49091 0x34f-0x350.7 (2)
|
|
0x0350|c3 |. |
|
|
0x0350| 40 | @ | reserved: 0 0x351-0x351 (0.1)
|
|
0x0350| 40 | @ | dont_fragment: true 0x351.1-0x351.1 (0.1)
|
|
0x0350| 40 | @ | more_fragments: false 0x351.2-0x351.2 (0.1)
|
|
0x0350| 40 00 | @. | fragment_offset: 0 0x351.3-0x352.7 (1.5)
|
|
0x0350| 40 | @ | ttl: 64 0x353-0x353.7 (1)
|
|
0x0350| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x354-0x354.7 (1)
|
|
0x0350| 6f ac | o. | header_checksum: 0x6fac (valid) 0x355-0x356.7 (2)
|
|
0x0350| c0 a8 45 01 | ..E. | source_ip: "192.168.69.1" (0xc0a84501) 0x357-0x35a.7 (4)
|
|
0x0350| c0 a8 45 02 | ..E. | destination_ip: "192.168.69.2" (0xc0a84502) 0x35b-0x35e.7 (4)
|
|
| | | data: {} (tcp_segment) 0x35f-0x37e.7 (32)
|
|
0x0350| 00| .| source_port: "http" (80) (World Wide Web HTTP) 0x35f-0x360.7 (2)
|
|
0x0360|50 |P |
|
|
0x0360| 85 0b | .. | destination_port: 34059 0x361-0x362.7 (2)
|
|
0x0360| 96 18 93 27 | ...' | sequence_number: 2518192935 0x363-0x366.7 (4)
|
|
0x0360| 8f f5 a3 f0 | .... | acknowledgment_number: 2415240176 0x367-0x36a.7 (4)
|
|
0x0360| 80 | . | data_offset: 8 0x36b-0x36b.3 (0.4)
|
|
0x0360| 80 | . | reserved: 0 0x36b.4-0x36b.6 (0.3)
|
|
0x0360| 80 | . | ns: false 0x36b.7-0x36b.7 (0.1)
|
|
0x0360| 10 | . | cwr: false 0x36c-0x36c (0.1)
|
|
0x0360| 10 | . | ece: false 0x36c.1-0x36c.1 (0.1)
|
|
0x0360| 10 | . | urg: false 0x36c.2-0x36c.2 (0.1)
|
|
0x0360| 10 | . | ack: true 0x36c.3-0x36c.3 (0.1)
|
|
0x0360| 10 | . | psh: false 0x36c.4-0x36c.4 (0.1)
|
|
0x0360| 10 | . | rst: false 0x36c.5-0x36c.5 (0.1)
|
|
0x0360| 10 | . | syn: false 0x36c.6-0x36c.6 (0.1)
|
|
0x0360| 10 | . | fin: false 0x36c.7-0x36c.7 (0.1)
|
|
0x0360| 19 20 | . | window_size: 6432 0x36d-0x36e.7 (2)
|
|
0x0360| 59| Y| checksum: 0x594b 0x36f-0x370.7 (2)
|
|
0x0370|4b |K |
|
|
0x0370| 00 00 | .. | urgent_pointer: 0 0x371-0x372.7 (2)
|
|
| | | options: [3] 0x373-0x37e.7 (12)
|
|
| | | [0]: option {} 0x373-0x373.7 (1)
|
|
0x0370| 01 | . | kind: "nop" (1) (No operation) 0x373-0x373.7 (1)
|
|
| | | [1]: option {} 0x374-0x374.7 (1)
|
|
0x0370| 01 | . | kind: "nop" (1) (No operation) 0x374-0x374.7 (1)
|
|
| | | [2]: option {} 0x375-0x37e.7 (10)
|
|
0x0370| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x375-0x375.7 (1)
|
|
0x0370| 0a | . | length: 10 0x376-0x376.7 (1)
|
|
0x0370| 19 c9 2c e4 77 e3 57 eb | ..,.w.W. | data: raw bits 0x377-0x37e.7 (8)
|
|
| | | data: raw bits 0x37f-NA (0)
|
|
| | | capture_padding: raw bits 0x37f-NA (0)
|
|
| | | [5]: packet {} 0x37f-0x562.7 (484)
|
|
0x0370| 3c| <| ts_sec: 1099027260 0x37f-0x382.7 (4)
|
|
0x0380|d3 81 41 |..A |
|
|
0x0380| bc 77 06 00 | .w.. | ts_usec: 423868 0x383-0x386.7 (4)
|
|
0x0380| d4 01 00 00 | .... | incl_len: 468 0x387-0x38a.7 (4)
|
|
0x0380| d4 01 00 00 | .... | orig_len: 468 0x38b-0x38e.7 (4)
|
|
| | | packet: {} (ether8023_frame) 0x38f-0x562.7 (468)
|
|
0x0380| 00| .| destination: "00:0a:95:67:49:3c" (0xa9567493c) 0x38f-0x394.7 (6)
|
|
0x0390|0a 95 67 49 3c |..gI< |
|
|
0x0390| 00 c0 f0 2d 4a a3 | ...-J. | source: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x395-0x39a.7 (6)
|
|
0x0390| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x39b-0x39c.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0x39d-0x562.7 (454)
|
|
0x0390| 45 | E | version: 4 0x39d-0x39d.3 (0.4)
|
|
0x0390| 45 | E | ihl: 5 0x39d.4-0x39d.7 (0.4)
|
|
0x0390| 00 | . | dscp: 0 0x39e-0x39e.5 (0.6)
|
|
0x0390| 00 | . | ecn: 0 0x39e.6-0x39e.7 (0.2)
|
|
0x0390| 01| .| total_length: 454 0x39f-0x3a0.7 (2)
|
|
0x03a0|c6 |. |
|
|
0x03a0| bf c4 | .. | identification: 49092 0x3a1-0x3a2.7 (2)
|
|
0x03a0| 40 | @ | reserved: 0 0x3a3-0x3a3 (0.1)
|
|
0x03a0| 40 | @ | dont_fragment: true 0x3a3.1-0x3a3.1 (0.1)
|
|
0x03a0| 40 | @ | more_fragments: false 0x3a3.2-0x3a3.2 (0.1)
|
|
0x03a0| 40 00 | @. | fragment_offset: 0 0x3a3.3-0x3a4.7 (1.5)
|
|
0x03a0| 40 | @ | ttl: 64 0x3a5-0x3a5.7 (1)
|
|
0x03a0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x3a6-0x3a6.7 (1)
|
|
0x03a0| 6e 19 | n. | header_checksum: 0x6e19 (valid) 0x3a7-0x3a8.7 (2)
|
|
0x03a0| c0 a8 45 01 | ..E. | source_ip: "192.168.69.1" (0xc0a84501) 0x3a9-0x3ac.7 (4)
|
|
0x03a0| c0 a8 45| ..E| destination_ip: "192.168.69.2" (0xc0a84502) 0x3ad-0x3b0.7 (4)
|
|
0x03b0|02 |. |
|
|
| | | data: {} (tcp_segment) 0x3b1-0x562.7 (434)
|
|
0x03b0| 00 50 | .P | source_port: "http" (80) (World Wide Web HTTP) 0x3b1-0x3b2.7 (2)
|
|
0x03b0| 85 0b | .. | destination_port: 34059 0x3b3-0x3b4.7 (2)
|
|
0x03b0| 96 18 93 27 | ...' | sequence_number: 2518192935 0x3b5-0x3b8.7 (4)
|
|
0x03b0| 8f f5 a3 f0 | .... | acknowledgment_number: 2415240176 0x3b9-0x3bc.7 (4)
|
|
0x03b0| 80 | . | data_offset: 8 0x3bd-0x3bd.3 (0.4)
|
|
0x03b0| 80 | . | reserved: 0 0x3bd.4-0x3bd.6 (0.3)
|
|
0x03b0| 80 | . | ns: false 0x3bd.7-0x3bd.7 (0.1)
|
|
0x03b0| 18 | . | cwr: false 0x3be-0x3be (0.1)
|
|
0x03b0| 18 | . | ece: false 0x3be.1-0x3be.1 (0.1)
|
|
0x03b0| 18 | . | urg: false 0x3be.2-0x3be.2 (0.1)
|
|
0x03b0| 18 | . | ack: true 0x3be.3-0x3be.3 (0.1)
|
|
0x03b0| 18 | . | psh: true 0x3be.4-0x3be.4 (0.1)
|
|
0x03b0| 18 | . | rst: false 0x3be.5-0x3be.5 (0.1)
|
|
0x03b0| 18 | . | syn: false 0x3be.6-0x3be.6 (0.1)
|
|
0x03b0| 18 | . | fin: false 0x3be.7-0x3be.7 (0.1)
|
|
0x03b0| 19| .| window_size: 6432 0x3bf-0x3c0.7 (2)
|
|
0x03c0|20 | |
|
|
0x03c0| 2e ef | .. | checksum: 0x2eef 0x3c1-0x3c2.7 (2)
|
|
0x03c0| 00 00 | .. | urgent_pointer: 0 0x3c3-0x3c4.7 (2)
|
|
| | | options: [3] 0x3c5-0x3d0.7 (12)
|
|
| | | [0]: option {} 0x3c5-0x3c5.7 (1)
|
|
0x03c0| 01 | . | kind: "nop" (1) (No operation) 0x3c5-0x3c5.7 (1)
|
|
| | | [1]: option {} 0x3c6-0x3c6.7 (1)
|
|
0x03c0| 01 | . | kind: "nop" (1) (No operation) 0x3c6-0x3c6.7 (1)
|
|
| | | [2]: option {} 0x3c7-0x3d0.7 (10)
|
|
0x03c0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x3c7-0x3c7.7 (1)
|
|
0x03c0| 0a | . | length: 10 0x3c8-0x3c8.7 (1)
|
|
0x03c0| 19 c9 2c e6 77 e3 57| ..,.w.W| data: raw bits 0x3c9-0x3d0.7 (8)
|
|
0x03d0|eb |. |
|
|
0x03d0| 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b| HTTP/1.1 200 OK| data: raw bits 0x3d1-0x562.7 (402)
|
|
0x03e0|0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 39 20|..Date: Fri, 29 |
|
|
* |until 0x562.7 (402) | |
|
|
| | | capture_padding: raw bits 0x563-NA (0)
|
|
| | | [6]: packet {} 0x563-0x5b4.7 (82)
|
|
0x0560| 3c d3 81 41 | <..A | ts_sec: 1099027260 0x563-0x566.7 (4)
|
|
0x0560| 6d 78 06 00 | mx.. | ts_usec: 424045 0x567-0x56a.7 (4)
|
|
0x0560| 42 00 00 00 | B... | incl_len: 66 0x56b-0x56e.7 (4)
|
|
0x0560| 42| B| orig_len: 66 0x56f-0x572.7 (4)
|
|
0x0570|00 00 00 |... |
|
|
| | | packet: {} (ether8023_frame) 0x573-0x5b4.7 (66)
|
|
0x0570| 00 c0 f0 2d 4a a3 | ...-J. | destination: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x573-0x578.7 (6)
|
|
0x0570| 00 0a 95 67 49 3c | ...gI< | source: "00:0a:95:67:49:3c" (0xa9567493c) 0x579-0x57e.7 (6)
|
|
0x0570| 08| .| ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x57f-0x580.7 (2)
|
|
0x0580|00 |. |
|
|
| | | packet: {} (ipv4_packet) 0x581-0x5b4.7 (52)
|
|
0x0580| 45 | E | version: 4 0x581-0x581.3 (0.4)
|
|
0x0580| 45 | E | ihl: 5 0x581.4-0x581.7 (0.4)
|
|
0x0580| 00 | . | dscp: 0 0x582-0x582.5 (0.6)
|
|
0x0580| 00 | . | ecn: 0 0x582.6-0x582.7 (0.2)
|
|
0x0580| 00 34 | .4 | total_length: 52 0x583-0x584.7 (2)
|
|
0x0580| f5 dc | .. | identification: 62940 0x585-0x586.7 (2)
|
|
0x0580| 40 | @ | reserved: 0 0x587-0x587 (0.1)
|
|
0x0580| 40 | @ | dont_fragment: true 0x587.1-0x587.1 (0.1)
|
|
0x0580| 40 | @ | more_fragments: false 0x587.2-0x587.2 (0.1)
|
|
0x0580| 40 00 | @. | fragment_offset: 0 0x587.3-0x588.7 (1.5)
|
|
0x0580| 40 | @ | ttl: 64 0x589-0x589.7 (1)
|
|
0x0580| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x58a-0x58a.7 (1)
|
|
0x0580| 39 93 | 9. | header_checksum: 0x3993 (valid) 0x58b-0x58c.7 (2)
|
|
0x0580| c0 a8 45| ..E| source_ip: "192.168.69.2" (0xc0a84502) 0x58d-0x590.7 (4)
|
|
0x0590|02 |. |
|
|
0x0590| c0 a8 45 01 | ..E. | destination_ip: "192.168.69.1" (0xc0a84501) 0x591-0x594.7 (4)
|
|
| | | data: {} (tcp_segment) 0x595-0x5b4.7 (32)
|
|
0x0590| 85 0b | .. | source_port: 34059 0x595-0x596.7 (2)
|
|
0x0590| 00 50 | .P | destination_port: "http" (80) (World Wide Web HTTP) 0x597-0x598.7 (2)
|
|
0x0590| 8f f5 a3 f0 | .... | sequence_number: 2415240176 0x599-0x59c.7 (4)
|
|
0x0590| 96 18 94| ...| acknowledgment_number: 2518193337 0x59d-0x5a0.7 (4)
|
|
0x05a0|b9 |. |
|
|
0x05a0| 80 | . | data_offset: 8 0x5a1-0x5a1.3 (0.4)
|
|
0x05a0| 80 | . | reserved: 0 0x5a1.4-0x5a1.6 (0.3)
|
|
0x05a0| 80 | . | ns: false 0x5a1.7-0x5a1.7 (0.1)
|
|
0x05a0| 10 | . | cwr: false 0x5a2-0x5a2 (0.1)
|
|
0x05a0| 10 | . | ece: false 0x5a2.1-0x5a2.1 (0.1)
|
|
0x05a0| 10 | . | urg: false 0x5a2.2-0x5a2.2 (0.1)
|
|
0x05a0| 10 | . | ack: true 0x5a2.3-0x5a2.3 (0.1)
|
|
0x05a0| 10 | . | psh: false 0x5a2.4-0x5a2.4 (0.1)
|
|
0x05a0| 10 | . | rst: false 0x5a2.5-0x5a2.5 (0.1)
|
|
0x05a0| 10 | . | syn: false 0x5a2.6-0x5a2.6 (0.1)
|
|
0x05a0| 10 | . | fin: false 0x5a2.7-0x5a2.7 (0.1)
|
|
0x05a0| 00 36 | .6 | window_size: 54 0x5a3-0x5a4.7 (2)
|
|
0x05a0| 70 8b | p. | checksum: 0x708b 0x5a5-0x5a6.7 (2)
|
|
0x05a0| 00 00 | .. | urgent_pointer: 0 0x5a7-0x5a8.7 (2)
|
|
| | | options: [3] 0x5a9-0x5b4.7 (12)
|
|
| | | [0]: option {} 0x5a9-0x5a9.7 (1)
|
|
0x05a0| 01 | . | kind: "nop" (1) (No operation) 0x5a9-0x5a9.7 (1)
|
|
| | | [1]: option {} 0x5aa-0x5aa.7 (1)
|
|
0x05a0| 01 | . | kind: "nop" (1) (No operation) 0x5aa-0x5aa.7 (1)
|
|
| | | [2]: option {} 0x5ab-0x5b4.7 (10)
|
|
0x05a0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x5ab-0x5ab.7 (1)
|
|
0x05a0| 0a | . | length: 10 0x5ac-0x5ac.7 (1)
|
|
0x05a0| 77 e3 58| w.X| data: raw bits 0x5ad-0x5b4.7 (8)
|
|
0x05b0|01 19 c9 2c e6 |...,. |
|
|
| | | data: raw bits 0x5b5-NA (0)
|
|
| | | capture_padding: raw bits 0x5b5-NA (0)
|
|
| | | [7]: packet {} 0x5b5-0x606.7 (82)
|
|
0x05b0| 3c d3 81 41 | <..A | ts_sec: 1099027260 0x5b5-0x5b8.7 (4)
|
|
0x05b0| eb 78 06 00 | .x.. | ts_usec: 424171 0x5b9-0x5bc.7 (4)
|
|
0x05b0| 42 00 00| B..| incl_len: 66 0x5bd-0x5c0.7 (4)
|
|
0x05c0|00 |. |
|
|
0x05c0| 42 00 00 00 | B... | orig_len: 66 0x5c1-0x5c4.7 (4)
|
|
| | | packet: {} (ether8023_frame) 0x5c5-0x606.7 (66)
|
|
0x05c0| 00 0a 95 67 49 3c | ...gI< | destination: "00:0a:95:67:49:3c" (0xa9567493c) 0x5c5-0x5ca.7 (6)
|
|
0x05c0| 00 c0 f0 2d 4a| ...-J| source: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x5cb-0x5d0.7 (6)
|
|
0x05d0|a3 |. |
|
|
0x05d0| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x5d1-0x5d2.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0x5d3-0x606.7 (52)
|
|
0x05d0| 45 | E | version: 4 0x5d3-0x5d3.3 (0.4)
|
|
0x05d0| 45 | E | ihl: 5 0x5d3.4-0x5d3.7 (0.4)
|
|
0x05d0| 00 | . | dscp: 0 0x5d4-0x5d4.5 (0.6)
|
|
0x05d0| 00 | . | ecn: 0 0x5d4.6-0x5d4.7 (0.2)
|
|
0x05d0| 00 34 | .4 | total_length: 52 0x5d5-0x5d6.7 (2)
|
|
0x05d0| bf c5 | .. | identification: 49093 0x5d7-0x5d8.7 (2)
|
|
0x05d0| 40 | @ | reserved: 0 0x5d9-0x5d9 (0.1)
|
|
0x05d0| 40 | @ | dont_fragment: true 0x5d9.1-0x5d9.1 (0.1)
|
|
0x05d0| 40 | @ | more_fragments: false 0x5d9.2-0x5d9.2 (0.1)
|
|
0x05d0| 40 00 | @. | fragment_offset: 0 0x5d9.3-0x5da.7 (1.5)
|
|
0x05d0| 40 | @ | ttl: 64 0x5db-0x5db.7 (1)
|
|
0x05d0| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x5dc-0x5dc.7 (1)
|
|
0x05d0| 6f aa | o. | header_checksum: 0x6faa (valid) 0x5dd-0x5de.7 (2)
|
|
0x05d0| c0| .| source_ip: "192.168.69.1" (0xc0a84501) 0x5df-0x5e2.7 (4)
|
|
0x05e0|a8 45 01 |.E. |
|
|
0x05e0| c0 a8 45 02 | ..E. | destination_ip: "192.168.69.2" (0xc0a84502) 0x5e3-0x5e6.7 (4)
|
|
| | | data: {} (tcp_segment) 0x5e7-0x606.7 (32)
|
|
0x05e0| 00 50 | .P | source_port: "http" (80) (World Wide Web HTTP) 0x5e7-0x5e8.7 (2)
|
|
0x05e0| 85 0b | .. | destination_port: 34059 0x5e9-0x5ea.7 (2)
|
|
0x05e0| 96 18 94 b9 | .... | sequence_number: 2518193337 0x5eb-0x5ee.7 (4)
|
|
0x05e0| 8f| .| acknowledgment_number: 2415240176 0x5ef-0x5f2.7 (4)
|
|
0x05f0|f5 a3 f0 |... |
|
|
0x05f0| 80 | . | data_offset: 8 0x5f3-0x5f3.3 (0.4)
|
|
0x05f0| 80 | . | reserved: 0 0x5f3.4-0x5f3.6 (0.3)
|
|
0x05f0| 80 | . | ns: false 0x5f3.7-0x5f3.7 (0.1)
|
|
0x05f0| 11 | . | cwr: false 0x5f4-0x5f4 (0.1)
|
|
0x05f0| 11 | . | ece: false 0x5f4.1-0x5f4.1 (0.1)
|
|
0x05f0| 11 | . | urg: false 0x5f4.2-0x5f4.2 (0.1)
|
|
0x05f0| 11 | . | ack: true 0x5f4.3-0x5f4.3 (0.1)
|
|
0x05f0| 11 | . | psh: false 0x5f4.4-0x5f4.4 (0.1)
|
|
0x05f0| 11 | . | rst: false 0x5f4.5-0x5f4.5 (0.1)
|
|
0x05f0| 11 | . | syn: false 0x5f4.6-0x5f4.6 (0.1)
|
|
0x05f0| 11 | . | fin: true 0x5f4.7-0x5f4.7 (0.1)
|
|
0x05f0| 19 20 | . | window_size: 6432 0x5f5-0x5f6.7 (2)
|
|
0x05f0| 57 a0 | W. | checksum: 0x57a0 0x5f7-0x5f8.7 (2)
|
|
0x05f0| 00 00 | .. | urgent_pointer: 0 0x5f9-0x5fa.7 (2)
|
|
| | | options: [3] 0x5fb-0x606.7 (12)
|
|
| | | [0]: option {} 0x5fb-0x5fb.7 (1)
|
|
0x05f0| 01 | . | kind: "nop" (1) (No operation) 0x5fb-0x5fb.7 (1)
|
|
| | | [1]: option {} 0x5fc-0x5fc.7 (1)
|
|
0x05f0| 01 | . | kind: "nop" (1) (No operation) 0x5fc-0x5fc.7 (1)
|
|
| | | [2]: option {} 0x5fd-0x606.7 (10)
|
|
0x05f0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x5fd-0x5fd.7 (1)
|
|
0x05f0| 0a | . | length: 10 0x5fe-0x5fe.7 (1)
|
|
0x05f0| 19| .| data: raw bits 0x5ff-0x606.7 (8)
|
|
0x0600|c9 2c e6 77 e3 58 01 |.,.w.X. |
|
|
| | | data: raw bits 0x607-NA (0)
|
|
| | | capture_padding: raw bits 0x607-NA (0)
|
|
| | | [8]: packet {} 0x607-0x658.7 (82)
|
|
0x0600| 3c d3 81 41 | <..A | ts_sec: 1099027260 0x607-0x60a.7 (4)
|
|
0x0600| 85 7c 06 00 | .|.. | ts_usec: 425093 0x60b-0x60e.7 (4)
|
|
0x0600| 42| B| incl_len: 66 0x60f-0x612.7 (4)
|
|
0x0610|00 00 00 |... |
|
|
0x0610| 42 00 00 00 | B... | orig_len: 66 0x613-0x616.7 (4)
|
|
| | | packet: {} (ether8023_frame) 0x617-0x658.7 (66)
|
|
0x0610| 00 c0 f0 2d 4a a3 | ...-J. | destination: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x617-0x61c.7 (6)
|
|
0x0610| 00 0a 95| ...| source: "00:0a:95:67:49:3c" (0xa9567493c) 0x61d-0x622.7 (6)
|
|
0x0620|67 49 3c |gI< |
|
|
0x0620| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x623-0x624.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0x625-0x658.7 (52)
|
|
0x0620| 45 | E | version: 4 0x625-0x625.3 (0.4)
|
|
0x0620| 45 | E | ihl: 5 0x625.4-0x625.7 (0.4)
|
|
0x0620| 00 | . | dscp: 0 0x626-0x626.5 (0.6)
|
|
0x0620| 00 | . | ecn: 0 0x626.6-0x626.7 (0.2)
|
|
0x0620| 00 34 | .4 | total_length: 52 0x627-0x628.7 (2)
|
|
0x0620| f5 dd | .. | identification: 62941 0x629-0x62a.7 (2)
|
|
0x0620| 40 | @ | reserved: 0 0x62b-0x62b (0.1)
|
|
0x0620| 40 | @ | dont_fragment: true 0x62b.1-0x62b.1 (0.1)
|
|
0x0620| 40 | @ | more_fragments: false 0x62b.2-0x62b.2 (0.1)
|
|
0x0620| 40 00 | @. | fragment_offset: 0 0x62b.3-0x62c.7 (1.5)
|
|
0x0620| 40 | @ | ttl: 64 0x62d-0x62d.7 (1)
|
|
0x0620| 06 | . | protocol: "tcp" (6) (Transmission control protocol) 0x62e-0x62e.7 (1)
|
|
0x0620| 39| 9| header_checksum: 0x3992 (valid) 0x62f-0x630.7 (2)
|
|
0x0630|92 |. |
|
|
0x0630| c0 a8 45 02 | ..E. | source_ip: "192.168.69.2" (0xc0a84502) 0x631-0x634.7 (4)
|
|
0x0630| c0 a8 45 01 | ..E. | destination_ip: "192.168.69.1" (0xc0a84501) 0x635-0x638.7 (4)
|
|
| | | data: {} (tcp_segment) 0x639-0x658.7 (32)
|
|
0x0630| 85 0b | .. | source_port: 34059 0x639-0x63a.7 (2)
|
|
0x0630| 00 50 | .P | destination_port: "http" (80) (World Wide Web HTTP) 0x63b-0x63c.7 (2)
|
|
0x0630| 8f f5 a3| ...| sequence_number: 2415240176 0x63d-0x640.7 (4)
|
|
0x0640|f0 |. |
|
|
0x0640| 96 18 94 ba | .... | acknowledgment_number: 2518193338 0x641-0x644.7 (4)
|
|
0x0640| 80 | . | data_offset: 8 0x645-0x645.3 (0.4)
|
|
0x0640| 80 | . | reserved: 0 0x645.4-0x645.6 (0.3)
|
|
0x0640| 80 | . | ns: false 0x645.7-0x645.7 (0.1)
|
|
0x0640| 11 | . | cwr: false 0x646-0x646 (0.1)
|
|
0x0640| 11 | . | ece: false 0x646.1-0x646.1 (0.1)
|
|
0x0640| 11 | . | urg: false 0x646.2-0x646.2 (0.1)
|
|
0x0640| 11 | . | ack: true 0x646.3-0x646.3 (0.1)
|
|
0x0640| 11 | . | psh: false 0x646.4-0x646.4 (0.1)
|
|
0x0640| 11 | . | rst: false 0x646.5-0x646.5 (0.1)
|
|
0x0640| 11 | . | syn: false 0x646.6-0x646.6 (0.1)
|
|
0x0640| 11 | . | fin: true 0x646.7-0x646.7 (0.1)
|
|
0x0640| 00 36 | .6 | window_size: 54 0x647-0x648.7 (2)
|
|
0x0640| 70 88 | p. | checksum: 0x7088 0x649-0x64a.7 (2)
|
|
0x0640| 00 00 | .. | urgent_pointer: 0 0x64b-0x64c.7 (2)
|
|
| | | options: [3] 0x64d-0x658.7 (12)
|
|
| | | [0]: option {} 0x64d-0x64d.7 (1)
|
|
0x0640| 01 | . | kind: "nop" (1) (No operation) 0x64d-0x64d.7 (1)
|
|
| | | [1]: option {} 0x64e-0x64e.7 (1)
|
|
0x0640| 01 | . | kind: "nop" (1) (No operation) 0x64e-0x64e.7 (1)
|
|
| | | [2]: option {} 0x64f-0x658.7 (10)
|
|
0x0640| 08| .| kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x64f-0x64f.7 (1)
|
|
0x0650|0a |. | length: 10 0x650-0x650.7 (1)
|
|
0x0650| 77 e3 58 02 19 c9 2c e6 | w.X...,. | data: raw bits 0x651-0x658.7 (8)
|
|
| | | data: raw bits 0x659-NA (0)
|
|
| | | capture_padding: raw bits 0x659-NA (0)
|
|
| | | [9]: packet {} 0x659-0x6aa.7 (82)
|
|
0x0650| 3c d3 81 41 | <..A | ts_sec: 1099027260 0x659-0x65c.7 (4)
|
|
0x0650| ab 7c 06| .|.| ts_usec: 425131 0x65d-0x660.7 (4)
|
|
0x0660|00 |. |
|
|
0x0660| 42 00 00 00 | B... | incl_len: 66 0x661-0x664.7 (4)
|
|
0x0660| 42 00 00 00 | B... | orig_len: 66 0x665-0x668.7 (4)
|
|
| | | packet: {} (ether8023_frame) 0x669-0x6aa.7 (66)
|
|
0x0660| 00 0a 95 67 49 3c | ...gI< | destination: "00:0a:95:67:49:3c" (0xa9567493c) 0x669-0x66e.7 (6)
|
|
0x0660| 00| .| source: "00:c0:f0:2d:4a:a3" (0xc0f02d4aa3) 0x66f-0x674.7 (6)
|
|
0x0670|c0 f0 2d 4a a3 |..-J. |
|
|
0x0670| 08 00 | .. | ether_type: "ipv4" (0x800) (Internet Protocol version 4) 0x675-0x676.7 (2)
|
|
| | | packet: {} (ipv4_packet) 0x677-0x6aa.7 (52)
|
|
0x0670| 45 | E | version: 4 0x677-0x677.3 (0.4)
|
|
0x0670| 45 | E | ihl: 5 0x677.4-0x677.7 (0.4)
|
|
0x0670| 00 | . | dscp: 0 0x678-0x678.5 (0.6)
|
|
0x0670| 00 | . | ecn: 0 0x678.6-0x678.7 (0.2)
|
|
0x0670| 00 34 | .4 | total_length: 52 0x679-0x67a.7 (2)
|
|
0x0670| bf c6 | .. | identification: 49094 0x67b-0x67c.7 (2)
|
|
0x0670| 40 | @ | reserved: 0 0x67d-0x67d (0.1)
|
|
0x0670| 40 | @ | dont_fragment: true 0x67d.1-0x67d.1 (0.1)
|
|
0x0670| 40 | @ | more_fragments: false 0x67d.2-0x67d.2 (0.1)
|
|
0x0670| 40 00 | @. | fragment_offset: 0 0x67d.3-0x67e.7 (1.5)
|
|
0x0670| 40| @| ttl: 64 0x67f-0x67f.7 (1)
|
|
0x0680|06 |. | protocol: "tcp" (6) (Transmission control protocol) 0x680-0x680.7 (1)
|
|
0x0680| 6f a9 | o. | header_checksum: 0x6fa9 (valid) 0x681-0x682.7 (2)
|
|
0x0680| c0 a8 45 01 | ..E. | source_ip: "192.168.69.1" (0xc0a84501) 0x683-0x686.7 (4)
|
|
0x0680| c0 a8 45 02 | ..E. | destination_ip: "192.168.69.2" (0xc0a84502) 0x687-0x68a.7 (4)
|
|
| | | data: {} (tcp_segment) 0x68b-0x6aa.7 (32)
|
|
0x0680| 00 50 | .P | source_port: "http" (80) (World Wide Web HTTP) 0x68b-0x68c.7 (2)
|
|
0x0680| 85 0b | .. | destination_port: 34059 0x68d-0x68e.7 (2)
|
|
0x0680| 96| .| sequence_number: 2518193338 0x68f-0x692.7 (4)
|
|
0x0690|18 94 ba |... |
|
|
0x0690| 8f f5 a3 f1 | .... | acknowledgment_number: 2415240177 0x693-0x696.7 (4)
|
|
0x0690| 80 | . | data_offset: 8 0x697-0x697.3 (0.4)
|
|
0x0690| 80 | . | reserved: 0 0x697.4-0x697.6 (0.3)
|
|
0x0690| 80 | . | ns: false 0x697.7-0x697.7 (0.1)
|
|
0x0690| 10 | . | cwr: false 0x698-0x698 (0.1)
|
|
0x0690| 10 | . | ece: false 0x698.1-0x698.1 (0.1)
|
|
0x0690| 10 | . | urg: false 0x698.2-0x698.2 (0.1)
|
|
0x0690| 10 | . | ack: true 0x698.3-0x698.3 (0.1)
|
|
0x0690| 10 | . | psh: false 0x698.4-0x698.4 (0.1)
|
|
0x0690| 10 | . | rst: false 0x698.5-0x698.5 (0.1)
|
|
0x0690| 10 | . | syn: false 0x698.6-0x698.6 (0.1)
|
|
0x0690| 10 | . | fin: false 0x698.7-0x698.7 (0.1)
|
|
0x0690| 19 20 | . | window_size: 6432 0x699-0x69a.7 (2)
|
|
0x0690| 57 9e | W. | checksum: 0x579e 0x69b-0x69c.7 (2)
|
|
0x0690| 00 00 | .. | urgent_pointer: 0 0x69d-0x69e.7 (2)
|
|
| | | options: [3] 0x69f-0x6aa.7 (12)
|
|
| | | [0]: option {} 0x69f-0x69f.7 (1)
|
|
0x0690| 01| .| kind: "nop" (1) (No operation) 0x69f-0x69f.7 (1)
|
|
| | | [1]: option {} 0x6a0-0x6a0.7 (1)
|
|
0x06a0|01 |. | kind: "nop" (1) (No operation) 0x6a0-0x6a0.7 (1)
|
|
| | | [2]: option {} 0x6a1-0x6aa.7 (10)
|
|
0x06a0| 08 | . | kind: "timestamp" (8) (Timestamp and echo of previous timestamp) 0x6a1-0x6a1.7 (1)
|
|
0x06a0| 0a | . | length: 10 0x6a2-0x6a2.7 (1)
|
|
0x06a0| 19 c9 2c e6 77 e3 58 02| | ..,.w.X.| | data: raw bits 0x6a3-0x6aa.7 (8)
|
|
| | | data: raw bits 0x6ab-NA (0)
|
|
| | | capture_padding: raw bits 0x6ab-NA (0)
|
|
| | | ipv4_reassembled: [0] 0x6ab-NA (0)
|
|
| | | tcp_connections: [1] 0x6ab-NA (0)
|
|
| | | [0]: flow {} 0x6ab-NA (0)
|
|
| | | source_ip: "192.168.69.2" 0x6ab-NA (0)
|
|
| | | source_port: 34059 0x6ab-NA (0)
|
|
| | | destination_ip: "192.168.69.1" 0x6ab-NA (0)
|
|
| | | destination_port: "http" (80) (World Wide Web HTTP) 0x6ab-NA (0)
|
|
0x000|47 45 54 20 2f 74 65 73 74 2f 65 74 68 65 72 65|GET /test/ethere| client_stream: raw bits 0x0-0x1bc.7 (445)
|
|
* |until 0x1bc.7 (end) (445) | |
|
|
0x000|48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d|HTTP/1.1 200 OK.| server_stream: raw bits 0x0-0x191.7 (402)
|
|
* |until 0x191.7 (end) (402) | |
|