LABORATORY / WORK_3 / отчёт_Козырев
.pdfОтчёт к лабораторной работе №3
Изучение протокола ARP. Получение навыков работы с генераторами пакетов
Группа: ИКВТ-61
Студент: Козырев А.Б.
Цель работы: Рассмотреть принципы работы протокола ARP. Получить практические навыки в анализе кадров ARP и их сост лении. Получение базовых навыков по работе с генератором пакетов packit.
3.4.1. Утилита arp. ARP-кэш.
1. arp | tee log.txt
Address |
HWtype |
HWaddress |
Flags Mask |
Iface |
gateway |
ether |
20:e5:2a:05:d6:b6 |
C |
enp0s3 |
2. ping 192.168.1.32 | tee log.txt
PING 192.168.1.32 (192.168.1.32) 56(84) bytes |
of data. |
||||
64 |
bytes from 192.168.1.32: icmp_seq=1 ttl=64 |
time=0.794 ms |
|||
64 |
bytes from 192.168.1.32: icmp_seq=2 ttl=64 |
time=0.531 ms |
|||
64 |
bytes |
from |
192.168.1.32: icmp_seq=3 |
ttl=64 |
time=1.21 ms |
64 |
bytes |
from |
192.168.1.32: icmp_seq=4 |
ttl=64 |
time=0.683 ms |
--- 192.168.1.32 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3045ms rtt min/avg/max/mdev = 0.531/0.806/1.217/0.255 ms
3. arp | tee log.txt
Address |
HWtype |
HWaddress |
Flags Mask |
Iface |
192.168.1.32 |
ether |
08:00:27:17:5d:c0 |
C |
enp0s3 |
gateway |
ether |
20:e5:2a:05:d6:b6 |
C |
enp0s3 |
3.4.2. Отправка ARP-запроса и получение ARP-ответа
1.
ARP запрос из A → B
1 |
2 |
3 |
4 |
5 |
6 |
7 |
|
8 |
9 |
|
10 |
11 |
12 |
13 |
|
14 |
15 |
|
16 |
|
FF:FF:FF:FF:FF:FF |
|
|
|
08:00:27:53:80:6c |
|
0x0806 |
0x0001 |
|||||||||||
0x0800 |
6 |
4 |
0x01 |
|
|
08:00:27:53:80:6c |
|
|
0xc0a80124 |
|
|||||||||
|
|
00:00:00:00:00:00 |
|
|
0xc0a80120 |
|
|
|
|
|
|
|
|
|
|||||
ARP ответ из B → A
1 |
2 |
3 |
4 |
5 |
6 |
7 |
|
8 |
9 |
|
10 |
11 |
12 |
13 |
|
14 |
15 |
|
16 |
|
08:00:27:53:80:6c |
|
|
|
|
|
|
|
|
|
0x0806 |
0x0001 |
|||||||
0x0800 |
6 |
4 |
0x02 |
|
|
|
|
|
|
|
|
|
0xc0a80120 |
|
|||||
|
|
08:00:27:53:80:6c |
|
|
0xc0a80124 |
|
|
|
|
|
|
|
|
|
|||||
2.tcpdump -i enp0s3 -lvnnSXX -s 1500 'ether proto \arp and host 192.168.1.36 and host 192.168.1.32' | tee log.txt
tcpdump: listening on enp0s3, link-type EN10MB (Ethernet), capture size 1500 bytes
3. packit -t arp -A 1 -y 192.168.1.32 -Y 00:00:00:00:00:00 -x 192.168.1.36 -X 08:00:27:53:80:6c \ -e 08:00:27:53:80:6c -E FF:FF:FF:FF:FF:FF -i enp0s3 | tee log2.txt
Mode: Packet |
Injection using device: enp0s3 |
|
|
ARP header: |
Type: Request(1) |
|
Hardware Address: 8:0:27:53:80:6C |
Sender: |
Protocol Address: 192.168.1.36 |
||
Target: |
Protocol Address: 192.168.1.32 |
Hardware Address: 0:0:0:0:0:0 |
|
Eth header: |
Src Address: 8:0:27:53:80:6C Dst Address: FF:FF:FF:FF:FF:FF |
||
-| Packet Injection Statistics |-------------------------------------------- |
|
||
Injected: 1 |
Packets/Sec: 1.0 |
Bytes/Sec: 42.0 Errors: 0 |
|
4.
22:31:25.325400 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.32 tell 192.168.1.36, length 28
0x0000: |
ffff ffff ffff 0800 2753 |
806c |
0806 |
0001 ........ |
'S.l |
....$ |
|
0x0010: |
0800 0604 0001 |
0800 2753 |
806c |
c0a8 |
0124 ........ |
'S.l... |
|
0x0020: |
0000 0000 0000 |
c0a8 0120 |
|
|
.......... |
|
|
22:31:25.326100 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.1.32 is-at
08:00:27:17:5d:c0, length 46 |
0800 2717 |
5dc0 0806 0001 |
..'S.l..'.] |
|||
0x0000: |
0800 2753 |
806c |
||||
0x0010: |
0800 0604 |
0002 |
0800 2717 |
5dc0 c0a8 0120 |
..........'S.l |
'.]..... |
0x0020: |
0800 2753 |
806c |
c0a8 0124 |
0000 0000 0000 |
$...... |
|
0x0030: |
0000 0000 |
0000 |
0000 0000 |
0000 |
............ |
|
3.4.3. ARP-spoofing: подмена соответствия MAC-адреса IP-адресу
1. |
ARP-reply самопроизвольный ответ |
|
|
|
|
|
|
|
|
|
|||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 |
2 |
3 |
4 |
5 |
6 |
7 |
|
8 |
9 |
|
10 |
11 |
12 |
13 |
|
14 |
15 |
|
16 |
|
08:00:27:53:80:6c |
|
|
|
08:00:27:04:ed:15 |
|
0x0806 |
0x0001 |
|||||||||||
0x0800 |
6 |
4 |
0x02 |
|
|
08:00:27:04:ed:15 |
|
|
0xc0a80120 |
|
|||||||||
|
|
08:00:27:53:80:6c |
|
|
0xc0a80124 |
|
|
|
|
|
|
|
|
|
|||||
2. tcpdump -i enp0s3 -XX -s 1500 \ 'ip proto \icmp and dst host 192.168.1.32' | tee log.txt
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on enp0s3, link-type EN10MB (Ethernet), capture size 1500 bytes
3. packit -t arp -A 2 -y 192.168.1.36 -Y 08:00:27:53:80:6c -x 192.168.1.32 - X 08:00:27:04:ed:15 -e 08:00:27:04:ed:15 -E 08:00:27:53:80:6c -c 10 -w 5 - i enp0s3 | tee log2.txt
Mode: Packet |
Injection using device: enp0s3 |
|
ARP header: |
Type: Reply(2) |
Hardware Address: |
Sender: |
Protocol Address: 192.168.1.32 |
|
8:0:27:4:ED:15 |
Hardware Address: |
|
Target: |
Protocol Address: 192.168.1.36 |
|
8:0:27:53:80:6C |
|
|
Eth header: |
Src Address: 8:0:27:4:ED:15 Dst Address: 8:0:27:53:80:6C |
|
-| Packet Injection Statistics |-------------------------------------------- |
|
|
Injected: 10 |
Packets/Sec: 1.1 Bytes/Sec: 46.6 Errors: 0 |
|
4.ping 192.168.1.32 | tee log.txt
PING 192.168.1.32 (192.168.1.32) 56(84) |
bytes of data. |
|
64 |
bytes from 192.168.1.32: icmp_seq=27 |
ttl=64 time=0.992 ms |
64 |
bytes from 192.168.1.32: icmp_seq=28 |
ttl=64 time=0.373 ms |
64 |
bytes from 192.168.1.32: icmp_seq=29 |
ttl=64 time=0.729 ms |
64 |
bytes from 192.168.1.32: icmp_seq=30 |
ttl=64 time=0.393 ms |
64 |
bytes from 192.168.1.32: icmp_seq=31 |
ttl=64 time=0.376 ms |
64 |
bytes from 192.168.1.32: icmp_seq=32 |
ttl=64 time=0.371 ms |
64 |
bytes from 192.168.1.32: icmp_seq=33 |
ttl=64 time=0.712 ms |
64 |
bytes from 192.168.1.32: icmp_seq=34 |
ttl=64 time=0.479 ms |
64 |
bytes from 192.168.1.32: icmp_seq=35 |
ttl=64 time=0.760 ms |
64 |
bytes from 192.168.1.32: icmp_seq=36 |
ttl=64 time=0.478 ms |
64 |
bytes from 192.168.1.32: icmp_seq=37 |
ttl=64 time=0.832 ms |
64 |
bytes from 192.168.1.32: icmp_seq=38 |
ttl=64 time=0.602 ms |
64 |
bytes from 192.168.1.32: icmp_seq=39 |
ttl=64 time=0.996 ms |
64 |
bytes from 192.168.1.32: icmp_seq=40 |
ttl=64 time=1.16 ms |
64 |
bytes from 192.168.1.32: icmp_seq=41 |
ttl=64 time=1.93 ms |
64 |
bytes from 192.168.1.32: icmp_seq=42 |
ttl=64 time=0.566 ms |
64 |
bytes from 192.168.1.32: icmp_seq=43 |
ttl=64 time=0.480 ms |
64 |
bytes from 192.168.1.32: icmp_seq=44 |
ttl=64 time=0.418 ms |
64 |
bytes from 192.168.1.32: icmp_seq=45 |
ttl=64 time=0.369 ms |
64 |
bytes from 192.168.1.32: icmp_seq=46 |
ttl=64 time=0.433 ms |
64 |
bytes from 192.168.1.32: icmp_seq=47 |
ttl=64 time=0.471 ms |
64 |
bytes from 192.168.1.32: icmp_seq=48 |
ttl=64 time=0.450 ms |
5. On host C
01:44:07.221349 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 1, length 64
0x0000: |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..'..... |
'S.l..E. |
||||
0x0010: |
0054 |
7486 |
4000 |
4001 |
428e |
c0a8 0124 c0a8 |
.Tt.@.@.B |
....$.. |
|
0x0020: |
0120 |
0800 |
eaf5 07d3 0001 b4e6 c05c 0000 |
............. |
|
\.. |
|||
0x0030: |
0000 c61f 0b00 |
0000 |
0000 |
1011 1213 1415 |
................ |
|
!"#$% |
||
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:08.225628 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 2,
length 64 |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..' |
'S.l..E. |
||||
0x0000: |
|||||||||
0x0010: |
0054 |
7564 |
4000 |
4001 |
41b0 |
c0a8 0124 c0a8 |
.Tud@.@.A |
....$.. |
|
0x0020: |
0120 |
0800 |
d5e1 07d3 0002 b5e6 c05c 0000 |
................2 |
|
\.. |
|||
0x0030: |
0000 da32 0b00 |
0000 |
0000 |
1011 1213 1415 |
|
!"#$% |
|||
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:09.249334 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 3,
length 64 |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..' |
'S.l..E. |
||||
0x0000: |
|||||||||
0x0010: |
0054 |
7620 |
4000 |
4001 |
40f4 |
c0a8 0124 c0a8 |
.Tv.@.@.@ |
....$.. |
|
0x0020: |
0120 |
0800 |
6d83 |
07d3 |
0003 |
b6e6 c05c 0000 |
....m........ |
|
\.. |
0x0030: |
0000 |
4190 |
0b00 |
0000 |
0000 |
1011 1213 1415 |
..A............. |
|
!"#$% |
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:10.272788 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 4,
length 64 |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..' |
'S.l..E. |
||||
0x0000: |
|||||||||
0x0010: |
0054 |
76c8 |
4000 |
4001 |
404c |
c0a8 0124 c0a8 |
.Tv.@.@.@L |
...$.. |
|
0x0020: |
0120 |
0800 |
a923 |
07d3 |
0004 |
b7e6 c05c 0000 |
.....#....... |
|
\.. |
0x0030: |
0000 |
04ef 0b00 0000 0000 1011 1213 1415 |
................ |
|
!"#$% |
||||
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:11.295922 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 5,
length 64 |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..' |
'S.l..E. |
||||
0x0000: |
|||||||||
0x0010: |
0054 |
7799 |
4000 |
4001 |
3f7b c0a8 0124 c0a8 |
.Tw.@.@.?{ |
...$.. |
||
0x0020: |
0120 |
0800 |
adc6 07d3 0005 |
b8e6 c05c 0000 |
................J |
|
\.. |
||
0x0030: |
0000 fe4a 0c00 |
0000 |
0000 |
1011 1213 1415 |
|
!"#$% |
|||
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:12.319097 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 6,
length 64 |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..' |
'S.l..E. |
|||
0x0000: |
||||||||
0x0010: |
0054 |
77fb 4000 4001 3f19 c0a8 0124 c0a8 |
.Tw.@.@.? |
....$.. |
||||
0x0020: |
0120 |
0800 |
ca68 07d3 |
0006 |
b9e6 c05c 0000 |
.....h....... |
|
\.. |
0x0030: |
0000 |
e0a7 0c00 0000 |
0000 |
1011 1213 1415 |
................ |
|
!"#$% |
|
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
|||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
||||
0x0060: |
3637 |
|
|
|
|
67 |
|
|
01:44:13.343252 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 7, length 64
0x0000: |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..'..... |
'S.l..E. |
||||
0x0010: |
0054 |
7882 |
4000 |
4001 |
3e92 |
c0a8 0124 c0a8 |
.Tx.@.@.> |
....$.. |
|
0x0020: |
0120 |
0800 |
b907 |
07d3 |
0007 |
bae6 c05c 0000 |
............. |
|
\.. |
0x0030: |
0000 f007 |
0d00 |
0000 |
0000 |
1011 1213 1415 |
................ |
|
!"#$% |
|
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:14.366819 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 8,
length 64 |
0800 2704 |
ed15 |
0800 |
2753 |
806c |
0800 |
4500 |
..' |
'S.l..E. |
|
0x0000: |
||||||||||
0x0010: |
0054 7937 |
4000 |
4001 |
3ddd |
c0a8 |
0124 |
c0a8 |
.Ty7@.@.=.... |
$.. |
|
0x0020: |
0120 |
0800 |
c8a8 |
07d3 |
0008 |
bbe6 c05c 0000 |
.............\.. |
0x0030: |
0000 df65 0d00 |
0000 |
0000 |
1011 1213 1415 |
...e............ |
||
0x0040: |
1617 |
1819 |
1a1b |
1c1d 1e1f 2021 2223 2425 |
...........!"#$% |
||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||
0x0060: |
3637 |
|
|
|
|
|
67 |
01:44:15.389935 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 9, length 64
0x0000: |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..'..... |
'S.l..E. |
||||
0x0010: |
0054 |
79e6 |
4000 |
4001 |
3d2e c0a8 0124 c0a8 |
.Ty.@.@.= |
....$.. |
||
0x0020: |
0120 |
0800 |
ee4b 07d3 0009 |
bce6 c05c 0000 |
.....K....... |
|
\.. |
||
0x0030: |
0000 |
b8c1 0d00 |
0000 |
0000 |
1011 1213 1415 |
................ |
|
!"#$% |
|
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:16.414225 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 10, length 64
0x0000: |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..'..... |
'S.l..E. |
|||
0x0010: 0054 7a9f 4000 4001 3c75 c0a8 0124 c0a8 |
.Tz.@.@.<u |
...$.. |
||||||
0x0020: |
0120 |
0800 |
4fea 07d3 |
000a |
bde6 c05c 0000 |
....O........ |
|
\.. |
0x0030: |
0000 |
5522 |
0e00 0000 |
0000 |
1011 1213 1415 |
..U"............ |
|
!"#$% |
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
|||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
||||
0x0060: |
3637 |
|
|
|
|
67 |
|
|
01:44:17.436831 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 11,
length 64 |
|
|
|
|
|
..' |
'S.l..E. |
|
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 |
||||||||
0x0010: 0054 7ab9 4000 4001 3c5b c0a8 0124 c0a8 |
.Tz.@.@.<[ |
...$.. |
||||||
0x0020: |
0120 |
0800 |
bd8d 07d3 |
000b |
bee6 c05c 0000 |
................} |
|
\.. |
0x0030: 0000 e67d 0e00 0000 |
0000 |
1011 1213 1415 |
|
!"#$% |
||||
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
|||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
||||
0x0060: |
3637 |
|
|
|
|
67 |
|
|
01:44:18.460237 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 12,
length 64 |
|
|
|
|
|
|
..' |
'S.l..E. |
|
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 |
|||||||||
0x0010: 0054 7af5 4000 4001 3c1f c0a8 0124 c0a8 |
.Tz.@.@.< |
....$.. |
|||||||
0x0020: |
0120 |
0800 |
852f |
07d3 |
000c |
bfe6 c05c 0000 |
...../....... |
|
\.. |
0x0030: |
0000 1ddb 0e00 |
0000 |
0000 |
1011 1213 1415 |
................ |
|
!"#$% |
||
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:19.484494 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 13, length 64
0x0000: |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..'..... |
'S.l..E. |
|||
0x0010: 0054 7b61 4000 4001 3bb3 c0a8 0124 c0a8 |
.T{a@.@.; |
....$.. |
||||||
0x0020: |
0120 |
0800 |
d9ce 07d3 |
000d |
c0e6 c05c 0000 |
................: |
|
\.. |
0x0030: 0000 c73a 0f00 0000 |
0000 |
1011 1213 1415 |
|
!"#$% |
||||
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
|||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
||||
0x0060: |
3637 |
|
|
|
|
67 |
|
|
01:44:20.508023 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 14, length 64
0x0000: |
0800 |
2704 |
ed15 |
0800 2753 806c 0800 4500 |
..'..... |
'S.l..E. |
|||
0x0010: |
0054 7b78 4000 |
4001 3b9c c0a8 0124 c0a8 |
.T{x@.@.; |
....$.. |
|||||
0x0020: |
0120 |
0800 |
fdb1 |
07d3 |
000e |
c2e6 c05c 0000 |
................V |
|
\.. |
0x0030: |
0000 b056 0000 |
0000 |
0000 |
1011 1213 1415 |
|
!"#$% |
|||
0x0040: |
1617 |
1819 |
1a1b |
1c1d 1e1f 2021 2223 2425 |
........... |
|
|||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:21.531383 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 15,
length 64 |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..' |
'S.l..E. |
||||
0x0000: |
|||||||||
0x0010: |
0054 |
7b7b 4000 |
4001 |
3b99 |
c0a8 0124 c0a8 |
.T{{@.@.; |
....$.. |
||
0x0020: |
0120 |
0800 |
f652 |
07d3 |
000f |
c3e6 c05c 0000 |
.....R....... |
|
\.. |
0x0030: |
0000 |
b6b4 0000 |
0000 |
0000 |
1011 1213 1415 |
................ |
|
!"#$% |
|
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:22.554899 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 16, length 64
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 ..'.....'S.l..E.
0x0010: |
0054 7c0a 4000 |
4001 |
3b0a c0a8 0124 c0a8 |
.T|.@.@.; |
....$.. |
|||
0x0020: |
0120 |
0800 |
42f4 |
07d3 |
0010 |
c4e6 c05c 0000 |
....B........ |
\.. |
0x0030: |
0000 |
6812 |
0100 |
0000 |
0000 |
1011 1213 1415 |
..h............. |
!"#$% |
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
01:44:23.577968 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 17,
length 64 |
|
|
|
|
|
|
..' |
'S.l..E. |
|
0x0000: 0800 2704 ed15 0800 2753 806c 0800 4500 |
|||||||||
0x0010: |
0054 7cc1 4000 |
4001 |
3a53 |
c0a8 0124 c0a8 |
.T|.@.@.:S |
...$.. |
|||
0x0020: |
0120 |
0800 |
e596 |
07d3 |
0011 |
c5e6 c05c 0000 |
................n |
|
\.. |
0x0030: |
0000 c46e 0100 |
0000 |
0000 |
1011 1213 1415 |
|
!"#$% |
|||
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:24.602092 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 18,
length 64 |
0800 2704 ed15 |
0800 2753 806c 0800 4500 |
..' |
'S.l..E. |
|||||
0x0000: |
|||||||||
0x0010: |
0054 7d86 4000 |
4001 398e c0a8 0124 c0a8 |
.T}.@.@.9 |
....$.. |
|||||
0x0020: |
0120 |
0800 |
ad35 |
07d3 |
0012 |
c6e6 c05c 0000 |
.....5....... |
|
\.. |
0x0030: |
0000 fbce 0100 |
0000 |
0000 |
1011 1213 1415 |
................ |
|
!"#$% |
||
0x0040: |
1617 |
1819 |
1a1b |
1c1d 1e1f 2021 2223 2425 |
........... |
|
|||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:25.625162 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 19, length 64
0x0000: |
0800 |
2704 |
ed15 |
0800 2753 806c 0800 4500 |
..'..... |
'S.l..E. |
|||
0x0010: |
0054 7e39 4000 |
4001 38db c0a8 0124 c0a8 |
.T~9@.@.8 |
....$.. |
|||||
0x0020: |
0120 |
0800 |
8ed8 |
07d3 |
0013 |
c7e6 c05c 0000 |
................+ |
|
\.. |
0x0030: |
0000 182b 0200 |
0000 |
0000 |
1011 1213 1415 |
|
!"#$% |
|||
0x0040: |
1617 |
1819 |
1a1b |
1c1d 1e1f 2021 2223 2425 |
........... |
|
|||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:26.648479 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 20, length 64
0x0000: |
0800 |
2704 |
ed15 0800 2753 806c 0800 4500 |
..'..... |
'S.l..E. |
||||
0x0010: |
0054 7ee6 4000 |
4001 |
382e |
c0a8 0124 c0a8 |
.T~.@.@.8 |
....$.. |
|||
0x0020: |
0120 |
0800 |
517a |
07d3 |
0014 |
c8e6 c05c 0000 |
....Qz....... |
|
\.. |
0x0030: |
0000 |
5488 |
0200 |
0000 |
0000 |
1011 1213 1415 |
..T............. |
|
!"#$% |
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
67 |
|
|
01:44:27.672469 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 21,
length 64 |
0800 |
2704 |
ed15 0800 |
2753 |
806c |
0800 4500 |
..' |
'S.l..E. |
||
0x0000: |
||||||||||
0x0010: |
0054 |
7f81 |
4000 |
4001 |
3793 |
c0a8 0124 c0a8 |
.T.. |
@ . @ .7 |
....$.. |
|
0x0020: |
0120 |
0800 |
121a |
07d3 |
0015 |
c9e6 c05c 0000 |
............. |
|
\.. |
|
0x0030: |
0000 |
92e7 |
0200 |
0000 |
0000 |
1011 |
1213 1415 |
................ |
|
!"#$% |
0x0040: |
1617 |
1819 |
1a1b 1c1d 1e1f 2021 |
2223 2425 |
........... |
|
||||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 |
3233 3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
|
67 |
|
|
01:44:28.695201 IP 192.168.1.36 > 192.168.1.32: ICMP echo request, id 2003, seq 22, length 64
0x0000: |
0800 |
2704 |
ed15 |
0800 |
2753 806c 0800 |
4500 |
..'..... |
'S.l..E. |
||
0x0010: |
0054 |
8000 |
4000 |
4001 |
3714 |
c0a8 0124 |
c0a8 |
.T.. |
@.@.7.... |
$.. |
0x0020: |
0120 |
0800 |
ffbd |
07d3 |
0016 cae6 c05c |
0000 |
................B |
|
\.. |
|
0x0030: |
0000 a342 0300 |
0000 |
0000 |
1011 1213 |
1415 |
............ |
!"#$% |
|||
0x0040: |
1617 |
1819 |
1a1b |
1c1d |
1e1f 2021 2223 |
2425 |
........... |
|
||
0x0050: |
2627 |
2829 |
2a2b 2c2d 2e2f 3031 3233 |
3435 |
&'()*+,-./012345 |
|||||
0x0060: |
3637 |
|
|
|
|
|
|
67 |
|
|
01:44:29.719073 IP 192.168.1.36 > 192.168.1.32: |
ICMP echo request |
|
||||||||