Структура и формат сетевых пакетов для разных протоколов, страница 3

Sequence: 0x681B1153 (1746604371)

Acknowledgement: 0x002C90AA (2920618)

Header length: 0x05 (5) - 20 bytes

Flags: PSH ACK

URG: 0

ACK: 1

PSH: 1

RST: 0

SYN: 0

FIN: 0

Window: 0xFDF0 (65008)

Checksum: 0x145C (5212) - correct

Urgent Pointer: 0x0000 (0)

TCP Options: None

SMTP

Data

r


Протокол POP3 (Post Office Protocol v.3)

0x0000   00 0C 76 F3 49 C1 00 03-47 E9 84 D1 08 00 45 00   ..vуIБ..Gй„С..E.

0x0010   01 A7 9A 0D 40 00 7F 06-43 94 5A 00 02 03 C0 A8   .§љ.@..C”Z...АЁ

0x0020   00 04 00 6E 04 79 00 35-38 75 BB BE DB 64 50 18   ...n.y.58u»ѕЫdP.

0x0030   22 07 28 62 00 00 52 65-74 75 72 6E 2D 70 61 74   ".(b..Return-pat

0x0040   68 3A 20 3C 61 36 40 70-72 69 6D 2E 72 75 3E 0D   h: <a6@prim.ru>.

0x0050   0A 52 65 63 65 69 76 65-64 3A 20 66 72 6F 6D 20   .Received: from

0x0060   39 30 2E 30 2E 32 2E 34-36 20 28 5B 39 30 2E 30   90.0.2.46 ([90.0

0x0070   2E 32 2E 34 36 5D 29 0D-0A 09 62 79 20 70 72 69   .2.46])...by pri

0x0080   6D 2E 72 75 20 28 5B 31-32 37 2E 30 2E 30 2E 31   m.ru ([127.0.0.1

0x0090   5D 29 0D 0A 09 77 69 74-68 20 53 4D 54 50 20 28   ])...with SMTP (

0x00A0   4D 44 61 65 6D 6F 6E 2E-50 52 4F 2E 76 36 2E 37   MDaemon.PRO.v6.7

0x00B0   2E 39 2E 52 29 0D 0A 09-66 6F 72 20 3C 61 37 40   .9.R)...for <a7@

0x00C0   70 72 69 6D 2E 72 75 3E-3B 20 4D 6F 6E 2C 20 30   prim.ru>; Mon, 0

0x00D0   34 20 4F 63 74 20 32 30-30 34 20 30 38 3A 35 37   4 Oct 2004 08:57

0x00E0   3A 31 32 20 2B 30 34 30-30 0D 0A 68 65 6C 6C 6F   :12 +0400..hello

0x00F0   20 0D 0A 20 08 0D 0A 58-2D 4D 44 52 63 70 74 2D    .. ...X-MDRcpt0x0100   54 6F 3A 20 61 37 40 70-72 69 6D 2E 72 75 0D 0A   To: a7@prim.ru..

0x0110   58 2D 4D 44 52 65 6D 6F-74 65 49 50 3A 20 39 30   X-MDRemoteIP: 90

0x0120   2E 30 2E 32 2E 34 36 0D-0A 58 2D 52 65 74 75 72   .0.2.46..X-Retur

0x0130   6E 2D 50 61 74 68 3A 20-61 36 40 70 72 69 6D 2E   n-Path: a6@prim.

0x0140   72 75 0D 0A 58 2D 4D 44-61 65 6D 6F 6E 2D 44 65   ru..X-MDaemon-De

0x0150   6C 69 76 65 72 2D 54 6F-3A 20 61 37 40 70 72 69   liver-To: a7@pri

0x0160   6D 2E 72 75 0D 0A 0D 0A-43 52 4C 46 0D 0A 1B 4F   m.ru....CRLF...O

0x0170   41 1B 4F 41 1B 4F 42 2E-0D 0A 43 52 08 08 23 21   A.OA.OB...CR..#!

0x0180   33 08 08 31 33 08 08 08-43 52 4C 46 2E 43 52 08   3..13...CRLF.CR.

0x0190   08 08 08 08 08 08 08 08-3C 43 52 4C 46 3E 2E 08   ........<CRLF>..

0x01A0   5C 08 08 08 08 08 08 08-08 08 0D 0A 2E 2E 0D 0A   \...............

0x01B0   0D 0A 2E 0D 0A                                    .....

Декодированный вид:

Ethernet II

Destination MAC: 00:0C:76:F3:49:C1

Source MAC: 00:03:47:E9:84:D1

Ethertype: 0x0800 (2048) - IP

IP

IP version: 0x04 (4)

Header length: 0x05 (5) - 20 bytes

Type of service: 0x00 (0)

Precedence: 000 - Routine

Delay: 0 - Normal delay

Throughput: 0 - Normal throughput

Reliability: 0 - Normal reliability

Total length: 0x01A7 (423)

ID: 0x9A0D (39437)

Flags

Don't fragment bit: 1 - Don't fragment

More fragments bit: 0 - Last fragment

Fragment offset: 0x0000 (0)

Time to live: 0x7F (127)

Protocol: 0x06 (6) - TCP

Checksum: 0x4394 (17300) - correct

Source IP: 90.0.2.3

Destination IP: 192.168.0.4

IP Options: None

TCP

Source port: 110

Destination port: 1145

Sequence: 0x00353875 (3487861)

Acknowledgement: 0xBBBEDB64 (3149847396)

Header length: 0x05 (5) - 20 bytes

Flags: PSH ACK

URG: 0

ACK: 1

PSH: 1

RST: 0

SYN: 0

FIN: 0

Window: 0x2207 (8711)

Checksum: 0x2862 (10338) - correct

Urgent Pointer: 0x0000 (0)

TCP Options: None

POP3

Data

Return-path: <a6@prim.ru>

Received: from 90.0.2.46 ([90.0.2.46])

by prim.ru ([127.0.0.1])

with SMTP (MDaemon.PRO.v6.7.9.R)

for <a7@prim.ru>; Mon, 04 Oct 2004 08:57:12 +0400

hello

X-MDRcpt-To: a7@prim.ru

X-MDRemoteIP: 90.0.2.46