Структура и формат сетевых пакетов для разных протоколов, страница 5

0x00A0   6F 6D 2F 0D 0A 53 65 72-76 65 72 3A 20 4D 69 63   om/..Server: Mic

0x00B0   72 6F 73 6F 66 74 2D 49-49 53 2F 36 2E 30 0D 0A   rosoft-IIS/6.0..

0x00C0   50 33 50 3A 20 43 50 3D-22 41 4C 4C 20 49 4E 44   P3P: CP="ALL IND

0x00D0   20 44 53 50 20 43 4F 52-20 41 44 4D 20 43 4F 4E    DSP COR ADM CON

0x00E0   6F 20 43 55 52 20 43 55-53 6F 20 49 56 41 6F 20   o CUR CUSo IVAo

0x00F0   49 56 44 6F 20 50 53 41-20 50 53 44 20 54 41 49   IVDo PSA PSD TAI

0x0100   20 54 45 4C 6F 20 4F 55-52 20 53 41 4D 6F 20 43    TELo OUR SAMo C

0x0110   4E 54 20 43 4F 4D 20 49-4E 54 20 4E 41 56 20 4F   NT COM INT NAV O

0x0120   4E 4C 20 50 48 59 20 50-52 45 20 50 55 52 20 55   NL PHY PRE PUR U

0x0130   4E 49 22 0D 0A 58 2D 50-6F 77 65 72 65 64 2D 42   NI"..X-Powered-B

0x0140   79 3A 20 41 53 50 2E 4E-45 54 0D 0A 44 61 74 65   y: ASP.NET..Date

0x0150   3A 20 4D 6F 6E 2C 20 32-31 20 4D 61 72 20 32 30   : Mon, 21 Mar 20

0x0160   30 35 20 30 36 3A 32 35-3A 32 36 20 47 4D 54 0D   05 06:25:26 GMT.

0x0170   0A 0D 0A 3C 68 65 61 64-3E 3C 74 69 74 6C 65 3E   ...<head><title>

0x0180   44 6F 63 75 6D 65 6E 74-20 4D 6F 76 65 64 3C 2F   Document Moved</

0x0190   74 69 74 6C 65 3E 3C 2F-68 65 61 64 3E 0A 3C 62   title></head>.<b

0x01A0   6F 64 79 3E 3C 68 31 3E-4F 62 6A 65 63 74 20 4D   ody><h1>Object M

0x01B0   6F 76 65 64 3C 2F 68 31-3E 54 68 69 73 20 64 6F   oved</h1>This do

0x01C0   63 75 6D 65 6E 74 20 6D-61 79 20 62 65 20 66 6F   cument may be fo

0x01D0   75 6E 64 20 3C 61 20 48-52 45 46 3D 22 68 74 74   und <a HREF="htt

0x01E0   70 3A 2F 2F 68 6F 6D 65-2E 6D 69 63 72 6F 73 6F   p://home.microso

0x01F0   66 74 2E 63 6F 6D 2F 22-3E 68 65 72 65 3C 2F 61   ft.com/">here</a

0x0200   3E 3C 2F 62 6F 64 79 3E-                          ></body>

Декодированный вид:

Ethernet II

Destination MAC: 00:0C:76:F3:49:C1

Source MAC: 00:03:47:E9:84:D1

Ethertype: 0x0800 (2048) - IP

IP

IP version: 0x04 (4)

Header length: 0x05 (5) - 20 bytes

Type of service: 0x00 (0)

Precedence: 000 - Routine

Delay: 0 - Normal delay

Throughput: 0 - Normal throughput

Reliability: 0 - Normal reliability

Total length: 0x01FA (506)

ID: 0x361A (13850)

Flags

Don't fragment bit: 1 - Don't fragment

More fragments bit: 0 - Last fragment

Fragment offset: 0x0000 (0)

Time to live: 0x71 (113)

Protocol: 0x06 (6) - TCP

Checksum: 0x470C (18188) - correct

Source IP: 207.46.250.252

Destination IP: 192.168.0.4

IP Options: None

TCP

Source port: 80

Destination port: 1093

Sequence: 0xF3EDB618 (4092442136)

Acknowledgement: 0xE711D99B (3876706715)

Header length: 0x05 (5) - 20 bytes

Flags: PSH ACK

URG: 0

ACK: 1

PSH: 1

RST: 0

SYN: 0

FIN: 0

Window: 0xFF0D (65293)

Checksum: 0xAB0A (43786) - correct

Urgent Pointer: 0x0000 (0)

TCP Options: None

HTTP

Version: HTTP/1.1

Result code: 302

Result string: Object Moved

Content-Length: 149

Content-Type: text/html

Location: http://home.microsoft.com/

Server: Microsoft-IIS/6.0

P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"

X-Powered-By: ASP.NET

Date: Mon, 21 Mar 2005 06:25:26 GMT

Data


Протокол NetBIOS.

Оригинальный вид:

Packet data:

0000: 00 11 D8 07 3F 12 00 60 52 08 AA 3A 08 00 45 00 ....?..`R..:..E.

0010: 00 5A F8 FD 00 00 80 11 BF AD C0 A8 00 40 C0 A8 .Z...........@..

0020: 00 57 00 89 00 89 00 46 B7 BD 83 78 85 00 00 00 .W.....F...x....

0030: 00 01 00 00 00 00 20 45 4E 45 42 45 4F 45 4F 45 ...... ENEBEOEOE

0040: 4A 43 41 43 41 43 41 43 41 43 41 43 41 43 41 43 JCACACACACACACAC

0050: 41 43 41 43 41 41 41 00 00 20 00 01 00 04 93 E0 ACACAAA.. ......

0060: 00 06 00 00 C0 A8 00 40                         .......@

Декодированный вид: