Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Download
Standard view
Full view
of .
Look up keyword
Like this
8Activity
0 of .
Results for:
No results containing your search query
P. 1
Packet Headers Subnet Breakdown

Packet Headers Subnet Breakdown

Ratings: (0)|Views: 464|Likes:
Published by openid_9V8YnhpL

More info:

Published by: openid_9V8YnhpL on Jan 08, 2010
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as XLS, PDF, TXT or read online from Scribd
See more
See less

10/22/2012

pdf

text

original

 
128(1)192(2)192(2)192(2)
000000000010000006410000000128110000001920000000110100000165100000011291100000119300000010201000010661000001013011000010194
252
00000011301000011671000001113111000011195
(6)
000001004010001006810000100132110001001960000010150100010169100001011331100010119700000110601000110701000011013411000110198
248252
00000111701000111711000011113511000111199
(5)(6)
0000100080100100072100010001361100100020000001001901001001731000100113711001001201000010101001001010741000101013811001010202
252
000010111101001011751000101113911001011203
(6)
000011001201001100761000110014011001100204000011011301001101771000110114111001101205000011101401001110781000111014211001110206
240248252
000011111501001111791000111114311001111207
(4)(5)(6)
000100001601010000801001000014411010000208000100011701010001811001000114511010001209000100101801010010821001001014611010010210
252
000100111901010011831001001114711010011211
(6)
000101002001010100841001010014811010100212000101012101010101851001010114911010101213000101102201010110861001011015011010110214
248252
000101112301010111871001011115111010111215
(5)(6)
000110002401011000881001100015211011000216000110012501011001891001100115311011001217000110102601011010901001101015411011010218
252
000110112701011011911001101115511011011219
(6)
000111002801011100921001110015611011100220000111012901011101931001110115711011101221000111103001011110941001111015811011110222
224240248252
000111113101011111951001111115911011111223
(3)(4)(5)(6)
001000003201100000961010000016011100000224001000013301100001971010000116111100001225001000103401100010981010001016211100010226
252
001000113501100011991010001116311100011227
(6)
001001003601100100100101001001641110010022800100101370110010110110100101165111001012290010011038011001101021010011016611100110230
248252
0010011139011001111031010011116711100111231
(5)(6)
001010004001101000104101010001681110100023200101001410110100110510101001169111010012330010101042011010101061010101017011101010234
252
0010101143011010111071010101117111101011235
(6)
001011004401101100108101011001721110110023600101101450110110110910101101173111011012370010111046011011101101010111017411101110238
240248252
0010111147011011111111010111117511101111239
(4)(5)(6)
001100004801110000112101100001761111000024000110001490111000111310110001177111100012410011001050011100101141011001017811110010242
252
0011001151011100111151011001117911110011243
(6)
001101005201110100116101101001801111010024400110101530111010111710110101181111101012450011011054011101101181011011018211110110246
248252
0011011155011101111191011011118311110111247
(5)(6)
001110005601111000120101110001841111100024800111001570111100112110111001185111110012490011101058011110101221011101018611111010250
252
0011101159011110111231011101118711111011251
(6)
0011110060011111001241011110018811111100252001111016101111101125101111011891111110125300111110620111111012610111110190111111102540011111163011111111271011111119111111111255
 
Hdr Offset
Header Offset Shortcuts
FieldTCPDUMP FilterNotes
IP Header Length4ip[0] &0x0FIP Packet Length16ip[2:2]The is no multiple for this length fieldIP TTL8ip[8]IP Protocol8ip[9]
DHexProtoDHexProtoDHexProto
10x01ICMP90x09IGRP470x2FGRE20x02IGMP170x11UDP500x32ESP60x06TCP470x2FGRE510x33AHIP Address - Src32ip[12:4]IP Address - Dst32ip[16:4]IP Fragmentationflag=3 ip[6] &0x20 = 0x20 More Fragment bit is set.offset=13ip[6:2] &0x1fff != 0x000 fragment offset in not 0ICMP Type8icmp[0]ICMP Code8icmp[1]TCP Src Port16tcp[0:2]TCP Dst Port16tcp[2:2]TCP Header Length4tcp[12] &0x0FTCP Flags8tcp[13]TCP Windows Size16tcp[14:2]UDP Src Port16udp[0:2]UDP Dst Port16udp[2:2]UDP Header Length16upd[4:2]The is no multiple for this length field
Length
(bits)
Remember to use a 4 byte multiplier to find header length in bytesRemember to use a 4 byte multiplier to find header length in bytes
 
IPv4 Hdr 
IPv4 Header (RFC 791)
012345678910111213141516171819202122232425262728293031
Byte Offset 0Byte Offset 1Byte Offset 2Byte Offset 3
 0 B y t   e s
Type of Service (8-bit)Total Length (16-bit) (in Byte Offsets)Byte Offset 4Byte Offset 5Byte Offset 6Byte Offset 7IP Identification Number (16-bit)RDFMFFragment Offset (13-bit)Byte Offset 8Byte Offset 9Byte Offset 10Byte Offset 11Time to Live (8-bit)Protocol (8-bit)Header Checksum (16-bit)Byte Offset 12Byte Offset 13Byte Offset 14Byte Offset 15Source IP Address (32-bit)Byte Offset 16Byte Offset 17Byte Offset 18Byte Offset 19Destination IP Address (32-bit)Byte Offset 20Byte Offset 21Byte Offset 22Byte Offset 23IP Opitions (variable….if any)data (variable….)
012345678910111213141516171819202122232425262728293031
IP Version Number 
Valid values are:4for IP version 46for IP version 6
IP Header Length
(4 byte multiplier)Number of 32-bit words in IP headerminimum value 5 (5 x 4 = 20 bytes) maximum value 15 (15 x 4 = 60 bytes)
Type of Service
(Used by gateways as a QoS type field) (Most OS's default to 0)(Over)
Total Length
(No multiplier)Number of bytes in packetmaximum length = 65,535
IP Identification Number 
Uniquely identifies every datagram sent by host, value typically incremented by 1 (AKA Fragment ID)
Flags
R is reserved and must be set to 0D is Don't Fragment Flag 1=Don't Fragment0=Can FragmentMF is More Fragments1=More Fragments0=No Fragment or no more Fragments
(frag x:y@z where x is the fragment ID, y is # of bytes (must be divisible by 8) and z is the fragment offset)
(In Ethernet the MTU 1500 should see middle fragments of size 1480 (1480 data + 20 ip header = 1500)
Fragment Offset
(8 byte multiplier)(Max fragment offest 65528)Position of this fragment in the original datagram value is multipled by 8 to get bytes
Time To LiveIP Protocol
DHexDHexDHexDHex10x01ICMP90x09IGRP470x2FGRE880x58EIGRP
Version(4-bit)IP hdr length(4-bit)

Activity (8)

You've already reviewed this. Edit your review.
1 thousand reads
1 hundred reads
shiyasha liked this
i_wanna_say liked this
shankar3 liked this
johnjulian liked this

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->