You are on page 1of 19

Cpre530 PA II Isaac C Klein

07/12/2019

ARP-SEND/REPLY-EXAMPLE:
********************************************

DEST ADDR = 00:50:56:86:18:56:


SRC ADDR = 00:50:56:86:4F:B3:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 328
IDENTIFIER = 11010
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 17 -> UDP
CHECKSUM = 45182
SRC-IP-ADDR => 40:27:03:AD
DES-IP-ADDR => 40:27:03:01
DATA-LEN = 342
Total: Packets = 533, IPS = 530, ARPS = 0, ICMPS = 4, ECTPS = 3, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:50:56:86:18:56:


SRC ADDR = 00:50:56:86:4F:B3:
ETH TYPE = 0806 -> ARP
HW-TYPE = 0001
PROTO-TYPE = 0800
HW-LEN = 6
PROTO-LEN = 4
OPERATION = 2 -> REPLY
SENDER-HW-ADDR => 00:50:56:86:4F:B3
SENDER-PROTO-ADDR => 40:27:03:AD
TARGET-HW-ADDR => 00:50:56:86:18:56
TARGET-PROTO-ADDR => 40:27:03:01
Total: Packets = 534, IPS = 530, ARPS = 1, ICMPS = 4, ECTPS = 3, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = FF:FF:FF:FF:FF:FF:


SRC ADDR = 00:50:56:86:18:56:
ETH TYPE = 0806 -> ARP
HW-TYPE = 0001
PROTO-TYPE = 0800
HW-LEN = 6
PROTO-LEN = 4
OPERATION = 1 -> REQUEST
SENDER-HW-ADDR => 00:50:56:86:18:56
SENDER-PROTO-ADDR => 40:27:03:01
TARGET-HW-ADDR => 00:00:00:00:00:00
TARGET-PROTO-ADDR => 40:27:03:AD
Cpre530 PA II Isaac C Klein
07/12/2019
Total: Packets = 535, IPS = 530, ARPS = 2, ICMPS = 4, ECTPS = 3, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:50:56:86:4F:B3:


SRC ADDR = 00:50:56:86:18:56:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 328
IDENTIFIER = 11852
FLAGS = 0 0 0
OFFSET = 0
TTL = 64
PROTOCOL = 17 -> UDP
CHECKSUM = 42619
SRC-IP-ADDR => 40:27:03:01
DES-IP-ADDR => 40:27:03:AD
DATA-LEN = 342
Total: Packets = 536, IPS = 531, ARPS = 2, ICMPS = 4, ECTPS = 3, ATAS = 0, TKIPS = 0

********************************************

ECTP-EXAMPLE
********************************************

DEST ADDR = 00:50:56:86:06:D3:


SRC ADDR = 00:00:0C:31:01:AA:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 52
IDENTIFIER = 62959
FLAGS = 0 1 0
OFFSET = 0
TTL = 60
PROTOCOL = 6 -> TCP
CHECKSUM = 13156
SRC-IP-ADDR => C7:64:10:64
DES-IP-ADDR => 40:27:03:7B
DATA-LEN = 66
Total: Packets = 506, IPS = 505, ARPS = 0, ICMPS = 4, ECTPS = 1, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:50:54:7C:EB:3D:


SRC ADDR = 00:50:54:7C:EB:3D:
ETH TYPE = 9000 -> ECTP
Total: Packets = 507, IPS = 505, ARPS = 0, ICMPS = 4, ECTPS = 2, ATAS = 0, TKIPS = 0

********************************************
Cpre530 PA II Isaac C Klein
07/12/2019

IP/ICMP-DESTINATION-UNREACHABLE-
EXAMPLE
********************************************

DEST ADDR = 00:1F:33:D9:81:60:


SRC ADDR = 00:E0:1C:3C:17:C2:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 1500
IDENTIFIER = 21029
FLAGS = 0 1 0
OFFSET = 0
TTL = 128
PROTOCOL = 6 -> TCP
CHECKSUM = 32344
SRC-IP-ADDR => DF:D8:77:87
DES-IP-ADDR => 5F:9D:9A:74
DATA-LEN = 1514
Total: Packets = 268, IPS = 268, ARPS = 0, ICMPS = 0, ECTPS = 0, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:E0:1C:3C:17:C2:


SRC ADDR = 00:1F:33:D9:81:60:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = C0
PAY-LEN = 576
IDENTIFIER = 6469
FLAGS = 0 0 0
OFFSET = 0
TTL = 63
PROTOCOL = 1 -> ICMP
CHECKSUM = 32370
SRC-IP-ADDR => E7:9C:76:75
DES-IP-ADDR => DF:D8:77:87
DATA-LEN = 590

ICMP HEADER
TYPE= 3 -> DEST-UNREACH
CODE = 04
CHECKSUM = C9:4E
PARAMETER = 00:00:05:D4
INFORMATION = 45:00:05:DC:25:4F:40:00
Total: Packets = 269, IPS = 269, ARPS = 0, ICMPS = 1, ECTPS = 0, ATAS = 0, TKIPS = 0

********************************************
Cpre530 PA II Isaac C Klein
07/12/2019
DEST ADDR = 00:1F:33:D9:81:60:
SRC ADDR = 00:E0:1C:3C:17:C2:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 1492
IDENTIFIER = 21285
FLAGS = 0 1 0
OFFSET = 0
TTL = 128
PROTOCOL = 6 -> TCP
CHECKSUM = 32351
SRC-IP-ADDR => DF:D8:77:87
DES-IP-ADDR => 5F:9D:9A:74
DATA-LEN = 1506
Total: Packets = 270, IPS = 270, ARPS = 0, ICMPS = 1, ECTPS = 0, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:E0:1C:3C:17:C2:


SRC ADDR = 00:1F:33:D9:81:60:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = C0
PAY-LEN = 576
IDENTIFIER = 6725
FLAGS = 0 0 0
OFFSET = 0
TTL = 63
PROTOCOL = 1 -> ICMP
CHECKSUM = 32369
SRC-IP-ADDR => E7:9C:76:75
DES-IP-ADDR => DF:D8:77:87
DATA-LEN = 590

ICMP HEADER
TYPE= 3 -> DEST-UNREACH
CODE = 04
CHECKSUM = 05:BD
PARAMETER = 00:00:05:D4
INFORMATION = 45:00:05:DC:25:50:40:00
Total: Packets = 271, IPS = 271, ARPS = 0, ICMPS = 2, ECTPS = 0, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:E0:1C:3C:17:C2:


SRC ADDR = 00:1F:33:D9:81:60:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = C0
PAY-LEN = 576
IDENTIFIER = 6981
Cpre530 PA II Isaac C Klein
07/12/2019
FLAGS = 0 0 0
OFFSET = 0
TTL = 63
PROTOCOL = 1 -> ICMP
CHECKSUM = 32368
SRC-IP-ADDR => E7:9C:76:75
DES-IP-ADDR => DF:D8:77:87
DATA-LEN = 590

ICMP HEADER
TYPE= 3 -> DEST-UNREACH
CODE = 04
CHECKSUM = 23:65
PARAMETER = 00:00:05:D4
INFORMATION = 45:00:05:DC:25:51:40:00
Total: Packets = 272, IPS = 272, ARPS = 0, ICMPS = 3, ECTPS = 0, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:E0:1C:3C:17:C2:


SRC ADDR = 00:1F:33:D9:81:60:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = C0
PAY-LEN = 576
IDENTIFIER = 7237
FLAGS = 0 0 0
OFFSET = 0
TTL = 63
PROTOCOL = 1 -> ICMP
CHECKSUM = 32367
SRC-IP-ADDR => E7:9C:76:75
DES-IP-ADDR => DF:D8:77:87
DATA-LEN = 590

ICMP HEADER
TYPE= 3 -> DEST-UNREACH
CODE = 04
CHECKSUM = CD:4A
PARAMETER = 00:00:05:D4
INFORMATION = 45:00:05:DC:25:52:40:00
Total: Packets = 273, IPS = 273, ARPS = 0, ICMPS = 4, ECTPS = 0, ATAS = 0, TKIPS = 0

********************************************
Cpre530 PA II Isaac C Klein
07/12/2019

IP/ICMP-ECHO-REQUEST/REPLY-EXAMPLE
********************************************

DEST ADDR = 00:00:0C:31:01:AA:


SRC ADDR = 00:50:56:86:20:B3:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 10
PAY-LEN = 76
IDENTIFIER = 1929
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 17 -> UDP
CHECKSUM = 12117
SRC-IP-ADDR => 40:27:03:BA
DES-IP-ADDR => AD:E6:90:6D
DATA-LEN = 90
Total: Packets = 534, IPS = 500, ARPS = 33, ICMPS = 0, ECTPS = 1, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:00:39:CF:D9:CD:


SRC ADDR = 00:40:33:D9:7C:FD:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 84
IDENTIFIER = 58643
FLAGS = 0 0 0
OFFSET = 0
TTL = 64
PROTOCOL = 1 -> ICMP
CHECKSUM = 12550
SRC-IP-ADDR => DF:EC:BA:EA
DES-IP-ADDR => DF:EC:BA:FA
DATA-LEN = 98

ICMP HEADER
TYPE= 8 -> ECHO-REQUEST
CODE = 00
CHECKSUM = 8A:97
PARAMETER = C4:1B:00:00
INFORMATION = 7F:33:D7:37:59:DE:0E:00
Total: Packets = 535, IPS = 501, ARPS = 33, ICMPS = 1, ECTPS = 1, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:00:0C:31:01:AA:


SRC ADDR = 00:50:56:86:7E:0F:
Cpre530 PA II Isaac C Klein
07/12/2019
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 60
IDENTIFIER = 9504
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 48397
SRC-IP-ADDR => 40:27:03:69
DES-IP-ADDR => A2:D0:77:29
DATA-LEN = 74
Total: Packets = 536, IPS = 502, ARPS = 33, ICMPS = 1, ECTPS = 1, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:40:33:D9:7C:FD:


SRC ADDR = 00:00:39:CF:D9:CD:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 84
IDENTIFIER = 2560
FLAGS = 0 0 0
OFFSET = 0
TTL = 255
PROTOCOL = 1 -> ICMP
CHECKSUM = 34272
SRC-IP-ADDR => DF:EC:BA:FA
DES-IP-ADDR => DF:EC:BA:EA
DATA-LEN = 98

ICMP HEADER
TYPE= 0 -> ECHO-REPLY
CODE = 00
CHECKSUM = 92:97
PARAMETER = C4:1B:00:00
INFORMATION = 7F:33:D7:37:59:DE:0E:00
Total: Packets = 537, IPS = 503, ARPS = 33, ICMPS = 2, ECTPS = 1, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = 00:00:C0:9F:A0:97:


SRC ADDR = 00:A0:CC:3B:BF:FA:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 10
PAY-LEN = 60
IDENTIFIER = 15430
FLAGS = 0 1 0
OFFSET = 0
Cpre530 PA II Isaac C Klein
07/12/2019
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 11854
SRC-IP-ADDR => E7:9C:7B:73
DES-IP-ADDR => E7:9C:7B:75
DATA-LEN = 74
Total: Packets = 538, IPS = 504, ARPS = 33, ICMPS = 2, ECTPS = 1, ATAS = 0, TKIPS = 0

********************************************

ATA-EXAMPLE
********************************************

DEST ADDR = 00:04:76:96:7B:DA:


SRC ADDR = 00:16:E3:19:27:15:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 131
IDENTIFIER = 0
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 17 -> UDP
CHECKSUM = 57590
SRC-IP-ADDR => F7:8A:35:2D
DES-IP-ADDR => F7:8A:35:31
DATA-LEN = 145
Total: Packets = 849, IPS = 804, ARPS = 41, ICMPS = 4, ECTPS = 3, ATAS = 0, TKIPS = 0

********************************************

DEST ADDR = FF:FF:FF:FF:FF:FF:


SRC ADDR = 00:04:76:96:7B:DA:
ETH TYPE = 88A2 -> ATA
Total: Packets = 850, IPS = 804, ARPS = 41, ICMPS = 4, ECTPS = 3, ATAS = 1, TKIPS = 0

********************************************

DEST ADDR = 00:00:0C:31:01:AA:


SRC ADDR = 00:50:56:86:53:59:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 10
PAY-LEN = 76
IDENTIFIER = 57487
FLAGS = 0 1 0
OFFSET = 0
TTL = 63
PROTOCOL = 17 -> UDP
CHECKSUM = 13460
Cpre530 PA II Isaac C Klein
07/12/2019
SRC-IP-ADDR => 40:27:03:C2
DES-IP-ADDR => 4B:BC:E7:77
DATA-LEN = 90
Total: Packets = 851, IPS = 805, ARPS = 41, ICMPS = 4, ECTPS = 3, ATAS = 1, TKIPS = 0

********************************************

TKIP-EXAMPLE
********************************************

DEST ADDR = 00:16:E3:19:27:15:


SRC ADDR = 00:04:76:96:7B:DA:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 52
IDENTIFIER = 34935
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 37340
SRC-IP-ADDR => E7:9C:76:73
DES-IP-ADDR => 37:6D:9B:E2
DATA-LEN = 66
Total: Packets = 1446, IPS = 1402, ARPS = 40, ICMPS = 9, ECTPS = 1, ATAS = 2, TKIPS = 1

********************************************

DEST ADDR = 00:10:C6:30:6B:B3:


SRC ADDR = 00:90:D0:EB:46:E7:
ETH TYPE = 2452 -> TKIP
Total: Packets = 1447, IPS = 1402, ARPS = 40, ICMPS = 9, ECTPS = 1, ATAS = 2, TKIPS = 2

********************************************

DEST ADDR = 00:50:56:86:06:D3:


SRC ADDR = 00:00:0C:31:01:AA:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 104
IDENTIFIER = 41997
FLAGS = 0 1 0
OFFSET = 0
TTL = 60
PROTOCOL = 6 -> TCP
CHECKSUM = 5506
SRC-IP-ADDR => C7:64:10:64
DES-IP-ADDR => 40:27:03:7B
DATA-LEN = 118
Cpre530 PA II Isaac C Klein
07/12/2019
Total: Packets = 1448, IPS = 1403, ARPS = 40, ICMPS = 9, ECTPS = 1, ATAS = 2, TKIPS = 2

********************************************

********************************************

DEST ADDR = 00:0E:35:78:0C:02:


SRC ADDR = 00:90:D0:EB:46:E7:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 98
IDENTIFIER = 43808
FLAGS = 0 0 0
OFFSET = 0
TTL = 64
PROTOCOL = 17 -> UDP
CHECKSUM = 43121
SRC-IP-ADDR => B5:6C:23:1D
DES-IP-ADDR => B5:6C:23:79
DATA-LEN = 112
Total: Packets = 1400, IPS = 1357, ARPS = 40, ICMPS = 9, ECTPS = 1, ATAS = 2, TKIPS = 0

********************************************

DEST ADDR = FF:FF:FF:FF:FF:FF:


SRC ADDR = 00:0E:35:78:0C:02:
ETH TYPE = 2452 -> TKIP
Total: Packets = 1401, IPS = 1357, ARPS = 40, ICMPS = 9, ECTPS = 1, ATAS = 2, TKIPS = 1

********************************************

DEST ADDR = 00:04:76:96:7B:DA:


SRC ADDR = 00:16:E3:19:27:15:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 40
PAY-LEN = 40
IDENTIFIER = 10870
FLAGS = 0 1 0
OFFSET = 0
TTL = 106
PROTOCOL = 6 -> TCP
CHECKSUM = 38819
SRC-IP-ADDR => 4E:6A:CF:D7
DES-IP-ADDR => EE:AC:F5:D3
DATA-LEN = 60
Total: Packets = 1402, IPS = 1358, ARPS = 40, ICMPS = 9, ECTPS = 1, ATAS = 2, TKIPS = 1

********************************************
Cpre530 PA II Isaac C Klein
07/12/2019

IP/TCP-EXAMPLE
********************************************

DEST ADDR = 00:E0:1C:3C:17:C2:


SRC ADDR = 00:1F:33:D9:81:60:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 60
PAY-LEN = 40
IDENTIFIER = 63521
FLAGS = 0 1 0
OFFSET = 0
TTL = 50
PROTOCOL = 6 -> TCP
CHECKSUM = 54534
SRC-IP-ADDR => 5F:9D:9A:74
DES-IP-ADDR => DF:D8:77:87
DATA-LEN = 60

TCP HEADER
SRC-PORT-NUM = 00:19
DEST-PORT-NUM = 05:BE
SEQ-NUM = AE:EC:63:CA
ACKNOW-NUM = 7E:C4:8D:22
HDR-LEN = 5
FLAGS = 0 1 0 0 0 1 -> ACK -> FIN
WINDOW-SIZE = 34848
CHECKSUM = B1:CC
URGENT-PTR = 0
OPTIONS:
00:00:00:00:00:
00:04:E6:39:37:
2A:38:98:00:00:
00:D7:75:2A:5D:
9A:CD:07:1E:3C:
00:00:00:3C:00:
00:00:81:00:00:
00:56:00:64:00:
00:00:00:00:00:

Total: PACKS = 316, IPS = 286, ARPS = 27, ICMPS = 4, TCPS = 172, DNS = 110 ECTPS = 2, ATAS =
0, TKIPS = 0

********************************************

DEST ADDR = 00:1F:33:D9:81:60:


SRC ADDR = 00:E0:1C:3C:17:C2:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
Cpre530 PA II Isaac C Klein
07/12/2019
PAY-LEN = 40
IDENTIFIER = 26917
FLAGS = 0 1 0
OFFSET = 0
TTL = 128
PROTOCOL = 6 -> TCP
CHECKSUM = 33781
SRC-IP-ADDR => DF:D8:77:87
DES-IP-ADDR => 5F:9D:9A:74
DATA-LEN = 60

TCP HEADER
SRC-PORT-NUM = 05:BE
DEST-PORT-NUM = 00:19
SEQ-NUM = 7E:C4:8D:23
ACKNOW-NUM = AE:EC:63:CB
HDR-LEN = 5
FLAGS = 0 1 0 0 0 0 -> ACK
WINDOW-SIZE = 64997
CHECKSUM = 3C:06
URGENT-PTR = 0
OPTIONS:
00:00:00:00:00:
00:00:7B:00:38:
ED:EC:98:00:00:
00:D7:75:2A:5D:
6A:A3:12:1E:3C:
00:00:00:3C:00:
00:00:81:00:00:
00:56:00:64:00:
00:00:00:00:00:

Total: PACKS = 317, IPS = 287, ARPS = 27, ICMPS = 4, TCPS = 173, DNS = 110 ECTPS = 2, ATAS =
0, TKIPS = 0

********************************************

DEST ADDR = 00:E0:1C:3C:17:C2:


SRC ADDR = 00:1F:33:D9:81:60:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 60
PAY-LEN = 40
IDENTIFIER = 63777
FLAGS = 0 1 0
OFFSET = 0
TTL = 50
PROTOCOL = 6 -> TCP
CHECKSUM = 54533
SRC-IP-ADDR => 5F:9D:9A:74
DES-IP-ADDR => DF:D8:77:87
DATA-LEN = 60
Cpre530 PA II Isaac C Klein
07/12/2019

TCP HEADER
SRC-PORT-NUM = 00:19
DEST-PORT-NUM = 05:BE
SEQ-NUM = AE:EC:63:CB
ACKNOW-NUM = 7E:C4:8D:23
HDR-LEN = 5
FLAGS = 0 1 0 0 0 0 -> ACK
WINDOW-SIZE = 34848
CHECKSUM = B1:CB
URGENT-PTR = 0
OPTIONS:
00:00:00:00:00:
00:08:00:45:10:
00:4C:A0:00:00:
00:D7:75:2A:5D:
5C:9E:63:1F:4A:
00:00:00:4A:00:
00:00:81:00:00:
00:56:00:64:00:
00:00:00:00:00:

Total: PACKS = 318, IPS = 288, ARPS = 27, ICMPS = 4, TCPS = 174, DNS = 110 ECTPS = 2, ATAS =
0, TKIPS = 0

********************************************

DEST ADDR = 00:00:0C:31:01:AA:


SRC ADDR = 00:50:56:86:70:E4:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 60
IDENTIFIER = 20162
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 6 -> TCP
CHECKSUM = 47099
SRC-IP-ADDR => 40:27:03:AF
DES-IP-ADDR => C6:31:B6:6A
DATA-LEN = 74

TCP HEADER
SRC-PORT-NUM = D8:CC
DEST-PORT-NUM = 00:50
SEQ-NUM = E4:04:A4:E9
ACKNOW-NUM = 00:00:00:00
HDR-LEN = 10
FLAGS = 0 0 0 0 1 0 -> SYN
WINDOW-SIZE = 29200
CHECKSUM = E3:C4
Cpre530 PA II Isaac C Klein
07/12/2019
URGENT-PTR = 0
OPTIONS:
02:04:05:B4:04:
02:08:0A:B1:C7:
1D:E6:00:00:00:
00:01:03:03:07:
B0:00:00:00:D7:
75:2A:5D:5F:D1:
2E:22:5A:00:00:
00:5A:00:00:00:
81:00:00:00:56:

Total: PACKS = 319, IPS = 289, ARPS = 27, ICMPS = 4, TCPS = 175, DNS = 110 ECTPS = 2, ATAS =
0, TKIPS = 0

********************************************

UDP-EXAMPLE
********************************************

DEST ADDR = 00:00:0C:31:01:AA:


SRC ADDR = 00:50:56:86:14:CE:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 10
PAY-LEN = 76
IDENTIFIER = 13714
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 17 -> UDP
CHECKSUM = 4382
SRC-IP-ADDR => 40:27:03:A1
DES-IP-ADDR => 8A:44:C9:31
DATA-LEN = 90
Total: PACKS = 320, IPS = 290, ARPS = 27, ICMPS = 4, TCPS = 175, DNS = 111 ECTPS = 2, ATAS =
0, TKIPS = 0

********************************************

DEST ADDR = 00:16:E3:19:27:15:


SRC ADDR = 00:04:76:96:7B:DA:
ETH TYPE = 0800 -> IP
VER = 04, HDR-LEN = 05
SERVICE = 00
PAY-LEN = 46
IDENTIFIER = 0
FLAGS = 0 1 0
OFFSET = 0
TTL = 64
PROTOCOL = 17 -> UDP
Cpre530 PA II Isaac C Klein
07/12/2019
CHECKSUM = 2459
SRC-IP-ADDR => EE:AC:F5:D3
DES-IP-ADDR => 56:E2:F5:C1
DATA-LEN = 60
Total: PACKS = 321, IPS = 291, ARPS = 27, ICMPS = 4, TCPS = 175, DNS = 112 ECTPS = 2, ATAS =
0, TKIPS = 0

//ADDED GLOBAL VARIABLES

int Num_Of_Packets = 0;

int Num_Of_ARPS = 0;

int Num_Of_IPS = 0;

int Num_Of_ECTPS = 0;

int Num_Of_ATAS = 0;

int Num_Of_TKIPS = 0;

int Num_Of_ICMPS = 0;

int Num_Of_TCPS = 0;

int Num_Of_UDPS = 0;

//ENDING FUNCTION LEFT UNEDITED, BULK OF CODE IN THIS FUNCTION.

void raw_print(u_char *user, const struct pcap_pkthdr *h, const u_char *p)

u_int length = h->len;

u_int caplen = h->caplen;

uint16_t e_type;

Num_Of_Packets += 1;

printf("********************************************\n\n");

printf("DEST ADDR = %02X:%02X:%02X:%02X:%02X:%02X:\n", p[0],p[1],p[2],p[3],p[4],p[5]);

printf("SRC ADDR = %02X:%02X:%02X:%02X:%02X:%02X:\n", p[6],p[7],p[8],p[9],p[10],p[11]);

e_type = p[12]*256 + p[13];

printf("ETH TYPE = %04X ", e_type);

if (e_type == 0x800) {

printf(" -> IP\n");

Num_Of_IPS += 1;
Cpre530 PA II Isaac C Klein
07/12/2019
int Icmp = 0;

int Tcp = 0;

//Take the left 4 bits and shift them to the right to one value.

printf("VER = %02X, ", p[14] >> 4);

//Take only the right 4 bits.

printf("HDR-LEN = %02X\n", 0x0F & p[14]);

printf("SERVICE = %02X\n", p[15]);

//Take the right 4 bits and add them to the left 8 bits, shifted 4 to the left.

printf("PAY-LEN = %d\n", p[17] + (p[16] << 8));

printf("IDENTIFIER = %d\n", p[18] + (p[19] << 8));

//Left most bit anded and shifted to bit 1, middle anded and shifted to bit 1, right anded
and shifted to bit 1.

printf("FLAGS = %d %d %d\n", (p[20] & 0x80) >> 7, (p[20] & 0x40) >> 6, (p[20] &
0x20) >> 5);

printf("OFFSET = %d\n", ((p[20] & 0x1F) << 8) + (p[21]));

printf("TTL = %d\n", p[22]);

printf("PROTOCOL = %d ", p[23]);

if (p[23] == 1) { printf("-> ICMP"); Icmp = 1; Num_Of_ICMPS += 1; }

if (p[23] == 6) { printf("-> TCP"); Tcp = 1; Num_Of_TCPS += 1;}

if (p[23] == 17) { printf("-> UDP"); Num_Of_UDPS += 1; }

printf("\n");

printf("CHECKSUM = %d\n", p[25] + (p[24] << 8));

printf("SRC-IP-ADDR => %02X:%02X:%02X:%02X\n", p[26], p[27], p[28], p[29]);

printf("DES-IP-ADDR => %02X:%02X:%02X:%02X\n", p[30], p[31], p[32], p[33]);

printf("DATA-LEN = %d\n", length);

if (Icmp) {

printf("\n");

printf("ICMP HEADER\n");

printf("TYPE= %d ",p[34]);

if (p[34] == 8) { printf("-> ECHO-REQUEST");}

if (p[34] == 0) { printf("-> ECHO-REPLY");}

if (p[34] == 13) { printf("-> TS-REQUEST");}


Cpre530 PA II Isaac C Klein
07/12/2019
if (p[34] == 14) { printf("-> TS-REPLY");}

if (p[34] == 11) { printf("-> TIME-EXCEEDED");}

if (p[34] == 5) { printf("-> REDIRECTION");}

if (p[34] == 3) { printf("-> DEST-UNREACH");}

printf("\n");

printf("CODE = %02X\n", p[35]);

printf("CHECKSUM = %02X:%02X\n", p[36], p[37]);

printf("PARAMETER = %02X:%02X:%02X:%02X\n", p[38],p[39],p[40],p[41]);

printf("INFORMATION = %02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X\n",
p[42], p[43], p[44], p[45], p[46], p[47], p[48], p[49]);

if (Tcp) {

printf("\n");

printf("TCP HEADER\n");

printf("SRC-PORT-NUM = %02X:%02X\n", p[34], p[35]);

printf("DEST-PORT-NUM = %02X:%02X\n", p[36], p[37]);

printf("SEQ-NUM = %02X:%02X:%02X:%02X\n", p[38], p[39], p[40], p[41]);

printf("ACKNOW-NUM = %02X:%02X:%02X:%02X\n", p[42], p[43], p[44], p[45]);

printf("HDR-LEN = %d\n", (p[46] & 0xF0) >> 4);

int Urg = (p[47] & 0x20) >> 5;

int Ack = (p[47] & 0x10) >> 4;

int Psh = (p[47] & 0x8) >> 3;

int Rst = (p[47] & 0x4) >> 2;

int Syn = (p[47] & 0x2) >> 1;

int Fin = (p[47] & 0x1);

printf("FLAGS = %d %d %d %d %d %d", Urg, Ack, Psh, Rst, Syn, Fin );

if (Urg) { printf(" -> URG");}

if (Ack) { printf(" -> ACK");}

if (Psh) { printf(" -> PSH");}


Cpre530 PA II Isaac C Klein
07/12/2019
if (Rst) { printf(" -> RST");}

if (Syn) { printf(" -> SYN");}

if (Fin) { printf(" -> FIN");}

printf("\n");

printf("WINDOW-SIZE = %d\n", p[49] + (p[48] << 8));

printf("CHECKSUM = %02X:%02X\n", p[50], p[51]);

printf("URGENT-PTR = %d\n", p[53] + (p[52] << 8));

printf("OPTIONS:\n");

int i, j;

for (i = 0; i < 9; i += 1) {

for (j = 1; j < 6; j += 1) {

printf("%02X:", p[53 + i*5 + j]);

printf("\n");

printf("\n");

else if (e_type == 0x806) {

printf(" -> ARP\n");

Num_Of_ARPS += 1;

printf("HW-TYPE = %02X%02X\n", p[14], p[15]);

printf("PROTO-TYPE = %02X%02X\n", p[16],p[17]);

printf("HW-LEN = %d\n", p[18]);

printf("PROTO-LEN = %d\n", p[19]);

int oper = p[21] + (p[20] << 8);

printf("OPERATION = %d ", oper);

if (oper == 1) { printf("-> REQUEST"); }

if (oper == 2) { printf("-> REPLY"); }

printf("\n");
Cpre530 PA II Isaac C Klein
07/12/2019
printf("SENDER-HW-ADDR => %02X:%02X:%02X:%02X:%02X:%02X\n", p[22], p[23],
p[24], p[25], p[26], p[27]);

printf("SENDER-PROTO-ADDR => %02X:%02X:%02X:%02X\n", p[28], p[29], p[30],


p[31]);

printf("TARGET-HW-ADDR => %02X:%02X:%02X:%02X:%02X:%02X\n", p[32], p[33],


p[34], p[35], p[36], p[37]);

printf("TARGET-PROTO-ADDR => %02X:%02X:%02X:%02X\n", p[38], p[39], p[40],


p[41]);

else if (e_type == 0x9000) {

printf(" -> ECTP\n");

Num_Of_ECTPS += 1;

else if (e_type == 0x2452) {

printf(" -> TKIP\n");

Num_Of_TKIPS += 1;

else if (e_type == 0x88A2) {

printf(" -> ATA\n");

Num_Of_ATAS += 1;

else {

printf("\n");

printf("Total: PACKS = %d, IPS = %d, ARPS = %d, ICMPS = %d, TCPS = %d, DNS = %d
ECTPS = %d, ATAS = %d, TKIPS = %d\n", Num_Of_Packets, Num_Of_IPS, Num_Of_ARPS,
Num_Of_ICMPS, Num_Of_TCPS, Num_Of_UDPS, Num_Of_ECTPS, Num_Of_ATAS, Num_Of_TKIPS);

//printf("\n");

//default_print(p, caplen);

putchar('\n'); }

You might also like