2024-06-19 15:06:14 +08:00
|
|
|
#pragma once
|
2023-12-22 14:54:25 +08:00
|
|
|
|
2024-10-30 17:00:20 +08:00
|
|
|
#include <gtest/gtest.h>
|
|
|
|
|
|
2024-04-21 11:30:41 +08:00
|
|
|
#ifdef __cplusplus
|
2023-12-22 14:54:25 +08:00
|
|
|
extern "C"
|
|
|
|
|
{
|
|
|
|
|
#endif
|
|
|
|
|
|
2024-10-30 17:00:20 +08:00
|
|
|
#include "tuple.h"
|
|
|
|
|
#include "packet_parser.h"
|
|
|
|
|
#include "packet_internal.h"
|
|
|
|
|
#include "utils_internal.h"
|
|
|
|
|
|
|
|
|
|
#include "session_pool.h"
|
|
|
|
|
#include "session_timer.h"
|
|
|
|
|
#include "session_table.h"
|
|
|
|
|
#include "session_filter.h"
|
|
|
|
|
#include "session_internal.h"
|
|
|
|
|
#include "session_transition.h"
|
|
|
|
|
#include "session_manager_cfg.h"
|
|
|
|
|
#include "session_manager_rte.h"
|
|
|
|
|
|
|
|
|
|
__attribute__((unused)) static struct session_manager_cfg sess_mgr_cfg = {
|
|
|
|
|
.instance_id = 1,
|
|
|
|
|
.thread_num = 1,
|
|
|
|
|
.session_id_seed = 0xFFFFF,
|
|
|
|
|
|
|
|
|
|
.tcp_session_max = 256,
|
|
|
|
|
.udp_session_max = 256,
|
|
|
|
|
|
|
|
|
|
.evict_old_on_tcp_table_limit = 1,
|
|
|
|
|
.evict_old_on_udp_table_limit = 1,
|
|
|
|
|
|
|
|
|
|
.expire_period_ms = 0,
|
|
|
|
|
.expire_batch_max = 1024,
|
|
|
|
|
|
|
|
|
|
.tcp_timeout_ms =
|
|
|
|
|
{
|
|
|
|
|
.init = 1,
|
|
|
|
|
.handshake = 2,
|
|
|
|
|
.data = 3,
|
|
|
|
|
.half_closed = 4,
|
|
|
|
|
.time_wait = 5,
|
|
|
|
|
.discard_default = 6,
|
|
|
|
|
.unverified_rst = 7,
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
.udp_timeout_ms =
|
|
|
|
|
{
|
|
|
|
|
.data = 8,
|
|
|
|
|
.discard_default = 0,
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
.duplicated_packet_bloom_filter =
|
|
|
|
|
{
|
|
|
|
|
.enable = 1,
|
|
|
|
|
.capacity = 1000,
|
|
|
|
|
.time_window_ms = 10,
|
|
|
|
|
.error_rate = 0.0001,
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
.evicted_session_bloom_filter =
|
|
|
|
|
{
|
|
|
|
|
.enable = 1,
|
|
|
|
|
.capacity = 1000,
|
|
|
|
|
.time_window_ms = 10,
|
|
|
|
|
.error_rate = 0.0001,
|
|
|
|
|
},
|
|
|
|
|
|
|
|
|
|
.tcp_reassembly =
|
|
|
|
|
{
|
|
|
|
|
.enable = 1,
|
|
|
|
|
.timeout_ms = 1000,
|
|
|
|
|
.buffered_segments_max = 16,
|
|
|
|
|
},
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
static inline void packet_overwrite_ipid(struct packet *pkt, uint16_t ip_id)
|
|
|
|
|
{
|
|
|
|
|
const struct layer_private *ipv4_layer = packet_get_innermost_layer(pkt, LAYER_PROTO_IPV4);
|
|
|
|
|
EXPECT_TRUE(ipv4_layer);
|
|
|
|
|
struct ip *hdr = (struct ip *)ipv4_layer->hdr_ptr;
|
|
|
|
|
hdr->ip_id = htons(ip_id);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static inline void packet_overwrite_v4_saddr(struct packet *pkt, struct in_addr *addr)
|
|
|
|
|
{
|
|
|
|
|
const struct layer_private *ipv4_layer = packet_get_innermost_layer(pkt, LAYER_PROTO_IPV4);
|
|
|
|
|
EXPECT_TRUE(ipv4_layer);
|
|
|
|
|
struct ip *hdr = (struct ip *)ipv4_layer->hdr_ptr;
|
|
|
|
|
hdr->ip_src = *addr;
|
|
|
|
|
}
|
|
|
|
|
|
2023-12-22 14:54:25 +08:00
|
|
|
/******************************************************************************
|
|
|
|
|
* test packet: HTTP www.example.com
|
|
|
|
|
******************************************************************************/
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 1: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea), Dst: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Destination: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Source: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 192.168.38.105, Dst: 93.184.216.34
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 64
|
|
|
|
|
* Identification: 0x0000 (0)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x1dcc [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x1dcc]
|
|
|
|
|
* Source Address: 192.168.38.105
|
|
|
|
|
* Destination Address: 93.184.216.34
|
|
|
|
|
* Transmission Control Protocol, Src Port: 60111, Dst Port: 80, Seq: 0, Len: 0
|
|
|
|
|
* Source Port: 60111
|
|
|
|
|
* Destination Port: 80
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 0 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 2089584940
|
|
|
|
|
* [Next Sequence Number: 1 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 0
|
|
|
|
|
* Acknowledgment number (raw): 0
|
|
|
|
|
* 1011 .... = Header Length: 44 bytes (11)
|
|
|
|
|
* Flags: 0x002 (SYN)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...0 .... = Acknowledgment: Not set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..1. = Syn: Set
|
|
|
|
|
* [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 80]
|
|
|
|
|
* [Connection establish request (SYN): server port 80]
|
|
|
|
|
* [Severity level: Chat]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ··········S·]
|
|
|
|
|
* Window: 65535
|
|
|
|
|
* [Calculated window size: 65535]
|
|
|
|
|
* Checksum: 0xca71 [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xca71]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (24 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), Timestamps, SACK permitted, End of Option List (EOL), End of Option List (EOL)
|
|
|
|
|
* TCP Option - Maximum segment size: 1460 bytes
|
|
|
|
|
* Kind: Maximum Segment Size (2)
|
|
|
|
|
* Length: 4
|
|
|
|
|
* MSS Value: 1460
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Window scale: 6 (multiply by 64)
|
|
|
|
|
* Kind: Window Scale (3)
|
|
|
|
|
* Length: 3
|
|
|
|
|
* Shift count: 6
|
|
|
|
|
* [Multiplier: 64]
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 741028506: TSval 741028506, TSecr 0
|
|
|
|
|
* Timestamp echo reply: 0
|
|
|
|
|
* TCP Option - SACK permitted
|
|
|
|
|
* Kind: SACK Permitted (4)
|
|
|
|
|
* Length: 2
|
|
|
|
|
* TCP Option - End of Option List (EOL)
|
|
|
|
|
* Kind: End of Option List (0)
|
|
|
|
|
* TCP Option - End of Option List (EOL)
|
|
|
|
|
* Kind: End of Option List (0)
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.000000000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000000000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt1_c2s_syn[] = {
|
|
|
|
|
0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x08, 0x00, 0x45, 0x00, 0x00, 0x40, 0x00, 0x00, 0x40, 0x00, 0x40, 0x06, 0x1d, 0xcc,
|
|
|
|
|
0xc0, 0xa8, 0x26, 0x69, 0x5d, 0xb8, 0xd8, 0x22, 0xea, 0xcf, 0x00, 0x50, 0x7c, 0x8c, 0x89, 0x2c, 0x00, 0x00, 0x00, 0x00, 0xb0, 0x02, 0xff, 0xff, 0xca, 0x71,
|
|
|
|
|
0x00, 0x00, 0x02, 0x04, 0x05, 0xb4, 0x01, 0x03, 0x03, 0x06, 0x01, 0x01, 0x08, 0x0a, 0x2c, 0x2b, 0x32, 0x9a, 0x00, 0x00, 0x00, 0x00, 0x04, 0x02, 0x00, 0x00};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 2: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: NewH3CTe_96:38:0e (48:73:97:96:38:0e), Dst: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Destination: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Source: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 93.184.216.34, Dst: 192.168.38.105
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 60
|
|
|
|
|
* Identification: 0x0000 (0)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 42
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x33d0 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x33d0]
|
|
|
|
|
* Source Address: 93.184.216.34
|
|
|
|
|
* Destination Address: 192.168.38.105
|
|
|
|
|
* Transmission Control Protocol, Src Port: 80, Dst Port: 60111, Seq: 0, Ack: 1, Len: 0
|
|
|
|
|
* Source Port: 80
|
|
|
|
|
* Destination Port: 60111
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 0 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 1381452130
|
|
|
|
|
* [Next Sequence Number: 1 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 2089584941
|
|
|
|
|
* 1010 .... = Header Length: 40 bytes (10)
|
|
|
|
|
* Flags: 0x012 (SYN, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..1. = Syn: Set
|
|
|
|
|
* [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 80]
|
|
|
|
|
* [Connection establish acknowledge (SYN+ACK): server port 80]
|
|
|
|
|
* [Severity level: Chat]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······A··S·]
|
|
|
|
|
* Window: 65535
|
|
|
|
|
* [Calculated window size: 65535]
|
|
|
|
|
* Checksum: 0xc5aa [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xc5aa]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (20 bytes), Maximum segment size, SACK permitted, Timestamps, No-Operation (NOP), Window scale
|
|
|
|
|
* TCP Option - Maximum segment size: 1300 bytes
|
|
|
|
|
* Kind: Maximum Segment Size (2)
|
|
|
|
|
* Length: 4
|
|
|
|
|
* MSS Value: 1300
|
|
|
|
|
* TCP Option - SACK permitted
|
|
|
|
|
* Kind: SACK Permitted (4)
|
|
|
|
|
* Length: 2
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 1215574570: TSval 1215574570, TSecr 741028506
|
|
|
|
|
* Timestamp echo reply: 741028506
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Window scale: 9 (multiply by 512)
|
|
|
|
|
* Kind: Window Scale (3)
|
|
|
|
|
* Length: 3
|
|
|
|
|
* Shift count: 9
|
|
|
|
|
* [Multiplier: 512]
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.262288000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.262288000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 1]
|
|
|
|
|
* [The RTT to ACK the segment was: 0.262288000 seconds]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt2_s2c_syn_ack[] = {
|
|
|
|
|
0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x08, 0x00, 0x45, 0x00, 0x00, 0x3c, 0x00, 0x00, 0x40, 0x00, 0x2a, 0x06, 0x33, 0xd0,
|
|
|
|
|
0x5d, 0xb8, 0xd8, 0x22, 0xc0, 0xa8, 0x26, 0x69, 0x00, 0x50, 0xea, 0xcf, 0x52, 0x57, 0x49, 0x62, 0x7c, 0x8c, 0x89, 0x2d, 0xa0, 0x12, 0xff, 0xff, 0xc5, 0xaa,
|
|
|
|
|
0x00, 0x00, 0x02, 0x04, 0x05, 0x14, 0x04, 0x02, 0x08, 0x0a, 0x48, 0x74, 0x32, 0x2a, 0x2c, 0x2b, 0x32, 0x9a, 0x01, 0x03, 0x03, 0x09};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 3: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea), Dst: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Destination: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Source: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 192.168.38.105, Dst: 93.184.216.34
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 52
|
|
|
|
|
* Identification: 0x0000 (0)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x1dd8 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x1dd8]
|
|
|
|
|
* Source Address: 192.168.38.105
|
|
|
|
|
* Destination Address: 93.184.216.34
|
|
|
|
|
* Transmission Control Protocol, Src Port: 60111, Dst Port: 80, Seq: 1, Ack: 1, Len: 0
|
|
|
|
|
* Source Port: 60111
|
|
|
|
|
* Destination Port: 80
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 1 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 2089584941
|
|
|
|
|
* [Next Sequence Number: 1 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 1381452131
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x010 (ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······A····]
|
|
|
|
|
* Window: 2052
|
|
|
|
|
* [Calculated window size: 131328]
|
|
|
|
|
* [Window size scaling factor: 64]
|
|
|
|
|
* Checksum: 0xeace [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xeace]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 741028768: TSval 741028768, TSecr 1215574570
|
|
|
|
|
* Timestamp echo reply: 1215574570
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.262565000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000277000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 2]
|
|
|
|
|
* [The RTT to ACK the segment was: 0.000277000 seconds]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt3_c2s_ack[] = {
|
|
|
|
|
0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x08, 0x00, 0x45, 0x00, 0x00, 0x34, 0x00, 0x00, 0x40, 0x00, 0x40, 0x06, 0x1d, 0xd8,
|
|
|
|
|
0xc0, 0xa8, 0x26, 0x69, 0x5d, 0xb8, 0xd8, 0x22, 0xea, 0xcf, 0x00, 0x50, 0x7c, 0x8c, 0x89, 0x2d, 0x52, 0x57, 0x49, 0x63, 0x80, 0x10, 0x08, 0x04, 0xea, 0xce,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x2c, 0x2b, 0x33, 0xa0, 0x48, 0x74, 0x32, 0x2a};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 4: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea), Dst: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Destination: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Source: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 192.168.38.105, Dst: 93.184.216.34
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 131
|
|
|
|
|
* Identification: 0x0000 (0)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x1d89 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x1d89]
|
|
|
|
|
* Source Address: 192.168.38.105
|
|
|
|
|
* Destination Address: 93.184.216.34
|
|
|
|
|
* Transmission Control Protocol, Src Port: 60111, Dst Port: 80, Seq: 1, Ack: 1, Len: 79
|
|
|
|
|
* Source Port: 60111
|
|
|
|
|
* Destination Port: 80
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 79]
|
|
|
|
|
* Sequence Number: 1 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 2089584941
|
|
|
|
|
* [Next Sequence Number: 80 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 1381452131
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 2052
|
|
|
|
|
* [Calculated window size: 131328]
|
|
|
|
|
* [Window size scaling factor: 64]
|
|
|
|
|
* Checksum: 0x59f8 [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x59f8]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 741028768: TSval 741028768, TSecr 1215574570
|
|
|
|
|
* Timestamp echo reply: 1215574570
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.262783000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000218000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
* [Bytes in flight: 79]
|
|
|
|
|
* [Bytes sent since last PSH flag: 79]
|
|
|
|
|
* TCP payload (79 bytes)
|
|
|
|
|
* Hypertext Transfer Protocol
|
|
|
|
|
* GET / HTTP/1.1\r\n
|
|
|
|
|
* [Expert Info (Chat/Sequence): GET / HTTP/1.1\r\n]
|
|
|
|
|
* [GET / HTTP/1.1\r\n]
|
|
|
|
|
* [Severity level: Chat]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* Request Method: GET
|
|
|
|
|
* Request URI: /
|
|
|
|
|
* Request Version: HTTP/1.1
|
|
|
|
|
* Host: www.example.com\r\n
|
|
|
|
|
* User-Agent: curl/7.64.1\r\n
|
|
|
|
|
*/
|
|
|
|
|
// Accept: */*\r\n
|
|
|
|
|
// \r\n
|
|
|
|
|
// [Full request URI: http://www.example.com/]
|
|
|
|
|
// [HTTP request 1/1]
|
|
|
|
|
// [Response in frame: 7]
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt4_c2s_http_req[] = {
|
|
|
|
|
0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x08, 0x00, 0x45, 0x00, 0x00, 0x83, 0x00, 0x00, 0x40, 0x00, 0x40, 0x06, 0x1d, 0x89,
|
|
|
|
|
0xc0, 0xa8, 0x26, 0x69, 0x5d, 0xb8, 0xd8, 0x22, 0xea, 0xcf, 0x00, 0x50, 0x7c, 0x8c, 0x89, 0x2d, 0x52, 0x57, 0x49, 0x63, 0x80, 0x18, 0x08, 0x04, 0x59, 0xf8,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x2c, 0x2b, 0x33, 0xa0, 0x48, 0x74, 0x32, 0x2a, 0x47, 0x45, 0x54, 0x20, 0x2f, 0x20, 0x48, 0x54, 0x54, 0x50, 0x2f, 0x31,
|
|
|
|
|
0x2e, 0x31, 0x0d, 0x0a, 0x48, 0x6f, 0x73, 0x74, 0x3a, 0x20, 0x77, 0x77, 0x77, 0x2e, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x2e, 0x63, 0x6f, 0x6d, 0x0d,
|
|
|
|
|
0x0a, 0x55, 0x73, 0x65, 0x72, 0x2d, 0x41, 0x67, 0x65, 0x6e, 0x74, 0x3a, 0x20, 0x63, 0x75, 0x72, 0x6c, 0x2f, 0x37, 0x2e, 0x36, 0x34, 0x2e, 0x31, 0x0d, 0x0a,
|
|
|
|
|
0x41, 0x63, 0x63, 0x65, 0x70, 0x74, 0x3a, 0x20, 0x2a, 0x2f, 0x2a, 0x0d, 0x0a, 0x0d, 0x0a};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 5: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: NewH3CTe_96:38:0e (48:73:97:96:38:0e), Dst: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Destination: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Source: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 93.184.216.34, Dst: 192.168.38.105
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 52
|
|
|
|
|
* Identification: 0xd6b0 (54960)
|
|
|
|
|
* 000. .... = Flags: 0x0
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .0.. .... = Don't fragment: Not set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 42
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x9d27 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x9d27]
|
|
|
|
|
* Source Address: 93.184.216.34
|
|
|
|
|
* Destination Address: 192.168.38.105
|
|
|
|
|
* Transmission Control Protocol, Src Port: 80, Dst Port: 60111, Seq: 1, Ack: 80, Len: 0
|
|
|
|
|
* Source Port: 80
|
|
|
|
|
* Destination Port: 60111
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 1 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 1381452131
|
|
|
|
|
* [Next Sequence Number: 1 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 80 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 2089585020
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x010 (ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······A····]
|
|
|
|
|
* Window: 128
|
|
|
|
|
* [Calculated window size: 65536]
|
|
|
|
|
* [Window size scaling factor: 512]
|
|
|
|
|
* Checksum: 0xf0fd [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xf0fd]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 1215574832: TSval 1215574832, TSecr 741028768
|
|
|
|
|
* Timestamp echo reply: 741028768
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.568134000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.305351000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 4]
|
|
|
|
|
* [The RTT to ACK the segment was: 0.305351000 seconds]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt5_s2c_ack[] = {
|
|
|
|
|
0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x08, 0x00, 0x45, 0x00, 0x00, 0x34, 0xd6, 0xb0, 0x00, 0x00, 0x2a, 0x06, 0x9d, 0x27,
|
|
|
|
|
0x5d, 0xb8, 0xd8, 0x22, 0xc0, 0xa8, 0x26, 0x69, 0x00, 0x50, 0xea, 0xcf, 0x52, 0x57, 0x49, 0x63, 0x7c, 0x8c, 0x89, 0x7c, 0x80, 0x10, 0x00, 0x80, 0xf0, 0xfd,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x48, 0x74, 0x33, 0x30, 0x2c, 0x2b, 0x33, 0xa0};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 6: 1354 bytes on wire (10832 bits), 1354 bytes captured (10832 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: NewH3CTe_96:38:0e (48:73:97:96:38:0e), Dst: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Destination: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Source: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 93.184.216.34, Dst: 192.168.38.105
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 1340
|
|
|
|
|
* Identification: 0xd6b1 (54961)
|
|
|
|
|
* 000. .... = Flags: 0x0
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .0.. .... = Don't fragment: Not set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 42
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x981e [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x981e]
|
|
|
|
|
* Source Address: 93.184.216.34
|
|
|
|
|
* Destination Address: 192.168.38.105
|
|
|
|
|
* Transmission Control Protocol, Src Port: 80, Dst Port: 60111, Seq: 1, Ack: 80, Len: 1288
|
|
|
|
|
* Source Port: 80
|
|
|
|
|
* Destination Port: 60111
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 1288]
|
|
|
|
|
* Sequence Number: 1 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 1381452131
|
|
|
|
|
* [Next Sequence Number: 1289 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 80 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 2089585020
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x010 (ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······A····]
|
|
|
|
|
* Window: 128
|
|
|
|
|
* [Calculated window size: 65536]
|
|
|
|
|
* [Window size scaling factor: 512]
|
|
|
|
|
* Checksum: 0xe543 [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xe543]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 1215574833: TSval 1215574833, TSecr 741028768
|
|
|
|
|
* Timestamp echo reply: 741028768
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.568147000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000013000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
* [Bytes in flight: 1288]
|
|
|
|
|
* [Bytes sent since last PSH flag: 1288]
|
|
|
|
|
* TCP payload (1288 bytes)
|
|
|
|
|
* [Reassembled PDU in frame: 7]
|
|
|
|
|
* TCP segment data (1288 bytes)
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt6_s2c_http_resq_1[] = {
|
|
|
|
|
0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x08, 0x00, 0x45, 0x00, 0x05, 0x3c, 0xd6, 0xb1, 0x00, 0x00, 0x2a, 0x06, 0x98, 0x1e,
|
|
|
|
|
0x5d, 0xb8, 0xd8, 0x22, 0xc0, 0xa8, 0x26, 0x69, 0x00, 0x50, 0xea, 0xcf, 0x52, 0x57, 0x49, 0x63, 0x7c, 0x8c, 0x89, 0x7c, 0x80, 0x10, 0x00, 0x80, 0xe5, 0x43,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x48, 0x74, 0x33, 0x31, 0x2c, 0x2b, 0x33, 0xa0, 0x48, 0x54, 0x54, 0x50, 0x2f, 0x31, 0x2e, 0x31, 0x20, 0x32, 0x30, 0x30,
|
|
|
|
|
0x20, 0x4f, 0x4b, 0x0d, 0x0a, 0x41, 0x63, 0x63, 0x65, 0x70, 0x74, 0x2d, 0x52, 0x61, 0x6e, 0x67, 0x65, 0x73, 0x3a, 0x20, 0x62, 0x79, 0x74, 0x65, 0x73, 0x0d,
|
|
|
|
|
0x0a, 0x41, 0x67, 0x65, 0x3a, 0x20, 0x33, 0x34, 0x32, 0x30, 0x34, 0x38, 0x0d, 0x0a, 0x43, 0x61, 0x63, 0x68, 0x65, 0x2d, 0x43, 0x6f, 0x6e, 0x74, 0x72, 0x6f,
|
|
|
|
|
0x6c, 0x3a, 0x20, 0x6d, 0x61, 0x78, 0x2d, 0x61, 0x67, 0x65, 0x3d, 0x36, 0x30, 0x34, 0x38, 0x30, 0x30, 0x0d, 0x0a, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74,
|
|
|
|
|
0x2d, 0x54, 0x79, 0x70, 0x65, 0x3a, 0x20, 0x74, 0x65, 0x78, 0x74, 0x2f, 0x68, 0x74, 0x6d, 0x6c, 0x3b, 0x20, 0x63, 0x68, 0x61, 0x72, 0x73, 0x65, 0x74, 0x3d,
|
|
|
|
|
0x55, 0x54, 0x46, 0x2d, 0x38, 0x0d, 0x0a, 0x44, 0x61, 0x74, 0x65, 0x3a, 0x20, 0x54, 0x75, 0x65, 0x2c, 0x20, 0x31, 0x39, 0x20, 0x44, 0x65, 0x63, 0x20, 0x32,
|
|
|
|
|
0x30, 0x32, 0x33, 0x20, 0x30, 0x38, 0x3a, 0x32, 0x36, 0x3a, 0x35, 0x36, 0x20, 0x47, 0x4d, 0x54, 0x0d, 0x0a, 0x45, 0x74, 0x61, 0x67, 0x3a, 0x20, 0x22, 0x33,
|
|
|
|
|
0x31, 0x34, 0x37, 0x35, 0x32, 0x36, 0x39, 0x34, 0x37, 0x22, 0x0d, 0x0a, 0x45, 0x78, 0x70, 0x69, 0x72, 0x65, 0x73, 0x3a, 0x20, 0x54, 0x75, 0x65, 0x2c, 0x20,
|
|
|
|
|
0x32, 0x36, 0x20, 0x44, 0x65, 0x63, 0x20, 0x32, 0x30, 0x32, 0x33, 0x20, 0x30, 0x38, 0x3a, 0x32, 0x36, 0x3a, 0x35, 0x36, 0x20, 0x47, 0x4d, 0x54, 0x0d, 0x0a,
|
|
|
|
|
0x4c, 0x61, 0x73, 0x74, 0x2d, 0x4d, 0x6f, 0x64, 0x69, 0x66, 0x69, 0x65, 0x64, 0x3a, 0x20, 0x54, 0x68, 0x75, 0x2c, 0x20, 0x31, 0x37, 0x20, 0x4f, 0x63, 0x74,
|
|
|
|
|
0x20, 0x32, 0x30, 0x31, 0x39, 0x20, 0x30, 0x37, 0x3a, 0x31, 0x38, 0x3a, 0x32, 0x36, 0x20, 0x47, 0x4d, 0x54, 0x0d, 0x0a, 0x53, 0x65, 0x72, 0x76, 0x65, 0x72,
|
|
|
|
|
0x3a, 0x20, 0x45, 0x43, 0x53, 0x20, 0x28, 0x73, 0x65, 0x64, 0x2f, 0x35, 0x38, 0x41, 0x41, 0x29, 0x0d, 0x0a, 0x56, 0x61, 0x72, 0x79, 0x3a, 0x20, 0x41, 0x63,
|
|
|
|
|
0x63, 0x65, 0x70, 0x74, 0x2d, 0x45, 0x6e, 0x63, 0x6f, 0x64, 0x69, 0x6e, 0x67, 0x0d, 0x0a, 0x58, 0x2d, 0x43, 0x61, 0x63, 0x68, 0x65, 0x3a, 0x20, 0x48, 0x49,
|
|
|
|
|
0x54, 0x0d, 0x0a, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x4c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x3a, 0x20, 0x31, 0x32, 0x35, 0x36, 0x0d, 0x0a, 0x0d,
|
|
|
|
|
0x0a, 0x3c, 0x21, 0x64, 0x6f, 0x63, 0x74, 0x79, 0x70, 0x65, 0x20, 0x68, 0x74, 0x6d, 0x6c, 0x3e, 0x0a, 0x3c, 0x68, 0x74, 0x6d, 0x6c, 0x3e, 0x0a, 0x3c, 0x68,
|
|
|
|
|
0x65, 0x61, 0x64, 0x3e, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x74, 0x69, 0x74, 0x6c, 0x65, 0x3e, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x20, 0x44, 0x6f,
|
|
|
|
|
0x6d, 0x61, 0x69, 0x6e, 0x3c, 0x2f, 0x74, 0x69, 0x74, 0x6c, 0x65, 0x3e, 0x0a, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x6d, 0x65, 0x74, 0x61, 0x20, 0x63, 0x68,
|
|
|
|
|
0x61, 0x72, 0x73, 0x65, 0x74, 0x3d, 0x22, 0x75, 0x74, 0x66, 0x2d, 0x38, 0x22, 0x20, 0x2f, 0x3e, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x6d, 0x65, 0x74, 0x61,
|
|
|
|
|
0x20, 0x68, 0x74, 0x74, 0x70, 0x2d, 0x65, 0x71, 0x75, 0x69, 0x76, 0x3d, 0x22, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x74, 0x79, 0x70, 0x65, 0x22,
|
|
|
|
|
0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x3d, 0x22, 0x74, 0x65, 0x78, 0x74, 0x2f, 0x68, 0x74, 0x6d, 0x6c, 0x3b, 0x20, 0x63, 0x68, 0x61, 0x72, 0x73,
|
|
|
|
|
0x65, 0x74, 0x3d, 0x75, 0x74, 0x66, 0x2d, 0x38, 0x22, 0x20, 0x2f, 0x3e, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x6d, 0x65, 0x74, 0x61, 0x20, 0x6e, 0x61, 0x6d,
|
|
|
|
|
0x65, 0x3d, 0x22, 0x76, 0x69, 0x65, 0x77, 0x70, 0x6f, 0x72, 0x74, 0x22, 0x20, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x3d, 0x22, 0x77, 0x69, 0x64, 0x74,
|
|
|
|
|
0x68, 0x3d, 0x64, 0x65, 0x76, 0x69, 0x63, 0x65, 0x2d, 0x77, 0x69, 0x64, 0x74, 0x68, 0x2c, 0x20, 0x69, 0x6e, 0x69, 0x74, 0x69, 0x61, 0x6c, 0x2d, 0x73, 0x63,
|
|
|
|
|
0x61, 0x6c, 0x65, 0x3d, 0x31, 0x22, 0x20, 0x2f, 0x3e, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x73, 0x74, 0x79, 0x6c, 0x65, 0x20, 0x74, 0x79, 0x70, 0x65, 0x3d,
|
|
|
|
|
0x22, 0x74, 0x65, 0x78, 0x74, 0x2f, 0x63, 0x73, 0x73, 0x22, 0x3e, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x62, 0x6f, 0x64, 0x79, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20,
|
|
|
|
|
0x20, 0x20, 0x20, 0x20, 0x20, 0x62, 0x61, 0x63, 0x6b, 0x67, 0x72, 0x6f, 0x75, 0x6e, 0x64, 0x2d, 0x63, 0x6f, 0x6c, 0x6f, 0x72, 0x3a, 0x20, 0x23, 0x66, 0x30,
|
|
|
|
|
0x66, 0x30, 0x66, 0x32, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x6d, 0x61, 0x72, 0x67, 0x69, 0x6e, 0x3a, 0x20, 0x30, 0x3b, 0x0a, 0x20,
|
|
|
|
|
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x70, 0x61, 0x64, 0x64, 0x69, 0x6e, 0x67, 0x3a, 0x20, 0x30, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
|
|
|
|
|
0x20, 0x66, 0x6f, 0x6e, 0x74, 0x2d, 0x66, 0x61, 0x6d, 0x69, 0x6c, 0x79, 0x3a, 0x20, 0x2d, 0x61, 0x70, 0x70, 0x6c, 0x65, 0x2d, 0x73, 0x79, 0x73, 0x74, 0x65,
|
|
|
|
|
0x6d, 0x2c, 0x20, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x2d, 0x75, 0x69, 0x2c, 0x20, 0x42, 0x6c, 0x69, 0x6e, 0x6b, 0x4d, 0x61, 0x63, 0x53, 0x79, 0x73, 0x74,
|
|
|
|
|
0x65, 0x6d, 0x46, 0x6f, 0x6e, 0x74, 0x2c, 0x20, 0x22, 0x53, 0x65, 0x67, 0x6f, 0x65, 0x20, 0x55, 0x49, 0x22, 0x2c, 0x20, 0x22, 0x4f, 0x70, 0x65, 0x6e, 0x20,
|
|
|
|
|
0x53, 0x61, 0x6e, 0x73, 0x22, 0x2c, 0x20, 0x22, 0x48, 0x65, 0x6c, 0x76, 0x65, 0x74, 0x69, 0x63, 0x61, 0x20, 0x4e, 0x65, 0x75, 0x65, 0x22, 0x2c, 0x20, 0x48,
|
|
|
|
|
0x65, 0x6c, 0x76, 0x65, 0x74, 0x69, 0x63, 0x61, 0x2c, 0x20, 0x41, 0x72, 0x69, 0x61, 0x6c, 0x2c, 0x20, 0x73, 0x61, 0x6e, 0x73, 0x2d, 0x73, 0x65, 0x72, 0x69,
|
|
|
|
|
0x66, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x64, 0x69, 0x76, 0x20,
|
|
|
|
|
0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x77, 0x69, 0x64, 0x74, 0x68, 0x3a, 0x20, 0x36, 0x30, 0x30, 0x70, 0x78, 0x3b, 0x0a, 0x20, 0x20,
|
|
|
|
|
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x6d, 0x61, 0x72, 0x67, 0x69, 0x6e, 0x3a, 0x20, 0x35, 0x65, 0x6d, 0x20, 0x61, 0x75, 0x74, 0x6f, 0x3b, 0x0a, 0x20, 0x20,
|
|
|
|
|
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x70, 0x61, 0x64, 0x64, 0x69, 0x6e, 0x67, 0x3a, 0x20, 0x32, 0x65, 0x6d, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
|
|
|
|
|
0x20, 0x20, 0x62, 0x61, 0x63, 0x6b, 0x67, 0x72, 0x6f, 0x75, 0x6e, 0x64, 0x2d, 0x63, 0x6f, 0x6c, 0x6f, 0x72, 0x3a, 0x20, 0x23, 0x66, 0x64, 0x66, 0x64, 0x66,
|
|
|
|
|
0x66, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x62, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x2d, 0x72, 0x61, 0x64, 0x69, 0x75, 0x73, 0x3a, 0x20,
|
|
|
|
|
0x30, 0x2e, 0x35, 0x65, 0x6d, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x62, 0x6f, 0x78, 0x2d, 0x73, 0x68, 0x61, 0x64, 0x6f, 0x77, 0x3a,
|
|
|
|
|
0x20, 0x32, 0x70, 0x78, 0x20, 0x33, 0x70, 0x78, 0x20, 0x37, 0x70, 0x78, 0x20, 0x32, 0x70, 0x78, 0x20, 0x72, 0x67, 0x62, 0x61, 0x28, 0x30, 0x2c, 0x30, 0x2c,
|
|
|
|
|
0x30, 0x2c, 0x30, 0x2e, 0x30, 0x32, 0x29, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x61, 0x3a, 0x6c, 0x69, 0x6e, 0x6b, 0x2c,
|
|
|
|
|
0x20, 0x61, 0x3a, 0x76, 0x69, 0x73, 0x69, 0x74, 0x65, 0x64, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x63, 0x6f, 0x6c, 0x6f, 0x72,
|
|
|
|
|
0x3a, 0x20, 0x23, 0x33, 0x38, 0x34, 0x38, 0x38, 0x66, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x74, 0x65, 0x78, 0x74, 0x2d, 0x64, 0x65,
|
|
|
|
|
0x63, 0x6f, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x3a, 0x20, 0x6e, 0x6f, 0x6e, 0x65, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20,
|
|
|
|
|
0x40, 0x6d, 0x65, 0x64, 0x69, 0x61, 0x20, 0x28, 0x6d, 0x61, 0x78, 0x2d, 0x77, 0x69, 0x64, 0x74, 0x68, 0x3a, 0x20, 0x37, 0x30, 0x30, 0x70, 0x78, 0x29, 0x20,
|
|
|
|
|
0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x64, 0x69, 0x76, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
|
|
|
|
|
0x20, 0x20, 0x6d, 0x61, 0x72, 0x67, 0x69, 0x6e, 0x3a, 0x20, 0x30, 0x20, 0x61, 0x75, 0x74, 0x6f, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
|
|
|
|
|
0x20, 0x20, 0x20, 0x20, 0x77, 0x69, 0x64, 0x74, 0x68, 0x3a, 0x20, 0x61, 0x75, 0x74, 0x6f, 0x3b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7d,
|
|
|
|
|
0x0a, 0x20, 0x20, 0x20, 0x20, 0x7d, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x2f, 0x73, 0x74, 0x79, 0x6c, 0x65, 0x3e, 0x20, 0x20, 0x20, 0x20, 0x0a, 0x3c, 0x2f,
|
|
|
|
|
0x68, 0x65};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 7: 385 bytes on wire (3080 bits), 385 bytes captured (3080 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: NewH3CTe_96:38:0e (48:73:97:96:38:0e), Dst: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Destination: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Source: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 93.184.216.34, Dst: 192.168.38.105
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 371
|
|
|
|
|
* Identification: 0xd6b2 (54962)
|
|
|
|
|
* 000. .... = Flags: 0x0
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .0.. .... = Don't fragment: Not set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 42
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x9be6 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x9be6]
|
|
|
|
|
* Source Address: 93.184.216.34
|
|
|
|
|
* Destination Address: 192.168.38.105
|
|
|
|
|
* Transmission Control Protocol, Src Port: 80, Dst Port: 60111, Seq: 1289, Ack: 80, Len: 319
|
|
|
|
|
* Source Port: 80
|
|
|
|
|
* Destination Port: 60111
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 319]
|
|
|
|
|
* Sequence Number: 1289 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 1381453419
|
|
|
|
|
* [Next Sequence Number: 1608 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 80 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 2089585020
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 128
|
|
|
|
|
* [Calculated window size: 65536]
|
|
|
|
|
* [Window size scaling factor: 512]
|
|
|
|
|
* Checksum: 0x955e [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x955e]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 1215574833: TSval 1215574833, TSecr 741028768
|
|
|
|
|
* Timestamp echo reply: 741028768
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.568149000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000002000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
* [Bytes in flight: 1607]
|
|
|
|
|
* [Bytes sent since last PSH flag: 1607]
|
|
|
|
|
* TCP payload (319 bytes)
|
|
|
|
|
* TCP segment data (319 bytes)
|
|
|
|
|
* [2 Reassembled TCP Segments (1607 bytes): #6(1288), #7(319)]
|
|
|
|
|
* [Frame: 6, payload: 0-1287 (1288 bytes)]
|
|
|
|
|
* [Frame: 7, payload: 1288-1606 (319 bytes)]
|
|
|
|
|
* [Segment count: 2]
|
|
|
|
|
* [Reassembled TCP length: 1607]
|
|
|
|
|
* [Reassembled TCP Data: 485454502f312e3120323030204f4b0d0a4163636570742d52616e6765733a2062797465…]
|
|
|
|
|
* Hypertext Transfer Protocol
|
|
|
|
|
* HTTP/1.1 200 OK\r\n
|
|
|
|
|
* [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n]
|
|
|
|
|
* [HTTP/1.1 200 OK\r\n]
|
|
|
|
|
* [Severity level: Chat]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* Response Version: HTTP/1.1
|
|
|
|
|
* Status Code: 200
|
|
|
|
|
* [Status Code Description: OK]
|
|
|
|
|
* Response Phrase: OK
|
|
|
|
|
* Accept-Ranges: bytes\r\n
|
|
|
|
|
* Age: 342048\r\n
|
|
|
|
|
* Cache-Control: max-age=604800\r\n
|
|
|
|
|
* Content-Type: text/html; charset=UTF-8\r\n
|
|
|
|
|
* Date: Tue, 19 Dec 2023 08:26:56 GMT\r\n
|
|
|
|
|
* Etag: "3147526947"\r\n
|
|
|
|
|
* Expires: Tue, 26 Dec 2023 08:26:56 GMT\r\n
|
|
|
|
|
* Last-Modified: Thu, 17 Oct 2019 07:18:26 GMT\r\n
|
|
|
|
|
* Server: ECS (sed/58AA)\r\n
|
|
|
|
|
* Vary: Accept-Encoding\r\n
|
|
|
|
|
* X-Cache: HIT\r\n
|
|
|
|
|
* Content-Length: 1256\r\n
|
|
|
|
|
* [Content length: 1256]
|
|
|
|
|
* \r\n
|
|
|
|
|
* [HTTP response 1/1]
|
|
|
|
|
* [Time since request: 0.305366000 seconds]
|
|
|
|
|
* [Request in frame: 4]
|
|
|
|
|
* [Request URI: http://www.example.com/]
|
|
|
|
|
* File Data: 1256 bytes
|
|
|
|
|
* Line-based text data: text/html (46 lines)
|
|
|
|
|
* <!doctype html>\n
|
|
|
|
|
* <html>\n
|
|
|
|
|
* <head>\n
|
|
|
|
|
* <title>Example Domain</title>\n
|
|
|
|
|
* \n
|
|
|
|
|
* <meta charset="utf-8" />\n
|
|
|
|
|
* <meta http-equiv="Content-type" content="text/html; charset=utf-8" />\n
|
|
|
|
|
* <meta name="viewport" content="width=device-width, initial-scale=1" />\n
|
|
|
|
|
* <style type="text/css">\n
|
|
|
|
|
* body {\n
|
|
|
|
|
* background-color: #f0f0f2;\n
|
|
|
|
|
* margin: 0;\n
|
|
|
|
|
* padding: 0;\n
|
|
|
|
|
* font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;\n
|
|
|
|
|
* \n
|
|
|
|
|
* }\n
|
|
|
|
|
* div {\n
|
|
|
|
|
* width: 600px;\n
|
|
|
|
|
* margin: 5em auto;\n
|
|
|
|
|
* padding: 2em;\n
|
|
|
|
|
* background-color: #fdfdff;\n
|
|
|
|
|
* border-radius: 0.5em;\n
|
|
|
|
|
* box-shadow: 2px 3px 7px 2px rgba(0,0,0,0.02);\n
|
|
|
|
|
* }\n
|
|
|
|
|
* a:link, a:visited {\n
|
|
|
|
|
* color: #38488f;\n
|
|
|
|
|
* text-decoration: none;\n
|
|
|
|
|
* }\n
|
|
|
|
|
* @media (max-width: 700px) {\n
|
|
|
|
|
* div {\n
|
|
|
|
|
* margin: 0 auto;\n
|
|
|
|
|
* width: auto;\n
|
|
|
|
|
* }\n
|
|
|
|
|
* }\n
|
|
|
|
|
* </style> \n
|
|
|
|
|
* </head>\n
|
|
|
|
|
* \n
|
|
|
|
|
* <body>\n
|
|
|
|
|
* <div>\n
|
|
|
|
|
* <h1>Example Domain</h1>\n
|
|
|
|
|
* <p>This domain is for use in illustrative examples in documents. You may use this\n
|
|
|
|
|
* domain in literature without prior coordination or asking for permission.</p>\n
|
|
|
|
|
* <p><a href="https://www.iana.org/domains/example">More information...</a></p>\n
|
|
|
|
|
* </div>\n
|
|
|
|
|
* </body>\n
|
|
|
|
|
* </html>\n
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt7_s2c_http_resp_2[] = {
|
|
|
|
|
0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x08, 0x00, 0x45, 0x00, 0x01, 0x73, 0xd6, 0xb2, 0x00, 0x00, 0x2a, 0x06, 0x9b, 0xe6,
|
|
|
|
|
0x5d, 0xb8, 0xd8, 0x22, 0xc0, 0xa8, 0x26, 0x69, 0x00, 0x50, 0xea, 0xcf, 0x52, 0x57, 0x4e, 0x6b, 0x7c, 0x8c, 0x89, 0x7c, 0x80, 0x18, 0x00, 0x80, 0x95, 0x5e,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x48, 0x74, 0x33, 0x31, 0x2c, 0x2b, 0x33, 0xa0, 0x61, 0x64, 0x3e, 0x0a, 0x0a, 0x3c, 0x62, 0x6f, 0x64, 0x79, 0x3e, 0x0a,
|
|
|
|
|
0x3c, 0x64, 0x69, 0x76, 0x3e, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x68, 0x31, 0x3e, 0x45, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x20, 0x44, 0x6f, 0x6d, 0x61,
|
|
|
|
|
0x69, 0x6e, 0x3c, 0x2f, 0x68, 0x31, 0x3e, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x70, 0x3e, 0x54, 0x68, 0x69, 0x73, 0x20, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e,
|
|
|
|
|
0x20, 0x69, 0x73, 0x20, 0x66, 0x6f, 0x72, 0x20, 0x75, 0x73, 0x65, 0x20, 0x69, 0x6e, 0x20, 0x69, 0x6c, 0x6c, 0x75, 0x73, 0x74, 0x72, 0x61, 0x74, 0x69, 0x76,
|
|
|
|
|
0x65, 0x20, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x73, 0x20, 0x69, 0x6e, 0x20, 0x64, 0x6f, 0x63, 0x75, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x2e, 0x20, 0x59,
|
|
|
|
|
0x6f, 0x75, 0x20, 0x6d, 0x61, 0x79, 0x20, 0x75, 0x73, 0x65, 0x20, 0x74, 0x68, 0x69, 0x73, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e,
|
|
|
|
|
0x20, 0x69, 0x6e, 0x20, 0x6c, 0x69, 0x74, 0x65, 0x72, 0x61, 0x74, 0x75, 0x72, 0x65, 0x20, 0x77, 0x69, 0x74, 0x68, 0x6f, 0x75, 0x74, 0x20, 0x70, 0x72, 0x69,
|
|
|
|
|
0x6f, 0x72, 0x20, 0x63, 0x6f, 0x6f, 0x72, 0x64, 0x69, 0x6e, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x20, 0x6f, 0x72, 0x20, 0x61, 0x73, 0x6b, 0x69, 0x6e, 0x67, 0x20,
|
|
|
|
|
0x66, 0x6f, 0x72, 0x20, 0x70, 0x65, 0x72, 0x6d, 0x69, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x2e, 0x3c, 0x2f, 0x70, 0x3e, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x3c, 0x70,
|
|
|
|
|
0x3e, 0x3c, 0x61, 0x20, 0x68, 0x72, 0x65, 0x66, 0x3d, 0x22, 0x68, 0x74, 0x74, 0x70, 0x73, 0x3a, 0x2f, 0x2f, 0x77, 0x77, 0x77, 0x2e, 0x69, 0x61, 0x6e, 0x61,
|
|
|
|
|
0x2e, 0x6f, 0x72, 0x67, 0x2f, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e, 0x73, 0x2f, 0x65, 0x78, 0x61, 0x6d, 0x70, 0x6c, 0x65, 0x22, 0x3e, 0x4d, 0x6f, 0x72, 0x65,
|
|
|
|
|
0x20, 0x69, 0x6e, 0x66, 0x6f, 0x72, 0x6d, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x2e, 0x2e, 0x3c, 0x2f, 0x61, 0x3e, 0x3c, 0x2f, 0x70, 0x3e, 0x0a, 0x3c, 0x2f,
|
|
|
|
|
0x64, 0x69, 0x76, 0x3e, 0x0a, 0x3c, 0x2f, 0x62, 0x6f, 0x64, 0x79, 0x3e, 0x0a, 0x3c, 0x2f, 0x68, 0x74, 0x6d, 0x6c, 0x3e, 0x0a};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 8: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea), Dst: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Destination: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Source: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 192.168.38.105, Dst: 93.184.216.34
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 52
|
|
|
|
|
* Identification: 0x0000 (0)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x1dd8 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x1dd8]
|
|
|
|
|
* Source Address: 192.168.38.105
|
|
|
|
|
* Destination Address: 93.184.216.34
|
|
|
|
|
* Transmission Control Protocol, Src Port: 60111, Dst Port: 80, Seq: 80, Ack: 1608, Len: 0
|
|
|
|
|
* Source Port: 60111
|
|
|
|
|
* Destination Port: 80
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 80 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 2089585020
|
|
|
|
|
* [Next Sequence Number: 80 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1608 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 1381453738
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x010 (ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······A····]
|
|
|
|
|
* Window: 2027
|
|
|
|
|
* [Calculated window size: 129728]
|
|
|
|
|
* [Window size scaling factor: 64]
|
|
|
|
|
* Checksum: 0xe219 [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xe219]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 741029073: TSval 741029073, TSecr 1215574833
|
|
|
|
|
* Timestamp echo reply: 1215574833
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.568399000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000250000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 7]
|
|
|
|
|
* [The RTT to ACK the segment was: 0.000250000 seconds]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt8_c2s_ack[] = {
|
|
|
|
|
0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x08, 0x00, 0x45, 0x00, 0x00, 0x34, 0x00, 0x00, 0x40, 0x00, 0x40, 0x06, 0x1d, 0xd8,
|
|
|
|
|
0xc0, 0xa8, 0x26, 0x69, 0x5d, 0xb8, 0xd8, 0x22, 0xea, 0xcf, 0x00, 0x50, 0x7c, 0x8c, 0x89, 0x7c, 0x52, 0x57, 0x4f, 0xaa, 0x80, 0x10, 0x07, 0xeb, 0xe2, 0x19,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x2c, 0x2b, 0x34, 0xd1, 0x48, 0x74, 0x33, 0x31};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 9: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea), Dst: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Destination: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Source: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 192.168.38.105, Dst: 93.184.216.34
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 52
|
|
|
|
|
* Identification: 0x0000 (0)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x1dd8 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x1dd8]
|
|
|
|
|
* Source Address: 192.168.38.105
|
|
|
|
|
* Destination Address: 93.184.216.34
|
|
|
|
|
* Transmission Control Protocol, Src Port: 60111, Dst Port: 80, Seq: 80, Ack: 1608, Len: 0
|
|
|
|
|
* Source Port: 60111
|
|
|
|
|
* Destination Port: 80
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 80 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 2089585020
|
|
|
|
|
* [Next Sequence Number: 81 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1608 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 1381453738
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x011 (FIN, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...1 = Fin: Set
|
|
|
|
|
* [Expert Info (Chat/Sequence): Connection finish (FIN)]
|
|
|
|
|
* [Connection finish (FIN)]
|
|
|
|
|
* [Severity level: Chat]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* [TCP Flags: ·······A···F]
|
|
|
|
|
* [Expert Info (Note/Sequence): This frame initiates the connection closing]
|
|
|
|
|
* [This frame initiates the connection closing]
|
|
|
|
|
* [Severity level: Note]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* Window: 2048
|
|
|
|
|
* [Calculated window size: 131072]
|
|
|
|
|
* [Window size scaling factor: 64]
|
|
|
|
|
* Checksum: 0xe203 [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xe203]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 741029073: TSval 741029073, TSecr 1215574833
|
|
|
|
|
* Timestamp echo reply: 1215574833
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.568964000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000565000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt9_c2s_fin[] = {
|
|
|
|
|
0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x08, 0x00, 0x45, 0x00, 0x00, 0x34, 0x00, 0x00, 0x40, 0x00, 0x40, 0x06, 0x1d, 0xd8,
|
|
|
|
|
0xc0, 0xa8, 0x26, 0x69, 0x5d, 0xb8, 0xd8, 0x22, 0xea, 0xcf, 0x00, 0x50, 0x7c, 0x8c, 0x89, 0x7c, 0x52, 0x57, 0x4f, 0xaa, 0x80, 0x11, 0x08, 0x00, 0xe2, 0x03,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x2c, 0x2b, 0x34, 0xd1, 0x48, 0x74, 0x33, 0x31};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 10: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: NewH3CTe_96:38:0e (48:73:97:96:38:0e), Dst: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Destination: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Source: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 93.184.216.34, Dst: 192.168.38.105
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 52
|
|
|
|
|
* Identification: 0xd6b3 (54963)
|
|
|
|
|
* 000. .... = Flags: 0x0
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .0.. .... = Don't fragment: Not set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 42
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x9d24 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x9d24]
|
|
|
|
|
* Source Address: 93.184.216.34
|
|
|
|
|
* Destination Address: 192.168.38.105
|
|
|
|
|
* Transmission Control Protocol, Src Port: 80, Dst Port: 60111, Seq: 1608, Ack: 81, Len: 0
|
|
|
|
|
* Source Port: 80
|
|
|
|
|
* Destination Port: 60111
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 1608 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 1381453738
|
|
|
|
|
* [Next Sequence Number: 1609 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 81 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 2089585021
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x011 (FIN, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...1 = Fin: Set
|
|
|
|
|
* [Expert Info (Chat/Sequence): Connection finish (FIN)]
|
|
|
|
|
* [Connection finish (FIN)]
|
|
|
|
|
* [Severity level: Chat]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* [TCP Flags: ·······A···F]
|
|
|
|
|
* [Expert Info (Note/Sequence): This frame undergoes the connection closing]
|
|
|
|
|
* [This frame undergoes the connection closing]
|
|
|
|
|
* [Severity level: Note]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* Window: 128
|
|
|
|
|
* [Calculated window size: 65536]
|
|
|
|
|
* [Window size scaling factor: 512]
|
|
|
|
|
* Checksum: 0xe851 [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xe851]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 1215575138: TSval 1215575138, TSecr 741029073
|
|
|
|
|
* Timestamp echo reply: 741029073
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.876568000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.307604000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 9]
|
|
|
|
|
* [The RTT to ACK the segment was: 0.307604000 seconds]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt10_s2c_fin[] = {
|
|
|
|
|
0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x08, 0x00, 0x45, 0x00, 0x00, 0x34, 0xd6, 0xb3, 0x00, 0x00, 0x2a, 0x06, 0x9d, 0x24,
|
|
|
|
|
0x5d, 0xb8, 0xd8, 0x22, 0xc0, 0xa8, 0x26, 0x69, 0x00, 0x50, 0xea, 0xcf, 0x52, 0x57, 0x4f, 0xaa, 0x7c, 0x8c, 0x89, 0x7d, 0x80, 0x11, 0x00, 0x80, 0xe8, 0x51,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x48, 0x74, 0x34, 0x62, 0x2c, 0x2b, 0x34, 0xd1};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 11: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea), Dst: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Destination: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Source: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 192.168.38.105, Dst: 93.184.216.34
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 52
|
|
|
|
|
* Identification: 0x0000 (0)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x1dd8 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x1dd8]
|
|
|
|
|
* Source Address: 192.168.38.105
|
|
|
|
|
* Destination Address: 93.184.216.34
|
|
|
|
|
* Transmission Control Protocol, Src Port: 60111, Dst Port: 80, Seq: 81, Ack: 1609, Len: 0
|
|
|
|
|
* Source Port: 60111
|
|
|
|
|
* Destination Port: 80
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 81 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 2089585021
|
|
|
|
|
* [Next Sequence Number: 81 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1609 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 1381453739
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x010 (ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······A····]
|
|
|
|
|
* Window: 2048
|
|
|
|
|
* [Calculated window size: 131072]
|
|
|
|
|
* [Window size scaling factor: 64]
|
|
|
|
|
* Checksum: 0xdf9d [correct]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xdf9d]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 741029381: TSval 741029381, TSecr 1215575138
|
|
|
|
|
* Timestamp echo reply: 1215575138
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.876872000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000304000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 10]
|
|
|
|
|
* [The RTT to ACK the segment was: 0.000304000 seconds]
|
|
|
|
|
* [iRTT: 0.262565000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_pkt11_c2s_ack[] = {
|
|
|
|
|
0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x08, 0x00, 0x45, 0x00, 0x00, 0x34, 0x00, 0x00, 0x40, 0x00, 0x40, 0x06, 0x1d, 0xd8,
|
|
|
|
|
0xc0, 0xa8, 0x26, 0x69, 0x5d, 0xb8, 0xd8, 0x22, 0xea, 0xcf, 0x00, 0x50, 0x7c, 0x8c, 0x89, 0x7d, 0x52, 0x57, 0x4f, 0xab, 0x80, 0x10, 0x08, 0x00, 0xdf, 0x9d,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x2c, 0x2b, 0x36, 0x05, 0x48, 0x74, 0x34, 0x62};
|
|
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
|
* test packet: UDP www.badssl.com
|
|
|
|
|
******************************************************************************/
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 1: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea), Dst: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Destination: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Source: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 192.168.38.105, Dst: 121.14.154.93
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 60
|
|
|
|
|
* Identification: 0xaef9 (44793)
|
|
|
|
|
* 000. .... = Flags: 0x0
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .0.. .... = Don't fragment: Not set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: UDP (17)
|
|
|
|
|
* Header Checksum: 0xd13a [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xd13a]
|
|
|
|
|
* Source Address: 192.168.38.105
|
|
|
|
|
* Destination Address: 121.14.154.93
|
|
|
|
|
* User Datagram Protocol, Src Port: 61099, Dst Port: 53
|
|
|
|
|
* Source Port: 61099
|
|
|
|
|
* Destination Port: 53
|
|
|
|
|
* Length: 40
|
|
|
|
|
* Checksum: 0xdcf1 [correct]
|
|
|
|
|
* [Calculated Checksum: 0xdcf1]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame: 0.000000000 seconds]
|
|
|
|
|
* [Time since previous frame: 0.000000000 seconds]
|
|
|
|
|
* UDP payload (32 bytes)
|
|
|
|
|
* Domain Name System (query)
|
|
|
|
|
* Transaction ID: 0xa5af
|
|
|
|
|
* Flags: 0x0100 Standard query
|
|
|
|
|
* 0... .... .... .... = Response: Message is a query
|
|
|
|
|
* .000 0... .... .... = Opcode: Standard query (0)
|
|
|
|
|
* .... ..0. .... .... = Truncated: Message is not truncated
|
|
|
|
|
* .... ...1 .... .... = Recursion desired: Do query recursively
|
|
|
|
|
* .... .... .0.. .... = Z: reserved (0)
|
|
|
|
|
* .... .... ...0 .... = Non-authenticated data: Unacceptable
|
|
|
|
|
* Questions: 1
|
|
|
|
|
* Answer RRs: 0
|
|
|
|
|
* Authority RRs: 0
|
|
|
|
|
* Additional RRs: 0
|
|
|
|
|
* Queries
|
|
|
|
|
* www.badssl.com: type A, class IN
|
|
|
|
|
* Name: www.badssl.com
|
|
|
|
|
* [Name Length: 14]
|
|
|
|
|
* [Label Count: 3]
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* [Response In: 2]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char udp_pkt1_dns_req[] = {
|
|
|
|
|
0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x08, 0x00, 0x45, 0x00, 0x00, 0x3c, 0xae, 0xf9, 0x00, 0x00, 0x40, 0x11, 0xd1, 0x3a,
|
|
|
|
|
0xc0, 0xa8, 0x26, 0x69, 0x79, 0x0e, 0x9a, 0x5d, 0xee, 0xab, 0x00, 0x35, 0x00, 0x28, 0xdc, 0xf1, 0xa5, 0xaf, 0x01, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00,
|
|
|
|
|
0x00, 0x00, 0x03, 0x77, 0x77, 0x77, 0x06, 0x62, 0x61, 0x64, 0x73, 0x73, 0x6c, 0x03, 0x63, 0x6f, 0x6d, 0x00, 0x00, 0x01, 0x00, 0x01};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 2: 550 bytes on wire (4400 bits), 550 bytes captured (4400 bits) on interface en0, id 0
|
|
|
|
|
* Ethernet II, Src: NewH3CTe_96:38:0e (48:73:97:96:38:0e), Dst: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Destination: Apple_0a:c5:ea (3c:a6:f6:0a:c5:ea)
|
|
|
|
|
* Source: NewH3CTe_96:38:0e (48:73:97:96:38:0e)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 121.14.154.93, Dst: 192.168.38.105
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 536
|
|
|
|
|
* Identification: 0xb578 (46456)
|
|
|
|
|
* 000. .... = Flags: 0x0
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .0.. .... = Don't fragment: Not set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 46
|
|
|
|
|
* Protocol: UDP (17)
|
|
|
|
|
* Header Checksum: 0xdadf [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xdadf]
|
|
|
|
|
* Source Address: 121.14.154.93
|
|
|
|
|
* Destination Address: 192.168.38.105
|
|
|
|
|
* User Datagram Protocol, Src Port: 53, Dst Port: 61099
|
|
|
|
|
* Source Port: 53
|
|
|
|
|
* Destination Port: 61099
|
|
|
|
|
* Length: 516
|
|
|
|
|
* Checksum: 0x9aca [correct]
|
|
|
|
|
* [Calculated Checksum: 0x9aca]
|
|
|
|
|
* [Checksum Status: Good]
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame: 0.525915000 seconds]
|
|
|
|
|
* [Time since previous frame: 0.525915000 seconds]
|
|
|
|
|
* UDP payload (508 bytes)
|
|
|
|
|
* Domain Name System (response)
|
|
|
|
|
* Transaction ID: 0xa5af
|
|
|
|
|
* Flags: 0x8180 Standard query response, No error
|
|
|
|
|
* 1... .... .... .... = Response: Message is a response
|
|
|
|
|
* .000 0... .... .... = Opcode: Standard query (0)
|
|
|
|
|
* .... .0.. .... .... = Authoritative: Server is not an authority for domain
|
|
|
|
|
* .... ..0. .... .... = Truncated: Message is not truncated
|
|
|
|
|
* .... ...1 .... .... = Recursion desired: Do query recursively
|
|
|
|
|
* .... .... 1... .... = Recursion available: Server can do recursive queries
|
|
|
|
|
* .... .... .0.. .... = Z: reserved (0)
|
|
|
|
|
* .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
|
|
|
|
|
* .... .... ...0 .... = Non-authenticated data: Unacceptable
|
|
|
|
|
* .... .... .... 0000 = Reply code: No error (0)
|
|
|
|
|
* Questions: 1
|
|
|
|
|
* Answer RRs: 1
|
|
|
|
|
* Authority RRs: 13
|
|
|
|
|
* Additional RRs: 14
|
|
|
|
|
* Queries
|
|
|
|
|
* www.badssl.com: type A, class IN
|
|
|
|
|
* Name: www.badssl.com
|
|
|
|
|
* [Name Length: 14]
|
|
|
|
|
* [Label Count: 3]
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Answers
|
|
|
|
|
* www.badssl.com: type A, class IN, addr 104.154.89.105
|
|
|
|
|
* Name: www.badssl.com
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 3600 (1 hour)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 104.154.89.105
|
|
|
|
|
* Authoritative nameservers
|
|
|
|
|
* com: type NS, class IN, ns b.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 20
|
|
|
|
|
* Name Server: b.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns e.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: e.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns c.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: c.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns f.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: f.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns a.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: a.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns k.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: k.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns h.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: h.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns d.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: d.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns g.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: g.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns i.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: i.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns m.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: m.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns l.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: l.gtld-servers.net
|
|
|
|
|
* com: type NS, class IN, ns j.gtld-servers.net
|
|
|
|
|
* Name: com
|
|
|
|
|
* Type: NS (authoritative Name Server) (2)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Name Server: j.gtld-servers.net
|
|
|
|
|
* Additional records
|
|
|
|
|
* a.gtld-servers.net: type A, class IN, addr 192.5.6.30
|
|
|
|
|
* Name: a.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 22363 (6 hours, 12 minutes, 43 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.5.6.30
|
|
|
|
|
* b.gtld-servers.net: type A, class IN, addr 192.33.14.30
|
|
|
|
|
* Name: b.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 94262 (1 day, 2 hours, 11 minutes, 2 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.33.14.30
|
|
|
|
|
* c.gtld-servers.net: type A, class IN, addr 192.26.92.30
|
|
|
|
|
* Name: c.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 94829 (1 day, 2 hours, 20 minutes, 29 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.26.92.30
|
|
|
|
|
* d.gtld-servers.net: type A, class IN, addr 192.31.80.30
|
|
|
|
|
* Name: d.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 94683 (1 day, 2 hours, 18 minutes, 3 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.31.80.30
|
|
|
|
|
* e.gtld-servers.net: type A, class IN, addr 192.12.94.30
|
|
|
|
|
* Name: e.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 95571 (1 day, 2 hours, 32 minutes, 51 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.12.94.30
|
|
|
|
|
* f.gtld-servers.net: type A, class IN, addr 192.35.51.30
|
|
|
|
|
* Name: f.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 94683 (1 day, 2 hours, 18 minutes, 3 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.35.51.30
|
|
|
|
|
* g.gtld-servers.net: type A, class IN, addr 192.42.93.30
|
|
|
|
|
* Name: g.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 96370 (1 day, 2 hours, 46 minutes, 10 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.42.93.30
|
|
|
|
|
* h.gtld-servers.net: type A, class IN, addr 192.54.112.30
|
|
|
|
|
* Name: h.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 96885 (1 day, 2 hours, 54 minutes, 45 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.54.112.30
|
|
|
|
|
* i.gtld-servers.net: type A, class IN, addr 192.43.172.30
|
|
|
|
|
* Name: i.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 95037 (1 day, 2 hours, 23 minutes, 57 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.43.172.30
|
|
|
|
|
* j.gtld-servers.net: type A, class IN, addr 192.48.79.30
|
|
|
|
|
* Name: j.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 94829 (1 day, 2 hours, 20 minutes, 29 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.48.79.30
|
|
|
|
|
* k.gtld-servers.net: type A, class IN, addr 192.52.178.30
|
|
|
|
|
* Name: k.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 96885 (1 day, 2 hours, 54 minutes, 45 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.52.178.30
|
|
|
|
|
* l.gtld-servers.net: type A, class IN, addr 192.41.162.30
|
|
|
|
|
* Name: l.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 96885 (1 day, 2 hours, 54 minutes, 45 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.41.162.30
|
|
|
|
|
* m.gtld-servers.net: type A, class IN, addr 192.55.83.30
|
|
|
|
|
* Name: m.gtld-servers.net
|
|
|
|
|
* Type: A (Host Address) (1)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 94829 (1 day, 2 hours, 20 minutes, 29 seconds)
|
|
|
|
|
* Data length: 4
|
|
|
|
|
* Address: 192.55.83.30
|
|
|
|
|
* a.gtld-servers.net: type AAAA, class IN, addr 2001:503:a83e::2:30
|
|
|
|
|
* Name: a.gtld-servers.net
|
|
|
|
|
* Type: AAAA (IPv6 Address) (28)
|
|
|
|
|
* Class: IN (0x0001)
|
|
|
|
|
* Time to live: 108314 (1 day, 6 hours, 5 minutes, 14 seconds)
|
|
|
|
|
* Data length: 16
|
|
|
|
|
* AAAA Address: 2001:503:a83e::2:30
|
|
|
|
|
* [Request In: 1]
|
|
|
|
|
* [Time: 0.525915000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char udp_pkt2_dns_resp[] = {
|
|
|
|
|
0x3c, 0xa6, 0xf6, 0x0a, 0xc5, 0xea, 0x48, 0x73, 0x97, 0x96, 0x38, 0x0e, 0x08, 0x00, 0x45, 0x00, 0x02, 0x18, 0xb5, 0x78, 0x00, 0x00, 0x2e, 0x11, 0xda, 0xdf,
|
|
|
|
|
0x79, 0x0e, 0x9a, 0x5d, 0xc0, 0xa8, 0x26, 0x69, 0x00, 0x35, 0xee, 0xab, 0x02, 0x04, 0x9a, 0xca, 0xa5, 0xaf, 0x81, 0x80, 0x00, 0x01, 0x00, 0x01, 0x00, 0x0d,
|
|
|
|
|
0x00, 0x0e, 0x03, 0x77, 0x77, 0x77, 0x06, 0x62, 0x61, 0x64, 0x73, 0x73, 0x6c, 0x03, 0x63, 0x6f, 0x6d, 0x00, 0x00, 0x01, 0x00, 0x01, 0xc0, 0x0c, 0x00, 0x01,
|
|
|
|
|
0x00, 0x01, 0x00, 0x00, 0x0e, 0x10, 0x00, 0x04, 0x68, 0x9a, 0x59, 0x69, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x14, 0x01, 0x62,
|
|
|
|
|
0x0c, 0x67, 0x74, 0x6c, 0x64, 0x2d, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x73, 0x03, 0x6e, 0x65, 0x74, 0x00, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01,
|
|
|
|
|
0xa7, 0x1a, 0x00, 0x04, 0x01, 0x65, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x63, 0xc0, 0x3e, 0xc0, 0x17,
|
|
|
|
|
0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x66, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04,
|
|
|
|
|
0x01, 0x61, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x6b, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01,
|
|
|
|
|
0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x68, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x64, 0xc0, 0x3e,
|
|
|
|
|
0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x67, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a,
|
|
|
|
|
0x00, 0x04, 0x01, 0x69, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x6d, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02,
|
|
|
|
|
0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x6c, 0xc0, 0x3e, 0xc0, 0x17, 0x00, 0x02, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x04, 0x01, 0x6a,
|
|
|
|
|
0xc0, 0x3e, 0xc0, 0x8c, 0x00, 0x01, 0x00, 0x01, 0x00, 0x00, 0x57, 0x5b, 0x00, 0x04, 0xc0, 0x05, 0x06, 0x1e, 0xc0, 0x3c, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01,
|
|
|
|
|
0x70, 0x36, 0x00, 0x04, 0xc0, 0x21, 0x0e, 0x1e, 0xc0, 0x6c, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x72, 0x6d, 0x00, 0x04, 0xc0, 0x1a, 0x5c, 0x1e, 0xc0, 0xbc,
|
|
|
|
|
0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x71, 0xdb, 0x00, 0x04, 0xc0, 0x1f, 0x50, 0x1e, 0xc0, 0x5c, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x75, 0x53, 0x00, 0x04,
|
|
|
|
|
0xc0, 0x0c, 0x5e, 0x1e, 0xc0, 0x7c, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x71, 0xdb, 0x00, 0x04, 0xc0, 0x23, 0x33, 0x1e, 0xc0, 0xcc, 0x00, 0x01, 0x00, 0x01,
|
|
|
|
|
0x00, 0x01, 0x78, 0x72, 0x00, 0x04, 0xc0, 0x2a, 0x5d, 0x1e, 0xc0, 0xac, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x7a, 0x75, 0x00, 0x04, 0xc0, 0x36, 0x70, 0x1e,
|
|
|
|
|
0xc0, 0xdc, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x73, 0x3d, 0x00, 0x04, 0xc0, 0x2b, 0xac, 0x1e, 0xc1, 0x0c, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x72, 0x6d,
|
|
|
|
|
0x00, 0x04, 0xc0, 0x30, 0x4f, 0x1e, 0xc0, 0x9c, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x7a, 0x75, 0x00, 0x04, 0xc0, 0x34, 0xb2, 0x1e, 0xc0, 0xfc, 0x00, 0x01,
|
|
|
|
|
0x00, 0x01, 0x00, 0x01, 0x7a, 0x75, 0x00, 0x04, 0xc0, 0x29, 0xa2, 0x1e, 0xc0, 0xec, 0x00, 0x01, 0x00, 0x01, 0x00, 0x01, 0x72, 0x6d, 0x00, 0x04, 0xc0, 0x37,
|
|
|
|
|
0x53, 0x1e, 0xc0, 0x8c, 0x00, 0x1c, 0x00, 0x01, 0x00, 0x01, 0xa7, 0x1a, 0x00, 0x10, 0x20, 0x01, 0x05, 0x03, 0xa8, 0x3e, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
|
|
|
|
|
0x00, 0x02, 0x00, 0x30};
|
|
|
|
|
|
2024-03-26 15:09:03 +08:00
|
|
|
/******************************************************************************
|
|
|
|
|
* test packet: TCP C2S seq wraparound
|
|
|
|
|
******************************************************************************/
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 1: 70 bytes on wire (560 bits), 70 bytes captured (560 bits)
|
|
|
|
|
* Ethernet II, Src: EvocInte_2f:90:37 (00:22:46:2f:90:37), Dst: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* Destination: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* Address: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: EvocInte_2f:90:37 (00:22:46:2f:90:37)
|
|
|
|
|
* Address: EvocInte_2f:90:37 (00:22:46:2f:90:37)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 10.3.22.137, Dst: 10.3.22.11
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 56
|
|
|
|
|
* Identification: 0x019a (410)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0xf88c [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xf88c]
|
|
|
|
|
* Source Address: 10.3.22.137
|
|
|
|
|
* Destination Address: 10.3.22.11
|
|
|
|
|
* Transmission Control Protocol, Src Port: 44760, Dst Port: 12345, Seq: 0, Len: 0
|
|
|
|
|
* Source Port: 44760
|
|
|
|
|
* Destination Port: 12345
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 0 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 4294967134
|
|
|
|
|
* [Next Sequence Number: 1 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 0
|
|
|
|
|
* Acknowledgment number (raw): 0
|
|
|
|
|
* 1001 .... = Header Length: 36 bytes (9)
|
|
|
|
|
* Flags: 0x002 (SYN)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...0 .... = Acknowledgment: Not set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..1. = Syn: Set
|
|
|
|
|
* [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 12345]
|
|
|
|
|
* [Connection establish request (SYN): server port 12345]
|
|
|
|
|
* [Severity level: Chat]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ··········S·]
|
|
|
|
|
* Window: 29200
|
|
|
|
|
* [Calculated window size: 29200]
|
|
|
|
|
* Checksum: 0xd68c incorrect, should be 0x24e6(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0x24e6]]
|
|
|
|
|
* [Bad checksum [should be 0x24e6]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0x24e6]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (16 bytes), Maximum segment size, SACK permitted, Timestamps
|
|
|
|
|
* TCP Option - Maximum segment size: 1460 bytes
|
|
|
|
|
* Kind: Maximum Segment Size (2)
|
|
|
|
|
* Length: 4
|
|
|
|
|
* MSS Value: 1460
|
|
|
|
|
* TCP Option - SACK permitted
|
|
|
|
|
* Kind: SACK Permitted (4)
|
|
|
|
|
* Length: 2
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 441027524: TSval 441027524, TSecr 0
|
|
|
|
|
* Timestamp echo reply: 0
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.000000000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000000000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_seq_wraparound_pkt1[] = {
|
|
|
|
|
0x00, 0x22, 0x46, 0x36, 0xb6, 0x79, 0x00, 0x22, 0x46, 0x2f, 0x90, 0x37, 0x08, 0x00, 0x45, 0x00, 0x00, 0x38, 0x01, 0x9a, 0x40, 0x00, 0x40, 0x06, 0xf8, 0x8c,
|
|
|
|
|
0x0a, 0x03, 0x16, 0x89, 0x0a, 0x03, 0x16, 0x0b, 0xae, 0xd8, 0x30, 0x39, 0xff, 0xff, 0xff, 0x5e, 0x00, 0x00, 0x00, 0x00, 0x90, 0x02, 0x72, 0x10, 0xd6, 0x8c,
|
|
|
|
|
0x00, 0x00, 0x02, 0x04, 0x05, 0xb4, 0x04, 0x02, 0x08, 0x0a, 0x1a, 0x49, 0x8b, 0xc4, 0x00, 0x00, 0x00, 0x00};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 3: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
|
|
|
|
|
* Ethernet II, Src: EvocInte_2f:90:37 (00:22:46:2f:90:37), Dst: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* Destination: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* Address: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: EvocInte_2f:90:37 (00:22:46:2f:90:37)
|
|
|
|
|
* Address: EvocInte_2f:90:37 (00:22:46:2f:90:37)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 10.3.22.137, Dst: 10.3.22.11
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 52
|
|
|
|
|
* Identification: 0x019b (411)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0xf88f [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xf88f]
|
|
|
|
|
* Source Address: 10.3.22.137
|
|
|
|
|
* Destination Address: 10.3.22.11
|
|
|
|
|
* Transmission Control Protocol, Src Port: 44760, Dst Port: 12345, Seq: 1, Ack: 1, Len: 0
|
|
|
|
|
* Source Port: 44760
|
|
|
|
|
* Destination Port: 12345
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 1 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 4294967135
|
|
|
|
|
* [Next Sequence Number: 1 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 2769824760
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x010 (ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······A····]
|
|
|
|
|
* Window: 29200
|
|
|
|
|
* [Calculated window size: 29200]
|
|
|
|
|
* [Window size scaling factor: -2 (no window scaling used)]
|
|
|
|
|
* Checksum: 0xcd87 incorrect, should be 0x1be1(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0x1be1]]
|
|
|
|
|
* [Bad checksum [should be 0x1be1]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0x1be1]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 441027526: TSval 441027526, TSecr 2924913737
|
|
|
|
|
* Timestamp echo reply: 2924913737
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.001642000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.001507000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 2]
|
|
|
|
|
* [The RTT to ACK the segment was: 0.001507000 seconds]
|
|
|
|
|
* [iRTT: 0.001642000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_seq_wraparound_pkt2[] = {
|
|
|
|
|
0x00, 0x22, 0x46, 0x36, 0xb6, 0x79, 0x00, 0x22, 0x46, 0x2f, 0x90, 0x37, 0x08, 0x00, 0x45, 0x00, 0x00, 0x34, 0x01, 0x9b, 0x40, 0x00, 0x40, 0x06, 0xf8, 0x8f,
|
|
|
|
|
0x0a, 0x03, 0x16, 0x89, 0x0a, 0x03, 0x16, 0x0b, 0xae, 0xd8, 0x30, 0x39, 0xff, 0xff, 0xff, 0x5f, 0xa5, 0x18, 0x2b, 0xf8, 0x80, 0x10, 0x72, 0x10, 0xcd, 0x87,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x1a, 0x49, 0x8b, 0xc6, 0xae, 0x56, 0xa4, 0x49};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 4: 947 bytes on wire (7576 bits), 947 bytes captured (7576 bits)
|
|
|
|
|
* Ethernet II, Src: EvocInte_2f:90:37 (00:22:46:2f:90:37), Dst: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* Destination: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* Address: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: EvocInte_2f:90:37 (00:22:46:2f:90:37)
|
|
|
|
|
* Address: EvocInte_2f:90:37 (00:22:46:2f:90:37)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 10.3.22.137, Dst: 10.3.22.11
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 933
|
|
|
|
|
* Identification: 0x019c (412)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0xf51d [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xf51d]
|
|
|
|
|
* Source Address: 10.3.22.137
|
|
|
|
|
* Destination Address: 10.3.22.11
|
|
|
|
|
* Transmission Control Protocol, Src Port: 44760, Dst Port: 12345, Seq: 1, Ack: 1, Len: 881
|
|
|
|
|
* Source Port: 44760
|
|
|
|
|
* Destination Port: 12345
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 881]
|
|
|
|
|
* Sequence Number: 1 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 4294967135
|
|
|
|
|
* [Next Sequence Number: 882 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 2769824760
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 29200
|
|
|
|
|
* [Calculated window size: 29200]
|
|
|
|
|
* [Window size scaling factor: -2 (no window scaling used)]
|
|
|
|
|
* Checksum: 0x98ef incorrect, should be 0xe748(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0xe748]]
|
|
|
|
|
* [Bad checksum [should be 0xe748]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0xe748]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 441067096: TSval 441067096, TSecr 2924913737
|
|
|
|
|
* Timestamp echo reply: 2924913737
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 39.570855000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 39.569213000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [iRTT: 0.001642000 seconds]
|
|
|
|
|
* [Bytes in flight: 881]
|
|
|
|
|
* [Bytes sent since last PSH flag: 881]
|
|
|
|
|
* TCP payload (881 bytes)
|
|
|
|
|
* Data (881 bytes)
|
|
|
|
|
* Data: 313131313131313131313131313131313131313131313131313131313131313131313131…
|
|
|
|
|
* [Length: 881]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_seq_wraparound_pkt3[] = {
|
|
|
|
|
0x00, 0x22, 0x46, 0x36, 0xb6, 0x79, 0x00, 0x22, 0x46, 0x2f, 0x90, 0x37, 0x08, 0x00, 0x45, 0x00, 0x03, 0xa5, 0x01, 0x9c, 0x40, 0x00, 0x40, 0x06, 0xf5, 0x1d,
|
|
|
|
|
0x0a, 0x03, 0x16, 0x89, 0x0a, 0x03, 0x16, 0x0b, 0xae, 0xd8, 0x30, 0x39, 0xff, 0xff, 0xff, 0x5f, 0xa5, 0x18, 0x2b, 0xf8, 0x80, 0x18, 0x72, 0x10, 0x98, 0xef,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x1a, 0x4a, 0x26, 0x58, 0xae, 0x56, 0xa4, 0x49, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x0a};
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_seq_wraparound_pkt3_payload[] = {
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x0a};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 6: 1381 bytes on wire (11048 bits), 1381 bytes captured (11048 bits)
|
|
|
|
|
* Ethernet II, Src: EvocInte_2f:90:37 (00:22:46:2f:90:37), Dst: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* Destination: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* Address: EvocInte_36:b6:79 (00:22:46:36:b6:79)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: EvocInte_2f:90:37 (00:22:46:2f:90:37)
|
|
|
|
|
* Address: EvocInte_2f:90:37 (00:22:46:2f:90:37)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 10.3.22.137, Dst: 10.3.22.11
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 1367
|
|
|
|
|
* Identification: 0x019e (414)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0xf369 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0xf369]
|
|
|
|
|
* Source Address: 10.3.22.137
|
|
|
|
|
* Destination Address: 10.3.22.11
|
|
|
|
|
* Transmission Control Protocol, Src Port: 44760, Dst Port: 12345, Seq: 882, Ack: 882, Len: 1315
|
|
|
|
|
* Source Port: 44760
|
|
|
|
|
* Destination Port: 12345
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 1315]
|
|
|
|
|
* Sequence Number: 882 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 720
|
|
|
|
|
* [Next Sequence Number: 2197 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 882 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 2769825641
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 30835
|
|
|
|
|
* [Calculated window size: 30835]
|
|
|
|
|
* [Window size scaling factor: -2 (no window scaling used)]
|
|
|
|
|
* Checksum: 0x1175 incorrect, should be 0x5fcf(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0x5fcf]]
|
|
|
|
|
* [Bad checksum [should be 0x5fcf]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0x5fcf]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 441090728: TSval 441090728, TSecr 2924960573
|
|
|
|
|
* Timestamp echo reply: 2924960573
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 63.203588000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 16.367494000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 5]
|
|
|
|
|
* [The RTT to ACK the segment was: 16.367494000 seconds]
|
|
|
|
|
* [iRTT: 0.001642000 seconds]
|
|
|
|
|
* [Bytes in flight: 1315]
|
|
|
|
|
* [Bytes sent since last PSH flag: 1315]
|
|
|
|
|
* TCP payload (1315 bytes)
|
|
|
|
|
* Data (1315 bytes)
|
|
|
|
|
* Data: 7b22636f6d6d6f6e5f736368656d615f74797065223a2248545450222c22636f6d6d6f6e…
|
|
|
|
|
* [Length: 1315]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_seq_wraparound_pkt4[] = {
|
|
|
|
|
0x00, 0x22, 0x46, 0x36, 0xb6, 0x79, 0x00, 0x22, 0x46, 0x2f, 0x90, 0x37, 0x08, 0x00, 0x45, 0x00, 0x05, 0x57, 0x01, 0x9e, 0x40, 0x00, 0x40, 0x06, 0xf3, 0x69,
|
|
|
|
|
0x0a, 0x03, 0x16, 0x89, 0x0a, 0x03, 0x16, 0x0b, 0xae, 0xd8, 0x30, 0x39, 0x00, 0x00, 0x02, 0xd0, 0xa5, 0x18, 0x2f, 0x69, 0x80, 0x18, 0x78, 0x73, 0x11, 0x75,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x1a, 0x4a, 0x82, 0xa8, 0xae, 0x57, 0x5b, 0x3d, 0x7b, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x63, 0x68,
|
|
|
|
|
0x65, 0x6d, 0x61, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x48, 0x54, 0x54, 0x50, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73,
|
|
|
|
|
0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x31, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x5f, 0x6c,
|
|
|
|
|
0x69, 0x6e, 0x65, 0x22, 0x3a, 0x22, 0x47, 0x45, 0x54, 0x20, 0x2f, 0x20, 0x48, 0x54, 0x54, 0x50, 0x2f, 0x31, 0x2e, 0x30, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74,
|
|
|
|
|
0x70, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x22, 0x3a, 0x22, 0x4d, 0x6f, 0x7a, 0x69, 0x6c, 0x6c, 0x61, 0x2f, 0x35, 0x2e, 0x30,
|
|
|
|
|
0x20, 0x28, 0x57, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x73, 0x20, 0x4e, 0x54, 0x20, 0x31, 0x30, 0x2e, 0x30, 0x3b, 0x20, 0x57, 0x69, 0x6e, 0x36, 0x34, 0x3b, 0x20,
|
|
|
|
|
0x78, 0x36, 0x34, 0x29, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x72, 0x6c, 0x22, 0x3a, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e,
|
|
|
|
|
0x32, 0x2e, 0x32, 0x30, 0x30, 0x2f, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x5f, 0x6c, 0x69, 0x6e,
|
|
|
|
|
0x65, 0x22, 0x3a, 0x22, 0x48, 0x54, 0x54, 0x50, 0x2f, 0x31, 0x2e, 0x30, 0x20, 0x32, 0x30, 0x30, 0x20, 0x4f, 0x4b, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70,
|
|
|
|
|
0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x74, 0x65, 0x78, 0x74, 0x2f, 0x68, 0x74, 0x6d, 0x6c, 0x22,
|
|
|
|
|
0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x5f, 0x6c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x22, 0x3a, 0x22, 0x31, 0x30,
|
|
|
|
|
0x30, 0x30, 0x30, 0x30, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x69, 0x73, 0x6e, 0x22, 0x3a, 0x31, 0x33, 0x36, 0x33, 0x31, 0x38, 0x35, 0x38, 0x31,
|
|
|
|
|
0x37, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x5f, 0x66, 0x6c, 0x61, 0x67, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x68, 0x74, 0x74,
|
|
|
|
|
0x70, 0x5f, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x22, 0x68, 0x74, 0x74, 0x70, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e,
|
|
|
|
|
0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x5f, 0x6c, 0x61, 0x62, 0x65, 0x6c, 0x22, 0x3a, 0x22, 0x54, 0x43, 0x50, 0x2f, 0x49, 0x50, 0x76, 0x34,
|
|
|
|
|
0x2f, 0x45, 0x54, 0x48, 0x45, 0x52, 0x4e, 0x45, 0x54, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x73, 0x65, 0x71, 0x75, 0x65, 0x6e, 0x63, 0x65, 0x22,
|
|
|
|
|
0x3a, 0x31, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73, 0x5f, 0x69, 0x70, 0x66, 0x72, 0x61, 0x67, 0x5f, 0x6e, 0x75, 0x6d, 0x22,
|
|
|
|
|
0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f, 0x69, 0x70, 0x66, 0x72, 0x61, 0x67, 0x5f, 0x6e, 0x75, 0x6d, 0x22,
|
|
|
|
|
0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73, 0x5f, 0x74, 0x63, 0x70, 0x5f, 0x75, 0x6e, 0x6f, 0x72, 0x64, 0x65, 0x72,
|
|
|
|
|
0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f, 0x74, 0x63, 0x70, 0x5f, 0x75, 0x6e,
|
|
|
|
|
0x6f, 0x72, 0x64, 0x65, 0x72, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73, 0x5f, 0x74,
|
|
|
|
|
0x63, 0x70, 0x5f, 0x6c, 0x6f, 0x73, 0x74, 0x6c, 0x65, 0x6e, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f,
|
|
|
|
|
0x74, 0x63, 0x70, 0x5f, 0x6c, 0x6f, 0x73, 0x74, 0x6c, 0x65, 0x6e, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x65, 0x72,
|
|
|
|
|
0x76, 0x65, 0x72, 0x5f, 0x69, 0x70, 0x22, 0x3a, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x32, 0x2e, 0x32, 0x30, 0x30, 0x22, 0x2c, 0x22, 0x63,
|
|
|
|
|
0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f, 0x69, 0x70, 0x22, 0x3a, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e,
|
|
|
|
|
0x32, 0x2e, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x22, 0x3a,
|
|
|
|
|
0x38, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x22, 0x3a, 0x31, 0x36,
|
|
|
|
|
0x31, 0x31, 0x36, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x64, 0x69, 0x72, 0x22, 0x3a, 0x33, 0x2c,
|
|
|
|
|
0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x34, 0x2c, 0x22, 0x63,
|
|
|
|
|
0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f, 0x70, 0x6b, 0x74, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x37, 0x34, 0x2c, 0x22, 0x63, 0x6f, 0x6d,
|
|
|
|
|
0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f, 0x62, 0x79, 0x74, 0x65, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x34, 0x36, 0x30, 0x32, 0x34, 0x2c, 0x22, 0x63,
|
|
|
|
|
0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73, 0x5f, 0x70, 0x6b, 0x74, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x31, 0x36, 0x2c, 0x22, 0x63, 0x6f, 0x6d,
|
|
|
|
|
0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73, 0x5f, 0x62, 0x79, 0x74, 0x65, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x31, 0x33, 0x30, 0x34, 0x2c, 0x22, 0x63, 0x6f,
|
|
|
|
|
0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x22, 0x3a, 0x31, 0x36, 0x30, 0x37, 0x35, 0x30, 0x36, 0x39, 0x37,
|
|
|
|
|
0x39, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x65, 0x6e, 0x64, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x22, 0x3a, 0x31, 0x36, 0x30, 0x37, 0x35, 0x30,
|
|
|
|
|
0x37, 0x30, 0x32, 0x31, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x6f, 0x6e, 0x5f, 0x64, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f,
|
|
|
|
|
0x6d, 0x73, 0x22, 0x3a, 0x34, 0x32, 0x30, 0x30, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x74,
|
|
|
|
|
0x72, 0x61, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x22, 0x31, 0x31, 0x35, 0x32, 0x39, 0x39, 0x34, 0x32, 0x39, 0x32, 0x33, 0x30, 0x33, 0x37, 0x37, 0x33,
|
|
|
|
|
0x36, 0x33, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x6c, 0x34, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x22, 0x3a,
|
|
|
|
|
0x22, 0x49, 0x50, 0x76, 0x34, 0x5f, 0x54, 0x43, 0x50, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73,
|
|
|
|
|
0x5f, 0x6c, 0x69, 0x73, 0x74, 0x22, 0x3a, 0x22, 0x31, 0x36, 0x31, 0x31, 0x36, 0x2d, 0x38, 0x30, 0x2d, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x32,
|
|
|
|
|
0x2e, 0x31, 0x2d, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x32, 0x2e, 0x32, 0x30, 0x30, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f,
|
|
|
|
|
0x6c, 0x37, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x22, 0x3a, 0x22, 0x48, 0x54, 0x54, 0x50, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f,
|
|
|
|
|
0x6e, 0x5f, 0x65, 0x73, 0x74, 0x61, 0x62, 0x6c, 0x69, 0x73, 0x68, 0x5f, 0x6c, 0x61, 0x74, 0x65, 0x6e, 0x63, 0x79, 0x5f, 0x6d, 0x73, 0x22, 0x3a, 0x35, 0x33,
|
|
|
|
|
0x31, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x64, 0x69, 0x72, 0x65, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x36, 0x39, 0x2c, 0x22, 0x63,
|
|
|
|
|
0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x6c, 0x65, 0x64, 0x5f, 0x69, 0x70, 0x22, 0x3a, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x34, 0x30,
|
|
|
|
|
0x2e, 0x31, 0x36, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x64, 0x65, 0x76, 0x69, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x22,
|
|
|
|
|
0x43, 0x42, 0x54, 0x32, 0x32, 0x30, 0x31, 0x39, 0x32, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f,
|
|
|
|
|
0x64, 0x61, 0x74, 0x61, 0x5f, 0x63, 0x65, 0x6e, 0x74, 0x65, 0x72, 0x22, 0x3a, 0x22, 0x41, 0x6c, 0x6d, 0x61, 0x74, 0x79, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d,
|
|
|
|
|
0x6d, 0x6f, 0x6e, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73,
|
|
|
|
|
0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x22, 0x3a, 0x31, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a,
|
|
|
|
|
0x30, 0x7d, 0x0a};
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_seq_wraparound_pkt4_payload[] = {
|
|
|
|
|
0x7b, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x63, 0x68, 0x65, 0x6d, 0x61, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x22, 0x48, 0x54, 0x54,
|
|
|
|
|
0x50, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x3a, 0x31, 0x2c, 0x22, 0x68, 0x74,
|
|
|
|
|
0x74, 0x70, 0x5f, 0x72, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x5f, 0x6c, 0x69, 0x6e, 0x65, 0x22, 0x3a, 0x22, 0x47, 0x45, 0x54, 0x20, 0x2f, 0x20, 0x48, 0x54,
|
|
|
|
|
0x54, 0x50, 0x2f, 0x31, 0x2e, 0x30, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x73, 0x65, 0x72, 0x5f, 0x61, 0x67, 0x65, 0x6e, 0x74, 0x22, 0x3a,
|
|
|
|
|
0x22, 0x4d, 0x6f, 0x7a, 0x69, 0x6c, 0x6c, 0x61, 0x2f, 0x35, 0x2e, 0x30, 0x20, 0x28, 0x57, 0x69, 0x6e, 0x64, 0x6f, 0x77, 0x73, 0x20, 0x4e, 0x54, 0x20, 0x31,
|
|
|
|
|
0x30, 0x2e, 0x30, 0x3b, 0x20, 0x57, 0x69, 0x6e, 0x36, 0x34, 0x3b, 0x20, 0x78, 0x36, 0x34, 0x29, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x75, 0x72,
|
|
|
|
|
0x6c, 0x22, 0x3a, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x32, 0x2e, 0x32, 0x30, 0x30, 0x2f, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f,
|
|
|
|
|
0x72, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x5f, 0x6c, 0x69, 0x6e, 0x65, 0x22, 0x3a, 0x22, 0x48, 0x54, 0x54, 0x50, 0x2f, 0x31, 0x2e, 0x30, 0x20, 0x32,
|
|
|
|
|
0x30, 0x30, 0x20, 0x4f, 0x4b, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x22,
|
|
|
|
|
0x3a, 0x22, 0x74, 0x65, 0x78, 0x74, 0x2f, 0x68, 0x74, 0x6d, 0x6c, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74,
|
|
|
|
|
0x5f, 0x6c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x22, 0x3a, 0x22, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x22, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x69, 0x73,
|
|
|
|
|
0x6e, 0x22, 0x3a, 0x31, 0x33, 0x36, 0x33, 0x31, 0x38, 0x35, 0x38, 0x31, 0x37, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x5f,
|
|
|
|
|
0x66, 0x6c, 0x61, 0x67, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x68, 0x74, 0x74, 0x70, 0x5f, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x22, 0x68, 0x74,
|
|
|
|
|
0x74, 0x70, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x5f, 0x6c, 0x61, 0x62, 0x65,
|
|
|
|
|
0x6c, 0x22, 0x3a, 0x22, 0x54, 0x43, 0x50, 0x2f, 0x49, 0x50, 0x76, 0x34, 0x2f, 0x45, 0x54, 0x48, 0x45, 0x52, 0x4e, 0x45, 0x54, 0x22, 0x2c, 0x22, 0x68, 0x74,
|
|
|
|
|
0x74, 0x70, 0x5f, 0x73, 0x65, 0x71, 0x75, 0x65, 0x6e, 0x63, 0x65, 0x22, 0x3a, 0x31, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73,
|
|
|
|
|
0x5f, 0x69, 0x70, 0x66, 0x72, 0x61, 0x67, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63,
|
|
|
|
|
0x5f, 0x69, 0x70, 0x66, 0x72, 0x61, 0x67, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73,
|
|
|
|
|
0x5f, 0x74, 0x63, 0x70, 0x5f, 0x75, 0x6e, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f,
|
|
|
|
|
0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f, 0x74, 0x63, 0x70, 0x5f, 0x75, 0x6e, 0x6f, 0x72, 0x64, 0x65, 0x72, 0x5f, 0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x30, 0x2c, 0x22,
|
|
|
|
|
0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73, 0x5f, 0x74, 0x63, 0x70, 0x5f, 0x6c, 0x6f, 0x73, 0x74, 0x6c, 0x65, 0x6e, 0x22, 0x3a, 0x30, 0x2c,
|
|
|
|
|
0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f, 0x74, 0x63, 0x70, 0x5f, 0x6c, 0x6f, 0x73, 0x74, 0x6c, 0x65, 0x6e, 0x22, 0x3a, 0x30,
|
|
|
|
|
0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x5f, 0x69, 0x70, 0x22, 0x3a, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31,
|
|
|
|
|
0x36, 0x38, 0x2e, 0x32, 0x2e, 0x32, 0x30, 0x30, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f, 0x69,
|
|
|
|
|
0x70, 0x22, 0x3a, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x32, 0x2e, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73,
|
|
|
|
|
0x65, 0x72, 0x76, 0x65, 0x72, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x22, 0x3a, 0x38, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x6c, 0x69,
|
|
|
|
|
0x65, 0x6e, 0x74, 0x5f, 0x70, 0x6f, 0x72, 0x74, 0x22, 0x3a, 0x31, 0x36, 0x31, 0x31, 0x36, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x74,
|
|
|
|
|
0x72, 0x65, 0x61, 0x6d, 0x5f, 0x64, 0x69, 0x72, 0x22, 0x3a, 0x33, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73,
|
|
|
|
|
0x73, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x22, 0x3a, 0x34, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f, 0x70, 0x6b, 0x74, 0x5f,
|
|
|
|
|
0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x37, 0x34, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x32, 0x63, 0x5f, 0x62, 0x79, 0x74, 0x65, 0x5f, 0x6e,
|
|
|
|
|
0x75, 0x6d, 0x22, 0x3a, 0x34, 0x36, 0x30, 0x32, 0x34, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73, 0x5f, 0x70, 0x6b, 0x74, 0x5f,
|
|
|
|
|
0x6e, 0x75, 0x6d, 0x22, 0x3a, 0x31, 0x36, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63, 0x32, 0x73, 0x5f, 0x62, 0x79, 0x74, 0x65, 0x5f, 0x6e,
|
|
|
|
|
0x75, 0x6d, 0x22, 0x3a, 0x31, 0x33, 0x30, 0x34, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x74, 0x61, 0x72, 0x74, 0x5f, 0x74, 0x69, 0x6d,
|
|
|
|
|
0x65, 0x22, 0x3a, 0x31, 0x36, 0x30, 0x37, 0x35, 0x30, 0x36, 0x39, 0x37, 0x39, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x65, 0x6e, 0x64, 0x5f,
|
|
|
|
|
0x74, 0x69, 0x6d, 0x65, 0x22, 0x3a, 0x31, 0x36, 0x30, 0x37, 0x35, 0x30, 0x37, 0x30, 0x32, 0x31, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x63,
|
|
|
|
|
0x6f, 0x6e, 0x5f, 0x64, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x6d, 0x73, 0x22, 0x3a, 0x34, 0x32, 0x30, 0x30, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d,
|
|
|
|
|
0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x5f, 0x74, 0x72, 0x61, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x22, 0x31, 0x31, 0x35, 0x32,
|
|
|
|
|
0x39, 0x39, 0x34, 0x32, 0x39, 0x32, 0x33, 0x30, 0x33, 0x37, 0x37, 0x33, 0x36, 0x33, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x6c,
|
|
|
|
|
0x34, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x22, 0x3a, 0x22, 0x49, 0x50, 0x76, 0x34, 0x5f, 0x54, 0x43, 0x50, 0x22, 0x2c, 0x22, 0x63, 0x6f,
|
|
|
|
|
0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x61, 0x64, 0x64, 0x72, 0x65, 0x73, 0x73, 0x5f, 0x6c, 0x69, 0x73, 0x74, 0x22, 0x3a, 0x22, 0x31, 0x36, 0x31, 0x31, 0x36, 0x2d,
|
|
|
|
|
0x38, 0x30, 0x2d, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x32, 0x2e, 0x31, 0x2d, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x32, 0x2e, 0x32,
|
|
|
|
|
0x30, 0x30, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x6c, 0x37, 0x5f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x22, 0x3a, 0x22,
|
|
|
|
|
0x48, 0x54, 0x54, 0x50, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x65, 0x73, 0x74, 0x61, 0x62, 0x6c, 0x69, 0x73, 0x68, 0x5f, 0x6c, 0x61,
|
|
|
|
|
0x74, 0x65, 0x6e, 0x63, 0x79, 0x5f, 0x6d, 0x73, 0x22, 0x3a, 0x35, 0x33, 0x31, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x64, 0x69, 0x72, 0x65,
|
|
|
|
|
0x63, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x36, 0x39, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x6c, 0x65, 0x64, 0x5f, 0x69, 0x70, 0x22,
|
|
|
|
|
0x3a, 0x22, 0x31, 0x39, 0x32, 0x2e, 0x31, 0x36, 0x38, 0x2e, 0x34, 0x30, 0x2e, 0x31, 0x36, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f,
|
|
|
|
|
0x64, 0x65, 0x76, 0x69, 0x63, 0x65, 0x5f, 0x69, 0x64, 0x22, 0x3a, 0x22, 0x43, 0x42, 0x54, 0x32, 0x32, 0x30, 0x31, 0x39, 0x32, 0x35, 0x30, 0x30, 0x30, 0x30,
|
|
|
|
|
0x30, 0x31, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x64, 0x61, 0x74, 0x61, 0x5f, 0x63, 0x65, 0x6e, 0x74, 0x65, 0x72, 0x22, 0x3a, 0x22,
|
|
|
|
|
0x41, 0x6c, 0x6d, 0x61, 0x74, 0x79, 0x22, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5f, 0x69, 0x64, 0x22,
|
|
|
|
|
0x3a, 0x30, 0x2c, 0x22, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x22, 0x3a, 0x31, 0x2c, 0x22, 0x63, 0x6f, 0x6d,
|
|
|
|
|
0x6d, 0x6f, 0x6e, 0x5f, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x3a, 0x30, 0x7d, 0x0a};
|
|
|
|
|
|
|
|
|
|
/******************************************************************************
|
|
|
|
|
* test packet: TCP C2S out of order
|
|
|
|
|
******************************************************************************/
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 1: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface unknown, id 0
|
|
|
|
|
* Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 60
|
|
|
|
|
* Identification: 0xe8ea (59626)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x53cf [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x53cf]
|
|
|
|
|
* Source Address: 127.0.0.1
|
|
|
|
|
* Destination Address: 127.0.0.1
|
|
|
|
|
* Transmission Control Protocol, Src Port: 40812, Dst Port: 55555, Seq: 0, Len: 0
|
|
|
|
|
* Source Port: 40812
|
|
|
|
|
* Destination Port: 55555
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 0 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 3903031379
|
|
|
|
|
* [Next Sequence Number: 1 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 0
|
|
|
|
|
* Acknowledgment number (raw): 0
|
|
|
|
|
* 1010 .... = Header Length: 40 bytes (10)
|
|
|
|
|
* Flags: 0x002 (SYN)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...0 .... = Acknowledgment: Not set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..1. = Syn: Set
|
|
|
|
|
* [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 55555]
|
|
|
|
|
* [Connection establish request (SYN): server port 55555]
|
|
|
|
|
* [Severity level: Chat]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ··········S·]
|
|
|
|
|
* Window: 43690
|
|
|
|
|
* [Calculated window size: 43690]
|
|
|
|
|
* Checksum: 0xfe30 incorrect, should be 0xc5a7(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0xc5a7]]
|
|
|
|
|
* [Bad checksum [should be 0xc5a7]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0xc5a7]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (20 bytes), Maximum segment size, SACK permitted, Timestamps, No-Operation (NOP), Window scale
|
|
|
|
|
* TCP Option - Maximum segment size: 65495 bytes
|
|
|
|
|
* Kind: Maximum Segment Size (2)
|
|
|
|
|
* Length: 4
|
|
|
|
|
* MSS Value: 65495
|
|
|
|
|
* TCP Option - SACK permitted
|
|
|
|
|
* Kind: SACK Permitted (4)
|
|
|
|
|
* Length: 2
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 2506514617: TSval 2506514617, TSecr 0
|
|
|
|
|
* Timestamp echo reply: 0
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Window scale: 7 (multiply by 128)
|
|
|
|
|
* Kind: Window Scale (3)
|
|
|
|
|
* Length: 3
|
|
|
|
|
* Shift count: 7
|
|
|
|
|
* [Multiplier: 128]
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.000000000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 0.000000000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_out_of_order_pkt1[] = {
|
|
|
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x45, 0x00, 0x00, 0x3c, 0xe8, 0xea, 0x40, 0x00, 0x40, 0x06, 0x53, 0xcf,
|
|
|
|
|
0x7f, 0x00, 0x00, 0x01, 0x7f, 0x00, 0x00, 0x01, 0x9f, 0x6c, 0xd9, 0x03, 0xe8, 0xa3, 0x88, 0x53, 0x00, 0x00, 0x00, 0x00, 0xa0, 0x02, 0xaa, 0xaa, 0xfe, 0x30,
|
|
|
|
|
0x00, 0x00, 0x02, 0x04, 0xff, 0xd7, 0x04, 0x02, 0x08, 0x0a, 0x95, 0x66, 0x60, 0xb9, 0x00, 0x00, 0x00, 0x00, 0x01, 0x03, 0x03, 0x07};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 3: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface unknown, id 0
|
|
|
|
|
* Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 52
|
|
|
|
|
* Identification: 0xe8eb (59627)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x53d6 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x53d6]
|
|
|
|
|
* Source Address: 127.0.0.1
|
|
|
|
|
* Destination Address: 127.0.0.1
|
|
|
|
|
* Transmission Control Protocol, Src Port: 40812, Dst Port: 55555, Seq: 1, Ack: 1, Len: 0
|
|
|
|
|
* Source Port: 40812
|
|
|
|
|
* Destination Port: 55555
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 0]
|
|
|
|
|
* Sequence Number: 1 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 3903031380
|
|
|
|
|
* [Next Sequence Number: 1 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 272792950
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x010 (ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 0... = Push: Not set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······A····]
|
|
|
|
|
* Window: 342
|
|
|
|
|
* [Calculated window size: 43776]
|
|
|
|
|
* [Window size scaling factor: 128]
|
|
|
|
|
* Checksum: 0xfe28 incorrect, should be 0x1404(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0x1404]]
|
|
|
|
|
* [Bad checksum [should be 0x1404]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0x1404]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 2506514617: TSval 2506514617, TSecr 2506514617
|
|
|
|
|
* Timestamp echo reply: 2506514617
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 0.000037000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 643767903.523730000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [This is an ACK to the segment in frame: 2]
|
|
|
|
|
* [The RTT to ACK the segment was: 643767903.523730000 seconds]
|
|
|
|
|
* [iRTT: 0.000037000 seconds]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_out_of_order_pkt2[] = {
|
|
|
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x45, 0x00, 0x00, 0x34, 0xe8, 0xeb, 0x40, 0x00, 0x40, 0x06, 0x53, 0xd6,
|
|
|
|
|
0x7f, 0x00, 0x00, 0x01, 0x7f, 0x00, 0x00, 0x01, 0x9f, 0x6c, 0xd9, 0x03, 0xe8, 0xa3, 0x88, 0x54, 0x10, 0x42, 0x7d, 0x76, 0x80, 0x10, 0x01, 0x56, 0xfe, 0x28,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x95, 0x66, 0x60, 0xb9, 0x95, 0x66, 0x60, 0xb9};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 4: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) on interface unknown, id 0
|
|
|
|
|
* Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 115
|
|
|
|
|
* Identification: 0xe8ed (59629)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x5395 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x5395]
|
|
|
|
|
* Source Address: 127.0.0.1
|
|
|
|
|
* Destination Address: 127.0.0.1
|
|
|
|
|
* Transmission Control Protocol, Src Port: 40812, Dst Port: 55555, Seq: 64, Ack: 1, Len: 63
|
|
|
|
|
* Source Port: 40812
|
|
|
|
|
* Destination Port: 55555
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 63]
|
|
|
|
|
* Sequence Number: 64 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 3903031443
|
|
|
|
|
* [Next Sequence Number: 127 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 272792950
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 342
|
|
|
|
|
* [Calculated window size: 43776]
|
|
|
|
|
* [Window size scaling factor: 128]
|
|
|
|
|
* Checksum: 0xfe67 incorrect, should be 0xc4b9(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0xc4b9]]
|
|
|
|
|
* [Bad checksum [should be 0xc4b9]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0xc4b9]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 2506523081: TSval 2506523081, TSecr 2506518617
|
|
|
|
|
* Timestamp echo reply: 2506518617
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 8.464205000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 8.464168000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [iRTT: 0.000037000 seconds]
|
|
|
|
|
* [TCP Analysis Flags]
|
|
|
|
|
* [Expert Info (Warning/Sequence): Previous segment(s) not captured (common at capture start)]
|
|
|
|
|
* [Previous segment(s) not captured (common at capture start)]
|
|
|
|
|
* [Severity level: Warning]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* TCP payload (63 bytes)
|
|
|
|
|
* Data (63 bytes)
|
|
|
|
|
* Data: 323232323232323232323232323232323232323232323232323232323232323232323232…
|
|
|
|
|
* [Length: 63]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_out_of_order_pkt3[] = {
|
|
|
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x45, 0x00, 0x00, 0x73, 0xe8, 0xed, 0x40, 0x00, 0x40, 0x06, 0x53, 0x95,
|
|
|
|
|
0x7f, 0x00, 0x00, 0x01, 0x7f, 0x00, 0x00, 0x01, 0x9f, 0x6c, 0xd9, 0x03, 0xe8, 0xa3, 0x88, 0x93, 0x10, 0x42, 0x7d, 0x76, 0x80, 0x18, 0x01, 0x56, 0xfe, 0x67,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x95, 0x66, 0x81, 0xc9, 0x95, 0x66, 0x70, 0x59, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32,
|
|
|
|
|
0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32,
|
|
|
|
|
0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x32, 0x0a};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 5: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) on interface unknown, id 0
|
|
|
|
|
* Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 115
|
|
|
|
|
* Identification: 0xe8ee (59630)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x5394 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x5394]
|
|
|
|
|
* Source Address: 127.0.0.1
|
|
|
|
|
* Destination Address: 127.0.0.1
|
|
|
|
|
* Transmission Control Protocol, Src Port: 40812, Dst Port: 55555, Seq: 127, Ack: 1, Len: 63
|
|
|
|
|
* Source Port: 40812
|
|
|
|
|
* Destination Port: 55555
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 63]
|
|
|
|
|
* Sequence Number: 127 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 3903031506
|
|
|
|
|
* [Next Sequence Number: 190 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 272792950
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 342
|
|
|
|
|
* [Calculated window size: 43776]
|
|
|
|
|
* [Window size scaling factor: 128]
|
|
|
|
|
* Checksum: 0xfe67 incorrect, should be 0x823b(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0x823b]]
|
|
|
|
|
* [Bad checksum [should be 0x823b]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0x823b]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 2506527609: TSval 2506527609, TSecr 2506523081
|
|
|
|
|
* Timestamp echo reply: 2506523081
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 12.992217000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 4.528012000 seconds]
|
|
|
|
|
* TCP payload (63 bytes)
|
|
|
|
|
* Data (63 bytes)
|
|
|
|
|
* Data: 333333333333333333333333333333333333333333333333333333333333333333333333…
|
|
|
|
|
* [Length: 63]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_out_of_order_pkt4[] = {
|
|
|
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x45, 0x00, 0x00, 0x73, 0xe8, 0xee, 0x40, 0x00, 0x40, 0x06, 0x53, 0x94,
|
|
|
|
|
0x7f, 0x00, 0x00, 0x01, 0x7f, 0x00, 0x00, 0x01, 0x9f, 0x6c, 0xd9, 0x03, 0xe8, 0xa3, 0x88, 0xd2, 0x10, 0x42, 0x7d, 0x76, 0x80, 0x18, 0x01, 0x56, 0xfe, 0x67,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x95, 0x66, 0x93, 0x79, 0x95, 0x66, 0x81, 0xc9, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33,
|
|
|
|
|
0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33,
|
|
|
|
|
0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x33, 0x0a};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 6: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) on interface unknown, id 0
|
|
|
|
|
* Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 115
|
|
|
|
|
* Identification: 0xe8ef (59631)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x5393 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x5393]
|
|
|
|
|
* Source Address: 127.0.0.1
|
|
|
|
|
* Destination Address: 127.0.0.1
|
|
|
|
|
* Transmission Control Protocol, Src Port: 40812, Dst Port: 55555, Seq: 190, Ack: 1, Len: 63
|
|
|
|
|
* Source Port: 40812
|
|
|
|
|
* Destination Port: 55555
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 63]
|
|
|
|
|
* Sequence Number: 190 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 3903031569
|
|
|
|
|
* [Next Sequence Number: 253 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 272792950
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 342
|
|
|
|
|
* [Calculated window size: 43776]
|
|
|
|
|
* [Window size scaling factor: 128]
|
|
|
|
|
* Checksum: 0xfe67 incorrect, should be 0x3e2d(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0x3e2d]]
|
|
|
|
|
* [Bad checksum [should be 0x3e2d]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0x3e2d]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 2506532473: TSval 2506532473, TSecr 2506527609
|
|
|
|
|
* Timestamp echo reply: 2506527609
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 17.856214000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 4.863997000 seconds]
|
|
|
|
|
* TCP payload (63 bytes)
|
|
|
|
|
* Data (63 bytes)
|
|
|
|
|
* Data: 343434343434343434343434343434343434343434343434343434343434343434343434…
|
|
|
|
|
* [Length: 63]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_out_of_order_pkt5[] = {
|
|
|
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x45, 0x00, 0x00, 0x73, 0xe8, 0xef, 0x40, 0x00, 0x40, 0x06, 0x53, 0x93,
|
|
|
|
|
0x7f, 0x00, 0x00, 0x01, 0x7f, 0x00, 0x00, 0x01, 0x9f, 0x6c, 0xd9, 0x03, 0xe8, 0xa3, 0x89, 0x11, 0x10, 0x42, 0x7d, 0x76, 0x80, 0x18, 0x01, 0x56, 0xfe, 0x67,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x95, 0x66, 0xa6, 0x79, 0x95, 0x66, 0x93, 0x79, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34,
|
|
|
|
|
0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34,
|
|
|
|
|
0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x34, 0x0a};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 7: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) on interface unknown, id 0
|
|
|
|
|
* Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 115
|
|
|
|
|
* Identification: 0xe8f0 (59632)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x5392 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x5392]
|
|
|
|
|
* Source Address: 127.0.0.1
|
|
|
|
|
* Destination Address: 127.0.0.1
|
|
|
|
|
* Transmission Control Protocol, Src Port: 40812, Dst Port: 55555, Seq: 253, Ack: 1, Len: 63
|
|
|
|
|
* Source Port: 40812
|
|
|
|
|
* Destination Port: 55555
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 63]
|
|
|
|
|
* Sequence Number: 253 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 3903031632
|
|
|
|
|
* [Next Sequence Number: 316 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 272792950
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 342
|
|
|
|
|
* [Calculated window size: 43776]
|
|
|
|
|
* [Window size scaling factor: 128]
|
|
|
|
|
* Checksum: 0xfe67 incorrect, should be 0xf636(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0xf636]]
|
|
|
|
|
* [Bad checksum [should be 0xf636]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0xf636]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 2506538001: TSval 2506538001, TSecr 2506532473
|
|
|
|
|
* Timestamp echo reply: 2506532473
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 23.384147000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: 5.527933000 seconds]
|
|
|
|
|
* TCP payload (63 bytes)
|
|
|
|
|
* Data (63 bytes)
|
|
|
|
|
* Data: 353535353535353535353535353535353535353535353535353535353535353535353535…
|
|
|
|
|
* [Length: 63]
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_out_of_order_pkt6[] = {
|
|
|
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x45, 0x00, 0x00, 0x73, 0xe8, 0xf0, 0x40, 0x00, 0x40, 0x06, 0x53, 0x92,
|
|
|
|
|
0x7f, 0x00, 0x00, 0x01, 0x7f, 0x00, 0x00, 0x01, 0x9f, 0x6c, 0xd9, 0x03, 0xe8, 0xa3, 0x89, 0x50, 0x10, 0x42, 0x7d, 0x76, 0x80, 0x18, 0x01, 0x56, 0xfe, 0x67,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x95, 0x66, 0xbc, 0x11, 0x95, 0x66, 0xa6, 0x79, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
|
|
|
|
|
0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35,
|
|
|
|
|
0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x35, 0x0a};
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Frame 8: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) on interface unknown, id 0
|
|
|
|
|
* Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
|
|
|
|
|
* .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
|
|
|
|
|
* Type: IPv4 (0x0800)
|
|
|
|
|
* Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
|
|
|
|
|
* 0100 .... = Version: 4
|
|
|
|
|
* .... 0101 = Header Length: 20 bytes (5)
|
|
|
|
|
* Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* 0000 00.. = Differentiated Services Codepoint: Default (0)
|
|
|
|
|
* .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
|
|
|
|
|
* Total Length: 115
|
|
|
|
|
* Identification: 0xe8ec (59628)
|
|
|
|
|
* 010. .... = Flags: 0x2, Don't fragment
|
|
|
|
|
* 0... .... = Reserved bit: Not set
|
|
|
|
|
* .1.. .... = Don't fragment: Set
|
|
|
|
|
* ..0. .... = More fragments: Not set
|
|
|
|
|
* ...0 0000 0000 0000 = Fragment Offset: 0
|
|
|
|
|
* Time to Live: 64
|
|
|
|
|
* Protocol: TCP (6)
|
|
|
|
|
* Header Checksum: 0x5396 [correct]
|
|
|
|
|
* [Header checksum status: Good]
|
|
|
|
|
* [Calculated Checksum: 0x5396]
|
|
|
|
|
* Source Address: 127.0.0.1
|
|
|
|
|
* Destination Address: 127.0.0.1
|
|
|
|
|
* Transmission Control Protocol, Src Port: 40812, Dst Port: 55555, Seq: 1, Ack: 1, Len: 63
|
|
|
|
|
* Source Port: 40812
|
|
|
|
|
* Destination Port: 55555
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Conversation completeness: Complete, WITH_DATA (31)]
|
|
|
|
|
* [TCP Segment Len: 63]
|
|
|
|
|
* Sequence Number: 1 (relative sequence number)
|
|
|
|
|
* Sequence Number (raw): 3903031380
|
|
|
|
|
* [Next Sequence Number: 64 (relative sequence number)]
|
|
|
|
|
* Acknowledgment Number: 1 (relative ack number)
|
|
|
|
|
* Acknowledgment number (raw): 272792950
|
|
|
|
|
* 1000 .... = Header Length: 32 bytes (8)
|
|
|
|
|
* Flags: 0x018 (PSH, ACK)
|
|
|
|
|
* 000. .... .... = Reserved: Not set
|
|
|
|
|
* ...0 .... .... = Accurate ECN: Not set
|
|
|
|
|
* .... 0... .... = Congestion Window Reduced: Not set
|
|
|
|
|
* .... .0.. .... = ECN-Echo: Not set
|
|
|
|
|
* .... ..0. .... = Urgent: Not set
|
|
|
|
|
* .... ...1 .... = Acknowledgment: Set
|
|
|
|
|
* .... .... 1... = Push: Set
|
|
|
|
|
* .... .... .0.. = Reset: Not set
|
|
|
|
|
* .... .... ..0. = Syn: Not set
|
|
|
|
|
* .... .... ...0 = Fin: Not set
|
|
|
|
|
* [TCP Flags: ·······AP···]
|
|
|
|
|
* Window: 342
|
|
|
|
|
* [Calculated window size: 43776]
|
|
|
|
|
* [Window size scaling factor: 128]
|
|
|
|
|
* Checksum: 0xfe67 incorrect, should be 0x0528(maybe caused by "TCP checksum offload"?)
|
|
|
|
|
* [Expert Info (Error/Checksum): Bad checksum [should be 0x0528]]
|
|
|
|
|
* [Bad checksum [should be 0x0528]]
|
|
|
|
|
* [Severity level: Error]
|
|
|
|
|
* [Group: Checksum]
|
|
|
|
|
* [Checksum Status: Bad]
|
|
|
|
|
* [Calculated Checksum: 0x0528]
|
|
|
|
|
* Urgent Pointer: 0
|
|
|
|
|
* Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - No-Operation (NOP)
|
|
|
|
|
* Kind: No-Operation (1)
|
|
|
|
|
* TCP Option - Timestamps
|
|
|
|
|
* Kind: Time Stamp Option (8)
|
|
|
|
|
* Length: 10
|
|
|
|
|
* Timestamp value: 2506518617: TSval 2506518617, TSecr 2506514617
|
|
|
|
|
* Timestamp echo reply: 2506514617
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* [Time since first frame in this TCP stream: 4.000292000 seconds]
|
|
|
|
|
* [Time since previous frame in this TCP stream: -19.383855000 seconds]
|
|
|
|
|
* [SEQ/ACK analysis]
|
|
|
|
|
* [iRTT: 0.000037000 seconds]
|
|
|
|
|
* [TCP Analysis Flags]
|
|
|
|
|
* [Expert Info (Note/Sequence): This frame is a (suspected) retransmission]
|
|
|
|
|
* [This frame is a (suspected) retransmission]
|
|
|
|
|
* [Severity level: Note]
|
|
|
|
|
* [Group: Sequence]
|
|
|
|
|
* [The RTO for this segment was: -4.463913000 seconds]
|
|
|
|
|
* [RTO based on delta from frame: 4]
|
|
|
|
|
* TCP payload (63 bytes)
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char tcp_out_of_order_pkt7[] = {
|
|
|
|
|
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x45, 0x00, 0x00, 0x73, 0xe8, 0xec, 0x40, 0x00, 0x40, 0x06, 0x53, 0x96,
|
|
|
|
|
0x7f, 0x00, 0x00, 0x01, 0x7f, 0x00, 0x00, 0x01, 0x9f, 0x6c, 0xd9, 0x03, 0xe8, 0xa3, 0x88, 0x54, 0x10, 0x42, 0x7d, 0x76, 0x80, 0x18, 0x01, 0x56, 0xfe, 0x67,
|
|
|
|
|
0x00, 0x00, 0x01, 0x01, 0x08, 0x0a, 0x95, 0x66, 0x70, 0x59, 0x95, 0x66, 0x60, 0xb9, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31,
|
|
|
|
|
0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x31, 0x0a};
|
|
|
|
|
|
2024-08-20 18:43:51 +08:00
|
|
|
/******************************************************************************
|
|
|
|
|
* [Protocols in frame: eth:ethertype:ipv6:ipv6:udp:data]
|
|
|
|
|
******************************************************************************
|
|
|
|
|
*
|
|
|
|
|
* Frame 1: 106 bytes on wire (848 bits), 106 bytes captured (848 bits)
|
|
|
|
|
* Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
|
|
|
|
|
* Destination: Broadcast (ff:ff:ff:ff:ff:ff)
|
|
|
|
|
* Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
|
|
|
|
|
* Type: IPv6 (0x86dd)
|
|
|
|
|
* Internet Protocol Version 6, Src: 2001:4f8:4:7:2e0:81ff:fe52:ffff, Dst: 2001:4f8:4:7:2e0:81ff:fe52:9a6b
|
|
|
|
|
* 0110 .... = Version: 6
|
|
|
|
|
* .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* .... 0000 0000 0000 0000 0000 = Flow Label: 0x00000
|
|
|
|
|
* Payload Length: 52
|
|
|
|
|
* Next Header: IPv6 (41)
|
|
|
|
|
* Hop Limit: 64
|
|
|
|
|
* Source Address: 2001:4f8:4:7:2e0:81ff:fe52:ffff
|
|
|
|
|
* Destination Address: 2001:4f8:4:7:2e0:81ff:fe52:9a6b
|
|
|
|
|
* [Source SLAAC MAC: TyanComp_52:ff:ff (00:e0:81:52:ff:ff)]
|
|
|
|
|
* [Destination SLAAC MAC: TyanComp_52:9a:6b (00:e0:81:52:9a:6b)]
|
|
|
|
|
* Internet Protocol Version 6, Src: dead::beef, Dst: cafe::babe
|
|
|
|
|
* 0110 .... = Version: 6
|
|
|
|
|
* .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
|
|
|
|
|
* .... 0000 0000 0000 0000 0000 = Flow Label: 0x00000
|
|
|
|
|
* Payload Length: 12
|
|
|
|
|
* Next Header: UDP (17)
|
|
|
|
|
* Hop Limit: 64
|
|
|
|
|
* Source Address: dead::beef
|
|
|
|
|
* Destination Address: cafe::babe
|
|
|
|
|
* User Datagram Protocol, Src Port: 30000, Dst Port: 13000
|
|
|
|
|
* Source Port: 30000
|
|
|
|
|
* Destination Port: 13000
|
|
|
|
|
* Length: 12
|
|
|
|
|
* Checksum: 0x83d2 [unverified]
|
|
|
|
|
* [Checksum Status: Unverified]
|
|
|
|
|
* [Stream index: 0]
|
|
|
|
|
* [Timestamps]
|
|
|
|
|
* UDP payload (4 bytes)
|
|
|
|
|
* Data (4 bytes)
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
unsigned char ipv6_in_ipv6_udp[] = {
|
|
|
|
|
0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x86, 0xdd, 0x60, 0x00, 0x00, 0x00, 0x00, 0x34, 0x29, 0x40, 0x20, 0x01, 0x04, 0xf8,
|
|
|
|
|
0x00, 0x04, 0x00, 0x07, 0x02, 0xe0, 0x81, 0xff, 0xfe, 0x52, 0xff, 0xff, 0x20, 0x01, 0x04, 0xf8, 0x00, 0x04, 0x00, 0x07, 0x02, 0xe0, 0x81, 0xff, 0xfe, 0x52,
|
|
|
|
|
0x9a, 0x6b, 0x60, 0x00, 0x00, 0x00, 0x00, 0x0c, 0x11, 0x40, 0xde, 0xad, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xbe, 0xef,
|
|
|
|
|
0xca, 0xfe, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xba, 0xbe, 0x75, 0x30, 0x32, 0xc8, 0x00, 0x0c, 0x83, 0xd2, 0x58, 0x58,
|
|
|
|
|
0x58, 0x58};
|
|
|
|
|
|
2024-04-21 11:30:41 +08:00
|
|
|
#ifdef __cplusplus
|
2023-12-22 14:54:25 +08:00
|
|
|
}
|
|
|
|
|
#endif
|
