Ethernt IIIPv4 : 0x0800IPv6 : 0x86ddARP : 0x0806Destination:78:44:fd:b5:fa:57Source:f0:d5:bf:05:a0:46Type:IPv4(0x0800)ARPheader fieldsHardwaretype:Ethernet(1)硬件类型1表示以太网Protocoltype:IPv4(0x0800)Hardwaresize:6硬件地址长度Protocolsize:4逻辑地址长度Opcode:reply(2)1表示ARP请求2表示ARP响应SenderMACaddress:00:50:56:ef:31:fdSenderIPaddress:192.168.200.2TargetMACaddress:00:0c:29:4b:74:faTargetIPaddress:192.168.200.128IP!太长了会被分开太长了会被分开0100....Version:4IP协议版本....0101HeaderLength:20bytes(5)头部长度DifferentiatedServicesField:0x00(DSCP:CS0,ECN:Not-ECT)表示服务质量TotalLength:268Identification:0x447a(17530)标识000.....Flags:0x0状态位(可展开)0.......Reservedbit:Notset 保留位.0......Dont fragment:Notset 是否分片0分片..0.....Morefragments:Notset 更多分片...0000101110010FragmentOffset:2960偏移量TimetoLive:128生存时间、超过不再转发Protocol:ICMP(1)上层协议:1表示ICMP6表示TCP17表示UDPHeaderChecksum:0x9644[validation disabled]头部校验和SourceAddress:192.168.110.5DestinationAddress:192.168.110.57ICMPType:8(Echo(ping)request)8is request0,0is replyCode:0like the typeChecksum:0x4d56[correct]inspect the integrity of the messageBE:High-orderbytein front,usedforNetworkLE:Low-orderbytein front,usedforHostIdentifier(BE):1(0x0001)Big-Endian大端Identifier(LE):256(0x0100)Little-Endian小端SequenceNumber(BE):5(0x0005)Identifythe same pingSequenceNumber(LE):1280(0x0500)Data(32bytes)TCP /UDPTCPSourcePort:80DestinationPort:50014SequenceNumber:10496696(relative sequence number)相对值序列号SequenceNumber(raw):1829424423原始序列号AcknowledgmentNumber:9178(relative ack number)相对值确认序列号Acknowledgmentnumber(raw):1361079787原始序列号0101....HeaderLength:20bytes(5)头部长度Flags:0x018(PSH,ACK)状态位......0.....Urgent:Notset1为紧急.......1....Acknowledgment:Set确认..........0.Syn:Notset 建立连接........1...Push:SetPUSH.........0..Reset:NotsetReset...........0Fin:Notset 断开连接Window:64240滑动窗口大小Checksum:0x2cc3[unverified]UrgentPointer:0紧急指针TCPpayload(1byte)UDPSourcePort:59635DestinationPort:8002Length:150Checksum:0x29dd[unverified]UDPpayload(142bytes)DNSTransaction ID:0x94d0Flags:0x8180Standard query response,No error1...............Response:Message is a response0表示请求1表示响应.0000...........Opcode:Standardquery(0)0表示正向查找1表示反向查找2表示请求服务器状态......0.........Truncated:Message is not truncated.......1........Recursion desired:Do query recursively 递归查询 Questions:1Answer RRs:1Authority RRs:0授权记录数(Authoritative nameservers)Additional RRs:0附加信息记录数(Additional records)Queries Name:www.woniuxy.com Type:A(Host Address)(1)1表示IPv4地址28表示IPv6地址5表示别名 Class:IN(0x0001)协议组类型1表示TCP/IP协议组 Answers Name:www.woniuxy.com Type:A(Host Address)(1)Class:IN(0x0001)Time to live:600(10minutes)Data length:4Address:www.woniuxy.com(101.37.65.91)CNAME:3w.woniu.com 域名对应别名DHCP类型方向说明DHCP Discover客户端 - 服务器搜索网络中可用的 DHCP 服务器DHCP Offer服务器 - 客户端服务器回应客户端可以为其分配 IP 配置DHCP Request客户端 - 服务器客户端正式向服务器申请使用 IP 配置DHCP ACK服务器 - 客户端服务器确认将该 IP 分配给客户端使用DHCP Release客户端 - 服务器客户端主动释放 IP 配置DHCP Inform客户端 - 服务器客户端已经配置了 IP但是不完整请求获取其它 IP 配置信息DHCP Decline客户端 - 服务器客户端通知服务器 IP 发生冲突DHCP NAK服务器 - 客户端服务器拒绝将该 IP 分配给客户端使用Message type:BootReply(2) 表示请求(客户端-服务器)2表示响应(服务器-客户端)Hardware type:Ethernet(0x01)Hardware address length:6Hops:0经过的中继器数量 Transaction ID:0x1d931659Seconds elapsed:0获取IP后使用的秒数 Client IP address:0.0.0.0(0.0.0.0)Your(client)IP address:DESKTOP-NVQF5K2.local(192.168.200.3)服务器准备分配给客户端使用的IP Next server IP address:0.0.0.0(0.0.0.0)服务器IP地址 Relay agent IP address:0.0.0.0(0.0.0.0)中继器代理IP Client MAC address:00:0c:29:4b:74:fa Client hardware address padding:00000000000000000000填充值 Server host name not given Boot file name not given Magic cookie:DHCP 固定字节流用于区分固定字段和选项内容(分界符)Option:(53)DHCP MessageType(ACK)数据包类型 Option:(58)Renewal Time Value 第一次续租时间 Option:(59)Rebinding Time Value 第二次续租时间 Option:(51)IP Address Lease Time 总租期 Option:(54)DHCP ServerIdentifier(192.168.200.100)DHCP服务器IP Option:(1)SubnetMask(255.255.255.0)子网掩码 Option:(81)Client Fully Qualified Domain Name 客户端全限定名 Option:(3)Router 默认路由 Option:(6)Domain Name Server DNS服务器地址 Option:(255)End 选项结束标志 Padding:000000000000000000填充值
