|
|
Question : Problem: Need help decoding ethernet frame
|
|
Can an expert review my three answers and tell me if they are correct?
What is the network ID of IP address 10.40.10.33/28?
My answer- 10.40.10.32
Use the below packet as reference for the following two questions
(a) Please complete the following tcpdump syntax:
ether[12:2] = 0x____
My answer -ether[12:2] = 0x0800
(a) What does the above value indicate?
My answer- IPv4
================================== No. Time Source Destination Protocol Info 4 1.486864 15.25.48.71 16.25.180.69 IP Fragmented IP protocol (proto=UDP 0x11, off=1480)
Frame 4 (60 bytes on wire, 60 bytes captured) Arrival Time: Sep 14, 2006 10:37:26.584297000 Time delta from previous packet: 0.204373000 seconds Time since reference or first frame: 1.486864000 seconds Frame Number: 4 Packet Length: 60 bytes Capture Length: 60 bytes Protocols in frame: eth:ip:data Ethernet II, Src: Cisco_a1:bc:00 (00:03:fe:a1:bc:00), Dst: HewlettP_57:a7:44 (00:13:21:57:a7:44) Destination: HewlettP_57:a7:44 (00:13:21:57:a7:44) Source: Cisco_a1:bc:00 (00:03:fe:a1:bc:00) Type: IP (0x0800) Trailer: 000000000000000000000000000000000000000000 Internet Protocol, Src: 15.25.48.71 (15.25.48.71), Dst: 16.25.180.69 (16.25.180.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xb8 (DSCP 0x2e: Expedited Forwarding; ECN: 0x00) 1011 10.. = Differentiated Services Codepoint: Expedited Forwarding (0x2e) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 25 Identification: 0x011d (285) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 1480 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0x4088 [correct] Good: True Bad : False Source: 15.25.48.71 (15.25.48.71) Destination: 16.25.180.69 (16.25.180.69) Data (5 bytes)
0000 00 13 21 57 a7 44 00 03 fe a1 bc 00 08 00 45 b8 ..!W.D........E. 0010 00 19 01 1d 00 b9 74 11 40 88 0f 19 30 47 10 19 [email protected].. 0020 b4 45 0c 75 2b 92 d0 00 00 00 00 00 00 00 00 00 .E.u+........... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ ==================================
|
Answer : Problem: Need help decoding ethernet frame
|
|
1st correct 2nd correct 3rd correct
|
|
|
|