Ethereal学习1

推荐一个很酷的站点：http://210.40.7.188/E'ojc/Internet/01/02/index.asp

《电脑网络教育与Web教育服务》

E'education Laboratory And Web'Education Services

美国GeneChiu基金资助

Supported by USA GeneChiu Foundation

相关网络封包格式

 

Ethernet Frame(Ethernet II)：

7+1 Bytes     6 Bytes     6Bytes  2Bytes  46~1500Bytes   4Bytes

Preamble/SFD

Destination address

Source address

Type

Data

FCS

 

IP：

1                8              16             24             32

Version(4)	H.Len(4)	Service type(8)	TOTAL LENGTH(16)
Identification(16)			Flags(3)	Fragment Offset(13)
TTL(8)		TYPE(8)	Header Checksum(16)
Source IP address(32)
Destination IP address(32)
IP options(May be omitted)					Padding
BEGINNING OF DATA …

 

ICMP：

1                8              16             24             32

Version(4)	H.Len(4)	Service type(8)	TOTAL LENGTH(16)
Identification(16)			Flags(3)	Fragment Offset(13)
TTL(8)		TYPE(8)	Header Checksum(16)
Source IP address(32)
Destination IP address(32)
Type(8)		Code(8)	Checksum(16)
Identifier(16)			Sequence Number(16)

 

TCP：

1               8              16             24              32

Source Post(16)			Destination Port(16)
Sequence Number(32)
Acknowledgement Number(32)
Data offset(4)	Reserved(6)	Flags(6)	Window(16)
CheckSum(16)			Urgent Pointer(16)
Options(0 or more 32 bit words + padding)
BEGINNING OF DATA ...

 

ARP：

1               8              16             24              32

Hardware type(16)		Protocol type(16)
H.len(8)	P.len(8)	Operation(16)
Sender HA
Sender HA		Sender IP
Sender IP		Target HA
Target HA
Target IP