Packet Notes: 
Question 5 00 00 0c 07 ac 0a 78 2b cb 9d 39 f3 08 00 45 00 00 58 02 88 00 00 80 01 00 00 0a 7b 0a 21 0a 65 f0 0a 03 02 fc fd 00 00 00 00 45 00 00 3c 29 84 0000 7f 01 03 32 0a 65 fo 0a 0a,7b 0a 21 00 00 54 29 00 01 01 32 61 62 63 64 65 66 67 68 69 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 61 62 63 64 65 66 67 68 69 a. How do you know this is an ICMP packet? (5 pts) b. What kind of ICMP packet is it? (5 pts) Question 6 BINARY DATA: 00000000 00000000 00001100 00000111 10101100 00001010 01111000 00101011 11001011 10011101 00111001 11110011 00001000 00000000 01000101 00000000 00000000 00101000 00000010 10001110 01000000 00000000 10000000 00000110 00000000 00000000 00001010 01111011 00001010 00100001 01101011 00010100 11011001 10101011 00111000 00010111 00000000 01010000 01001100 00100001 00011000 00001001 10011101 01100010 10100011 10001011 01010000 00010000 01000000 10110000 01011001 01110110 00000000 00000000 a. How do you know this is an IP packet? (5 pts) b. What is the embedded protocol? (5 pts) c. What is the size of the embedded protocol payload? (5 pts) Byte 2 IHL (Header Version Type of Service (TOS) Total Length gth) P Flags x D M 4 Identification Fragment Offset 20 Bytes Time To Live (TTL) Protocol Header Checksum HL (Internet Header 12 Source Address 16 Destination Address 20 IP Option (variable length, optional, not common) 1234 56789 0 3 1 2 3'4 5678 9 o Bit 01 2 3 4567'89 Nibble Byte Word Version Protocol Fragment Offset IP Flags Version of IP Protocol. 4 and P Protocol ID. Including (but Fragment offset from start of 6 are valid. This diagram represents version4 structure only not limited to) IP datagram. Measured in 8 1 ICMP 2 IGMP 6 TCP 9 IGRP 17 UDP 47 GRE 50 ESP 51 AH 57 SKIPbyte (2 words, 64 bits) 88 EIGRP 89 OSPF 115 L2TP increments. If IP datagram is fragmented, fragment size Total Length) must be a multiple of 8 bytes. x 0x80 reserved (evil bit) D0x40 Do Not Fragment M 0x20 More Fragments Header Length RFC 791 Number of 32-bit words in TCP header, minimum value of 5. Multiply by 4 to get byte Total Length Header Checksum Please refer to RFC 791 for the complete Internet Protocol (IP) Specification. Total length of IP datagram or IP fragment if fragmented.Checksum of entire IP Measured in Bytes count. header Byte Offset 0 2 Type Code Checksum Bytes Other message specific information... 2 3 Bit 01 2 345678902 3 45678902 345 6789 01 Nibble-yeWord ICMP Message Types Checksum Type Code/Name Type Code/Name Type Code/Name Checksum of ICMP header 11 Time Exceded 0Echo Reply 3 Destination Unreachable 3 Destination Unreachable (continued) 12 Host Unreachable for TOS O TTL Exceeded 0 Net Unreachable 1 Host Unreachable 2 Protocol Unreachable 13 Communication Administratively Prohibited 4 Source Quench 5 Redirect Fragment Reassembly Time Exceeded RFC 792 12 Parameter Problenm 0 Pointer Problem Port Unreachable 4 Fragmentation required, and DF set 5 Source Route Failed 6 Destination Network Unknown 7 Destination Host Unknown 8 Source Host Isolated 9 Network Administratively Prohibited 0 Host Administratively Prohibited 11 Network Unreachable for TOS Please refer to RFC 792 for the Internet Control Message protocol (ICMP) 0 Redirect Datagram for the Network Missing a Required Operand Redirect Datagram for the Host 2 Redirect Datagram for the TOS& Network 3 Redirect Datagram for the TOS& Host14 Timestamp Reply 2 Bad Length 13 Timestamp 5 Information Request 16 Information Reply 17 Address Mask Request 8 Address Mask Reply 30 Traceroute 8 Echo 9 Router Advertisement specification. 10 Router Selection Byte 2 0 Source Port Destination Port Bytes 4 Length Checksum 2 3 Bit 012 3456 7890 12 34 5678 902 3 456 7890 Nibble Byte Word Checksum RFC 768 Checksum of entire UDP segment and pseudo header (parts of IP header) Please refer to RFC 768 for the complete User Datagram Protocol (UDP) Specification Question 5 00 00 0c 07 ac 0a 78 2b cb 9d 39 f3 08 00 45 00 00 58 02 88 00 00 80 01 00 00 0a 7b 0a 21 0a 65 f0 0a 03 02 fc fd 00 00 00 00 45 00 00 3c 29 84 0000 7f 01 03 32 0a 65 fo 0a 0a,7b 0a 21 00 00 54 29 00 01 01 32 61 62 63 64 65 66 67 68 69 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 61 62 63 64 65 66 67 68 69 a. How do you know this is an ICMP packet? (5 pts) b. What kind of ICMP packet is it? (5 pts) Question 6 BINARY DATA: 00000000 00000000 00001100 00000111 10101100 00001010 01111000 00101011 11001011 10011101 00111001 11110011 00001000 00000000 01000101 00000000 00000000 00101000 00000010 10001110 01000000 00000000 10000000 00000110 00000000 00000000 00001010 01111011 00001010 00100001 01101011 00010100 11011001 10101011 00111000 00010111 00000000 01010000 01001100 00100001 00011000 00001001 10011101 01100010 10100011 10001011 01010000 00010000 01000000 10110000 01011001 01110110 00000000 00000000 a. How do you know this is an IP packet? (5 pts) b. What is the embedded protocol? (5 pts) c. What is the size of the embedded protocol payload? (5 pts) Byte 2 IHL (Header Version Type of Service (TOS) Total Length gth) P Flags x D M 4 Identification Fragment Offset 20 Bytes Time To Live (TTL) Protocol Header Checksum HL (Internet Header 12 Source Address 16 Destination Address 20 IP Option (variable length, optional, not common) 1234 56789 0 3 1 2 3'4 5678 9 o Bit 01 2 3 4567'89 Nibble Byte Word Version Protocol Fragment Offset IP Flags Version of IP Protocol. 4 and P Protocol ID. Including (but Fragment offset from start of 6 are valid. This diagram represents version4 structure only not limited to) IP datagram. Measured in 8 1 ICMP 2 IGMP 6 TCP 9 IGRP 17 UDP 47 GRE 50 ESP 51 AH 57 SKIPbyte (2 words, 64 bits) 88 EIGRP 89 OSPF 115 L2TP increments. If IP datagram is fragmented, fragment size Total Length) must be a multiple of 8 bytes. x 0x80 reserved (evil bit) D0x40 Do Not Fragment M 0x20 More Fragments Header Length RFC 791 Number of 32-bit words in TCP header, minimum value of 5. Multiply by 4 to get byte Total Length Header Checksum Please refer to RFC 791 for the complete Internet Protocol (IP) Specification. Total length of IP datagram or IP fragment if fragmented.Checksum of entire IP Measured in Bytes count. header Byte Offset 0 2 Type Code Checksum Bytes Other message specific information... 2 3 Bit 01 2 345678902 3 45678902 345 6789 01 Nibble-yeWord ICMP Message Types Checksum Type Code/Name Type Code/Name Type Code/Name Checksum of ICMP header 11 Time Exceded 0Echo Reply 3 Destination Unreachable 3 Destination Unreachable (continued) 12 Host Unreachable for TOS O TTL Exceeded 0 Net Unreachable 1 Host Unreachable 2 Protocol Unreachable 13 Communication Administratively Prohibited 4 Source Quench 5 Redirect Fragment Reassembly Time Exceeded RFC 792 12 Parameter Problenm 0 Pointer Problem Port Unreachable 4 Fragmentation required, and DF set 5 Source Route Failed 6 Destination Network Unknown 7 Destination Host Unknown 8 Source Host Isolated 9 Network Administratively Prohibited 0 Host Administratively Prohibited 11 Network Unreachable for TOS Please refer to RFC 792 for the Internet Control Message protocol (ICMP) 0 Redirect Datagram for the Network Missing a Required Operand Redirect Datagram for the Host 2 Redirect Datagram for the TOS& Network 3 Redirect Datagram for the TOS& Host14 Timestamp Reply 2 Bad Length 13 Timestamp 5 Information Request 16 Information Reply 17 Address Mask Request 8 Address Mask Reply 30 Traceroute 8 Echo 9 Router Advertisement specification. 10 Router Selection Byte 2 0 Source Port Destination Port Bytes 4 Length Checksum 2 3 Bit 012 3456 7890 12 34 5678 902 3 456 7890 Nibble Byte Word Checksum RFC 768 Checksum of entire UDP segment and pseudo header (parts of IP header) Please refer to RFC 768 for the complete User Datagram Protocol (UDP) Specification
