+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: Packet Hex Dump Ehernet Header Analysis + Challenge (/Thread-Packet-Hex-Dump-Ehernet-Header-Analysis-Challenge)
Packet Hex Dump Ehernet Header Analysis + Challenge - Adorapuff - 07-28-2014
So we have a packet hex dump of an Ethernet frame and we are going to analyze it. Yay!
Here's the hex dump:
Spoiler:
00 05 73 a0 00 00 e0 69 95 d8 5a 13 86 dd 60 00
00 00 00 9b 06 40 26 07 53 00 00 60 2a bc 00 00
00 00 ba de c0 de 20 01 41 d0 00 02 42 33 00 00
00 00 00 00 00 04 96 74 00 50 bc ea 7d b8 00 c1
d7 03 80 18 00 e1 cf a0 00 00 01 01 08 0a 09 3e
69 b9 17 a1 7e d3 47 45 54 20 2f 20 48 54 54 50
2f 31 2e 31 0d 0a 41 75 74 68 6f 72 69 7a 61 74
69 6f 6e 3a 20 42 61 73 69 63 20 59 32 39 75 5a
6d 6b 36 5a 47 56 75 64 47 6c 68 62 41 3d 3d 0d
0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 49 6e 73
61 6e 65 42 72 6f 77 73 65 72 0d 0a 48 6f 73 74
3a 20 77 77 77 2e 6d 79 69 70 76 36 2e 6f 72 67
0d 0a 41 63 63 65 70 74 3a 20 2a 2f 2a 0d 0a 0d
0a
00 00 00 9b 06 40 26 07 53 00 00 60 2a bc 00 00
00 00 ba de c0 de 20 01 41 d0 00 02 42 33 00 00
00 00 00 00 00 04 96 74 00 50 bc ea 7d b8 00 c1
d7 03 80 18 00 e1 cf a0 00 00 01 01 08 0a 09 3e
69 b9 17 a1 7e d3 47 45 54 20 2f 20 48 54 54 50
2f 31 2e 31 0d 0a 41 75 74 68 6f 72 69 7a 61 74
69 6f 6e 3a 20 42 61 73 69 63 20 59 32 39 75 5a
6d 6b 36 5a 47 56 75 64 47 6c 68 62 41 3d 3d 0d
0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 49 6e 73
61 6e 65 42 72 6f 77 73 65 72 0d 0a 48 6f 73 74
3a 20 77 77 77 2e 6d 79 69 70 76 36 2e 6f 72 67
0d 0a 41 63 63 65 70 74 3a 20 2a 2f 2a 0d 0a 0d
0a
1 octet such as 00 = 1 bytes
EtherType -> Protocol Map - http://en.wikipedia.org/wiki/EtherType
Here's a breakdown of a frame:
- Ethernet Header - 14 bytes
- Destination Mac Address - 6 bytes
- Source Mac Address - 6 bytes
- EtherType - 2 bytes
- Destination Mac Address - 6 bytes
- IP Header
- Protocol Header - TCP, UDP, etc
- Payload
Breakdown of out packet:
- Ethernet Header 00 05 73 a0 00 00 e0 69 95 d8 5a 13 86 dd
- Destination Mac Address - 00:05:73:a0:00:00
- Source Mac Address - e0:69:95:d8:5a:13
- Ether-type - 86 dd which when found on the Wikipedia map is IPV6
- Destination Mac Address - 00:05:73:a0:00:00
- IPV6 Header
- The 06 7 bytes later tells us the protocol is TCP
- The 06 7 bytes later tells us the protocol is TCP
- TCP
- HTTP
Anyone with some basic problem solving knowledge will be able to solve the challenge of finding information within the data.
PM me the username:password that you find, and I'll add you to the list
Solvers:
ImmNinjaxD (⌐■_■)
APPLEZ
Oni
Arthur Curry
DAKIMAKURAFAN2007
3sidedsquare
RE: Packet Hex Dump Ehernet Header Analysis + Challenge - ImmNinjaxD - 07-28-2014
Pretty sure I got it. Would have been more fun if you didn't decode the hexidecimal for us though :3
RE: Packet Hex Dump Ehernet Header Analysis + Challenge - Adorapuff - 07-28-2014
(07-28-2014, 09:39 PM)ImmNinjaxD (⌐■_■) Wrote: Pretty sure I got it. Would have been more fun if you didn't decode the hexidecimal for us though :3OK, removed the decoded hex.