ip`arp`tcp报文（Ip`arp`tcp message）.docVIP

ip`arp`tcp报文（Ip`arp`tcp message） One of a series of network protocol analysis: first IP analysis If you have time, I will put on a series of tutorials. In fact, can not be said to be a tutorial, is out of order. Good stuff is of course to take out to share with everyone, but also the original intention of this network structure. In addition if what is wrong with this article, welcome everyone to come! ADO, heres the first of a series of Posts: analysis of the first IP To use the tool: 1, a person (of course is even) 2, CISCO router N Taiwan (of course is virtual, because using CISCO router to do, do more simple than UNIX, whether from the erection or other aspects) 3, OmniPeek (strong message analysis tools, gradually beyond the sniffer trend) 4, Visio (this is only used as a top map) Reference material： TCP/IP Illustracted Volume 1:The Protocols To pay tribute to the great W.Richard Stevens! -- -- -- -- -- -- Figure 1: the use of the TOP map Assuming that the R1 fa0/0 port IP address is /24 R2 fa0/0 port IP address is /24 Telnet in R1 (the specific content is not discussed in detail) Because TELNET uses the TCP protocol, and TCP is encapsulated in the data package of IP, so use the telnet procedure to analyze the IP message. Figure 2:tcp/ip package Figure 3:IP header As shown in Figure 3, people say the IP header is 20 bytes, 20 bytes. But many people do not understand the 20 bytes of what is going on, I the purpose of this post is through the analysis of packet capture, to let everyone know that 20 bytes. In front of the preparatory work done, we have the following specific analysis of IP 20 bytes of header. The first 4:ip20 bytes of graph analysis Well, we see Figure 3 and Figure 4 together for analysis: The first is the version number: 4 (I believe we all have heard of IPv6, if IPv6, then this place is 6), this is not what to say. The following is the first length field, the header length is provided: header length refers to the number of the first word account