ip基础--7.ip封包（IP base --7.ip packet）.doc

ip基础--7.ip封包（IP base --7.ip packet） IP base --7.IP packet Extracting IP packets If your machine is equipped with netxray and other packet capture software, or use NTs network monitor, we can retrieve those incoming and offline packets. When we open the capture function, then use the ping command, literally Ping, an address, such as . We can pick up the following packets As we have seen, we retrieve packets of DNS and ICMP because needs to be interpreted by DNS, and Ping is a ICMP protocol. You might know that the type of the ICMP packet is Echo What does Request and Echo Reply stand for? Lets go a little deeper and see whats in the DNS package If you go on rollback on DNS article to see if we use debug model to find the www.hinet.ne NSLOOKUP T when it comes to this URL, you know what this packet says. Lets take a look at the contents of the ICMP packet In fact, we really capture the contents of the package should be red circle in the top and right column, the data inside the program is sorted out. In the first line, we see 0080 C7 47, 9a, 8C, 4854, E8, 277577. The numbers represent the MAC address of the destination and origin, and then 08 00 stands for a Ethernet II IP protocol type. Ethernet II can be said to be an improved version of IEEE802.3. (remember the introduction to the logical form in the introduction to the Internet?). This can be said to be the data that the Datalink network layer is tracking. Then, what follows is the content of the IP packet Please remember the figure above. Im going to discuss each line in detail in the next section. IP packet Format First, lets see how the format of the IP packet is, and its components, and the length of each part Version (4), Internet, Header, Length (4), Type, of, Service (8) Total Length (16) Identification (16) Flags (3) Fragment Offset (13) Time, To, Live (8), Protocol (8), Header, checksum (16) Source Address (32) Destination Address (32) Options (Variable) Padding (0-24) Data .... In the figure above, the n