From: Leigh Harrison (ccileigh@gmail.com)
Date: Fri Feb 17 2006 - 08:38:57 GMT-3
Hey there Frog, et al
The best way to get the idea of it is to use a packet decoder - like
ethereal (www.ethereal.com) and when you click on the bits of hex of a
tcp header, for example, it decodes it and shows you what it means.
LH
Church, Chuck wrote:
>Google search for 'tcp header' found this first:
>http://www.freesoft.org/CIE/Course/Section4/8.htm
>
>Assuming that is really the start of the header, 06C2 corresponds to
>1730 in decimal. And so on. If you're good at hex->bin->decimal, you
>can do it. But it's not easy for humans to glance at this and makes
>sense of it. Each 4 hex characters is 16 bits, so you can match up
>blocks, but that only gets you so far.
>
>
>
>Chuck Church
>Network Engineer
>CCIE #8776, MCNE, MCSE
>Netco Government Services - Enterprise Network Engineering
>1210 N. Parker Rd.
>Greenville, SC 29609
>Home office: 864-335-9473
>Cell: 864-266-3978
>cchurch@netcogov.com
>PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D
>"I'm one Snickers Pie away from losing my foot to diabetes." - Homer
>
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>Radioactive Frog
>Sent: Thursday, February 16, 2006 11:52 PM
>To: Cisco certification
>Subject: TCP header in HEX format ----->how to varify
>
>The following is a dump of a TCP header in hexadecimal format:
>
>06C2 0016 0000 0D01 0000 0E00 5022 07CA 01BF 0010
>
>How to calculate the saurce/destination port, squence no,
>aclnowledgement,
>header length, windows size etc.?
>
>Is there any easy way to understand this HEX header ?
>
>
>Thanks,
>Radio Active FROG
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Wed Mar 01 2006 - 11:28:18 GMT-3