Tuesday, December 11, 2018

ICMP packet analysis

I am trying to figure out what is going on here: I have a hex dump of ICMP packet. Here is its HEX representation:

c2 00 57 75 00 00 c2 01 57 75 00 00 08 00 45 00 00 7c 00 0c 00 00 ff 2f a7 44 0a 00 00 02 0a 00 00 01 00 00 08 00 45 00 00 64 00 0c 00 00 ff 01 b5 87 02 02 02 02 01 01 01 01 00 00 c7 a6 00 02 00 02 00 00 00 00 00 03 be 9c ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd 

WireShark:

https://imgur.com/p57NZlS

As I understand it.

There is a private network that has two routers: First router (10.0.0.1) and Second (10.0.0.2). There are two clients (1.1.1.1) and (2.2.2.2) that are connected to first and second routers respectively. There is GRE tunnel between routers. First client pings second client:

user@1.1.1.1: ping 2.2.2.2 

and gets ping reply showed in the beginning.

Could you please correct me if I am wrong.



No comments:

Post a Comment