|
|
发表于 2011-1-30 22:08:57
|
显示全部楼层
我刚从tcpdump了一下iptv机顶盒启动时发的数据包,可以看出他使用了DHCP option60,而且也把自己的序列号作为hostname嵌入。注:Vendor-Class Option 60, length 53:貌似加密了。
* n: [8 A( N' [2 H0 R) ~6 o21:43:36.640578 IP (tos 0x0, ttl 64, id 554, offset 0, flags [none], proto UDP (17), length 576)% e y1 \" m; w$ I
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from 00:15:eb:6a:a4:b7 (oui Unknown), length 548, xid 0xdf11aa19, Flags [none] (0x0000)
2 y2 z- d) a) O y+ v Client-Ethernet-Address 00:15:eb:6a:a4:b7 (oui Unknown)
0 {) ]) o- z* G- [( m+ W+ f Vendor-rfc1048 Extensions+ f1 H) p( E0 j8 R8 h
Magic Cookie 0x638253632 ?* N& [, G" g9 q
DHCP-Message Option 53, length 1: Discover$ J+ r# z4 D$ S+ R
Parameter-Request Option 55, length 8: 7 ]8 Y7 L9 C8 ]
Subnet-Mask, Default-Gateway, Domain-Name-Server, Hostname
! \; i) G$ P5 v, _ Domain-Name, BR, Router-Discovery, Static-Route
. l2 ^/ M6 [0 G9 s' ~$ A! `$ a1 V Hostname Option 12, length 32: "ea1001000000004000000015EB6AA4B7"
- T+ l0 d# \$ a* ~& W Vendor-Class Option 60, length 53: "^@^@^_1^AM-^J^FM-N @-M-/Y*^B^@^@^@^@^@^@rM-b^_M-/M-8hM-1M-9M-IM-8YM-^Z$M-K;M-t^PM-^_^ZluPNCM-U^MM-9M-=M-O'M-^NM-("! J8 C- W& f& j( O. w* p J6 h
END Option 255, length 0
$ h8 n# m8 p0 t* l9 u8 o9 A" I- i' Z PAD Option 0, length 0, occurs 205
7 V+ n6 J- x) k. X$ d 0x0000: ffff ffff ffff 0015 eb6a a4b7 0800 4500 .........j....E.
$ F3 T3 m" J0 U9 W! d: m& s& s( f 0x0010: 0240 022a 0000 4011 7684 0000 0000 ffff .@.*..@.v.......4 D+ M, G8 O4 U, V
0x0020: ffff 0044 0043 022c ddc0 0101 0600 df11 ...D.C.,........( h5 l; Y* S& v4 W) B
0x0030: aa19 0000 0000 0000 0000 0000 0000 0000 ................
( F5 r8 Z8 |6 x& g$ I 0x0040: 0000 0000 0000 0015 eb6a a4b7 0000 0000 .........j......
5 L3 z' n* j2 @ 0x0050: 0000 0000 0000 0000 0000 0000 0000 0000 ................ k0 P/ G8 `) z. Q$ u0 f
0x0060: 0000 0000 0000 0000 0000 0000 0000 0000 ................, n3 s% B8 j7 a' `. D+ v, X
0x0070: 0000 0000 0000 0000 0000 0000 0000 0000 ................
8 j9 @$ s) R* s 0x0080: 0000 0000 0000 0000 0000 0000 0000 0000 ................' \* @1 X7 u: z5 O7 a9 i& O/ T1 ]% n
0x0090: 0000 0000 0000 0000 0000 0000 0000 0000 ................
6 ^4 b7 X5 G; N' F ` 0x00a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................; O- k7 C, K& B' T3 `8 l& |
0x00b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
4 f; B; e7 A- f1 d 0x00c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
, L% [$ G# a" z% r2 A4 E. a 0x00d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................- v' o: } Q( g% g
0x00e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................( O- U, y( W9 b: L, r8 l2 A
0x00f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
# l Y0 G5 {" H6 H3 o 0x0100: 0000 0000 0000 0000 0000 0000 0000 0000 ................
% t: W) {4 p+ `! }! H 0x0110: 0000 0000 0000 6382 5363 3501 0137 0801 ......c.Sc5..7..
* {" Y$ w, l; E6 I" U4 W+ T; z 0x0120: 0306 0c0f 1c1f 210c 2065 6131 3030 3130 ......!..ea10010
, }& a5 A& Y# I0 ~ 0x0130: 3030 3030 3030 3034 3030 3030 3030 3031 0000000400000001; _2 L1 E) M! i, o. n
0x0140: 3545 4236 4141 3442 373c 3500 001f 3101 5EB6AA4B7<5...1.1 i; b& V+ W( j; s, b( x, u4 ?& p
0x0150: 8a06 ce20 402d af59 2a02 0000 0000 0000 ....@-.Y*......., H" N B! I) [
0x0160: 72e2 1faf b868 b1b9 c9b8 599a 24cb 3bf4 r....h....Y.$.;.
' d! g4 c2 F" S7 x 0x0170: 109f 1a6c 7550 4e43 d50d b9bd cf27 8ea8 ...luPNC.....'..2 E7 E J( A3 x8 x7 T5 y9 Z- \* @* w7 a
0x0180: ff00 0000 0000 0000 0000 0000 0000 0000 ................5 G7 \* y' \* ~! y" A1 ~, o; L
0x0190: 0000 0000 0000 0000 0000 0000 0000 0000 ................% M+ d/ D0 B$ m0 {1 u' Z" J
0x01a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................. B/ t: t y- h0 a0 }& e
0x01b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................& t% M0 M2 |' I+ v: h/ {
0x01c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
( {2 {, \ r0 x; M: `* {# @ 0x01d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
9 c/ E9 ?! X7 v; Y 0x01e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
4 E' p, _# A' i/ a4 b) n$ e, o 0x01f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................+ c s8 {: j- N" Z* w) n& N& R2 r
0x0200: 0000 0000 0000 0000 0000 0000 0000 0000 ................
6 Y( Y) C( r5 J/ r7 c8 X9 |$ P 0x0210: 0000 0000 0000 0000 0000 0000 0000 0000 ................
4 C" B' U5 Q) K' _ 0x0220: 0000 0000 0000 0000 0000 0000 0000 0000 ................
5 K# R7 W* @* s7 [ 0x0230: 0000 0000 0000 0000 0000 0000 0000 0000 ................5 J# `. D, E" a; h
0x0240: 0000 0000 0000 0000 0000 0000 0000 .............. |
|