|
|
发表于 2011-1-30 22:08:57
|
显示全部楼层
我刚从tcpdump了一下iptv机顶盒启动时发的数据包,可以看出他使用了DHCP option60,而且也把自己的序列号作为hostname嵌入。注:Vendor-Class Option 60, length 53:貌似加密了。( B$ ` H7 D5 U- h" l
21:43:36.640578 IP (tos 0x0, ttl 64, id 554, offset 0, flags [none], proto UDP (17), length 576)+ D2 h1 d/ @, ]
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from 00:15:eb:6a:a4:b7 (oui Unknown), length 548, xid 0xdf11aa19, Flags [none] (0x0000)
+ @1 P" ]8 M. |, m6 F1 D: J Client-Ethernet-Address 00:15:eb:6a:a4:b7 (oui Unknown)
& x9 w1 t8 X9 w& D7 G Vendor-rfc1048 Extensions4 l7 E2 r- f$ e; W
Magic Cookie 0x63825363/ G$ v# Z8 Y: }8 w% f9 S
DHCP-Message Option 53, length 1: Discover/ `1 r' c9 x& v5 Y5 c' D
Parameter-Request Option 55, length 8: D; q3 R: U$ L7 q0 N
Subnet-Mask, Default-Gateway, Domain-Name-Server, Hostname
9 T1 j3 S0 E8 U9 s) W- r Domain-Name, BR, Router-Discovery, Static-Route7 M T! `/ f5 r5 f& P; w% E
Hostname Option 12, length 32: "ea1001000000004000000015EB6AA4B7"
6 C" M$ V. A+ ~3 ]9 m Y* h$ A Vendor-Class Option 60, length 53: "^@^@^_1^AM-^J^FM-N @-M-/Y*^B^@^@^@^@^@^@rM-b^_M-/M-8hM-1M-9M-IM-8YM-^Z$M-K;M-t^PM-^_^ZluPNCM-U^MM-9M-=M-O'M-^NM-("
6 R+ ~$ G3 }! k0 Z; b2 b3 Q9 V: j END Option 255, length 07 C \/ n" y4 \4 q- W
PAD Option 0, length 0, occurs 205
! U+ Q3 m' h1 g* r/ m 0x0000: ffff ffff ffff 0015 eb6a a4b7 0800 4500 .........j....E.
% O1 {. V7 g: z! k 0x0010: 0240 022a 0000 4011 7684 0000 0000 ffff .@.*..@.v.......
! u+ B. C# \+ O8 |3 y 0x0020: ffff 0044 0043 022c ddc0 0101 0600 df11 ...D.C.,........
: H) m9 h3 ]/ f& N$ Q, b 0x0030: aa19 0000 0000 0000 0000 0000 0000 0000 ................
; G" ~) b5 e+ k% D+ n w 0x0040: 0000 0000 0000 0015 eb6a a4b7 0000 0000 .........j......0 u7 W5 e" U! _% U. }- M; d
0x0050: 0000 0000 0000 0000 0000 0000 0000 0000 ................6 F4 e8 F( Z" D' i% `9 |7 A u! o; O
0x0060: 0000 0000 0000 0000 0000 0000 0000 0000 ................
! A7 Z$ ]" n" _ 0x0070: 0000 0000 0000 0000 0000 0000 0000 0000 ................' U1 q/ @! V7 I* f
0x0080: 0000 0000 0000 0000 0000 0000 0000 0000 ................
. x* E# P$ E7 q/ D1 P5 U 0x0090: 0000 0000 0000 0000 0000 0000 0000 0000 ................
4 _* d% d6 l8 Y' g6 p1 a+ q, Q 0x00a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
; z* t! ?. P" y' V6 c0 e 0x00b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
' H& ?# f, ~ ?7 [ 0x00c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
1 C% w" e& K, ^8 D; R 0x00d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................$ n. A5 f" F4 i" o
0x00e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
- w! Z9 p2 q. [& V# t 0x00f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................* }; C# Z! n1 O4 L
0x0100: 0000 0000 0000 0000 0000 0000 0000 0000 ................' f; X5 y' ?* l5 d) o5 T8 |
0x0110: 0000 0000 0000 6382 5363 3501 0137 0801 ......c.Sc5..7..$ C3 d3 h0 d' A# A5 F" S
0x0120: 0306 0c0f 1c1f 210c 2065 6131 3030 3130 ......!..ea10010( G T, p( g! u* R2 x8 o+ R
0x0130: 3030 3030 3030 3034 3030 3030 3030 3031 0000000400000001
# \* S' G3 ]' Q$ Z9 n4 T) [5 ^ 0x0140: 3545 4236 4141 3442 373c 3500 001f 3101 5EB6AA4B7<5...1.
7 D$ X% ]# ?$ U) }( N+ P 0x0150: 8a06 ce20 402d af59 2a02 0000 0000 0000 ....@-.Y*.......
+ O: u" v. @ t, f 0x0160: 72e2 1faf b868 b1b9 c9b8 599a 24cb 3bf4 r....h....Y.$.;.
5 J$ u T3 H0 \1 Y 0x0170: 109f 1a6c 7550 4e43 d50d b9bd cf27 8ea8 ...luPNC.....'..
1 q% ^9 z' J& C( I) |) h 0x0180: ff00 0000 0000 0000 0000 0000 0000 0000 ................
; W+ U. o4 w) B! u, r( s 0x0190: 0000 0000 0000 0000 0000 0000 0000 0000 ................2 _0 ~. N' L: \4 p$ M
0x01a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................: {/ R. l+ z' ^$ ^1 a# ~6 n% Q( `3 V
0x01b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
4 N; @# B1 _0 B4 O/ f" J* `. l/ N6 V 0x01c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
6 b% j( j; _, V% I- n6 _ 0x01d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
7 g0 H }6 q0 W' Q 0x01e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
4 A2 B C* ?/ [* ` 0x01f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
7 k4 x7 K1 G6 O1 Y- ~ 0x0200: 0000 0000 0000 0000 0000 0000 0000 0000 ................* C6 j# t7 b" h* n
0x0210: 0000 0000 0000 0000 0000 0000 0000 0000 ................
, `* c- U' p) { 0x0220: 0000 0000 0000 0000 0000 0000 0000 0000 ................
. Y7 G; K. X0 X 0x0230: 0000 0000 0000 0000 0000 0000 0000 0000 ................8 K* _/ l3 y8 A5 \9 g5 `
0x0240: 0000 0000 0000 0000 0000 0000 0000 .............. |
|