|
发表于 2011-1-30 22:08:57
|
显示全部楼层
我刚从tcpdump了一下iptv机顶盒启动时发的数据包,可以看出他使用了DHCP option60,而且也把自己的序列号作为hostname嵌入。注:Vendor-Class Option 60, length 53:貌似加密了。
! T3 V* G$ K0 G3 H' [21:43:36.640578 IP (tos 0x0, ttl 64, id 554, offset 0, flags [none], proto UDP (17), length 576): }( ]% H1 Z$ \9 s
0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from 00:15:eb:6a:a4:b7 (oui Unknown), length 548, xid 0xdf11aa19, Flags [none] (0x0000)
2 P, ?. }- g/ y# M# X$ Y Client-Ethernet-Address 00:15:eb:6a:a4:b7 (oui Unknown)
( I( [# r' j2 [. ? Vendor-rfc1048 Extensions
0 ]. F6 N- B7 w/ k! o$ v& m) p Magic Cookie 0x63825363
2 ]- x6 O: R& k9 U4 \& K6 O2 l DHCP-Message Option 53, length 1: Discover4 l0 G6 H' r1 p# m
Parameter-Request Option 55, length 8:
8 ] K& M' s& ^. h$ F Subnet-Mask, Default-Gateway, Domain-Name-Server, Hostname+ x1 H7 K" h$ X# b; _ _1 Q7 M
Domain-Name, BR, Router-Discovery, Static-Route
( ~9 x5 D2 c q: I3 D' z Hostname Option 12, length 32: "ea1001000000004000000015EB6AA4B7"& a9 a* T9 }9 \( ^
Vendor-Class Option 60, length 53: "^@^@^_1^AM-^J^FM-N @-M-/Y*^B^@^@^@^@^@^@rM-b^_M-/M-8hM-1M-9M-IM-8YM-^Z$M-K;M-t^PM-^_^ZluPNCM-U^MM-9M-=M-O'M-^NM-("
' Z2 Q7 c9 c1 Y y! S8 _8 l8 q END Option 255, length 0
: R3 M4 K/ H8 t, @1 H PAD Option 0, length 0, occurs 205
" q" T, ~$ ^' J1 O# ?- y8 c 0x0000: ffff ffff ffff 0015 eb6a a4b7 0800 4500 .........j....E.% g) \! q) V5 _3 Z+ x, K; M
0x0010: 0240 022a 0000 4011 7684 0000 0000 ffff .@.*..@.v.......
( i" j# ~3 U) F1 Q9 \4 ?2 Y' [: Z 0x0020: ffff 0044 0043 022c ddc0 0101 0600 df11 ...D.C.,........" p1 p. B2 e: [, a6 ? F. V
0x0030: aa19 0000 0000 0000 0000 0000 0000 0000 ................
+ o0 R# W3 u b6 Z5 k; f* U 0x0040: 0000 0000 0000 0015 eb6a a4b7 0000 0000 .........j......
3 S! R0 W# }4 e8 c 0x0050: 0000 0000 0000 0000 0000 0000 0000 0000 ................
6 s/ t' P S9 {) w+ i 0x0060: 0000 0000 0000 0000 0000 0000 0000 0000 ................
- P" R: v2 M s2 i6 B7 H$ c; I5 o5 E! Y 0x0070: 0000 0000 0000 0000 0000 0000 0000 0000 ................* V( _ p6 z( J; l6 W- u3 E
0x0080: 0000 0000 0000 0000 0000 0000 0000 0000 ................
: H2 n2 v) B1 _* s* U 0x0090: 0000 0000 0000 0000 0000 0000 0000 0000 ................+ e( t# B7 j7 A" _5 k5 H o/ z
0x00a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................. k* p/ s# }# N2 g/ D
0x00b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
7 N$ k" X% W8 M" S% O+ I 0x00c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
( j% f- W8 y6 d' O* k, g2 i 0x00d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................4 `6 E4 u) ~* d5 N
0x00e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................7 J4 Z& Z0 C+ B5 l2 h( q6 |% y
0x00f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................7 ]8 q; V5 M6 \2 Q8 u6 `2 Z
0x0100: 0000 0000 0000 0000 0000 0000 0000 0000 ................
4 p4 b+ b2 o: X 0x0110: 0000 0000 0000 6382 5363 3501 0137 0801 ......c.Sc5..7..0 `7 E2 R" G! G) A
0x0120: 0306 0c0f 1c1f 210c 2065 6131 3030 3130 ......!..ea10010
! N4 F: G7 C6 y% j 0x0130: 3030 3030 3030 3034 3030 3030 3030 3031 0000000400000001
7 \4 p# r; G/ s) k+ ^& a v 0x0140: 3545 4236 4141 3442 373c 3500 001f 3101 5EB6AA4B7<5...1.
( f% R$ H6 m# G* t' w- T7 G- L% j$ y 0x0150: 8a06 ce20 402d af59 2a02 0000 0000 0000 ....@-.Y*.......
; }" ]" g3 K$ h9 x }3 C# k 0x0160: 72e2 1faf b868 b1b9 c9b8 599a 24cb 3bf4 r....h....Y.$.;.# Y3 Y- \% L8 u/ W
0x0170: 109f 1a6c 7550 4e43 d50d b9bd cf27 8ea8 ...luPNC.....'..
d/ y( {6 h6 n. _- | 0x0180: ff00 0000 0000 0000 0000 0000 0000 0000 ................
/ Q' z4 }( [6 E% t/ f 0x0190: 0000 0000 0000 0000 0000 0000 0000 0000 ................
. P2 r6 F* \5 S9 }- L& Q 0x01a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
- p' [( p/ l w 0x01b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................+ w& V" R" m( G8 q
0x01c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
9 L" h# m* q- v, l5 l, G0 h7 b- Z& ~ 0x01d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................0 E5 A1 r! R% _6 S: A
0x01e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
8 N2 D6 M# j' t7 v7 x 0x01f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................3 ]9 f, _. `# }6 }( O
0x0200: 0000 0000 0000 0000 0000 0000 0000 0000 ................
o5 \( O Q$ ? 0x0210: 0000 0000 0000 0000 0000 0000 0000 0000 ................
& Q* e* v/ u" b& b6 p 0x0220: 0000 0000 0000 0000 0000 0000 0000 0000 ................7 l) j4 q; q3 D7 y1 x
0x0230: 0000 0000 0000 0000 0000 0000 0000 0000 ................
! H6 c, _9 S- N* J$ a0 M' } 0x0240: 0000 0000 0000 0000 0000 0000 0000 .............. |
|