|
发表于 2011-1-30 22:08:57
|
显示全部楼层
我刚从tcpdump了一下iptv机顶盒启动时发的数据包,可以看出他使用了DHCP option60,而且也把自己的序列号作为hostname嵌入。注:Vendor-Class Option 60, length 53:貌似加密了。! j) ^! W; e+ h( M1 C1 ]8 h
21:43:36.640578 IP (tos 0x0, ttl 64, id 554, offset 0, flags [none], proto UDP (17), length 576)
2 ^( s0 D# k+ c# V! ^3 S 0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from 00:15:eb:6a:a4:b7 (oui Unknown), length 548, xid 0xdf11aa19, Flags [none] (0x0000)9 b, f$ U' m4 b3 C1 f9 T1 a
Client-Ethernet-Address 00:15:eb:6a:a4:b7 (oui Unknown)
/ T C$ b. F4 h, A Vendor-rfc1048 Extensions
+ e& |, q6 H: N: d. p Magic Cookie 0x63825363
+ z2 T3 h7 t) V# l( s m DHCP-Message Option 53, length 1: Discover$ i( k! s! G" x
Parameter-Request Option 55, length 8:
/ y) W2 B8 q& w/ Q3 M) ^3 H Subnet-Mask, Default-Gateway, Domain-Name-Server, Hostname
# G" |4 W! Z* O$ K1 X1 b/ I Domain-Name, BR, Router-Discovery, Static-Route4 ?+ L6 O" r9 H5 y) O
Hostname Option 12, length 32: "ea1001000000004000000015EB6AA4B7"
2 G: X) P- u6 D$ B Vendor-Class Option 60, length 53: "^@^@^_1^AM-^J^FM-N @-M-/Y*^B^@^@^@^@^@^@rM-b^_M-/M-8hM-1M-9M-IM-8YM-^Z$M-K;M-t^PM-^_^ZluPNCM-U^MM-9M-=M-O'M-^NM-("
& f% `. W* ^" j+ I6 d! K, g END Option 255, length 0
2 s/ A; ]! W- i5 v, W PAD Option 0, length 0, occurs 205, U( r3 x5 ` L( C( N1 k! T
0x0000: ffff ffff ffff 0015 eb6a a4b7 0800 4500 .........j....E.. r: ?8 m; T, q( n6 }
0x0010: 0240 022a 0000 4011 7684 0000 0000 ffff .@.*..@.v.......
) O0 V4 k- b S5 E# P. I 0x0020: ffff 0044 0043 022c ddc0 0101 0600 df11 ...D.C.,........5 e% Q9 Y3 K% k2 l* x
0x0030: aa19 0000 0000 0000 0000 0000 0000 0000 ................1 {. a) w6 R1 |* j1 K' O9 R
0x0040: 0000 0000 0000 0015 eb6a a4b7 0000 0000 .........j......6 x0 ~: X; V- V4 ]4 i8 M
0x0050: 0000 0000 0000 0000 0000 0000 0000 0000 ................: y3 f# p' P) P' T! m$ C$ g
0x0060: 0000 0000 0000 0000 0000 0000 0000 0000 ................
: a% X# h9 C# ^, h% D' T; J2 Y 0x0070: 0000 0000 0000 0000 0000 0000 0000 0000 ................
1 b) G _. g0 |# U" I, `: h/ T( \ 0x0080: 0000 0000 0000 0000 0000 0000 0000 0000 ................6 i% x. ]1 |* m, g+ ?7 @) I! }$ y
0x0090: 0000 0000 0000 0000 0000 0000 0000 0000 ................
, ^1 W& l8 J' q$ q 0x00a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................: V' J% \ q9 t. a" P/ |7 s3 f
0x00b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................' V4 \! A& V* v
0x00c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
/ b+ M# s ` h. ^! N0 m 0x00d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................6 H5 ?. X) ^$ [9 K3 I
0x00e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
9 m, g% S4 O* T/ ~ 0x00f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
/ c3 a) Q( B/ g: Z9 v 0x0100: 0000 0000 0000 0000 0000 0000 0000 0000 ................
" N7 ?8 P* o, W. `: S* s9 w' F3 | 0x0110: 0000 0000 0000 6382 5363 3501 0137 0801 ......c.Sc5..7..
+ k2 ?& M- S4 V* J$ _# ^0 i 0x0120: 0306 0c0f 1c1f 210c 2065 6131 3030 3130 ......!..ea10010& z0 j% q6 r1 G* U0 ~
0x0130: 3030 3030 3030 3034 3030 3030 3030 3031 0000000400000001$ s$ c' q. `! e/ W9 g0 L
0x0140: 3545 4236 4141 3442 373c 3500 001f 3101 5EB6AA4B7<5...1.
" c: l, b9 J" e* n& [' n7 l* n, x" b$ c 0x0150: 8a06 ce20 402d af59 2a02 0000 0000 0000 ....@-.Y*.......8 r& h1 L* L- ^- T% X
0x0160: 72e2 1faf b868 b1b9 c9b8 599a 24cb 3bf4 r....h....Y.$.;.- s2 A. m Z! o% }( v; T( \5 @
0x0170: 109f 1a6c 7550 4e43 d50d b9bd cf27 8ea8 ...luPNC.....'..
" ?" T2 L. e0 N1 a/ ~ 0x0180: ff00 0000 0000 0000 0000 0000 0000 0000 ................
0 O L2 i* s, }( f+ S1 j. N 0x0190: 0000 0000 0000 0000 0000 0000 0000 0000 ................
( z3 a7 F' D' o4 U% G7 k 0x01a0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
9 _3 o3 I$ f2 q" w: o 0x01b0: 0000 0000 0000 0000 0000 0000 0000 0000 ................/ f( J( S! X" \, B) @; v. K o' n
0x01c0: 0000 0000 0000 0000 0000 0000 0000 0000 ................
: J2 L! S8 h) Z2 M& r; ~: O$ Q" X 0x01d0: 0000 0000 0000 0000 0000 0000 0000 0000 ................+ I+ f' c7 Z6 E/ ]2 _3 K/ H2 N9 ]
0x01e0: 0000 0000 0000 0000 0000 0000 0000 0000 ................+ ?& k8 M( e* R* B; n5 |) E
0x01f0: 0000 0000 0000 0000 0000 0000 0000 0000 ................( I5 r4 `. x1 ^; ?& e+ q) k* c
0x0200: 0000 0000 0000 0000 0000 0000 0000 0000 ................
0 ]' l. {' |. d) {/ g 0x0210: 0000 0000 0000 0000 0000 0000 0000 0000 ................5 N4 U; c6 D* o4 q3 q
0x0220: 0000 0000 0000 0000 0000 0000 0000 0000 ................, N, B' h0 O0 j, B
0x0230: 0000 0000 0000 0000 0000 0000 0000 0000 ................+ h6 v% N4 x9 s4 X' P" e6 ]
0x0240: 0000 0000 0000 0000 0000 0000 0000 .............. |
|