Software Test Equipment
127
LLC Length: 182
802.2 Logical Link Control (LLC) Header
Dest. SAP: 0xaa SNAP [14]
Source SAP: 0xaa SNAP Null LSAP [15]
Command: 0x03 Unnumbered Information [16]
Protocol: 00-00-0c-20-00 Cisco DP [17-21]
Packet Data:
. . ....06902459 01 b4 d7 af 00 01 00 19 30 36 39 30
32 34 35 39 [22-37]
9(hostname )... 39 28 73 77 2d 75 65 6e 2e 6f 72 67
29 00 02 00 [38-53]
.......... |.... 11 00 00 00 01 01 01 cc 00 04 cd 7c
fa f8 00 03 [54-69]
..5/19.......... 00 08 35 2f 31 39 00 04 00 08 00 00
00 0e 00 05 [70-85]
.dWS-C5500 Softw 00 00 00 00 00 00 00 00 00 30 20 53
6f 66 74 77 [86-101]
are, Version Mcp 61 72 65 2c 20 56 2d 00 00 00 00 00
20 4d 63 70 [102-117]
SW: 4.4(1) NmpSW 53 57 3a 20 34 2e 34 28 31 29 20 4e
6d 70 53 57 [118-133]
: 4.4(1).Copyrig 3a 20 34 00 00 00 00 00 00 00 00 00
00 72 69 67 [134-149]
ht (c) 1995-1999 68 74 20 28 63 29 20 31 39 39 35 2d
31 39 39 39 [150-165]
by Cisco System 20 62 79 20 43 69 73 63 6f 20 53 79 73
74 65 6d [166-181]
s.....WS-C5500 73 0a 00 06 00 0c 57 53 2d 43 35 35
30 30 [182-195]
Frame Check Sequence: 0xffff00cd
EtherPeek Sample: POP3 Packet
The following example is of a POP3 packet. POP3 is the Post Office Pro-
tocol that is used to transfer e-mail from a server to a remote client. The
packet decode gives you a great amount of information. It starts out with
a Layer 2 header, and then moves on to Layer 3 with the IP header. After
Layer 3, you see TCP, which is a Layer 4 protocol. You can see all of the
flow control information as part of the TCP packet. POP3 is part of
the TCP suite, and is the final decode portion of this packet. The POP3
header shows the mail server as well as other POP3 data.
Copyright ©2000 SYBEX , Inc., Alameda, CA
www.sybex.com