计算机网络课程设计报告

计算机网络课程设计华中科技大学信息学部软件姓名：专业班级:学号：指导老师:目录TOC\o"1-5"\h\z\o"CurrentDocument"一、课程的性质、目的和任务3\o"CurrentDocument"二、课程内容和基本要求3（一）、协议包的分析，网络协议的组成31、捕获ARP请求，ARP应答数据包32、捕获ICMP数据包，对其进行分析研究43、捕获TCP“三次握手”“2次两次握手”释放连接数据包64、捕获HTTP，DNS，DHCP数据包，分析其构成105、通过捕捉smtp协议包捕捉邮箱密码15小结15（二）、编写一个程序自动生成CRC校验码15程序代码：15编译运彳亍16\o"CurrentDocument"（三）、机架实验17小结17（四）、模拟学校校园网17校园网拓扑图17网络测试18小结22一、课程的性质、目的和任务该课程为实践类课程。通过本课程，（1）学生需要深入理解网络协议的组成，对网络中传输数据的过程有更深入的认识。（2）学生需要了解计算机网络工程设计的一般任务，明确计算机网络设计与建设的基本原则，熟悉计算机网络需求分析的目标、任务与方法，掌握计算机网络设计的通用方法，并学会撰写规范的计算机网络方案书。二、课程内容和基本要求（一）、协议包的分析，网络协议的组成1、捕获ARP请求，ARP应答数据包，分析其组成特征。总结ARP协议运行的基本过程。本机（9）ping目的主机（9）：趴C:\IIIDOTS\Eysteiet：^ocLinientsardSettings^dninistpatorJpinq?Ringing192.166.B4.3?with32bytesofdata：FeplijFeplijFeplijEeplufrontFeplijFeplijFeplijEeplufrontfrontfrontfront9：bytes=329：bytes=329：bytes=329：bytes=32time=2msTTL=&4TTL=&4TTL=&4TTL=&4ffingstatisticsFor?:0(Bnloss),Packets:Sent=■Received=4.Lost=Hpp]boxLmateroundtriptinesin0(Bnloss),MininiLin=Maximum=2ms,ftuerasre=0ns\DocinientsardSettings^Adninistrator}抓包截图:

_*Cafrfnriicfr»[Tiresent-1.J?.0frJ.froeB3?tcr-M2)l回.叵区.虫6H'物a：itotijR或如e5以般^巾叶:丐Icrth心「桃土？中雀备*总!IR切盼尊帝土Q|S0*E4苗怛淋混TOC\o"1-5"\h\zFiller'upvBpprraimCl(ir如]pSi**5o-ceBHhnitiwfr-rtswlLtr<tbInf-ja-LL^Jb.650714000QD：OD：Oa5d：CO：4fErnadc^St呻PSOhasID.IM-IQD.IE^Tell192.163-B4-50.3241522OM00：0^0a5d：c0：4fENd匚眼匚ARPU『巾J鬲S22Q.131.12.207?Tell1旎-1补，由，对.423BC.2UC-3履:虻:tk:辑:翦:我，Ernadcirt灿P42has1^B?Tell192.168J："!-69.42425000iE：9c：dc：5a!2b!5TC3!9i!dc：59：39：3DMPHO192-16E.M.39Is3TCSl^JiiS!5-3!.93^.5660W：'.'「「.93^.5660W：'.'「「1：E：UBTOJjdClSTMP；，dis-.：1f--■T-rell\巳?J7：db;OD;Oc;5d;cO;4fBrnadcistW60'ntwhasZD2AdS.24.6&?TenLy2.1b3-&l-5Cl.3^7340000D：flD：DC：5d!C0!4fErnadcastARP6U『flhasID.100-10D.1E7Tell192.168-E4-50，了河70E二二：，.；：.；--;:•Brnadcist姗■：'.d.盘IE..(-立：:•：-L.：：1：E.?-,：..a?2zi9oraaD：DD：Da5d：CQ：4fErnadci?:.W成而has202.103.24.&E?TE11192,163.^1.50.9342340«：5d:c：：-fEro-adCiSCAPF;“布时，_TEllF.f」:：.9382&1UC-Jdb;OD;Oc;5d;cO;4fBrnadcist姗60'hIkihas10.1f3aLClD.lE?TellLy2.1b3-&l-5Cl.a&MSLQOa^B：9C：df：5O!DO!ddErnadaprARP60'flhdhas7?TE11192.168-E4-95点粥明就co"■-：T；E：：,EroadcistARP■■■Jia-.■■..—；■：.■:'-11Ff?■!TSFrare4SD:62bytesan*rire[4&JbitsJB知b^lescapturedMBubits]minterfiCEU±Erhernet[I;5rc!cE：8c:dc:5a!2b:57(cB：9c:dc:5a:?b157)：,DSt!<E：9C：dc：59：i9!30(CB：9C：dc：59：i9：iO)mAddress^oluiionproiacol(reply).7D49W0M^E^c^cijaiZ'ZiW1BrnadcistARP6C1'nhahas7?TellL92.163-&1-6.748565000OD：OD：flC：5d!C0!4fEruM口江£>PP80has1EO.97.33.69?Tell192.16B.B4.50Hartlvarelype:Ethernet(l；lproTucoliplO^BlO)Harch'dresize;6ProtocDlsize:4。辉。小：r^lyQ)Sai[JarMACaddress:c3:^:dc:5a:2b:57仲:虹如0加逍[padil'KE：152.16E.M.35(ig?.16S.E4.29)TargetHKaddress;c8;lk;dc;59;39;30(d8;5c;dc;田割刮)Target[padd-sE：1?Z.16B.w.6?(19Z.168.E4.&9)本机9源MAC地址c8:9c:dc:59:39:30目的主机9目的MAC地址c8:9c:dc:5a:2b:57ARP协议运行过程：ARP进程在本局域网上发送ARP请求，目的主机在ARP请求分组里看到自己的IP，就发送一个响应分组，写入自己的硬件地址。2、捕获ICMP数据包，对其进行分析研究。（icmp请求数据包，icmp应答数据包）P进行ICMP数据包截获ICMP请求数据包：

f[«a本弛也春[HixEstaFlI.IS.t(vl.02.9-D-^fab^lifEnaiLuler~l-]Z)JE也bitVpwijpijpluBAR]hi5SatetisT成（火叮TortN或讶Het1电自4・—®XS、§=中甲善亘叵您也映EJ询区桐躲司FILl+r'3dijsVEcpraiEiaL.Cliu-ApjLySm-«Be*.Tug：Snr®liTtLittiinItfltMolLit也life*TOC\o"1-5"\h\z1^7S^244q51M019M6S.B4.655S.63.?37b237I5F74Ette整1「就官刖就蚀1d-0>fl2K,rd-W(r1^089,Z674O9i--3050^3.237,23719L1凯-洲-朋IEF耳Erh)Sir就i『邙ly1i3-0：i3?W,5tq-l&496/41,rd-5](r17290,24^7C-30以LI能,啪,膈5®.63,237^237ICMP叫Kin佥1『由『叩船侦i：1i>0：i?^W,53^-10752/42,rd-W(r90,2634501-3050,^237.237袒icnp74EChJftilniireply1出0陌冲*§引・切网豚4匕rd-53(r91,^C697M01蛇门能・B■膈5&归・约KZMFTCNP74Edn血irxO「引讽览id-0s?2C-j?5eq<lWB/4B?ttl-M(r口791•祯芬76E0^AB.237,237弟八状足制、购TCNP74EchjO)ini：ireplyid-0j-?2C-：s5eq-llC-?B/4B?ttl-53(r1机鸵―渤输)1史门能，吼腺37icnp74E血>国0「改氓丈id-OxOJWs5eq-112^/4<ttl-64(rL9242.2638900005B.43.237.237斜*凸TCNP74Echo(pin^)replyid-0ri£HPseq-1126+/UPttl-53(r3FraieMF;74bytescnwire(5挺tntsLF4bytesc^tirsd(592trits)oninterface03EthernetII,&•<=;罚泓;ck;59;腰伽&9阪;足;59;妙;祯M。览；O：'；Q3;ftF;02;f6;fE1加溜2F皿讦E;和)3internetProt^al&「sion匕5「c;6&W.M;58-^237.257(5®B63.237B237)3InternetControl胆邻a骅ProtocolTyp2；3(Echo[ping]reqi^t]Cncte;>5ChKhin;Ux22jc[correct]IdtnlifiEi-(EE);512代而Mil〕IdendfiH-(LE);2LLlwjUD2)5e>^jerr=eninter[BE]:ILM-1^[Ox2ls,UDjSecfjerrzeninter[LE]:41ftlxtm戛I『ypen韭fruiH：1681，Data132bytes)TYPE:8CODE:0CHECKSUM:0X225CICMP应答数据包:丝区L郁例-共miim加铝_B3_"F_23F甘土2L6&&L姑1C?P川EdlEI却1「①「叩ly初=1?■但中上非中：［血％心」,■匚叫tuzunj;ike■诘埼遂楼「■让。妙虹l!l1.12..DN1&忸.『卜尾觥由口食£i<ibbubL^e-L..12)]tieDkflewSo以PtiiBK■阳StJtEtaTeteplm1IcdsLrtemirHelpft•A口二篇&|鸣中略#每*丝区L郁例-共miim加铝_B3_"F_23F甘土2L6&&L姑1C?P川EdlEI却1「①「叩ly初=1?■但中上非中：［血％心」,lfi7S&-244b51Q?0L92-L&E.a4.b95—相2：3己捉了INJ^E^Qfplrq)reCfJEStid=l?■但匚以曜中〔叩如gLtn七fr4(r口次(LM0能代如1'3LL&&84湖50,^^237,237IOT74EdiuCpirg)request词・&1倬也35^-10752/4^ttl-^1(r1749LMN知BD58.61.2J7.21TLW.16®.B4.65]Cff74E-±0Cp1r"3)1d-Cta02uO?5et|-lfl752/42?rrl-53(rTOC\o"1-5"\h\z17891_2408970j0192-166.34.b95H-63a237.237!■□*74E-±Dfpirq)TECfjestid=&：02'：CBSEq=lHMB/43Httl=W(r17?91-2S3376&J05S.63.2J7.237L92.1^S.^.^9!■□*74E-±Dfpirq)replyid=&：02'：CBSEq=lHMB/43Httl=53(rim如.2和迎ED1^.L6B.84.^5B.63.23?.237KJPF4EdiD[ping)requestid-Dx0200P3Eq-H2fi4/UPttl-M(r1霍如=£53906。17152.16^.04.65icff74e-±dCpirq)reply1d-fli[i2u0356^11264/44,re1-51(r国Frm168;74bytesmtflre(5MbhsL74byiesopiured£592blisjanIrrcerface0UEihernecn,arc:OfliCBiOf!0Qift叶占(KiflliflfsflZzfezfe),Dsr:席二如！史！59口白口。"号史！&:鹏Internei：Prota-zolversian4HSr-Z35S-63aZ37a237[50.§3.237.23?58庭切19ZalbB.S4.b9Q92.168.W.6@：i日InternetCcntrcilMess-ageProtocolTyfe:Q(Echo(plng]reply)code:OChKksin:0x215c[ccrr&^:]Idaitifier(k：i;512(C-SLI2■:'Ll)idfintlfiET(LE)：2(GxOOfla)sequenzeruiber(be):104■技(Ok293D)SecfJEn-：Eruibar(LE'i:dLCOxCsjZSj『口eau颜f「g;1&F1[RKponsezine!22.75Bns]£DdTd(32t^iTiS)TYPE:0CODE:0CHECKSUM:0X2A5CICMP协议数据包对IP分组在传送时出现的异常情况进行报告，对IP报文传输时出现的差错、拥塞、路由改变、以及路由器或主机信息的获取等情况，向源端主机提交报告，由源主机采取相应措施，改进传输质量。3、捕获TCP“三次握手”建立连接的数据包并分析；捕获TCP“2次两次握手”释放连接的数据包并分析。tcp连接的建立第一次握手

u<S<UTE«lulLbh*.L«&Jl*机Lkjlc皿Ia£<■rt■17.174-719000Ilfi-211.1W.9O19Z.LDB.H4.1BTCPe。30-1507[FIN,心]Seq-BU2Ad:-44Bwin-6432Len-O717,174755C-3L!询.L输D4.1BTCP哭1507-^g]贝卜4您Ad-；-$：343Mln-r-5535LHilYF£L_q；i加食5M.1BUS.LSI.134.SOTCP或6Mg就iC=iN]E-aq-Civlri-aSSSSlhIi-0HEE-i-q-auy・L_fepi'TE4.5rHT3iCCD!■=•?.16E-.B4.1E-123.IM.139.30TCPSC-uCPAecr-ansnisticnJ1_±09十&0[-51NJSeq-jJwin-^i'^3■lErr*uivJj：511L-Jij0142.L6B.91.1STCP€690-15«皿孔AEK]5eq-0ACk^LVdH-576DLET1-DHSS-UdDSAEK_F=?■&<EEi.'iIi?■&<EEi.'iIiitC-4C-T，，445-iVsEa—n„4■-L-—4E*3iEindSiFr-uie24133.66b>-tesonwire[529tnt3jP碰brytescaptured[52Sbitsjoninta-fajoeH±.EHlurrwczi,srcicB:Qc:dc:50:42:7b(cB:De:de:50:02:7b^?dee:DOiCS:i>f:ul：r>f-：r-a!OSIOfICQITSITin)-InTernerProracaljErslDn4,S-c:192.16H.34.LHL192.10B.S4.1HJ,bst:1ZD(0^rui山rLfliqElii20bye也+L-iFfarcnrnaredSarTets「""id:OxOOQ3ECPDxDD:Ewfsuit:C£：h:0x00:nut-CCT\,nmCCn-CapablcTran-spnrtXiTertilLength:52ldflFiT：1f1c*l：1c*1!Old-Ziac：(74LK；l■kflags:OxOZ[Don81「「日gicntjFragsientoFFset:QTil的WlQ1:3trnTacal:rCPW)土Headerchecksui;QxQ?C*8O'TddlHEcHsahltd]S3UFC8：192BlSH.5M.ia[192.S4.19)i-astlnation:LZ3.15L-UG.3flC123.151.LS&.SD)[Snirce而eIFuUnknown][gTlraTlUHijEQEP：UnklKM]TransnlsslonCmrralProrneal,5r>zPa「「二1500(150^j.Dsri:Pert:BD(Ki).5eq:0rLan:DSourcePart;L5C-9必!5的)c^esTlniTlcoFins&j[80)[StraanIrdns:3E7][TCPSegmentLemC]seqijenceiwter:0[reldilves&^uEficenufihEf)jM^kncrzladgpnrirrmbar:0Heac<e「Length;;3Zbyt®土"・.・d«oao«fi&w：o>soz(stmj5ndawsizavalua:65535[Calcul-stedwindowsize;^5535]-dieds：5UH:OcLFed[vallddTlnndlsablecO[CaDdChackjLin:RaRm]第二次握手MilEm,EtsWi!£'lUrAfill!*£■:■neqzqtii&tK-Bd+dRin-D^^dslbi-i-u5eq-0,r.'in-^5535Len-OHSS-146D'"S-lSAO1_PERH■::I-L/.1I-4.'ZUUU7IS1.4234]3U0mm.18--rf-_ia192.84IBAXD_^Xl..±U4-yu323aL51.139珀ILMTCPM-AIUj-rc-ULLK」觥35?MilEm,EtsWi!£'lUrAfill!*£■:■neqzqtii&tK-Bd+dRin-D^^dslbi-i-u5eq-0,r.'in-^5535Len-OHSS-146D'"S-lSAO1_PERH■::I-L/.1I-4.'ZUUU7IS1.4234]3U0mm.18--rf-_ia192.84IBAXD_^Xl..±U4-yu323aL51.139珀ILMTCPM-AIUj-rc-ULLK」觥35?绡商0卬州]L.W,J.68；$J~1523・L5：L.]39.3QTCP66[tcpnerrarrsji15〕A如[A叫saq=a5m65技5LW=U竺.；7M.SC3711MTL23.15L.13b.NI'SS.ISS.B4.1STCPkk]SGiq-0Ad-:-lfl-in-57fiOL^n-0MS5-14-4D二y■:」jrw.6O3553KI0L”.lGa.-=4_lH123_L51.13*9-30TCP14UMMOZR]Sei-LAjd:-1win-Xb^SlSlef»-D<>t.Franc2414B:06tullesmwire曰WEbits).QQbj/rescaprLTEd(5ZBtHtsJ□ninterfa>zc0HeaderLength:20h/resDifFc-rentnatedServicesField-CpzIIOiWF.ml垸ECN»乾l>3;Not-ECTCHcrtECH-CspsbleT「dE；|M「1:)]i(realLenorh:52idfiHTCjrlCrl!DkODCOCo)tFlags:OxCZ[DeritFr-agnenxjFracpentitFFsei：:Dlineidlive:51pfcteqcdI!rep场)H^adar匚h—kwumDacZcIM-Evia-HdatinndTw北led]Ec-jpcee123.L5L.139.3GiDLZ3.131.L35.3^)DesdnailOH!.IS(WaL6S.94.18)[!5£iLrCC-GAOIP!UilMFTtfviT][CostinitianGbo]P:LnFncruTi]BTransmlsslcinControlProto-znlPSrcPort■K1DstPortf13G9OJQ9LSeq;%Ack■LLensDsourcEporr:9D(&j；：i□asncliiat1席】pqpt:LSM(L5NJ[Str^^nindfli:357][TCPStjieriLi_en;■?]E^L-sncsn_rtK*p：D(reUxlMesetTjer^enLfitiir)•AjeknDW-|mdgH@FTCriuiljar1匚FtalHEl噂白占*HQadsrLnngth:3Zh/tas9.■…DC-JDODCQ001。-Flmgz;。技口LEA2K)wlnctowualues5而0[i^alcu"lj.r5nd口*Eml乌方白]QChad:7ui!曰*£385[validationdisib-ladjDSondChecksui;Faliej「e■8-hzirteihihli1r.r1第三次握手

.「性汕!■■L1HUU心-W心V,W1外"吟，ULW心E"L>WLW心)己皂q・UH=・LHl心fv*.A.K」粕Mill?152716073471312j.L51.1J9.JOrEp5115^-60[AH：：]Seq-lKck-lkiin-7S4.eiDiyK'QD1U.16B.84.LB123.LEI.13Q.30HTTPWBGET/gdt_wi^.f■:g7ac^0S：0LtTC-l*u1n-B3lDS7S2ia45tk^y-r6^25B4A；¥hfranc5«1bytesonirlra(422bits)354bytgscaprimd(^3Zbits)oninrorfjcbu+echErnerII(5rc：邙：狄：女；法：咬：布t'：B9C：dcs5§jQ3.「性汕!■■L1HUU心-W心V,W1外"吟，ULW心E"L>WLW心)己皂q・UH=・LHl心fv*.A.K」vErskfi:dHeaderLength;2Db>tes出DiffflrsmiaTadSgt^IcosFialdzOjcDOfBSCaCwnuzc^fault;£CN:CwDu!rJnt-KT(Not£CN-£apab-|aTransport))TiicilLergchsa。Idcmlficjrtian:DslizeuiT-40fl'i虫Flags:Q>iQ2(doti'tft由5淀m)Fra^ientoffset:uTimetoUve;混Pf-DTfliZOlSTCPOS)出Haidarchacksiun:uxD272[validiiimdisabled]SOLTCB：192.168.B4.IS模笛DESiiruHan:123.LSI.13-3-30CLE3.151.13B.3O>(source^eoip：unknown][DejtinitinnG«IP;Unknrwn]-irangnlssicnControl计血口匚口、5rcF-orr：1509Q50斜D5tPom例CSD)P5eq：1,&*=1,LensQsoireepctcs15Ci&(15liS]DostinitianPort:BD(BO)[sEreanIndex:357][TCPEejnentLen:U]Sec^enzenurtier;1frslati^e5EquEncEnunhe")MknwdE顿廿itnutibEr:1Crelatluemefcmrtber〕HoadorLcngih!2Dtryrnw^....硕口QSKLSJSO-Fla^：OX如。(ACK)Hindir#siza^aluc:C>3535[calculaiatJwindowsize65535][Wirid*sizescalingfactor:1]日ChEcksijn：。:・lb嗣[validationdlsablsd]rrnrwMr4nn.rbr■•nlrnls.Seq=0;第一次握手：本地向目的主机发送连接请求，等待服务器确认。Seq=0,ack=1;第二次握手：目的主机确认本机的连接请求，建立正向连接，同时发送反向连接请求。Seq=1,ack=1;第三次握手：本机响应目的主机的连接请求，建立反向连接。完成三次握手，本机与目的主机开始通信。tcp连接的释放IILH.MJAWJUUUXXJ-XXL..XJ3.JU-L?X-J.UUI.LM.XI3IIIITAAIIIIT/-L.J-XUL>Uh.IIUDLIUli/A-]aYOJLIIpLJt7W,657MC-30123h151,139b301史/L就，明，18IILH.MJAWJUUUXXJ-XXL..XJ3.JU-L?X-J.UUI.LM.XI3IIIITAAIIIIT/-L.J-XUL>Uh.IIUDLIUli/A-]aYOJLIIpLJ±FFdte24156:&2byresonwIm(4-SOhhs),&3t^cssCdprured(J3flhliE)onIncerface0£EthernetII,5rc：DO;O3;^f7O2;f6;fE(M;03;0f;Q2;f6;feC)PDst;cB;9c;dc;54;C2;7b[cB：9c;de;50:02;7b)-internetProt&:nlVersion4.Ere:123.LSLU9.SU(123.LSLU9.M)BDrtz192.163.S4ABri92aL68.&1-18)Versian!4HaadsrLEfigih:2DbyresWDifferentiatedServicesField;Clx.OU[D5CPUxiIlLI:DefaulteEZN:Not-ECT[HotECfl-ZapableTranspert1)TotalLength:40idemlflcarlan^(5Q222)tFlags;ClK.C'ZfDcn'tFra^iEntjFragpentoffsET：uTinetolive:51FtDtacol;TCPI为)£Headerchecksum0x6331[validationdisabled]SaurcE：lJ3.L5L.ug.3Q(1J3.151.U9.3Q5Destination;1^=168,04,180-92.160.34.IB)[Snirce'SeoIP:Ui4:nc*Ti][DEsrinarinnGailP!LinknDMi]qTranarflsslcriconirolproiacol.sreport:3D(30).dstporr:1509(15Q9XHq:抓乌心H5,led:0SourcEPert:flu顷〕besrinaticinPort:150?(1509j[sir朗nInricK：357][TCPSegnentLen;U]SequencenirtiEr:37&9(relaiives己quencpnuitiEr'i心rwW颇如匚ninher:355(reldilveacknyttoEf)HeaderLength;2DbjtesQ|.aiU'：<IDOC'ILClKO.=Flags:U:-iELL[FIN.KK)windoweIjbualue:59[Calculatednindwsize;7552][yirriavsizescalingfictor:128]BchedrELn:Os>2f5a[valida^iandisabled]

J.LQ.MaJ-0I'_F3。日A-LR^BJJWIDI=fJJiLlflr=U国.657^1。1>〕1史.莒MB4.】a123.15L：LM■祯TCP5415㈤昼舶[.皈用5eqW5!iMkTTFl]5n・64MFL&何iII，一一IIWFraie2415?:54byt巳onhire(432bitsl?54tr/tescipturad(-432hits]minterface09EthernetI匚5r--；'.：S:^;±;5fi-a2:?bfcBzgczdciSOiC^irbj..D^t;O0：O3:tlf;02;f^zfe(CO;«;Of:fl2:F^;Fe)-iniemeiJ.LQ.MaJ-0I'_F3。日A-LR^BJJWIDI=fJJiLlflr=UVersion:4HeaderLength:20bytes±DifferenrlaidjservicesFieldsQ^D(dscp牧国：oefauTcecn:fee-?:not-ect(nkECH-capdbleiranspcrc))TotalLength:40idEntificatim;fltLcflf/405)*Flags:Qu旧Coon'iFra^ienr)Fragientoffset:0TimetoIive;64Protocol:TCP(&)iHeaderchEctsui:OjtDihf[ualidafiandisabled]SQLrce;L92-15B.M.1SI1M-15E.M.1S)Destlnarion：123=151.13AhJ0£123.151=139.3®[SourceGeoIP:Unknwn][DestinationGeoIP;Unknovn]Tr.]n5iii55iancrrTtrolFrmacol,5rcPert:150?O_5鸣)，C^rPert:初[赋i：,5tq:B55,ME:377D,Len：uSoireePart:1509(1504)Desilriacloriran:30(M)[StrediiIndex:35T][TCPSegpentLen:(1]巽pm舶nuibar:855(relaclve巽qua-舶nutiber)AcknoylKlgnentnuttJEf:3770(rel-itlvea<fcnufter)HeaderLength:2Utr/tES而…,MWOOClOOM・Fligt：D：itLLQ(K?；)Hindu/Gizavalue:64M7[Calculatedwindnvsize:64647]iwlmwsizescalingfaccur:1]Sth&zHuii!：uKlbflb[yalidarinridisabled]；7B4.657921DS0LW.L68u&lIB123A5L.L3§B3OTCF5d15W-3D[ack]seq=855A：k=577DWin=$4647Len=C«704.6579510001M.168.E4.1B0TCP54；7B4.657921DS0LW.L68u&lIB123A5L.L3§B3OTCF5d15W-3D[ack]seq=855A：k=577DWin=$4647Len=C«704.6579510001M.168.E4.1B0TCP5415O9-3D[fihbACKJSeq-355ACk-37Tuwin-64647L6H-*J1?04.6821?6001]L23.ia.lJ^.3O1W.163.54.16TCP6d豚2对少[ju：K]^eq-377tlAck-65bWin*?552L*i』：9"上况涝LO顷L林Lg&l-以Z21,Z33-25.101TCPM1U3^Q『5州15EQ-Cwin-135535LEfl-j1^5-14fiuW5-L&虻itPEW-：£』gjIFr^iie24150：54bytesmmre皿弟tntsJi54bytescipturedC4B2bits)nninterfaceCl*EthernetII.Srcsc0-3c::d-::50^02：7hCcS：9csdc-50：D2：7bLOst::fSsfe(50:035(^:02^6^6)-inxernerFroroElversiani.sre:L&2.168u&l.lB(192.16B.^.L8),kcj6(123-151.139.56)version：4HaudcrLanqth:20bytas『DialLangih:4DidenciriLaLlons敦LtfW〔用n)血Flags;0x02(ccn'rFragpenT)FrjijrentnffsEt；0Timetolive：5+P「oWr1;KP顷由Heideschecksuti!OxOZiSe[valldadmdisabled]SDU-Cfi：6(L^-L66.&4_Lfl：lDestination;125,in,m30023.151,139,30：![So^jrcEdenlPsUnknmffl][Desclruclcnmdip:w也novn]B|Trinsrtl£5loriizanrrcilpraraoal,srefuct:1509(1509),ds:tfuct:DOC3DL5eq:E55,Mk:3770,Len：0SDU-cePort:姑月DestlnaTicinPm:：乱i；&3)[5ir&3rntn岫：357]ti'^p与乾辑mLen-可三冲司c&riwttier!Q5S^eldUve花町u&igenurtierjIcknni'liadi^icntnuibar:27711(rolatiwacknurfacr)HedderLength;Z1?byres出……OHODM1HOL=Flags:CwDLl(FINeXCK)uirdi>-si2e心1成：64^47[cdlcuUredSndowElse:6*6*7]Drin±wsizescalingfactor：1]QChecksiii:oxlbab[!/alidai：inndisabled]

F胸注况口舶闻IBELL妙制的己LE乱S4,L8KP利出司5岭［阪町5四・3了的Kk■&我W1it75*Lmi7『明-把愚51皿019L1E认斜门&1HJ5L13伉祯FBH1朴卜,师|_口队其K』5eq■甜5虻kTTFQWin/4F胸注况口舶闻IBELL妙制的己LE乱S4,L8KP利出司5岭［阪町5四・3了的Kk■&我W1it75*Lmi7：'^7.231492ClM221.233-25.161I'^.lbS.&I.LBTCP6030*1513[5YN..Kh：]Seq-：1Ack-lViin-SB^ClLen-0M55-H^D力FraiiE241MESObyresanznreC4B1：1birsJiWbycescaprured由日。bitsDonimerfa-ze0由Echemein45rt=MsQSs^ioz:ft:fe(MsQSs^ioz:ft:fejBdst:■:B：9c:±:sozaz^bCzb：9z:±:5Qza2s7b)-IniernerFtdtdcdIVersim帼Src:123A5L.1S5.30(LZ3.151.139u3O)5Dsr:192-L68.&1.LB(192.163-34.IS)Version:4naadETLengrh:ZDb>tK出cdffETEntiaredsetuickfield:uxoa(DSCPttrDO：Defaulr;ecn：oxco：>Jot-&2T[Hot日mapablaTransprrt);ratalLHigrh:如idenclflcaiiun:DxflMDfO)血Flags：0^02(dcti'tFra砂m)F3砂moff^eii0rlmfiinlive：51PrOEDCOl:TCP(a)awadEr<tieck：5iifi:Ox2c&3[vallddilondisabled]soiree?123B151,139,30CL23B151,m30)pesrlnailm:IK.168.B4.LB(lW.iea.84.1B5[5du「ceGeoIP;Unknc^riJLoestinationdetilP:Urkrawi]QTransnissianControlProtocnT,5rcFu「t;BOC80)PDstFu「t;灼眇(LSCy),宪中37?3?Ad”剧如Len;Q33LTCSRjrt;HQCSOJtestinationPart;15<l&[StrEinirdes;M5F][TCPSegientLen;U]SepjEn蜂ruiber:3J7CI(relativesequerrzeninbar]JUcknwledgpentnuibersE5G(relatiueactninbar)HeaderLength:NDbytes园…八oomOfluiowq=Flags:m〔CLQOo:)virdwsize'/alue:59[LalculatBdvirdwsize:7553]i^nck^1sizescalingfannr:128]-Ch&zksiiii!Os2f59[ualidaTictidisabl&d]Seq=3769,ack=855,win=7552,len=0;第一步：目的主机对本机发出释放连接请求，结束数据传送Seq=855,ack=3770,win=64647,len=0;第二步：本机对目的主机释放反向连接Seq=855,ack=3770,win=64647,len=0;第三步：本机对目的主机发出释放请求Seq=3770,ack=856,win=7552,len=0;第四步：目的主机确认本机的请求，释放正向连接4、捕获HTTP，DNS，DHCP数据包，分析其构成。a)http数据包的捕获与分析通过访问进行抓包http请求报文K'S.I&JZISDOMLMB.BH.1BHFTF雄1HTTF/l-l的匚NLdITI品525.1K-i5SDCe101^7.2^72HTTP65Sget/&u?hd-te-JiDde-Li1SDri-14ti-]A£ld-i2527_i265[i_L447J2fi72JJ525.2LO2CQ0DO180上礼龄.72192.16B.Bd.IBHTTFidgrfrrp.-inl2C*0qk(TSFc/jiuascrlpc)525.267^4200<'5^5.403BW-ODu1洛顼湖，安180.149,131.2101QZ.LDB.B4.1BHTTPHTTP572GET/pa55^1/js/unl.loqIrL^rapper,js^c^Efsion-14255^12H3HTTP/1-12OQOK(taxt/jwaxcrlpt)+ifthit:558on硒性《犯时OIts),65BcapTured(5?6iIoIts)onimerfaceQdlEthErnETII75ru由；灾；de；5U；笠：FbCcB：9c：dc：5C'：ti2；7b)?Ost；'MlQSl'ZflOZiffilfe(如53二肝■罚2：f后计Q独interns：FrrnocolVersion+s5rc;1驼门如■耕C19ZH1SB.34.LB)PC^t;1■剖L9T二土在(1E>J-97=33=77)-TrinsnissianCnntrcalFratacal：,SrcPort:1542(1542J,DsrtPort:fiu阪q二LAd::1,Lan:仙AHj-pert^tTransferPrsstn-sil@GET，如E・&RfWde・W]SOn-W-3As1d-l2527J265-?_1447_12aT2_12^92_12717_12T3S_12736J274]_Htl89_ia6]24d]-jQUeryLLD2AK67224257951L68_1425H-[EXpHTirifo〈由aWMequwes)：SET/su?»iJ=4-2：-IO(Le=14jsan=l^：i=34<：i.]|=12527_L16?O_Ld47_12i572_12-59：_12717_1272S_12T3i=i_137^13JL0S9_L-3i532^d]=J?[GET/su?Kl-AZKK]de-li5j5«1-lfip-Mr5ld-12527_1265Q_W-17J.2672J2^ZJ2n7_J272E：_12736_12?43_lLO09_lO632iSrti-jQUEf>lLO2Q0Bh7224257951L6Bj[Smarltylaual:Chat][Group:Sequence]RequesTMerrod：getReQjesiI.MI:/su?iri-iZxiMCte-lA]Sun-L&p-S&S1d-12527JL255ajL447_12672„12592_12717JL272SJL2736_L274]_ll<lB9JLS632ficEi-lQuerylLOZOB^T2242579!H.etf.iesTver5Innshttf/1,1AccepT：^XrMfiefnrar:http://ww.baidu.■二Dn/Xr'nAszcept-L-ingu占ge:zh-cn^-\nACcepi-EncDdlrq:gz1p8deTlaievXnuser-^aTC^NO2md/4H0(^cnpaclbleghsie瓦0：wIMmsnt54;2：hnet匚lr2.Ou5iJ727;infaFjLh.3)\r\nH&stEsi*ggc<t1an.haidu.<nfi\ra,.jiCmn&rtion:KMp-A11uE\r\nSCDakla：eiIDuID-2CD&a^52A5aE£0AlflElC75AAAjEAi33Z：P^-L;a4[DUPSIC~C€lbJae.3CFBCK14>IBFLM002QBD5CDC；[I-1E52T_12&5匚ueJ■:治pair:BArDUTD-2,-ZM6552A5EeECJat61E?5JUkA7BA3392:FG-1CDrt-1epair：bmdlf耻口■匚e±PAL6，EF&二土Lmefj_F4M吐臼钮如二CQiiHepilrsH_P3_P35lP=：12527_1265D_l-447J.267ZJ.2692J.S717_lZ72B_12736Qa2743JJ.OB&JLW32\r\n「R11「enu部rU虹；队5；/~/5询由1：比11上小血，<：皿『叫％曲】^101^<1&诂叶：1血7名祖・]_的暮_1祯亍口_144，_1£。整且£苗£」，71「_1^丁祯二次3。_1*牝_3_1用9」[HTTPrequestLA]inf「占ne:[叮绍？】Requestmethod：getRequestversion:http/1.1Referer：/\r\nhttp响应报文-525.1B471DOOOi&a.y7B33no?_妲._"..•.l.・HTTP222HTTP/LL3WNotHndified■525.L&6+5KOOIK.163.84.1313D.&7.3S.72HTTP，:翌二-J-Llil712：i：二••-.：＜：「的，ZLQM切网ISO.97.33-72192.1^0.04,10HTTP.525.2673420U03180.14^.131.21UHTTP572GET/passApi/]s/uni_logiicwrapper.]s^cdiTJErsion二LAM54-26407■525.I1D3KWOO18CI.1-49-131-ZLOWTTP315HTTP/LL2WOKI'text/jauascript)<1&Fr.grre27§D7：140tyre?nn#1*(1120bits),14Cbyresr.iptired[1120blis]cniritErface0SEthernatI匚Sfcz00:03iCfzOSitG叶它(。。!。主折;02叶&叶皂，Dst!膊0”此！！ilkilLTti(c$l:9c:±:50:02:7b)ZIntErnetFrntccDl/ersionL5rcz13^^33.72fiaD.&?'33.Dst:1S2.16B.84.13(192.15E.&1.LE)airaremlsslanaamrolpmincoLsreport:aoCaoXktfor:1543Cl543).seq:202,Ack:wLen:86|出[2PeassartiledTCPSegriEHts(2S7bytes):rf27606(；20LX+27607(86]]EHypertextTransferProtncolFHTTP/1.12QD冰\rlnB~[EvjvrtinfoCch-it/'Sequence):http/I,!zmonXr\n][HTTP.rl-12DOOK\r\n][^Merrtyl&/el;chat]D^cup:?ei^n-:e]RequestVErsim:tiTTP/LlStatusCade;2OUResponseFtinsa:okdate:Thu?05Mar201503:03:476HT\r\nSErver:wug弟ion.biidu.zbb.df\「“nrCmtent-LEngth;86\「，[cam:melergrh:96]Cmrant-rype:tEict/jiviEcripT；charset=gt4c\ir\inCache-Centre!;private\r\nccnrfiLilLiri：K&ap-A11y-e\r\n■-■[HTTPrKpeime1/1J[Timesincerequest:tl・0L37Htl如sKcnds]「旺p茧EIn.皿："巾：41SLine-basedrendaia:tExt/javiscriprRequestversion:http/1.1Responsepharse：okServer：suggestion.baidu.zbb.df\r\nhttp协议定义了浏览器怎样向万维网服务器请求万维网文档，以及怎样把文档传送给浏览器。b)DNS数据包的捕获与分析以为例抓包：诲的，5$心5沁〕□Z98SUn曲rdquery心qmciUrkrmm(弱5C0〈UnkngTi如"此日lab1328.607056000u2.iba.a4.1a2CM03.24.fi8DHS73StandardqueryfrxffdjDbaidu.con；义土的96站&0口202.L03.24.6B1C-2.16B.64.13DHS302StandardquEryresponseCHIVEw^A180；32a.6552&aMD22O.LEL-131.234祝"E&L18DHS6DStandardqueryD.xSaC1![HalFamedPacket]7.<ri7nr.Tr.1m1fi.-nqa1□l."i31AA-；-nHcFTi*>iiN匚匚fi1F1i"IfC.L一&iFraiie3E532：73的*5onEfe〔5斜Mrs),73byt部3供成财(5Wbits)an1nterface0-EthernetII?Src:德四(；d3：yc!de!50:02:7bj?M!LliJiO^zDfiffazf-a!iJf:D2:f6!fejE[sestinition;M:Cl3:Cf:D2:f6:fe(OD:DS:ClfAdctess:W：a3:C+:02:f6:Fe由ikOMClF;QMF扣...n.O.ln.alnln…,-lgb1i:Glctiillyunlqi+saddressCfaciorycteFduli)B.,BB.=0,..a«IGbii:incliddudlad宜(unicasrjI-SOLFCfl：CB：&2!dc!5fl：D2!7b^8!9C：ck：5D!O2：7h)虹I土霞wd3!yc:dc:5O!Ll2:7ti(i：a：&::dc!5U:U2!?b)八…..0.aa.-aa.a日…u.a.%LGbit;GlobaJlyuniqueaddress(fictorydefault)口・..„.nC1.n.a,口,口....…，■-IGbit:Indixridjaladcfa-Ess(unicast)Type：IP(OMOBOD3日internetPrntKDlversionfl.sre:152,169.B4.lbC192.1^.B4,is).Dst:202.103.^1.69。旧.LD3.网.6B)i/arsian:4HaadErLength:20b>tasEDiFfErentiatedServicesField:OeDO(E6CPOxM:Default;ECN;tklM;Nat-ECT(NatECN-CapdileIranspcrt))TOCdlLengih:59idfflClflCdllomOI5S65sFlags:axDQFragnentoffset:0Timetolive:的RrutKokUDP(17)HsadErchedsui:[yalldarlmdisabled]90LTO!：192.169.94.IBCL业.1的，B4.L6)Destination：202.1D3.24.63[SourceGealP:LhJ:newn][Destination京cJP;Unknc^n]-UsermtagenPratac.Qls5r匚Part;5M27(5062FLDstPort;53(55)soireeport:50627〔50627)QUShifDyrjgrjtiPracocol,SRCPori：50627(5^27),DSIport：53(53)Sour■:eParti50627(50627)口巳工1「成Impwr:53(53)Length;3&mCheck:sijTi:口询的日[validaTiondisabled][srreaiiIndex:605]-DixiainWaneSystai(query)「胞Win哭id3日5B"rrarsa■:rlcninWff”国Flags:D:<D1L>JStindardqueryQLbSEtiarE!1AnsiverRR军口Xnirlnrii：/a.rj:oAddlrlanalrrs:qSQueriej源地址：8源Mac地址：c8:9c:dc:50:02:7b域名到IP地址的解析过程：当某一个进程需要把主机名解析为IP地址时，该应用进程就调用解析程序，并成为DNS的客户，把待解析的域名放在DNS请求报文中，以UDP用户数据报方式发给本地域名服务器。本地域名服务器在查找域名后，把对应的IP地址放在回答报文中返回。应用进程得到目的主机的IP地址后即可进行通信。DHCP数据包的捕获与分析

Discover数据包iy^UUJJiL-L.-ML'SyyJL'LAJ理盈仍HED19典口1X1jgjgj仍疏2101X1xyx.xua.w.ii-u192.168.19乙168,俱盘叫X.JJ-2JJuJ.」」・>!.」」55W55盘55代55,155UnLHDHZPDHZP」<4>LUHLH.UJLT.2e«UDKPinform脂][E心-IIdll^d'-LlUIIL1"J.WdXiq-TransactimID皈弓必帖明-T「日门sactimI。。.我d!24MM5532Z7^Kl.2t45^DMD.d.D.Cl55DHZP342DHCPDiscouET-Transit!ionID0xfB244d225532374&<1.265(145DIM192.169.&q.22^255-255.255.255DHZPDKPOffer-TransactimIDQxf如44dH5532+265393DIMDrO.C'.Cl255-255.255.255DHZPM2DHCPRequest-TransactionID0xfB244d225532526593200024255-255.255.255DHZPWDHZP心-TransactionID0xfB244d22命Frame55322;342bytesanwireC2736bits)E3^12bytescapturedbits]cninterface0EiEthernetII,Etc;ti9;&c;dc;59;3&;e0(由；如;dc;59疽9沱们.Dst;Broadc-ist[ff;ff:Ff;ff:ffiff：1JEInternetProtocalVersion4.5rc;d.D.O.■：■(0.O.d.O'LDst;255-255.255-255(553rUserDj.tagrdniProtccol.srcPart:68DstPart;67WF]FHoutstrapPrutacolLDiscaver)MEssdgetype;Bont:flequesttl]Hd「d*日*type;Ethernet(to'iJl]Hardwareddrf-esslength:6Hops;DTransactionID：W干魅HdHSKondselapsed;0IBoatpFlags;OxOWu(unicast]clientIPaddress;D.0.0.D(0.D.O.D)YDurCcllerrc)ipaddress:0.0..D.OQ.O.D.a]nest:EBrueripscHr酒丈mm(0.D.O.D)jgenripa^ress:0=0.o,D〔电CuLCOcllenrnkaddress:c8；9c:dc:59：39:eO£c8^i：:dc:55：39：EO)clienthardwareaddresspadding:0DD000Ma00D0a00D0a0EErverhosenanenotgivenemtfi1erunencn:qivenMagiccookie!dhcp±opiIon:(53)dhzpMessageType(Dlscauer)±opi1on:(12)HostNameiopi1on:(55)pararererRecpesrl1sciopiIon:(255)EndpaddingDiscover数据包含了客户机的信息：客户端硬件地址类型，物理地址，客户机的计算机名；包含了要请求信息的内容：子网掩码、DNS服务器、网关、netbios名字服务器等。网络中的DHCP服务器收到discover数据包后，会回复一个offer数据包，内容如下：h=Erherneiir,sre:uD!th：i7：ra：7ij：ji[D0iL&：L7：ra：7a：4i),osrh=Erherneiir,sre:uD!th：i7：ra：7ij：ji[D0iL&：L7：ra：7a：4i),osr:Eraadcasri；rr：rr：rr:rr：rr：rriinternetProtocolversion4,5rc;2^(L92.L6B.84.224J.皓t;55Q555UserOata,crdmProtocol,5rcf'ort;67<67]?OstPrrts6S(68)DDDLSCripPFDtaCDl(off财〉11MessageType:eoocRaplyQ：iHardKirc-typ>a:Cthnrntt:(CijcOI^!Harc^ireaddresslengrh;Gnaps:Dir-arrsacxlonid:0>fa244d22Seconds己1占pm芒日：bBootnflags:。凶QDO[Unicast]ClnmtipaddresssCLELCLQCCi»Q.Dn0)TourtcHenx:)ipaddresstL«uL6EuS4.L6i>(IM.l-aa.&4.1&3：iMercserverrpdddres^!l&2.1iaa.£4.2?4(；ly2^1)RelayagentIPaddress;D.O.D.O(0.0=0.6)ClTE+itaddress:a：E：9c;dc£59s39sE0Ccg^csdc:59：39ee*23cll&iT|-^rch*ai'eaddresspiddlriQ.Ci^CitiOOiXiODiXiOMOeiXiOserverresrnamenorc[1uenBantfilananc-notgivanNagi<CDokifijDHCPOpilansopiian:Option:dptIan;Opriansopiian:opHori!：Option;Opnlanspaddirig(53)DHZPMessageType[Offer)tl)sutnecMask(顷W〔51)t54)曰〕ROliter[6]DonalnNamgeetvet(255：iEndFehct占1Tine'/a.luePeblndlngTireValueIPAddressLeaseTimadhcpserv-srid^nilfier55322749D.26456KiaD0.DrO.055NiCPMWDHCPDiscovet-IransartionID55323冲CLM5CH5皿L92.L&B.84.224-55CtILP3-32DHCPLUTET-IranSiCtlDHIDa>T32-J14d2255324-74如.2兄9珀3O.D-O.D55CUCF]J2dhcfReqLfisc-iransacTlonidOifa2J4-d2255225744b.365QS3dOD143-16&-g4.23X55C+HCP242DHCPA£k-Transj-iztiddIDLlsrF32fl4d22由数据包内容可以看出DHCP服务器提供了一个IP地址及相关的地址信息。客户机不能直接使用这个IP地址，还需向服务器发送一个request请求数据包。Request数据包55322749D264569000D.Q.D.O255.255.255.Z55DHCP342WPDisewer-Transa<T^cnIDQ虾日2M2255耻'了49口日65。』5匚＜1日1蛇■!楠・B4・2X上55_习5■习5255□ncF342DrtCF□ffer-TTiiAiS丑IDQKf日553247490.265393M0D.O.D.O2S55DHCPDHCP"quE£r-TransdCTicnidu^f324402255225744D.2£5DS2DdQ162.169.&l.22455DHCPDHTP-TransactimIDOxf9244d22比Frane3532^;34ZbytesonE「e冀旧岛bksj,312bytescapturedQ730bits]anintErfaceQh-£1：barneeIl(Src:car&czdc:59:39:e0Ccar^zzdc:59:39：€0]8Dst:Braidcastfff:ff:ff:ffzffzff)£irnzerneLFTOIixalverElon4.sresILCULC?(ClO.ClOL口我：55(255-255-255.255)ituserDaiacriiiproracDl?sreFori:SS(Se),dstfopt:S7(S7)日SoctstrapProto-zol[HequEst〕Messagetype:BMtRequ&Ft(13ni「g「Eii/pe;Eihemec(OaOLjHartkiareadlesslengTh:6Haps:0TransactionID;ClK「B^HdZ2Secondselapsed:a+Secondselapsed:a+bod匚pflags:(unicastJdllem:ipaddrfiEE；D.u.d.u(0.D-0.CQYaur(client)IPaddress;iXChlXU(0.0=0.D)HextserverIPaddresssQ,QBQ.D(QeQ.DBQ)p.elayi^eiiTipaddresss102,2(6ad.Ga<i)cl1eni:majcMdress;:c8:fc：dci5B!39:eOCc3:fc：dci5B!39：4jO]Clienthardwareaddresspadding:OlXldDlXlODlXlODULlOC<ldOSerirerhnstnamefiegivenBaon：filenanerardtIvehraglccocklesdhcp击epi1m:函Option:出CptlDn:出Gfixlai.弟epi1tri:虱Cptim:Padding(53)5)(5O：：I(12)£55)dhcphie三日丑geTj/pe(RetpesT：)DHCPEery-ErIdentifierRe^jestedIPAddrE^sriosiNanepardtiererRequesrList(255；iendDHCP服务器发送request数据包请求使用IP地址。如果被请求的IP地址没有被占用，此时DHCP服务器允许客户端使用该IP地址，并提供子网掩码、DNS服务器、网关等信息。Ack数据包553217490.2653&3000D.a.o.a55cncF3^12cricFRECjjwa-Transa<x1anidDsf盈4目您255325749(1.26596206&255,255-255.255C+4CPJ42553217490.2653&3000D.a.o.a55cncF3^12cricFRECjjwa-Transa<x1anidDsf盈4目您255325749(1.26596206&255,255-255.255C+4CPJ42C+4CPAZK-rransaciIanidD：xfE244cG!2Ffdtie553251>42b>TesanwireC2736kiTcsXJ42b>Tes<ip^ured<2736b1x:s)anIntmf肱己0sBIE匚ECherTtfiT1I^sresCiOil6!17：fa：70t4L(ClOtlotl7tf-di7Di41),KTiBPOddcasC(ffifNff：fftffttfjiriTerreiprorocolversion4,Erq1^2.169.&i.224C192.166-34.22^:1,DST：55(55)UserDatagramPratDeal,SrcPert:S7仲7%tstFart:63(£31BcatstripPrctncalffiCk)Qj+Messagetype:日notReply(2)Hararei：ype:Ethernet(OxOl)Har^areaddresslengths6MQpSE：DiransacxlDnid:Dxf8244d22Eeccndselapsed：0BQDTpnags^LBiLiDuOtunlLd£r；iClientIFaddress:O=d.D.d伊.氏口.1>)Vaur[c:liCnt:；lIPaddrass:1&2.1jS3.64.160(L&2.166.fit.L6b>NextserygrIPAddress;n.Q.Q,0(QA.QA〕Relayagentipiddress:0.Q.Q,0(QA.QA〕LllEfTtMAZadless3ca：9csdc：5!&：J^：eo(CB：9€SdCE59：39：ED)cllanharthareaddresspadding:6MOMOCiMOMOGMOiXiserverhasinanenoigivenbqdtfilertrfle『imgivenNagiccaakie:DHTPOption:Option;Option;Option:Optian:opciari:option!□pc1an:Option:Padding[5的W(51?DHCPHassJigaT>pa(X。RenewalTimeVaiuekeblndingT1neW'ilueIPAddFBssLeaseTineCulpServerrdHTtlfler(1)SiijiieiMisk(3)RDuTeri：6)DLflilnNdneserver(355)End至此，客户端从DHCP服务器获取了IP地址。5、通过捕捉smtp协议包捕捉邮箱密码.rprara-c1^33b>Te5*n>Hrtpbyta；caprurCTl)■.官Ehflimli-Sr£!^：B!>C!<t：!ra!2t!44=dC!£■：.!2b!D-A),CST!Mg好亡一。】！七!千白fiflO-S02!Of!fi?:*6Ifii)，inimmfieM口t白芒。t.ir-J1^7