-
Notifications
You must be signed in to change notification settings - Fork 4
Examples
himanshu edited this page Aug 28, 2023
·
19 revisions
Below is the workflow to get started on using a module and the respective sub-modules.
To invoke a module from the primary menu, use the index numbers denoted next to the module name.
$ sudo python3 byteosaurus_hex.py
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7):For example to invoke the VXLAN module
- Press
5then hitEnter - Provide the number of flows you want to build, minimum 1 flow is required.
- For each flow you will have the option to select the:
- Number / count of packets to send
- Egress / Outgoing interface from which the packets will be sent.
- For each flow you will have the option to select the:
- Select the sub-module from the menu option.
$ sudo python3 byteosaurus_hex.py
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 5
Enter the number of flows > 2
Building flow number [ 1 ]:
Packet Type:
1 -- Vxlan - Inner ICMP
2 -- Vxlan - Inner UDP
3 -- Vxlan - Inner TCP
4 -- Vxlan - Inner ARP
Enter your choice (1-3) > 1
Generate random Vxlan ICMP Packet? (y/n) >For detailed examples per module, please refer to the module specific documentation.
The ICMP module allows users to generate following ICMP packets:
- ICMP Echo Request
- ICMP Echo Response
This module supports:
- Multiple flows
- Packet count & Outgoing interface per flow
- Random automated packet generation
- Full manual packet generation
- Adding VLAN tags
Random packet generation
Reveal Output
$ sudo python3 byteosaurus_hex.py
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 1
Enter the number of flows > 1
Building flow number [ 1 ]:
Random ICMP Packet? (y/n) > y
ICMP Type (req/reply) > req
Count (c for continous) > 5
Source Interface > et48
2023-08-27 09:24:03,984: INFO: ICMP packet built
###[ Ethernet ]###
dst = e1:5e:04:ef:37:6f
src = c4:ca:2b:b1:f6:39
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0x0
len = None
id = 1
flags =
frag = 0
ttl = 162
proto = icmp
chksum = None
src = 172.17.229.151
dst = 172.29.92.217
\options \
###[ ICMP ]###
type = echo-request
code = 0
chksum = None
id = 0x5ff
seq = 0x0
unused = ''
###[ Raw ]###
load = 'Ȭ8Ԃ\\xd3~\x1dυ\\xfb\\xbfǜ\\xd7H\\x8c\\xeb\\xd8,\\x87\\x90R\\xbbfLj5k\\xe1\\xbe}\\xd6/aa\\xc7\\xfd>U7\\xeaT\\x92_\\xb5l\\x9c\\xaem\\xd9\\xeb\\xf7\\xe7lv5\\x8f\\xebؕ 2_'
2023-08-27 09:24:03,985: INFO: Sending out all flows
2023-08-27 09:24:04,030: INFO: Done sending all flows
2023-08-27 09:24:04,063: INFO: Module completedReveal Packet
Ethernet II, Src: AristaNe_b1:f6:39 (c4:ca:2b:b1:f6:39), Dst: e1:5e:04:ef:37:6f (e1:5e:04:ef:37:6f)
Destination: e1:5e:04:ef:37:6f (e1:5e:04:ef:37:6f)
Source: AristaNe_b1:f6:39 (c4:ca:2b:b1:f6:39)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 172.17.229.151, Dst: 172.29.92.217
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 92
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 162
Protocol: ICMP (1)
Header Checksum: 0x7e00 [validation disabled]
[Header checksum status: Unverified]
Source Address: 172.17.229.151
Destination Address: 172.29.92.217
Internet Control Message Protocol
Type: 8 (Echo (ping) request)
Code: 0
Checksum: 0xdecb [correct]
[Checksum Status: Good]
Identifier (BE): 1535 (0x05ff)
Identifier (LE): 65285 (0xff05)
Sequence Number (BE): 0 (0x0000)
Sequence Number (LE): 0 (0x0000)
[No response seen]
Data (64 bytes)Manual packet generation with VLAN Tag
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 1
Enter the number of flows > 1
Building flow number [ 1 ]:
Random ICMP Packet? (y/n) > n
ICMP Type (req/reply) > reply
Source MAC (de:ad:be:ef:ca:fe) > 00:1c:58:23:64:c1
Destination MAC > 00:15:62:64:33:41
Source IP > 192.168.14.10
Destination IP > 192.168.14.20
TTL > 10
Tag (y/n) > y
VLAN Tag (x,y) > 1,20
Count (c for continous) > 5
Source Interface > et48
2023-08-27 09:49:54,678: INFO: ICMP Packet built
###[ Ethernet ]###
dst = 00:15:62:64:33:41
src = 00:1c:58:23:64:c1
type = n_802_1Q
###[ 802.1Q ]###
prio = 0
id = 0
vlan = 1
type = n_802_1Q
###[ 802.1Q ]###
prio = 0
id = 0
vlan = 20
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0x0
len = None
id = 1
flags =
frag = 0
ttl = 10
proto = icmp
chksum = None
src = 192.168.14.10
dst = 192.168.14.20
\options \
###[ ICMP ]###
type = echo-reply
code = 0
chksum = None
id = 0x70c
seq = 0x0
unused = ''
###[ Raw ]###
load = '\\xabqT\\x8a\\x85.fF\\xf64\\xbf:e\\xdcgb\x15\\xa5-\\xfaDZz\\x83\\xfa\\xe6\\xa90\\xd9\\xe0\\xcf\n@\n\x10\\xef\'\\xf9\\xa5\\xd0L\\x80\\xdc\\xc4L"\\xf4\\xf8\x0ef+\\xfb\\xa8_\\xeaꔖ\\x94\x06%\\xe16i'
2023-08-27 09:49:54,679: INFO: Sending out all flows
2023-08-27 09:49:54,730: INFO: Done sending all flows
2023-08-27 09:49:54,762: INFO: Module completedReveal Packet
Ethernet II, Src: Cisco_23:64:c1 (00:1c:58:23:64:c1), Dst: Cisco_64:33:41 (00:15:62:64:33:41)
Destination: Cisco_64:33:41 (00:15:62:64:33:41)
Source: Cisco_23:64:c1 (00:1c:58:23:64:c1)
Type: 802.1Q Virtual LAN (0x8100)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 1
000. .... .... .... = Priority: Best Effort (default) (0)
...0 .... .... .... = DEI: Ineligible
.... 0000 0000 0001 = ID: 1
Type: 802.1Q Virtual LAN (0x8100)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 20
000. .... .... .... = Priority: Best Effort (default) (0)
...0 .... .... .... = DEI: Ineligible
.... 0000 0001 0100 = ID: 20
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.14.10, Dst: 192.168.14.20
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 92
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 10
Protocol: ICMP (1)
Header Checksum: 0x1332 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.14.10
Destination Address: 192.168.14.20
Internet Control Message Protocol
Type: 0 (Echo (ping) reply)
Code: 0
Checksum: 0xdc45 [correct]
[Checksum Status: Good]
Identifier (BE): 1804 (0x070c)
Identifier (LE): 3079 (0x0c07)
Sequence Number (BE): 0 (0x0000)
Sequence Number (LE): 0 (0x0000)
Data (64 bytes)The ARP module allows users to generate following ARP packets:
- ARP Request
- ARP Reply
This module supports:
- Multiple flows
- Packet count & Outgoing interface per flow
- Random automated packet generation
- Full manual packet generation
- Adding VLAN tags
Random packet generation
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 2
Enter the number of flows > 1
Building flow number [ 1 ]:
Generate random ARP Packet? (y/n) > y
ARP Type (req/resp) > req
Count (c for continous) > 5
Source Interface > et48
2023-08-27 10:22:42,431: INFO: ARP packet built
###[ Ethernet ]###
dst = ff:ff:ff:ff:ff:ff
src = c4:ca:2b:b1:f6:39
type = ARP
###[ ARP ]###
hwtype = Ethernet (10Mb)
ptype = IPv4
hwlen = None
plen = None
op = who-has
hwsrc = c4:ca:2b:b1:f6:39
psrc = 172.30.244.205
hwdst = 00:00:00:00:00:00
pdst = 172.16.68.167
2023-08-27 10:22:42,432: INFO: Sending out all flows
2023-08-27 10:22:42,474: INFO: Done sending all flows
2023-08-27 10:22:42,509: INFO: Module completedReveal Packet
Ethernet II, Src: AristaNe_b1:f6:39 (c4:ca:2b:b1:f6:39), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Destination: Broadcast (ff:ff:ff:ff:ff:ff)
Source: AristaNe_b1:f6:39 (c4:ca:2b:b1:f6:39)
Type: ARP (0x0806)
Address Resolution Protocol (request)
Hardware type: Ethernet (1)
Protocol type: IPv4 (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (1)
Sender MAC address: AristaNe_b1:f6:39 (c4:ca:2b:b1:f6:39)
Sender IP address: 172.30.244.205
Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
Target IP address: 172.16.68.167Manual packet generation with VLAN Tag
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 2
Enter the number of flows > 1
Building flow number [ 1 ]:
Generate random ARP Packet? (y/n) > n
ARP Type (req/resp) > resp
Source MAC (de:ad:be:ef:ca:fe) > 00:1d:09:f0:92:ab
Destination MAC > 00:1a:6b:6c:0c:cc
Sender MAC > 00:1d:09:f0:92:ab
Sender IP > 10.10.10.1
Target MAC > 00:1a:6b:6c:0c:cc
Target IP > 10.10.10.2
Tag (y/n) > y
VLAN Tag (x,y) > 20
Count (c for continous) > 5
Source Interface > et48
2023-08-27 10:27:29,750: INFO: ARP packet built
###[ Ethernet ]###
dst = 00:1a:6b:6c:0c:cc
src = 00:1d:09:f0:92:ab
type = n_802_1Q
###[ 802.1Q ]###
prio = 0
id = 0
vlan = 20
type = ARP
###[ ARP ]###
hwtype = Ethernet (10Mb)
ptype = IPv4
hwlen = None
plen = None
op = is-at
hwsrc = 00:1d:09:f0:92:ab
psrc = 10.10.10.1
hwdst = 00:1a:6b:6c:0c:cc
pdst = 10.10.10.2
2023-08-27 10:27:29,751: INFO: Sending out all flows
2023-08-27 10:27:29,802: INFO: Done sending all flows
2023-08-27 10:27:29,835: INFO: Module completedReveal Packet
Ethernet II, Src: Dell_f0:92:ab (00:1d:09:f0:92:ab), Dst: Universa_6c:0c:cc (00:1a:6b:6c:0c:cc)
Destination: Universa_6c:0c:cc (00:1a:6b:6c:0c:cc)
Source: Dell_f0:92:ab (00:1d:09:f0:92:ab)
Type: 802.1Q Virtual LAN (0x8100)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 20
000. .... .... .... = Priority: Best Effort (default) (0)
...0 .... .... .... = DEI: Ineligible
.... 0000 0001 0100 = ID: 20
Type: ARP (0x0806)
Address Resolution Protocol (reply)
Hardware type: Ethernet (1)
Protocol type: IPv4 (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: reply (2)
Sender MAC address: Dell_f0:92:ab (00:1d:09:f0:92:ab)
Sender IP address: 10.10.10.1
Target MAC address: Universa_6c:0c:cc (00:1a:6b:6c:0c:cc)
Target IP address: 10.10.10.2The IGMP module allows users to generate following IGMP packets:
- v1
- Membership Query
- Membership Report
- v2
- Membership Query, General
- Membership Query, Group-Specific
- Membership Report
- Leave Group
- v3
- Membership Query, General
- Membership Query, Group-Specific
- Membership Query, Group-and-Source-Specific
- Membership Report
- Leave Group
This module supports:
- Multiple flows
- Packet count & Outgoing interface per flow
- Adding VLAN tags
Membership Query
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v1
IGMP Message Type:
1 -- Membership Query
2 -- Membership Report
Enter your choice (1-2) > 1
Sender MAC (de:ad:be:ef:ca:fe) > c4:ca:2b:b1:f6:39
Sender IP > 192.168.14.10
Tag (y/n) > n
Count (c for continous) > 5
Source Interface > et48
2023-08-27 10:39:04,770: INFO: IGMPv1 Membership Query Built
###[ Ethernet ]###
dst = 01:00:5e:00:00:01
src = c4:ca:2b:b1:f6:39
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0x0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.14.10
dst = 224.0.0.1
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMP ]###
type = Group Membership Query
mrcode = 0
chksum = None
gaddr = 0.0.0.0
2023-08-27 10:39:04,772: INFO: Sending out all flows
2023-08-27 10:39:04,814: INFO: Done sending all flows
2023-08-27 10:39:04,848: INFO: Module completedReveal Packet
Ethernet II, Src: AristaNe_b1:f6:39 (c4:ca:2b:b1:f6:39), Dst: IPv4mcast_01 (01:00:5e:00:00:01)
Destination: IPv4mcast_01 (01:00:5e:00:00:01)
Source: AristaNe_b1:f6:39 (c4:ca:2b:b1:f6:39)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.14.10, Dst: 224.0.0.1
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 32
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x7623 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.14.10
Destination Address: 224.0.0.1
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 1]
Type: Membership Query (0x11)
Reserved: 00
Checksum: 0xeeff [correct]
[Checksum Status: Good]
Multicast Address: 0.0.0.0Membership Report
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v1
IGMP Message Type:
1 -- Membership Query
2 -- Membership Report
Enter your choice (1-2) > 2
Sender MAC (de:ad:be:ef:ca:fe) > fa:16:3e:35:d1:43
Sender IP > 192.168.14.20
Multicast Address > 239.1.1.1
Tag (y/n) > y
VLAN Tag (x,y) > 10
Count (c for continous) > 5
Source Interface > et48
2023-08-27 10:43:11,658: INFO: IGMPv1 Membership Report
###[ Ethernet ]###
dst = 01:00:5e:01:01:01
src = fa:16:3e:35:d1:43
type = n_802_1Q
###[ 802.1Q ]###
prio = 0
id = 0
vlan = 10
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0x0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.14.20
dst = 239.1.1.1
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMP ]###
type = Version 1 - Membership Report
mrcode = 0
chksum = None
gaddr = 239.1.1.1
2023-08-27 10:43:11,659: INFO: Sending out all flows
2023-08-27 10:43:11,698: INFO: Done sending all flows
2023-08-27 10:43:11,733: INFO: Module completedReveal Packet
Ethernet II, Src: fa:16:3e:35:d1:43 (fa:16:3e:35:d1:43), Dst: IPv4mcast_01:01:01 (01:00:5e:01:01:01)
Destination: IPv4mcast_01:01:01 (01:00:5e:01:01:01)
Source: fa:16:3e:35:d1:43 (fa:16:3e:35:d1:43)
Type: 802.1Q Virtual LAN (0x8100)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 10
000. .... .... .... = Priority: Best Effort (default) (0)
...0 .... .... .... = DEI: Ineligible
.... 0000 0000 1010 = ID: 10
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.14.20, Dst: 239.1.1.1
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 32
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x6618 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.14.20
Destination Address: 239.1.1.1
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 1]
Type: Membership Report (0x12)
Reserved: 00
Checksum: 0xfdfc [correct]
[Checksum Status: Good]
Multicast Address: 239.1.1.1Membership Query, General
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v2
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Report
4 -- Leave Group
Enter your choice (1-4) > 1
Sender MAC (de:ad:be:ef:ca:fe) > 00:1b:11:10:26:11
Sender IP > 192.168.1.2
Tag (y/n) > n
Count (c for continous) > 5
Source Interface > et48
2023-08-28 11:48:45,172: INFO: IGMPv2 Membership Query Built
###[ Ethernet ]###
dst = 01:00:5e:00:00:01
src = 00:1b:11:10:26:11
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0x0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.1.2
dst = 224.0.0.1
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMP ]###
type = Group Membership Query
mrcode = 20
chksum = None
gaddr = 0.0.0.0
2023-08-28 11:48:45,173: INFO: Sending out all flows
2023-08-28 11:48:45,214: INFO: Done sending all flows
2023-08-28 11:48:45,249: INFO: Module completedReveal Packet
Ethernet II, Src: D-Link_10:26:11 (00:1b:11:10:26:11), Dst: IPv4mcast_01 (01:00:5e:00:00:01)
Destination: IPv4mcast_01 (01:00:5e:00:00:01)
Source: D-Link_10:26:11 (00:1b:11:10:26:11)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.2, Dst: 224.0.0.1
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 32
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x832b [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.2
Destination Address: 224.0.0.1
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 2]
Type: Membership Query (0x11)
Max Resp Time: 2.0 sec (0x14)
Checksum: 0xeeeb [correct]
[Checksum Status: Good]
Multicast Address: 0.0.0.0Membership Query, Group-Specific
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v2
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Report
4 -- Leave Group
Enter your choice (1-4) > 2
Sender MAC (de:ad:be:ef:ca:fe) > 00:1b:11:10:26:11
Sender IP > 192.168.1.3
Multicast Address > 239.255.255.240
Tag (y/n) > y
VLAN Tag (x,y) > 10
Count (c for continous) > 5
Source Interface > et48
2023-08-28 11:51:27,134: INFO: IGMPv2 Membership Query, Group specific
###[ Ethernet ]###
dst = 01:00:5e:7f:ff:f0
src = 00:1b:11:10:26:11
type = n_802_1Q
###[ 802.1Q ]###
prio = 0
id = 0
vlan = 10
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0x0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.1.3
dst = 239.255.255.240
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMP ]###
type = Group Membership Query
mrcode = 20
chksum = None
gaddr = 239.255.255.240
2023-08-28 11:51:27,135: INFO: Sending out all flows
2023-08-28 11:51:27,182: INFO: Done sending all flows
2023-08-28 11:51:27,219: INFO: Module completedReveal Packet
Frame 24: 50 bytes on wire (400 bits), 50 bytes captured (400 bits) on interface -, id 0
Ethernet II, Src: D-Link_10:26:11 (00:1b:11:10:26:11), Dst: IPv4mcast_7f:ff:f0 (01:00:5e:7f:ff:f0)
Destination: IPv4mcast_7f:ff:f0 (01:00:5e:7f:ff:f0)
Source: D-Link_10:26:11 (00:1b:11:10:26:11)
Type: 802.1Q Virtual LAN (0x8100)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 10
Internet Protocol Version 4, Src: 192.168.1.3, Dst: 239.255.255.240
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 32
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x733b [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.3
Destination Address: 239.255.255.240
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 2]
Type: Membership Query (0x11)
Max Resp Time: 2.0 sec (0x14)
Checksum: 0xfefa [correct]
[Checksum Status: Good]
Multicast Address: 239.255.255.240Membership Report
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v2
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Report
4 -- Leave Group
Enter your choice (1-4) > 3
Sender MAC (de:ad:be:ef:ca:fe) > 00:1b:11:10:26:11
Sender IP > 192.168.1.3
Multicast Address > 225.1.1.4
Tag (y/n) > n
Count (c for continous) > 5
Source Interface > et48
2023-08-28 11:55:05,699: INFO: IGMPv2 Membership Report
###[ Ethernet ]###
dst = 01:00:5e:01:01:04
src = 00:1b:11:10:26:11
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0x0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.1.3
dst = 225.1.1.4
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMP ]###
type = Version 2 - Membership Report
mrcode = 0
chksum = None
gaddr = 225.1.1.4
2023-08-28 11:55:05,699: INFO: Sending out all flows
2023-08-28 11:55:05,738: INFO: Done sending all flows
2023-08-28 11:55:05,770: INFO: Module completedReveal Packet
Ethernet II, Src: D-Link_10:26:11 (00:1b:11:10:26:11), Dst: IPv4mcast_01:01:04 (01:00:5e:01:01:04)
Destination: IPv4mcast_01:01:04 (01:00:5e:01:01:04)
Source: D-Link_10:26:11 (00:1b:11:10:26:11)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.3, Dst: 225.1.1.4
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 32
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x8126 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.3
Destination Address: 225.1.1.4
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 2]
Type: Membership Report (0x16)
Max Resp Time: 0.0 sec (0x00)
Checksum: 0x07fa [correct]
[Checksum Status: Good]
Multicast Address: 225.1.1.4Leave Group
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v2
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Report
4 -- Leave Group
Enter your choice (1-4) > 4
Sender MAC (de:ad:be:ef:ca:fe) > 00:1b:11:10:26:11
Sender IP > 192.168.1.5
Multicast Address > 225.1.1.4
Tag (y/n) > y
VLAN Tag > 20
Count (c for continous) > 5
Source Interface > et48
2023-08-28 11:57:04,380: INFO: IGMPv2 Leave Message
###[ Ethernet ]###
dst = 01:00:5e:00:00:02
src = 00:1b:11:10:26:11
type = n_802_1Q
###[ 802.1Q ]###
prio = 0
id = 0
vlan = 20
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0x0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.1.5
dst = 224.0.0.2
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMP ]###
type = Leave Group
mrcode = 0
chksum = None
gaddr = 225.1.1.4
2023-08-28 11:57:04,381: INFO: Sending out all flows
2023-08-28 11:57:04,454: INFO: Done sending all flows
2023-08-28 11:57:04,487: INFO: Module completedReveal Packet
Ethernet II, Src: D-Link_10:26:11 (00:1b:11:10:26:11), Dst: IPv4mcast_02 (01:00:5e:00:00:02)
Destination: IPv4mcast_02 (01:00:5e:00:00:02)
Source: D-Link_10:26:11 (00:1b:11:10:26:11)
Type: 802.1Q Virtual LAN (0x8100)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 20
000. .... .... .... = Priority: Best Effort (default) (0)
...0 .... .... .... = DEI: Ineligible
.... 0000 0001 0100 = ID: 20
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.5, Dst: 224.0.0.2
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
Total Length: 32
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x8327 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.5
Destination Address: 224.0.0.2
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 2]
Type: Leave Group (0x17)
Max Resp Time: 0.0 sec (0x00)
Checksum: 0x06fa [correct]
[Checksum Status: Good]
Multicast Address: 225.1.1.4Membership Query, General
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v3
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Query, Group-and-Source-Specific
4 -- Membership Report
5 -- Leave Group
Enter your choice (1-5) > 1
Sender MAC (de:ad:be:ef:ca:fe) > 00:26:44:6c:1e:da
Sender IP > 192.168.1.25
Tag (y/n) > n
Count (c for continous) > 5
Source Interface > et48
2023-08-28 12:10:34,991: INFO: IGMPv3 Membership Query Built
###[ Ethernet ]###
dst = 01:00:5e:00:00:01
src = 00:26:44:6c:1e:da
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0xc0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.1.25
dst = 224.0.0.1
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMPv3 ]###
type = Membership Query
mrcode = 20
chksum = None
###[ IGMPv3mq ]###
gaddr = 0.0.0.0
resv = 0
s = 0
qrv = 0
qqic = 0
numsrc = None
srcaddrs = []
2023-08-28 12:10:34,992: INFO: Sending out all flows
2023-08-28 12:10:35,038: INFO: Done sending all flows
2023-08-28 12:10:35,071: INFO: Module completedReveal Packet
Ethernet II, Src: ThomsonT_6c:1e:da (00:26:44:6c:1e:da), Dst: IPv4mcast_01 (01:00:5e:00:00:01)
Destination: IPv4mcast_01 (01:00:5e:00:00:01)
Source: ThomsonT_6c:1e:da (00:26:44:6c:1e:da)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.25, Dst: 224.0.0.1
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
Total Length: 36
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x8250 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.25
Destination Address: 224.0.0.1
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 3]
Type: Membership Query (0x11)
Max Resp Time: 2.0 sec (0x14)
Checksum: 0xeeeb [correct]
[Checksum Status: Good]
Multicast Address: 0.0.0.0
.... 0... = S: Do not suppress router side processing
.... .000 = QRV: 0
QQIC: 0
Num Src: 0Membership Query, Group-Specific
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v3
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Query, Group-and-Source-Specific
4 -- Membership Report
5 -- Leave Group
Enter your choice (1-5) > 2
Sender MAC (de:ad:be:ef:ca:fe) > 00:1b:11:10:26:11
Sender IP > 192.168.12.10
Multicast Address > 225.1.1.3
Tag (y/n) > n
Count (c for continous) > 5
Source Interface > et48
2023-08-28 12:12:46,734: INFO: IGMPv3 Membership Query, Group specific
###[ Ethernet ]###
dst = 01:00:5e:01:01:03
src = 00:1b:11:10:26:11
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0xc0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.12.10
dst = 225.1.1.3
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMPv3 ]###
type = Membership Query
mrcode = 20
chksum = None
###[ IGMPv3mq ]###
gaddr = 225.1.1.3
resv = 0
s = 0
qrv = 0
qqic = 0
numsrc = None
srcaddrs = []
2023-08-28 12:12:46,735: INFO: Sending out all flows
2023-08-28 12:12:46,794: INFO: Done sending all flows
2023-08-28 12:12:46,827: INFO: Module completedReveal Packet
Ethernet II, Src: D-Link_10:26:11 (00:1b:11:10:26:11), Dst: IPv4mcast_01:01:03 (01:00:5e:01:01:03)
Destination: IPv4mcast_01:01:03 (01:00:5e:01:01:03)
Source: D-Link_10:26:11 (00:1b:11:10:26:11)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.12.10, Dst: 225.1.1.3
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
Total Length: 36
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x755c [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.12.10
Destination Address: 225.1.1.3
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 3]
Type: Membership Query (0x11)
Max Resp Time: 2.0 sec (0x14)
Checksum: 0x0ce7 [correct]
[Checksum Status: Good]
Multicast Address: 225.1.1.3
.... 0... = S: Do not suppress router side processing
.... .000 = QRV: 0
QQIC: 0
Num Src: 0Membership Query, Group-and-Source-Specific
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v3
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Query, Group-and-Source-Specific
4 -- Membership Report
5 -- Leave Group
Enter your choice (1-5) > 3
Sender MAC (de:ad:be:ef:ca:fe) > fa:16:3e:e4:d3:de
Sender IP > 192.168.1.1
Multicast Address > 239.1.1.1
Source Address > 1.1.1.1
Tag (y/n) > n
Count (c for continous) > 5
Source Interface > et48
2023-08-28 12:15:35,469: INFO: IGMPv3 Membership Query, Group & Source specific
###[ Ethernet ]###
dst = 01:00:5e:01:01:01
src = fa:16:3e:e4:d3:de
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0xc0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.1.1
dst = 239.1.1.1
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMPv3 ]###
type = Membership Query
mrcode = 20
chksum = None
###[ IGMPv3mq ]###
gaddr = 239.1.1.1
resv = 0
s = 0
qrv = 0
qqic = 0
numsrc = 1
srcaddrs = [1.1.1.1]
2023-08-28 12:15:35,470: INFO: Sending out all flows
2023-08-28 12:15:35,514: INFO: Done sending all flows
2023-08-28 12:15:35,548: INFO: Module completedReveal Packet
Ethernet II, Src: fa:16:3e:e4:d3:de (fa:16:3e:e4:d3:de), Dst: IPv4mcast_01:01:01 (01:00:5e:01:01:01)
Destination: IPv4mcast_01:01:01 (01:00:5e:01:01:01)
Source: fa:16:3e:e4:d3:de (fa:16:3e:e4:d3:de)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.1, Dst: 239.1.1.1
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
Total Length: 40
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x7263 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.1
Destination Address: 239.1.1.1
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 3]
Type: Membership Query (0x11)
Max Resp Time: 2.0 sec (0x14)
Checksum: 0xfce5 [correct]
[Checksum Status: Good]
Multicast Address: 239.1.1.1
.... 0... = S: Do not suppress router side processing
.... .000 = QRV: 0
QQIC: 0
Num Src: 1
Source Address: 1.1.1.1Membership Report
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v3
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Query, Group-and-Source-Specific
4 -- Membership Report
5 -- Leave Group
Enter your choice (1-5) > 4
Sender MAC (de:ad:be:ef:ca:fe) > 00:25:2e:51c3:81
Sender IP > 192.168.1.6
Tag (y/n) > n
Number of group records > 1
Group record 1:
Multicast Address > 239.255.255.250
Record Type:
1 -- Mode Is Include
2 -- Mode Is Exclude
3 -- Change To Include Mode
4 -- Change To Exclude Mode
5 -- Allow New Sources
6 -- Block Old Sources
Enter your choice (1-6) > 1
Source addresses (IP1,IP2) > 1.1.1.1
Count (c for continous) > 5
Source Interface > et48
2023-08-28 12:23:14,498: INFO: IGMPv3 Membership Report
###[ Ethernet ]###
dst = 01:00:5e:00:00:16
src = 00:25:2e:51c3:81
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0xc0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.1.6
dst = 224.0.0.22
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMPv3 ]###
type = Version 3 Membership Report
mrcode = 0
chksum = None
###[ IGMPv3mr ]###
res2 = 0x0
numgrp = 1
\records \
|###[ IGMPv3gr ]###
| rtype = Mode Is Include
| auxdlen = 0
| numsrc = 1
| maddr = 239.255.255.250
| srcaddrs = [1.1.1.1]
2023-08-28 12:23:14,500: INFO: Sending out all flows
2023-08-28 12:23:14,546: INFO: Done sending all flows
2023-08-28 12:23:14,580: INFO: Module completedReveal Packet
Ethernet II, Src: 30:30:3a:32:35:3a (30:30:3a:32:35:3a), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Destination: IPv4mcast_16 (01:00:5e:00:00:16)
Source: 30:30:3a:32:35:3a (30:30:3a:32:35:3a)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.6, Dst: 224.0.0.22
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
Total Length: 44
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x8246 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.6
Destination Address: 224.0.0.22
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 3]
Type: Membership Report (0x22)
Reserved: 00
Checksum: 0xeb00 [correct]
[Checksum Status: Good]
Reserved: 0000
Num Group Records: 1
Group Record : 239.255.255.250 Mode Is Include
Record Type: Mode Is Include (1)
Aux Data Len: 0
Num Src: 1
Multicast Address: 239.255.255.250
Source Address: 1.1.1.1Leave Group
Reveal Output
==================================================
Scapy based packet generator
==================================================
1 -- ICMP
2 -- ARP
3 -- IGMP
4 -- Multicast
5 -- VXLAN
6 -- Load PCAP File
7 -- Exit
Enter your choice (1-7): 3
Enter the number of flows > 1
Building flow number [ 1 ]:
IGMP Version (v1/v2/v3) > v3
IGMP Message Type:
1 -- Membership Query, General
2 -- Membership Query, Group-Specific
3 -- Membership Query, Group-and-Source-Specific
4 -- Membership Report
5 -- Leave Group
Enter your choice (1-5) > 5
Sender MAC (de:ad:be:ef:ca:fe) > 00:25:2e:51c3:81
Sender IP > 192.168.1.6
Tag (y/n) > n
Number of group records > 1
Group record 1:
Multicast Address > 239.1.1.1
Source addresses (IP1,IP2) > 1.1.1.1
Count (c for continous) > 5
Source Interface > et48
2023-08-28 12:26:12,015: INFO: IGMPv3 Leave Message
###[ Ethernet ]###
dst = 01:00:5e:00:00:16
src = 00:25:2e:51c3:81
type = IPv4
###[ IP ]###
version = 4
ihl = None
tos = 0xc0
len = None
id = 1
flags =
frag = 0
ttl = 1
proto = igmp
chksum = None
src = 192.168.1.6
dst = 224.0.0.22
\options \
|###[ IP Option Router Alert ]###
| copy_flag = 1
| optclass = control
| option = router_alert
| length = 4
| alert = router_shall_examine_packet
###[ IGMPv3 ]###
type = Version 3 Membership Report
mrcode = 0
chksum = None
###[ IGMPv3mr ]###
res2 = 0x0
numgrp = 1
\records \
|###[ IGMPv3gr ]###
| rtype = Block Old Sources
| auxdlen = 0
| numsrc = 1
| maddr = 239.1.1.1
| srcaddrs = [1.1.1.1]
2023-08-28 12:26:12,016: INFO: Sending out all flows
2023-08-28 12:26:12,074: INFO: Done sending all flows
2023-08-28 12:26:12,109: INFO: Module completedReveal Packet
Ethernet II, Src: 30:30:3a:32:35:3a (30:30:3a:32:35:3a), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Destination: IPv4mcast_16 (01:00:5e:00:00:16)
Source: 30:30:3a:32:35:3a (30:30:3a:32:35:3a)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.1.6, Dst: 224.0.0.22
0100 .... = Version: 4
.... 0110 = Header Length: 24 bytes (6)
Differentiated Services Field: 0xc0 (DSCP: CS6, ECN: Not-ECT)
Total Length: 44
Identification: 0x0001 (1)
000. .... = Flags: 0x0
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 1
Protocol: IGMP (2)
Header Checksum: 0x8246 [validation disabled]
[Header checksum status: Unverified]
Source Address: 192.168.1.6
Destination Address: 224.0.0.22
Options: (4 bytes), Router Alert
Internet Group Management Protocol
[IGMP Version: 3]
Type: Membership Report (0x22)
Reserved: 00
Checksum: 0xe5f8 [correct]
[Checksum Status: Good]
Reserved: 0000
Num Group Records: 1
Group Record : 239.1.1.1 Block Old Sources
Record Type: Block Old Sources (6)
Aux Data Len: 0
Num Src: 1
Multicast Address: 239.1.1.1
Source Address: 1.1.1.1