H Hex Packet Decoder

10,811,593 packets decoded

10.1.1.12 → 10.1.1.11 TCP 22 → 59596 [ACK]

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
02	00	00	00	23	F0	00	50	56	67	5A	75	08	00	45	08
00	7A	00	00	40	00	40	11	91	09	C0	A8	14	06	C0	A8
14	0B	DE	6F	17	C1	00	66	26	AF	02	00	65	58	01	0C
00	00	01	04	00	01	00	8C	01	00	00	50	56	BF	44	5E
00	50	56	BF	43	8D	08	00	45	08	00	40	1B	02	40	00
40	06	09	96	0A	01	01	0C	0A	01	01	0B	00	16	E8	CC
57	BB	86	56	41	49	BC	AD	B0	10	04	EB	16	4B	00	00
01	01	08	0A	D4	C8	24	C8	47	50	80	E0	01	01	05	0A
41	49	D3	4D	41	49	D8	F5

7 protocols in packet (136 bytes):

Ethernet

IPv4

UDP

GENEVE

Ethernet

IPv4

TCP

Frame 1: 136 bytes on wire (1088 bits)
- Section number: 1
- Interface id: 0 (Interface, hpd0)
  - Interface name: Interface, hpd0
- Encapsulation type: Ethernet (1)
- Arrival Time: Mar 10, 2026 15:35:41.000001000 CET
- UTC Arrival Time: Mar 10, 2026 14:35:41.000001000 UTC
- Epoch Arrival Time: 1773153341.000001000
- Time shift for this packet: 0.000000000 seconds
- Time delta from previous captured frame: 0.000000000 seconds
- Time delta from previous displayed frame: 0.000000000 seconds
- Time since reference or first frame: 0.000000000 seconds
- Frame Number: 1
- Frame Length: 136 bytes (1088 bits)
- Capture Length: 136 bytes (1088 bits)
- Frame is marked: False
- Frame is ignored: False
- Protocols in frame: eth:ethertype:ip:udp:geneve:eth:ethertype:ip:tcp
Ethernet II
- Destination: 02:00:00:00:23:f0 (02:00:00:00:23:f0)
  - .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: VMware_67:5a:75 (00:50:56:67:5a:75)
  - .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv4 (0x0800)
- Stream index: 0
Internet Protocol Version 4
- 0100 .... = Version: 4
- .... 0101 = Header Length: 20 bytes (5)
- Differentiated Services Field: 0x08 (DSCP: Unknown, ECN: Not-ECT)
  - 0000 10.. = Differentiated Services Codepoint: Unknown (2)
  - .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- Total Length: 122
- Identification: 0x0000 (0)
- 010. .... = Flags: 0x2, Don't fragment
  - 0... .... = Reserved bit: Not set
  - .1.. .... = Don't fragment: Set
  - ..0. .... = More fragments: Not set
- ...0 0000 0000 0000 = Fragment Offset: 0
- Time to Live: 64
- Protocol: UDP (17)
- Header Checksum: 0x9109 [correct]
- Header checksum status: Good
- Calculated Checksum: 0x9109
- Source Address: 192.168.20.6
- Destination Address: 192.168.20.11
- Stream index: 0
User Datagram Protocol
- Source Port: 56943
- Destination Port: 6081
- Length: 102
- Checksum: 0x26af [correct]
  - Calculated Checksum: 0x26af
- Checksum Status: Good
- Stream index: 0
- Stream Packet Number: 1
- Timestamps
  - Time since first frame: 0.000000000 seconds
  - Time since previous frame: 0.000000000 seconds
- UDP payload (94 bytes)
Generic Network Virtualization Encapsulation
- Version: 0
- Length: 8 bytes
- Flags: 0x00
  - 0... .... = Operations, Administration and Management Frame: False
  - .0.. .... = Critical Options Present: False
  - ..00 0000 = Reserved: False
- Protocol Type: Transparent Ethernet bridging (0x6558)
- Virtual Network Identifier (VNI): 0x010c00 (68608)
- Options: (8 bytes)
  - Unknown, Class: VMware (0x0104) Type: 0x00 (Non-critical)
    - Class: VMware (0x0104)
    - Type: 0x00 (Non-critical)
    - Length: 8 bytes
    - Unknown Option Data: 008c0100
Ethernet II
- Destination: VMware_bf:44:5e (00:50:56:bf:44:5e)
  - .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: VMware_bf:43:8d (00:50:56:bf:43:8d)
  - .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv4 (0x0800)
- Stream index: 1
Internet Protocol Version 4
- 0100 .... = Version: 4
- .... 0101 = Header Length: 20 bytes (5)
- Differentiated Services Field: 0x08 (DSCP: Unknown, ECN: Not-ECT)
  - 0000 10.. = Differentiated Services Codepoint: Unknown (2)
  - .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- Total Length: 64
- Identification: 0x1b02 (6914)
- 010. .... = Flags: 0x2, Don't fragment
  - 0... .... = Reserved bit: Not set
  - .1.. .... = Don't fragment: Set
  - ..0. .... = More fragments: Not set
- ...0 0000 0000 0000 = Fragment Offset: 0
- Time to Live: 64
- Protocol: TCP (6)
- Header Checksum: 0x0996 [correct]
- Header checksum status: Good
- Calculated Checksum: 0x0996
- Source Address: 10.1.1.12
- Destination Address: 10.1.1.11
- Stream index: 1
Transmission Control Protocol
- Source Port: 22
- Destination Port: 59596
- Stream index: 0
- Stream Packet Number: 1
- Conversation completeness: Incomplete (0)
  - ..0. .... = RST: Absent
  - ...0 .... = FIN: Absent
  - .... 0... = Data: Absent
  - .... .0.. = ACK: Absent
  - .... ..0. = SYN-ACK: Absent
  - .... ...0 = SYN: Absent
  - Completeness Flags: [ Null ]
- TCP Segment Len: 0
- Sequence Number: 0x57bb8656
- Sequence Number (raw): 1471907414
- Next Sequence Number: 1
- Acknowledgment Number: 0x4149bcad
- Acknowledgment number (raw): 1095351469
- 1011 .... = Header Length: 44 bytes (11)
- Flags: 0x010 (ACK)
  - 000. .... .... = Reserved: Not set
  - ...0 .... .... = Accurate ECN: Not set
  - .... 0... .... = Congestion Window Reduced: Not set
  - .... .0.. .... = ECN-Echo: Not set
  - .... ..0. .... = Urgent: Not set
  - .... ...1 .... = Acknowledgment: Set
  - .... .... 0... = Push: Not set
  - .... .... .0.. = Reset: Not set
  - .... .... ..0. = Syn: Not set
  - .... .... ...0 = Fin: Not set
  - TCP Flags: ·······A····
- Window: 1259
- Calculated window size: 1259
- Window size scaling factor: -1 (unknown)
- Checksum: 0x164b [correct] (matches partial checksum, not 0x701f, likely caused by "TCP checksum offload")
  - Expert Info (Note/Checksum): Partial (pseudo header) checksum (likely caused by "TCP checksum offload")
    - Partial (pseudo header) checksum (likely caused by "TCP checksum offload")
    - Severity level: Note
    - Group: Checksum
  - Calculated Checksum: 0x701f
- Checksum Status: Good
- Urgent Pointer: 0
- Options: (24 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps, No-Operation (NOP), No-Operation (NOP), SACK
  - TCP Option - No-Operation (NOP)
    - Kind: No-Operation (1)
  - TCP Option - No-Operation (NOP)
    - Kind: No-Operation (1)
  - TCP Option - Timestamps: TSval 3569886408, TSecr 1196458208
    - Kind: Time Stamp Option (8)
    - Length: 10
    - Timestamp value: 3569886408
    - Timestamp echo reply: 1196458208
  - TCP Option - No-Operation (NOP)
    - Kind: No-Operation (1)
  - TCP Option - No-Operation (NOP)
    - Kind: No-Operation (1)
  - TCP Option - SACK 5793-7241
    - Kind: SACK (5)
    - Length: 10
    - left edge = 5793 (relative)
    - right edge = 7241 (relative)
    - TCP SACK Count: 1
- Timestamps
  - Time since first frame in this TCP stream: 0.000000000 seconds
  - Time since previous frame in this TCP stream: 0.000000000 seconds

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
02	00	00	00	23	F0	00	50	56	67	5A	75	08	00	45	08
00	7A	00	00	40	00	40	11	91	09	C0	A8	14	06	C0	A8
14	0B	DE	6F	17	C1	00	66	26	AF	02	00	65	58	01	0C
00	00	01	04	00	01	00	8C	01	00	00	50	56	BF	44	5E
00	50	56	BF	43	8D	08	00	45	08	00	40	1B	02	40	00
40	06	09	96	0A	01	01	0C	0A	01	01	0B	00	16	E8	CC
57	BB	86	56	41	49	BC	AD	B0	10	04	EB	16	4B	00	00
01	01	08	0A	D4	C8	24	C8	47	50	80	E0	01	01	05	0A
41	49	D3	4D	41	49	D8	F5

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
02	00	00	00	23	F0	00	50	56	67	5A	75	08	00	45	08
00	7A	00	00	40	00	40	11	91	09	C0	A8	14	06	C0	A8
14	0B	DE	6F	17	C1	00	66	26	AF	02	00	65	58	01	0C
00	00	01	04	00	01	00	8C	01	00	00	50	56	BF	44	5E
00	50	56	BF	43	8D	08	00	45	08	00	40	1B	02	40	00
40	06	09	96	0A	01	01	0C	0A	01	01	0B	00	16	E8	CC
57	BB	86	56	41	49	BC	AD	B0	10	04	EB	16	4B	00	00
01	01	08	0A	D4	C8	24	C8	47	50	80	E0	01	01	05	0A
41	49	D3	4D	41	49	D8	F5

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
02	00	00	00	23	F0	00	50	56	67	5A	75	08	00	45	08
00	7A	00	00	40	00	40	11	91	09	C0	A8	14	06	C0	A8
14	0B	DE	6F	17	C1	00	66	26	AF	02	00	65	58	01	0C
00	00	01	04	00	01	00	8C	01	00	00	50	56	BF	44	5E
00	50	56	BF	43	8D	08	00	45	08	00	40	1B	02	40	00
40	06	09	96	0A	01	01	0C	0A	01	01	0B	00	16	E8	CC
57	BB	86	56	41	49	BC	AD	B0	10	04	EB	16	4B	00	00
01	01	08	0A	D4	C8	24	C8	47	50	80	E0	01	01	05	0A
41	49	D3	4D	41	49	D8	F5