Hex Packet Decoder

192.168.56.11 → 194.190.124.17 DNS Standard query 0xe4a3 A ns2.highsecure.ru OPT

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
52	54	00	7E	42	A5	52	54	00	A6	11	53	08	00	45	00
00	4A	4A	48	00	00	3F	11	F9	D7	C0	A8	38	0B	C2	BE
7C	11	E7	3E	00	35	00	36	37	CB	E4	A3	00	10	00	01
00	00	00	00	00	01	03	6E	73	32	0A	68	69	67	68	73
65	63	75	72	65	02	72	75	00	00	01	00	01	00	00	29
10	00	00	00	80	00	00	00

4 protocols in packet:

Ethernet

IPv4

UDP

DNS

[+] [-] [XML]

Frame 1: 88 bytes on wire (704 bits)
- Encapsulation type: Ethernet (1)
- Arrival Time: Apr 25, 2019 12:07:59.000000000 CEST
- Time shift for this packet: 0.000000000 seconds
- Epoch Time: 1556186879.000000000 seconds
- Time delta from previous captured frame: 0.000000000 seconds
- Time delta from previous displayed frame: 0.000000000 seconds
- Time since reference or first frame: 0.000000000 seconds
- Frame Number: 1
- Frame Length: 88 bytes (704 bits)
- Capture Length: 88 bytes (704 bits)
- Frame is marked: False
- Frame is ignored: False
- Protocols in frame: eth:ethertype:ip:udp:dns
Ethernet II
- Destination: RealtekU_7e:42:a5 (52:54:00:7e:42:a5)
  - Address: RealtekU_7e:42:a5 (52:54:00:7e:42:a5)
  - .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: RealtekU_a6:11:53 (52:54:00:a6:11:53)
  - Address: RealtekU_a6:11:53 (52:54:00:a6:11:53)
  - .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv4 (0x0800)
Internet Protocol Version 4
- 0100 .... = Version: 4
- .... 0101 = Header Length: 20 bytes (5)
- Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
  - 0000 00.. = Differentiated Services Codepoint: Default (0)
  - .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- Total Length: 74
- Identification: 0x4a48 (19016)
- Flags: 0x0000
  - 0... .... .... .... = Reserved bit: Not set
  - .0.. .... .... .... = Don't fragment: Not set
  - ..0. .... .... .... = More fragments: Not set
  - ...0 0000 0000 0000 = Fragment offset: 0
- Time to live: 63
- Protocol: UDP (17)
- Header checksum: 0xf9d7
- Header checksum status: Unverified
- Source: 192.168.56.11
- Destination: 194.190.124.17
User Datagram Protocol
- Source Port: 59198
- Destination Port: 53
- Length: 54
- Checksum: 0x37cb
- Checksum Status: Unverified
- Stream index: 0
Domain Name System (query)
- Transaction ID: 0xe4a3
- Flags: 0x0010 Standard query
  - 0... .... .... .... = Response: Message is a query
  - .000 0... .... .... = Opcode: Standard query (0)
  - .... ..0. .... .... = Truncated: Message is not truncated
  - .... ...0 .... .... = Recursion desired: Don't do query recursively
  - .... .... .0.. .... = Z: reserved (0)
  - .... .... ...1 .... = Non-authenticated data: Acceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 1
- Queries
  - ns2.highsecure.ru: type A, class IN
    - Name: ns2.highsecure.ru
    - Name Length: 17
    - Label Count: 3
    - Type: A (Host Address) (1)
    - Class: IN (0x0001)
- Additional records
  - <Root>: type OPT
    - Name: <Root>
    - Type: OPT (41)
    - UDP payload size: 4096
    - Higher bits in extended RCODE: 0x00
    - EDNS0 version: 0
    - Z: 0x8000
      - 1... .... .... .... = DO bit: Accepts DNSSEC security RRs
      - .000 0000 0000 0000 = Reserved: 0x0000
    - Data length: 0

HPD v3.1 by Salim Gasmi. This site is powered by Wireshark. You can also check my other tools.
We offer an API for you to parse your own packets here.
Want a local copy of HPD in your company ? Contact us.
Page generated in 22 ms

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
52	54	00	7E	42	A5	52	54	00	A6	11	53	08	00	45	00
00	4A	4A	48	00	00	3F	11	F9	D7	C0	A8	38	0B	C2	BE
7C	11	E7	3E	00	35	00	36	37	CB	E4	A3	00	10	00	01
00	00	00	00	00	01	03	6E	73	32	0A	68	69	67	68	73
65	63	75	72	65	02	72	75	00	00	01	00	01	00	00	29
10	00	00	00	80	00	00	00

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
52	54	00	7E	42	A5	52	54	00	A6	11	53	08	00	45	00
00	4A	4A	48	00	00	3F	11	F9	D7	C0	A8	38	0B	C2	BE
7C	11	E7	3E	00	35	00	36	37	CB	E4	A3	00	10	00	01
00	00	00	00	00	01	03	6E	73	32	0A	68	69	67	68	73
65	63	75	72	65	02	72	75	00	00	01	00	01	00	00	29
10	00	00	00	80	00	00	00

Hex Packet Decoder - 3,916,531 packets decoded.

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
52	54	00	7E	42	A5	52	54	00	A6	11	53	08	00	45	00
00	4A	4A	48	00	00	3F	11	F9	D7	C0	A8	38	0B	C2	BE
7C	11	E7	3E	00	35	00	36	37	CB	E4	A3	00	10	00	01
00	00	00	00	00	01	03	6E	73	32	0A	68	69	67	68	73
65	63	75	72	65	02	72	75	00	00	01	00	01	00	00	29
10	00	00	00	80	00	00	00