H Hex Packet Decoder

10,278,257 packets decoded

192.168.1.231 → 192.168.1.182 FTP Response: 220 ProFTPD 1.3.0a Server (ProFTPD Anonymous Server) [192.168.1.231]

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
00	17	F2	2E	52	3B	00	13	20	9F	04	2F	08	00	45	10
00	7A	E6	5E	40	00	40	06	CF	21	C0	A8	01	E7	C0	A8
01	B6	00	15	F2	3E	83	6F	4F	FE	04	84	6E	DA	80	18
05	A8	99	67	00	00	01	01	08	0A	3C	F6	A9	AA	1E	8D
47	F6	32	32	30	20	50	72	6F	46	54	50	44	20	31	2E
33	2E	30	61	20	53	65	72	76	65	72	20	28	50	72	6F
46	54	50	44	20	41	6E	6F	6E	79	6D	6F	75	73	20	53
65	72	76	65	72	29	20	5B	31	39	32	2E	31	36	38	2E
31	2E	32	33	31	5D	0D	0A

4 protocols in packet (136 bytes):

Ethernet

IPv4

TCP

FTP

Frame 1: 136 bytes on wire (1088 bits)
- Section number: 1
- Interface id: 0 (Interface, hpd0)
  - Interface name: Interface, hpd0
- Encapsulation type: Ethernet (1)
- Arrival Time: Mar 10, 2026 15:35:40.000001000 CET
- UTC Arrival Time: Mar 10, 2026 14:35:40.000001000 UTC
- Epoch Arrival Time: 1773153340.000001000
- Time shift for this packet: 0.000000000 seconds
- Time delta from previous captured frame: 0.000000000 seconds
- Time delta from previous displayed frame: 0.000000000 seconds
- Time since reference or first frame: 0.000000000 seconds
- Frame Number: 1
- Frame Length: 136 bytes (1088 bits)
- Capture Length: 136 bytes (1088 bits)
- Frame is marked: False
- Frame is ignored: False
- Protocols in frame: eth:ethertype:ip:tcp:ftp
Ethernet II
- Destination: Apple_2e:52:3b (00:17:f2:2e:52:3b)
  - .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: Intel_9f:04:2f (00:13:20:9f:04:2f)
  - .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv4 (0x0800)
- Stream index: 0
Internet Protocol Version 4
- 0100 .... = Version: 4
- .... 0101 = Header Length: 20 bytes (5)
- Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT)
  - 0001 00.. = Differentiated Services Codepoint: Unknown (4)
  - .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- Total Length: 122
- Identification: 0xe65e (58974)
- 010. .... = Flags: 0x2, Don't fragment
  - 0... .... = Reserved bit: Not set
  - .1.. .... = Don't fragment: Set
  - ..0. .... = More fragments: Not set
- ...0 0000 0000 0000 = Fragment Offset: 0
- Time to Live: 64
- Protocol: TCP (6)
- Header Checksum: 0xcf21 [correct]
- Header checksum status: Good
- Calculated Checksum: 0xcf21
- Source Address: 192.168.1.231
- Destination Address: 192.168.1.182
- Stream index: 0
Transmission Control Protocol
- Source Port: 21
- Destination Port: 62014
- Stream index: 0
- Stream Packet Number: 1
- Conversation completeness: Incomplete (0)
  - ..0. .... = RST: Absent
  - ...0 .... = FIN: Absent
  - .... 0... = Data: Absent
  - .... .0.. = ACK: Absent
  - .... ..0. = SYN-ACK: Absent
  - .... ...0 = SYN: Absent
  - Completeness Flags: [ Null ]
- TCP Segment Len: 70
- Sequence Number: 0x836f4ffe
- Sequence Number (raw): 2205110270
- Next Sequence Number: 71
- Acknowledgment Number: 0x04846eda
- Acknowledgment number (raw): 75787994
- 1000 .... = Header Length: 32 bytes (8)
- Flags: 0x018 (PSH, ACK)
  - 000. .... .... = Reserved: Not set
  - ...0 .... .... = Accurate ECN: Not set
  - .... 0... .... = Congestion Window Reduced: Not set
  - .... .0.. .... = ECN-Echo: Not set
  - .... ..0. .... = Urgent: Not set
  - .... ...1 .... = Acknowledgment: Set
  - .... .... 1... = Push: Set
  - .... .... .0.. = Reset: Not set
  - .... .... ..0. = Syn: Not set
  - .... .... ...0 = Fin: Not set
  - TCP Flags: ·······AP···
- Window: 1448
- Calculated window size: 1448
- Window size scaling factor: -1 (unknown)
- Checksum: 0x9967 [correct]
  - Calculated Checksum: 0x9967
- Checksum Status: Good
- Urgent Pointer: 0
- Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
  - TCP Option - No-Operation (NOP)
    - Kind: No-Operation (1)
  - TCP Option - No-Operation (NOP)
    - Kind: No-Operation (1)
  - TCP Option - Timestamps: TSval 1022798250, TSecr 512575478
    - Kind: Time Stamp Option (8)
    - Length: 10
    - Timestamp value: 1022798250
    - Timestamp echo reply: 512575478
- Timestamps
  - Time since first frame in this TCP stream: 0.000000000 seconds
  - Time since previous frame in this TCP stream: 0.000000000 seconds
- SEQ/ACK analysis
  - Bytes in flight: 70
  - Bytes sent since last PSH flag: 70
- TCP payload (70 bytes)
File Transfer Protocol (FTP)
- 220 ProFTPD 1.3.0a Server (ProFTPD Anonymous Server) [192.168.1.231]\r\n
  - Response code: Service ready for new user (220)
  - Response arg: ProFTPD 1.3.0a Server (ProFTPD Anonymous Server) [192.168.1.231]

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
00	17	F2	2E	52	3B	00	13	20	9F	04	2F	08	00	45	10
00	7A	E6	5E	40	00	40	06	CF	21	C0	A8	01	E7	C0	A8
01	B6	00	15	F2	3E	83	6F	4F	FE	04	84	6E	DA	80	18
05	A8	99	67	00	00	01	01	08	0A	3C	F6	A9	AA	1E	8D
47	F6	32	32	30	20	50	72	6F	46	54	50	44	20	31	2E
33	2E	30	61	20	53	65	72	76	65	72	20	28	50	72	6F
46	54	50	44	20	41	6E	6F	6E	79	6D	6F	75	73	20	53
65	72	76	65	72	29	20	5B	31	39	32	2E	31	36	38	2E
31	2E	32	33	31	5D	0D	0A

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
00	17	F2	2E	52	3B	00	13	20	9F	04	2F	08	00	45	10
00	7A	E6	5E	40	00	40	06	CF	21	C0	A8	01	E7	C0	A8
01	B6	00	15	F2	3E	83	6F	4F	FE	04	84	6E	DA	80	18
05	A8	99	67	00	00	01	01	08	0A	3C	F6	A9	AA	1E	8D
47	F6	32	32	30	20	50	72	6F	46	54	50	44	20	31	2E
33	2E	30	61	20	53	65	72	76	65	72	20	28	50	72	6F
46	54	50	44	20	41	6E	6F	6E	79	6D	6F	75	73	20	53
65	72	76	65	72	29	20	5B	31	39	32	2E	31	36	38	2E
31	2E	32	33	31	5D	0D	0A

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
00	17	F2	2E	52	3B	00	13	20	9F	04	2F	08	00	45	10
00	7A	E6	5E	40	00	40	06	CF	21	C0	A8	01	E7	C0	A8
01	B6	00	15	F2	3E	83	6F	4F	FE	04	84	6E	DA	80	18
05	A8	99	67	00	00	01	01	08	0A	3C	F6	A9	AA	1E	8D
47	F6	32	32	30	20	50	72	6F	46	54	50	44	20	31	2E
33	2E	30	61	20	53	65	72	76	65	72	20	28	50	72	6F
46	54	50	44	20	41	6E	6F	6E	79	6D	6F	75	73	20	53
65	72	76	65	72	29	20	5B	31	39	32	2E	31	36	38	2E
31	2E	32	33	31	5D	0D	0A