Hex Packet Decoder

192.168.0.254 → 192.168.0.254 MySQL Request Query

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
00	00	00	00	00	00	00	00	00	00	00	00	08	00	45	08
00	4A	65	C9	40	00	40	06	51	90	C0	A8	00	FE	C0	A8
00	FE	DB	62	0C	EA	CC	D8	BB	B5	CD	34	96	7B	80	18
02	01	83	89	00	00	01	01	08	0A	00	F0	F4	D1	00	F0
DE	8F	12	00	00	00	03	53	45	4C	45	43	54	20	44	41
54	41	42	41	53	45	28	29

4 protocols in packet:

Ethernet

IPv4

TCP

MYSQL

[+] [-] [XML]

Frame 1: 88 bytes on wire (704 bits)
- Encapsulation type: Ethernet (1)
- Arrival Time: Apr 25, 2019 12:10:23.000000000 CEST
- Time shift for this packet: 0.000000000 seconds
- Epoch Time: 1556187023.000000000 seconds
- Time delta from previous captured frame: 0.000000000 seconds
- Time delta from previous displayed frame: 0.000000000 seconds
- Time since reference or first frame: 0.000000000 seconds
- Frame Number: 1
- Frame Length: 88 bytes (704 bits)
- Capture Length: 88 bytes (704 bits)
- Frame is marked: False
- Frame is ignored: False
- Protocols in frame: eth:ethertype:ip:tcp:mysql
Ethernet II
- Destination: 00:00:00_00:00:00 (00:00:00:00:00:00)
  - Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
  - .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: 00:00:00_00:00:00 (00:00:00:00:00:00)
  - Address: 00:00:00_00:00:00 (00:00:00:00:00:00)
  - .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv4 (0x0800)
Internet Protocol Version 4
- 0100 .... = Version: 4
- .... 0101 = Header Length: 20 bytes (5)
- Differentiated Services Field: 0x08 (DSCP: Unknown, ECN: Not-ECT)
  - 0000 10.. = Differentiated Services Codepoint: Unknown (2)
  - .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- Total Length: 74
- Identification: 0x65c9 (26057)
- Flags: 0x4000, Don't fragment
  - 0... .... .... .... = Reserved bit: Not set
  - .1.. .... .... .... = Don't fragment: Set
  - ..0. .... .... .... = More fragments: Not set
  - ...0 0000 0000 0000 = Fragment offset: 0
- Time to live: 64
- Protocol: TCP (6)
- Header checksum: 0x5190
- Header checksum status: Unverified
- Source: 192.168.0.254
- Destination: 192.168.0.254
Transmission Control Protocol
- Source Port: 56162
- Destination Port: 3306
- Stream index: 0
- TCP Segment Len: 22
- Sequence number: 0xccd8bbb5
- Next sequence number: 23
- Acknowledgment number: 0xcd34967b
- 1000 .... = Header Length: 32 bytes (8)
- Flags: 0x018 (PSH, ACK)
  - 000. .... .... = Reserved: Not set
  - ...0 .... .... = Nonce: Not set
  - .... 0... .... = Congestion Window Reduced (CWR): Not set
  - .... .0.. .... = ECN-Echo: Not set
  - .... ..0. .... = Urgent: Not set
  - .... ...1 .... = Acknowledgment: Set
  - .... .... 1... = Push: Set
  - .... .... .0.. = Reset: Not set
  - .... .... ..0. = Syn: Not set
  - .... .... ...0 = Fin: Not set
  - TCP Flags: \xc2\xb7\xc2\xb7\xc2\xb7\xc2\xb7\xc2\xb7\xc2\xb7\xc2\xb7AP\xc2\xb7\xc2\xb7\xc2\xb7
- Window size value: 513
- Calculated window size: 513
- Window size scaling factor: -1 (unknown)
- Checksum: 0x8389
- Checksum Status: Unverified
- Urgent pointer: 0
- Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
  - TCP Option - No-Operation (NOP)
    - Kind: No-Operation (1)
  - TCP Option - No-Operation (NOP)
    - Kind: No-Operation (1)
  - TCP Option - Timestamps: TSval 15791313, TSecr 15785615
    - Kind: Time Stamp Option (8)
    - Length: 10
    - Timestamp value: 15791313
    - Timestamp echo reply: 15785615
- SEQ/ACK analysis
  - Bytes in flight: 22
  - Bytes sent since last PSH flag: 22
- Timestamps
  - Time since first frame in this TCP stream: 0.000000000 seconds
  - Time since previous frame in this TCP stream: 0.000000000 seconds
- TCP payload (22 bytes)
- PDU Size: 22
MySQL Protocol
- Packet Length: 18
- Packet Number: 0
- Request Command Query
  - Command: Query (3)
  - Statement: SELECT DATABASE()

HPD v3.1 by Salim Gasmi. This site is powered by Wireshark. You can also check my other tools.
We offer an API for you to parse your own packets here.
Want a local copy of HPD in your company ? Contact us.
Page generated in 22 ms

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
00	00	00	00	00	00	00	00	00	00	00	00	08	00	45	08
00	4A	65	C9	40	00	40	06	51	90	C0	A8	00	FE	C0	A8
00	FE	DB	62	0C	EA	CC	D8	BB	B5	CD	34	96	7B	80	18
02	01	83	89	00	00	01	01	08	0A	00	F0	F4	D1	00	F0
DE	8F	12	00	00	00	03	53	45	4C	45	43	54	20	44	41
54	41	42	41	53	45	28	29

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
00	00	00	00	00	00	00	00	00	00	00	00	08	00	45	08
00	4A	65	C9	40	00	40	06	51	90	C0	A8	00	FE	C0	A8
00	FE	DB	62	0C	EA	CC	D8	BB	B5	CD	34	96	7B	80	18
02	01	83	89	00	00	01	01	08	0A	00	F0	F4	D1	00	F0
DE	8F	12	00	00	00	03	53	45	4C	45	43	54	20	44	41
54	41	42	41	53	45	28	29

Hex Packet Decoder - 3,657,546 packets decoded.

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
00	00	00	00	00	00	00	00	00	00	00	00	08	00	45	08
00	4A	65	C9	40	00	40	06	51	90	C0	A8	00	FE	C0	A8
00	FE	DB	62	0C	EA	CC	D8	BB	B5	CD	34	96	7B	80	18
02	01	83	89	00	00	01	01	08	0A	00	F0	F4	D1	00	F0
DE	8F	12	00	00	00	03	53	45	4C	45	43	54	20	44	41
54	41	42	41	53	45	28	29