Skip to content

Instantly share code, notes, and snippets.

@koi8-r

koi8-r/ppp-shark.md

Last active October 17, 2018 19:55
Show Gist options
  • Save koi8-r/bbc1ee83d46d421061b451a12bc93398 to your computer and use it in GitHub Desktop.
Save koi8-r/bbc1ee83d46d421061b451a12bc93398 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
ppp-shark.md
  • ppp.txt 
    000000 00 00 88 81 7e ff 7d 23 c0 21 7d 21 7d 21 7d 20
000010 7d 39 7d 21 7d 24 7d 22 7d 20 7d 22 7d 26 ff ff
000020 ff ff 7d 23 7d 25 c2 23 7d 25 7d 25 7d 26 7d 20
000030 7d 20 30 c8 e2 d4 7e
000037
  • First is the GRE header: 00 00 88 81
  • Next, 7d byte escaped:
    • 7e: Frame
    • ff: Address
    • 7d23: Control=0x03
    • c021: Protocol=LCP
    • 7d21: LCPCode=0x01(Config-Request)
    • 7d21: Identifier=0x01
  • text2pcap -d -e 101 -i 47 ppp.txt ppp.pcap
  • tshark -O lcp -r ppp.pcap
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment