Skip to content

Instantly share code, notes, and snippets.

@sotodel

sotodel/cql-tcpdump-magic-protocol-version.out

Last active March 5, 2017 18:50
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sotodel/775ecf9d343715e34c264fd8c217e57b to your computer and use it in GitHub Desktop.
Save sotodel/775ecf9d343715e34c264fd8c217e57b to your computer and use it in GitHub Desktop.
Download ZIP
Snapshot of where the protocol breaks
Raw
cql-tcpdump-magic-protocol-version.out
10:18:34.295415 IP (tos 0x0, ttl 64, id 4765, offset 0, flags [DF], proto TCP (6), length 16436)
mountainjust-vm0.corp.yahoo.com.38383 > mountainjust-vm0.corp.yahoo.com.9042: Flags [P.], cksum 0x7a37 (incorrect -> 0x5244), seq 40427:56811, ack 117, win 4, options [nop,nop,TS val 79452253 ecr 79452252], length 16384
0x0000: 4500 4034 129d 4000 4006 ae16 0a49 92bf E.@4..@.@....I..
0x0010: 0a49 92bf 95ef 2352 025f e887 22a4 ffd7 .I....#R._.."...
0x0020: 8018 0004 7a37 0000 0101 080a 04bc 585d ....z7........X]
0x0030: 04bc 585c 0400 0001 0a00 005d 7800 10ac ..X\.......]x...
0x0040: 35a8 b01c b135 323a 7b69 b184 b6fd 3900 5....52:{i....9.
0x0050: 0a05 0002 0000 0004 0000 0002 0000 5d51 ..............]Q
0x0060: 305f 315f 325f 335f 345f 355f 365f 375f 0_1_2_3_4_5_6_7_
0x0070: 385f 395f 3130 5f31 315f 3132 5f31 335f 8_9_10_11_12_13_
0x0080: 3134 5f31 355f 3136 5f31 375f 3138 5f31 14_15_16_17_18_1
0x0090: 395f 3230 5f32 315f 3232 5f32 335f 3234 9_20_21_22_23_24
[--]
0x1d80: 3731 335f 3137 3134 5f31 3731 355f 3137 713_1714_1715_17
0x1d90: 3136 5f31 3731 375f 3137 3138 5f31 3731 16_1717_1718_171
0x1da0: 395f 3137 3230 5f31 3732 315f 3137 3232 9_1720_1721_1722
0x1db0: 5f31 3732 335f 3137 3234 5f31 3732 355f _1723_1724_1725_ // 6th byte on this line begins new frame
0x1dc0: 3137 3236 5f31 3732 375f 3137 3238 5f31 1726_1727_1728_1
0x1dd0: 3732 395f 3137 3330 5f31 3733 315f 3137 729_1730_1731_17
0x1de0: 3332 5f31 3733 335f 3137 3334 5f31 3733 32_1733_1734_173
0x1df0: 355f 3137 3336 5f31 3733 375f 3137 3338 5_1736_1737_1738
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment