Ipv4 header

792 views 35 slides Sep 06, 2019
Slide 1
Slide 1 of 35
Slide 1
1
Slide 2
2
Slide 3
3
Slide 4
4
Slide 5
5
Slide 6
6
Slide 7
7
Slide 8
8
Slide 9
9
Slide 10
10
Slide 11
11
Slide 12
12
Slide 13
13
Slide 14
14
Slide 15
15
Slide 16
16
Slide 17
17
Slide 18
18
Slide 19
19
Slide 20
20
Slide 21
21
Slide 22
22
Slide 23
23
Slide 24
24
Slide 25
25
Slide 26
26
Slide 27
27
Slide 28
28
Slide 29
29
Slide 30
30
Slide 31
31
Slide 32
32
Slide 33
33
Slide 34
34
Slide 35
35

About This Presentation

The Presentation contains slides describing the details of IPv4 Header Format


Slide Content

IPv4 Header Deconstruction Pouyan Zamani

Sample Packet

Version

IHL (Internet Header Length) * 4 =in bytes

ToS (Type of Service)

ToS (Type of Service) 1000: Minimize delay 0100: Maximize throughput 0010: Maximize reliability 0001: Minimize monetary cost 0000: Normal service RFC 1349 > Obsolete! 11: Congestion Experienced 10: ECN Aware 01: ECN Aware 00: No ECN RFC 3168 > Newer!

ToS (Type of Service)

IP Datagram Length (Total Length)

IP ID (Identification)

Flags (3 bit)

Flags (3 bit) DF (Do not Fragment) : 0 means allow fragmentation; 1 means do not allow fragmentation . 0 : Reserved, must be zero. MF (More Fragments) : 0 means that this is the last fragment of the datagram; 1 means that additional fragments will follow.

Fragmentation Offset (13 bit) * 8 = in bytes

Fragmentation

Fragmentation

Fragmentation

Fragmentation

Fragmentation

Fragmentation

Fragmentation

Fragmentation

Questions About Fragments

Questions About Fragments

Questions About Fragments

IDS/IPS Challenges for Fragmentation

Ping of Death

Teardrop

TTL (Time to Live)

Protocol

Protocol ( https://www.eit.lth.se/ppplab/IPHeader.htm#Protocol ) Protocol Description Reserved 1 Internet Control Message Protocol (ICMP) 2 Internet Group Management Protocol (IGMP) 3 Gateway-to-Gateway Protocol (GGP) 4 IP (IP encapsulation) 5 Stream 6 Transmission Control Protocol (TCP) 8 Exterior Gateway Protocol (EGP) 9 Private Interior Routing Protocol 17 User Datagram Protocol (UDP)

Header Checksum

Header Checksum 4500 0073 0000 4000 4011 b861 c0a8 0001 c0a8 00c7 0035 e97c 005f 279f 1e4b 8180 4500 + 0073 + 0000 + 4000 + 4011 + c0a8 + 0001 + c0a8 + 00c7 = 2479C 2 + 479C = 479E (if another carry is generated by this addition, another 1 must be added to the sum) 479E > 1st complement (Binary) = B861

Header Checksum

Source IP

Destination IP

IP Options