From c3ff61a55871a24b83e4f95aa5436b258a629ed9 Mon Sep 17 00:00:00 2001
From: mhrooz <cxyoz@outlook.com>
Date: Wed, 30 Oct 2024 10:12:21 +0100
Subject: [PATCH] add Notes

---
 Blatt01/blatt01.md | 49 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)

diff --git a/Blatt01/blatt01.md b/Blatt01/blatt01.md
index 5d6726f..e635558 100644
--- a/Blatt01/blatt01.md
+++ b/Blatt01/blatt01.md
@@ -59,6 +59,55 @@ sender #   sender eth #    receiver #   receiver eth #  losses #
 
 ```
 
+## Tcpdump output 
+
+with -e
+
+```
+listening on eth1, link-type EN10MB (Ethernet), snapshot length 262144 bytes                             
+10:51:44.767031 00:16:3e:00:00:08 (oui Unknown) > 00:16:3e:00:00:02 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 18, length 64                         
+10:51:44.767055 00:16:3e:00:00:02 (oui Unknown) > 00:16:3e:00:00:08 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 18, length 64                           
+10:51:45.767125 00:16:3e:00:00:08 (oui Unknown) > 00:16:3e:00:00:02 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 19, length 64                         
+10:51:45.767160 00:16:3e:00:00:02 (oui Unknown) > 00:16:3e:00:00:08 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 19, length 64                           10:51:46.767229 00:16:3e:00:00:08 (oui Unknown) > 00:16:3e:00:00:02 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 20, length 64                         
+10:51:46.767253 00:16:3e:00:00:02 (oui Unknown) > 00:16:3e:00:00:08 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 20, length 64
+10:51:47.767360 00:16:3e:00:00:08 (oui Unknown) > 00:16:3e:00:00:02 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 21, length 64
+10:51:47.767384 00:16:3e:00:00:02 (oui Unknown) > 00:16:3e:00:00:08 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 21, length 64
+10:51:48.767451 00:16:3e:00:00:08 (oui Unknown) > 00:16:3e:00:00:02 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 22, length 64
+10:51:48.767475 00:16:3e:00:00:02 (oui Unknown) > 00:16:3e:00:00:08 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 22, length 64
+10:51:49.767591 00:16:3e:00:00:08 (oui Unknown) > 00:16:3e:00:00:02 (oui Unknown), ethertype IPv4 (0x0800
+), length 98: 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 23, length 64
+```
+
+without -e 
+
+```
+listening on eth1, link-type EN10MB (Ethernet), snapshot length 262144 bytes
+10:52:40.775534 IP 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 74, length 64
+10:52:40.775559 IP 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 74, length 64
+10:52:41.775635 IP 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 75, length 64
+10:52:41.775660 IP 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 75, length 64
+10:52:41.850588 ARP, Request who-has 10.5.1.2 tell 10.5.1.1, length 28
+10:52:41.850603 ARP, Reply 10.5.1.2 is-at 00:16:3e:00:00:02 (oui Unknown), length 28
+10:52:42.775751 IP 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 76, length 64
+10:52:42.775774 IP 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 76, length 64
+10:52:43.775955 IP 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 77, length 64
+10:52:43.775984 IP 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 77, length 64
+10:52:44.776094 IP 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 78, length 64
+10:52:44.776119 IP 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 78, length 64
+10:52:45.776221 IP 10.5.1.1 > 10.5.1.2: ICMP echo request, id 4813, seq 79, length 64
+10:52:45.776246 IP 10.5.1.2 > 10.5.1.1: ICMP echo reply, id 4813, seq 79, length
+```
+
 
 
 ### 主要工具：`ip`