Skip to content

Instantly share code, notes, and snippets.

@sgnn7
Created December 21, 2017 18:41
Show Gist options
  • Save sgnn7/d4dd23d6b71530db5e84ce6c13b8e416 to your computer and use it in GitHub Desktop.
Save sgnn7/d4dd23d6b71530db5e84ce6c13b8e416 to your computer and use it in GitHub Desktop.
$ sudo dhcpdump -i wlan0
...
TIME: 2017-12-21 10:43:43.110
IP: 192.168.10.1 (9c:ad:ef:31:c2:3e) > 192.168.10.148 (d8:fc:93:14:df:3e)
OP: 2 (BOOTPREPLY)
HTYPE: 1 (Ethernet)
HLEN: 6
HOPS: 0
XID: b7f2490e
SECS: 0
FLAGS: 0
CIADDR: 0.0.0.0
YIADDR: 192.168.10.148
SIADDR: 192.168.10.1
GIADDR: 0.0.0.0
CHADDR: d8:fc:93:14:df:3e:00:00:00:00:00:00:00:00:00:00
SNAME: 192.168.10.1.
FNAME: .
OPTION: 53 ( 1) DHCP message type 2 (DHCPOFFER)
OPTION: 54 ( 4) Server identifier 192.168.10.1
OPTION: 51 ( 4) IP address leasetime 86400 (24h)
OPTION: 58 ( 4) T1 43200 (12h)
OPTION: 59 ( 4) T2 75600 (21h)
OPTION: 28 ( 4) Broadcast address 192.168.10.255
OPTION: 6 ( 4) DNS server 192.168.10.1
OPTION: 3 ( 4) Routers 192.168.10.1
OPTION: 1 ( 4) Subnet mask 255.255.255.0
TIME: 2017-12-21 10:43:43.111
IP: 192.168.10.1 (9c:ad:ef:31:c2:3e) > 192.168.10.148 (d8:fc:93:14:df:3e)
OP: 2 (BOOTPREPLY)
HTYPE: 1 (Ethernet)
HLEN: 6
HOPS: 0
XID: b7f2490e
SECS: 0
FLAGS: 0
CIADDR: 0.0.0.0
YIADDR: 192.168.10.148
SIADDR: 192.168.10.1
GIADDR: 0.0.0.0
CHADDR: d8:fc:93:14:df:3e:00:00:00:00:00:00:00:00:00:00
SNAME: 192.168.10.1.
FNAME: .
OPTION: 53 ( 1) DHCP message type 5 (DHCPACK)
OPTION: 54 ( 4) Server identifier 192.168.10.1
OPTION: 51 ( 4) IP address leasetime 86400 (24h)
OPTION: 58 ( 4) T1 43200 (12h)
OPTION: 59 ( 4) T2 75600 (21h)
OPTION: 28 ( 4) Broadcast address 192.168.10.255
OPTION: 12 ( 8) Host name feather2
OPTION: 6 ( 4) DNS server 192.168.10.1
OPTION: 3 ( 4) Routers 192.168.10.1
OPTION: 1 ( 4) Subnet mask 255.255.255.0
...
$ host 192.168.10.1
1.10.168.192.in-addr.arpa domain name pointer obiconnect.com.
$ nmap -Pn 192.168.10.1
Starting Nmap 7.01 ( https://nmap.org ) at 2017-12-21 10:52 CST
Nmap scan report for obiconnect.com (192.168.10.1)
Host is up.
All 1000 scanned ports on obiconnect.com (192.168.10.1) are filtered
$ arp 192.168.10.1
Address HWtype HWaddress Flags Mask Iface
gateway ether 9c:ad:ef:31:c2:3e C wlan0
$ dig google.com 192.168.10.1
; <<>> DiG 9.10.3-P4-Ubuntu <<>> google.com 192.168.10.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 877
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;google.com. IN A
;; Query time: 1 msec
;; SERVER: 127.0.1.1#53(127.0.1.1)
;; WHEN: Thu Dec 21 10:39:54 CST 2017
;; MSG SIZE rcvd: 28
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53228
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1280
;; QUESTION SECTION:
;192.168.10.1. IN A
;; ANSWER SECTION:
192.168.10.1. 0 IN A 192.168.10.1
;; Query time: 0 msec
;; SERVER: 127.0.1.1#53(127.0.1.1)
;; WHEN: Thu Dec 21 10:39:54 CST 2017
;; MSG SIZE rcvd: 57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment