LLMNR协议
来源:互联网 发布:手机网络机顶盒遥控器 编辑:程序博客网 时间:2024/05/16 08:30
http://en.wikipedia.org/wiki/Link-local_Multicast_Name_Resolution
The Link Local Multicast Name Resolution (LLMNR) is a protocol based on the Domain Name System (DNS) packet format that allows both IPv4 and IPv6 hosts to perform name resolution for hosts on the same local link.
Protocol details [edit]
In responding to queries, responders listen on UDP port 5355 on the following link-scope Multicast address:
- IPv4 - 224.0.0.252, MAC address of 01-00-5E-00-00-FC
- IPv6 - FF02:0:0:0:0:0:1:3 (this notation can be abbreviated as FF02::1:3), MAC address of 33-33-00-01-00-03
The responders also listen on TCP port 5355 on the unicast address that the host uses to respond to queries.
Packet header structure [edit]
- ID - A 16-bit identifier assigned by the program that generates any kind of query.
- QR - Query/Response.
- OPCODE - A 4-bit field that specifies the kind of query in this message. This value is set by the originator of a query and copied into the response. This specification defines the behavior of standard queries and responses (opcode value of zero). Future specifications may define the use of other opcodes with LLMNR.
- C - Conflict.
- TC - TrunCation.
- T - Tentative.
- Z - Reserved for future use.
- RCODE - Response code.
- QDCOUNT - An unsigned 16-bit integer specifying the number of entries in the question section.
- ANCOUNT - An unsigned 16-bit integer specifying the number of resource records in the answer section.
- NSCOUNT - An unsigned 16-bit integer specifying the number of name server resource records in the authority records section.
- ARCOUNT - An unsigned 16-bit integer specifying the number of resource records in the additional records section.
用Wireshark抓包:
- LLMNR协议
- LLMNR协议
- LLMNR协议
- 域名解析-DNS-MDNS-LLMNR
- LLMNR欺骗工具Responder
- LLMNR欺骗工具Responder
- 域名解析-DNS与MDNS-LLMNR
- Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB
- 利用 LLMNR 名称解析缺陷劫持内网指定主机会话
- 协议
- 协议
- 协议
- 协议
- 协议
- 协议
- 协议
- 协议
- 协议
- Tomcat虚拟目录配置
- 最快速的Android开发环境搭建ADT-Bundle及Hello World
- cocos2d_x+lua【1】 ——sprite的使用
- HDU 2002
- script中函数的变参数
- LLMNR协议
- c#操作Xml文件
- Hibernate学习笔记7--关联关系之多对一
- 浅谈Java多线程之Threa类和Runnable接口的区别
- 基于node-websocket-server的简易聊天工具
- Spket在Eclipse下的安装和配置(图文教程)及无法显示问题的解决
- 让XCode的 Stack Trace信息可读
- 黑马程序员_网络编程一(IP,TCP和UDP, DatagramSocket与DatagramPacket,TCP传输)
- 用JAVA实现一个快速排序