Protocol Analysis
http://craigchamberlain.com | mirrored at http://craigchamberlain.dreamhosters.com
see also http://www.protocols.com

Internet Protocols
ARP
DHCP
ICMP

TCP/IP Datagram Format

IP Packet Format

TCP Packet Format

UDP Packet Format

Microsoft Networks
NetBEUI
SMB

Layer 2  Frame Formats
DIX Ethernet Frame Format
IEEE 802.3 Frame Format
IEEE 802.2 LLC Header
IEEE 802.5 Token Ring Frame
PPP Frame Format

Netware
IPX Datagram Format
IPX Packet Format
NCP Request Packet Format
NCP Response Packet Format
RIP for IPX Packet Format
SAP Packet Format
SPX Packet Format

Windows Networking Reference Trace Files

BOOTBDC.CAP A Windows NT BDC initializes.
Bootntw.cap A Windows NT Workstation initializes, obtains an IP address from a DHCP server, registers a NetBIOS name with WINS and logs on to a Windows NT 4.0 domain.
NTWPTA.cap A Windows NT Workstation in a resource domain performs pass-thru authentication to an accounts domain.
NTWBrows.cap A Windows NT Workstation browses the network.
DNSquery.cap A Windows NT host making a DNS query
DNSrecr.cap A Windows NT host making a recursive DNS query.
DNSupdt.cap A DNS Zone update.
Dnswins.cap Recursion between DNS and WINS
Getname.cap Verification of a SID.
Repladd.cap Directory Replication; two files are replicated
Repldel.cap Directory Replication; files are deleted
Serverbrw.cap WINS browser update after a backup browser update
WINSupdt.cap WINS replication 
IEconnect.cap IE 3.0 Connecting to IIS web server's default page.
IEopen.cap IE 3.0 opening new page
Import.cap Importing trusted accounts



     
Selected Request for Comments (RFCs)