No. Time Source Destination Protocol Length Info 63 5.699464 192.168.1.116 192.168.1.113 TCP 64 49153 > 6000 [SYN] Seq=0 Win=2920 Len=0 MSS=1460 Frame 63: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Arrival Time: Aug 4, 2012 10:44:45.958648000 Közép-európai nyári idő Epoch Time: 1344069885.958648000 seconds [Time delta from previous captured frame: 0.001018000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 5.699464000 seconds] Frame Number: 63 Frame Length: 64 bytes (512 bits) Capture Length: 64 bytes (512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1), Dst: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) Destination: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) Address: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) Address: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 0000 Frame check sequence: 0x00000000 [incorrect, should be 0x8b8dcd1d] Internet Protocol Version 4, Src: 192.168.1.116 (192.168.1.116), Dst: 192.168.1.113 (192.168.1.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 44 Identification: 0x0004 (4) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: TCP (6) Header checksum: 0x3792 [correct] [Good: True] [Bad: False] Source: 192.168.1.116 (192.168.1.116) Destination: 192.168.1.113 (192.168.1.113) Transmission Control Protocol, Src Port: 49153 (49153), Dst Port: 6000 (6000), Seq: 0, Len: 0 Source port: 49153 (49153) Destination port: 6000 (6000) [Stream index: 9] Sequence number: 0 (relative sequence number) Header length: 24 bytes Flags: 0x02 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 6000] [Message: Connection establish request (SYN): server port 6000] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size value: 2920 [Calculated window size: 2920] Checksum: 0x17aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (4 bytes) Maximum segment size: 1460 bytes 0000 10 0b a9 62 a1 88 00 02 f7 f0 a2 a1 08 00 45 00 ...b..........E. 0010 00 2c 00 04 00 00 ff 06 37 92 c0 a8 01 74 c0 a8 .,......7....t.. 0020 01 71 c0 01 17 70 00 00 19 6d 00 00 00 00 60 02 .q...p...m....`. 0030 0b 68 17 aa 00 00 02 04 05 b4 00 00 00 00 00 00 .h.............. No. Time Source Destination Protocol Length Info 64 5.699667 192.168.1.113 192.168.1.116 TCP 58 6000 > 49153 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 Frame 64: 58 bytes on wire (464 bits), 58 bytes captured (464 bits) Arrival Time: Aug 4, 2012 10:44:45.958851000 Közép-európai nyári idő Epoch Time: 1344069885.958851000 seconds [Time delta from previous captured frame: 0.000203000 seconds] [Time delta from previous displayed frame: 0.000203000 seconds] [Time since reference or first frame: 5.699667000 seconds] Frame Number: 64 Frame Length: 58 bytes (464 bits) Capture Length: 58 bytes (464 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: IntelCor_62:a1:88 (10:0b:a9:62:a1:88), Dst: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) Destination: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) Address: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) Address: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.1.113 (192.168.1.113), Dst: 192.168.1.116 (192.168.1.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 44 Identification: 0x0d82 (3458) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x6914 [correct] [Good: True] [Bad: False] Source: 192.168.1.113 (192.168.1.113) Destination: 192.168.1.116 (192.168.1.116) Transmission Control Protocol, Src Port: 6000 (6000), Dst Port: 49153 (49153), Seq: 0, Ack: 1, Len: 0 Source port: 6000 (6000) Destination port: 49153 (49153) [Stream index: 9] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 24 bytes Flags: 0x12 (SYN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 6000] [Message: Connection establish acknowledge (SYN+ACK): server port 6000] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size value: 8192 [Calculated window size: 8192] Checksum: 0xce50 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (4 bytes) Maximum segment size: 1460 bytes [SEQ/ACK analysis] [This is an ACK to the segment in frame: 63] [The RTT to ACK the segment was: 0.000203000 seconds] 0000 00 02 f7 f0 a2 a1 10 0b a9 62 a1 88 08 00 45 00 .........b....E. 0010 00 2c 0d 82 40 00 80 06 69 14 c0 a8 01 71 c0 a8 .,..@...i....q.. 0020 01 74 17 70 c0 01 ad 2f 87 80 00 00 19 6e 60 12 .t.p.../.....n`. 0030 20 00 ce 50 00 00 02 04 05 b4 ..P...... No. Time Source Destination Protocol Length Info 65 5.700704 192.168.1.116 192.168.1.113 TCP 64 49153 > 6000 [ACK] Seq=1 Ack=1 Win=2920 Len=0 Frame 65: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Arrival Time: Aug 4, 2012 10:44:45.959888000 Közép-európai nyári idő Epoch Time: 1344069885.959888000 seconds [Time delta from previous captured frame: 0.001037000 seconds] [Time delta from previous displayed frame: 0.001037000 seconds] [Time since reference or first frame: 5.700704000 seconds] Frame Number: 65 Frame Length: 64 bytes (512 bits) Capture Length: 64 bytes (512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1), Dst: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) Destination: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) Address: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) Address: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Frame check sequence: 0x00000000 [incorrect, should be 0x323acd03] Internet Protocol Version 4, Src: 192.168.1.116 (192.168.1.116), Dst: 192.168.1.113 (192.168.1.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x0005 (5) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: TCP (6) Header checksum: 0x3795 [correct] [Good: True] [Bad: False] Source: 192.168.1.116 (192.168.1.116) Destination: 192.168.1.113 (192.168.1.113) Transmission Control Protocol, Src Port: 49153 (49153), Dst Port: 6000 (6000), Seq: 1, Ack: 1, Len: 0 Source port: 49153 (49153) Destination port: 6000 (6000) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 2920 [Calculated window size: 2920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfaa5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 64] [The RTT to ACK the segment was: 0.001037000 seconds] 0000 10 0b a9 62 a1 88 00 02 f7 f0 a2 a1 08 00 45 00 ...b..........E. 0010 00 28 00 05 00 00 ff 06 37 95 c0 a8 01 74 c0 a8 .(......7....t.. 0020 01 71 c0 01 17 70 00 00 19 6e ad 2f 87 81 50 10 .q...p...n./..P. 0030 0b 68 fa a5 00 00 00 00 00 00 00 00 00 00 00 00 .h.............. No. Time Source Destination Protocol Length Info 66 5.700807 192.168.1.116 192.168.1.113 TCP 67 [TCP segment of a reassembled PDU] Frame 66: 67 bytes on wire (536 bits), 67 bytes captured (536 bits) Arrival Time: Aug 4, 2012 10:44:45.959991000 Közép-európai nyári idő Epoch Time: 1344069885.959991000 seconds [Time delta from previous captured frame: 0.000103000 seconds] [Time delta from previous displayed frame: 0.000103000 seconds] [Time since reference or first frame: 5.700807000 seconds] Frame Number: 66 Frame Length: 67 bytes (536 bits) Capture Length: 67 bytes (536 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1), Dst: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) Destination: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) Address: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) Address: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.1.116 (192.168.1.116), Dst: 192.168.1.113 (192.168.1.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 53 Identification: 0x0006 (6) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: TCP (6) Header checksum: 0x3787 [correct] [Good: True] [Bad: False] Source: 192.168.1.116 (192.168.1.116) Destination: 192.168.1.113 (192.168.1.113) Transmission Control Protocol, Src Port: 49153 (49153), Dst Port: 6000 (6000), Seq: 1, Ack: 1, Len: 13 Source port: 49153 (49153) Destination port: 6000 (6000) [Stream index: 9] Sequence number: 1 (relative sequence number) [Next sequence number: 14 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 2920 [Calculated window size: 2920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7ea1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 13] TCP segment data (13 bytes) 0000 10 0b a9 62 a1 88 00 02 f7 f0 a2 a1 08 00 45 00 ...b..........E. 0010 00 35 00 06 00 00 ff 06 37 87 c0 a8 01 74 c0 a8 .5......7....t.. 0020 01 71 c0 01 17 70 00 00 19 6e ad 2f 87 81 50 18 .q...p...n./..P. 0030 0b 68 7e a1 00 00 48 65 6c 6c 6f 20 77 6f 72 6c .h~...Hello worl 0040 64 21 0a d!. No. Time Source Destination Protocol Length Info 68 5.899296 192.168.1.113 192.168.1.116 TCP 54 6000 > 49153 [ACK] Seq=1 Ack=14 Win=17520 Len=0 Frame 68: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Arrival Time: Aug 4, 2012 10:44:46.158480000 Közép-európai nyári idő Epoch Time: 1344069886.158480000 seconds [Time delta from previous captured frame: 0.097170000 seconds] [Time delta from previous displayed frame: 0.198489000 seconds] [Time since reference or first frame: 5.899296000 seconds] Frame Number: 68 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: IntelCor_62:a1:88 (10:0b:a9:62:a1:88), Dst: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) Destination: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) Address: Arm_f0:a2:a1 (00:02:f7:f0:a2:a1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) Address: IntelCor_62:a1:88 (10:0b:a9:62:a1:88) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 192.168.1.113 (192.168.1.113), Dst: 192.168.1.116 (192.168.1.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x0d83 (3459) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x6917 [correct] [Good: True] [Bad: False] Source: 192.168.1.113 (192.168.1.113) Destination: 192.168.1.116 (192.168.1.116) Transmission Control Protocol, Src Port: 6000 (6000), Dst Port: 49153 (49153), Seq: 1, Ack: 14, Len: 0 Source port: 6000 (6000) Destination port: 49153 (49153) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 14 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 17520 [Calculated window size: 17520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc190 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 66] [The RTT to ACK the segment was: 0.198489000 seconds] 0000 00 02 f7 f0 a2 a1 10 0b a9 62 a1 88 08 00 45 00 .........b....E. 0010 00 28 0d 83 40 00 80 06 69 17 c0 a8 01 71 c0 a8 .(..@...i....q.. 0020 01 74 17 70 c0 01 ad 2f 87 81 00 00 19 7b 50 10 .t.p.../.....{P. 0030 44 70 c1 90 00 00 Dp....