API tools faq
paste
Advertisement
Guest User

wireshark

a guest
Jan 11th, 2012
1,518
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.53 KB | None | 0 0
raw download clone embed print report
  1.  
  2. No. Time Source Destination Protocol Length Info
  3. 1 0.000000 3com_dc:2d:95 Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/00:1a:c1:dc:2d:80 Cost = 0 Port = 0x8013
  4.  
  5. Frame 1: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
  6. IEEE 802.3 Ethernet
  7. Logical-Link Control
  8. Spanning Tree Protocol
  9.  
  10. No. Time Source Destination Protocol Length Info
  11. 2 0.002440 2001:0:4137:9e76:3426:193f:a0f6:4e38 ff02::1 IPv6 82 IPv6 no next header
  12.  
  13. Frame 2: 82 bytes on wire (656 bits), 82 bytes captured (656 bits)
  14. Ethernet II, Src: Giga-Byt_63:48:00 (00:1a:4d:63:48:00), Dst: IPv4mcast_00:00:fd (01:00:5e:00:00:fd)
  15. Internet Protocol Version 4, Src: 192.168.0.139 (192.168.0.139), Dst: 224.0.0.253 (224.0.0.253)
  16. User Datagram Protocol, Src Port: 59072 (59072), Dst Port: teredo (3544)
  17. Teredo IPv6 over UDP tunneling
  18. Internet Protocol Version 6, Src: 2001:0:4137:9e76:3426:193f:a0f6:4e38 (2001:0:4137:9e76:3426:193f:a0f6:4e38), Dst: ff02::1 (ff02::1)
  19.  
  20. No. Time Source Destination Protocol Length Info
  21. 3 0.818313 ZyxelCom_5e:85:6d Broadcast 0x8899 60 Ethernet II
  22.  
  23. Frame 3: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  24. Ethernet II, Src: ZyxelCom_5e:85:6d (50:67:f0:5e:85:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
  25. Data (46 bytes)
  26.  
  27. 0000 23 d7 fe df 70 b3 26 50 67 f0 5e 85 6d 01 00 00 #...p.&Pg.^.m...
  28. 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  29. 0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..............
  30.  
  31. No. Time Source Destination Protocol Length Info
  32. 4 1.999969 3com_dc:2d:95 Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/00:1a:c1:dc:2d:80 Cost = 0 Port = 0x8013
  33.  
  34. Frame 4: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
  35. IEEE 802.3 Ethernet
  36. Logical-Link Control
  37. Spanning Tree Protocol
  38.  
  39. No. Time Source Destination Protocol Length Info
  40. 5 2.817953 ZyxelCom_5e:85:6d Broadcast 0x8899 60 Ethernet II
  41.  
  42. Frame 5: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  43. Ethernet II, Src: ZyxelCom_5e:85:6d (50:67:f0:5e:85:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
  44. Data (46 bytes)
  45.  
  46. 0000 23 d7 fe df 70 b3 26 50 67 f0 5e 85 6d 01 00 00 #...p.&Pg.^.m...
  47. 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  48. 0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..............
  49.  
  50. No. Time Source Destination Protocol Length Info
  51. 6 3.999934 3com_dc:2d:95 Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/00:1a:c1:dc:2d:80 Cost = 0 Port = 0x8013
  52.  
  53. Frame 6: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
  54. IEEE 802.3 Ethernet
  55. Logical-Link Control
  56. Spanning Tree Protocol
  57.  
  58. No. Time Source Destination Protocol Length Info
  59. 7 4.817590 ZyxelCom_5e:85:6d Broadcast 0x8899 60 Ethernet II
  60.  
  61. Frame 7: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  62. Ethernet II, Src: ZyxelCom_5e:85:6d (50:67:f0:5e:85:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
  63. Data (46 bytes)
  64.  
  65. 0000 23 d7 fe df 70 b3 26 50 67 f0 5e 85 6d 01 00 00 #...p.&Pg.^.m...
  66. 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  67. 0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..............
  68.  
  69. No. Time Source Destination Protocol Length Info
  70. 8 4.985608 Dell_b5:da:71 Broadcast ARP 42 Who has 192.168.0.138? Tell 192.168.0.147
  71.  
  72. Frame 8: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
  73. Ethernet II, Src: Dell_b5:da:71 (00:1c:23:b5:da:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
  74. Address Resolution Protocol (request)
  75.  
  76. No. Time Source Destination Protocol Length Info
  77. 9 4.986458 AewinTec_36:ab:da Dell_b5:da:71 ARP 60 192.168.0.138 is at 00:0d:48:36:ab:da
  78.  
  79. Frame 9: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  80. Ethernet II, Src: AewinTec_36:ab:da (00:0d:48:36:ab:da), Dst: Dell_b5:da:71 (00:1c:23:b5:da:71)
  81. Address Resolution Protocol (reply)
  82.  
  83. No. Time Source Destination Protocol Length Info
  84. 10 4.986479 192.168.0.147 192.168.0.138 TCP 66 49949 > ndl-aas [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
  85.  
  86. Frame 10: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  87. Ethernet II, Src: Dell_b5:da:71 (00:1c:23:b5:da:71), Dst: AewinTec_36:ab:da (00:0d:48:36:ab:da)
  88. Internet Protocol Version 4, Src: 192.168.0.147 (192.168.0.147), Dst: 192.168.0.138 (192.168.0.138)
  89. Transmission Control Protocol, Src Port: 49949 (49949), Dst Port: ndl-aas (3128), Seq: 0, Len: 0
  90. Source port: 49949 (49949)
  91. Destination port: ndl-aas (3128)
  92. [Stream index: 0]
  93. Sequence number: 0 (relative sequence number)
  94. Header length: 32 bytes
  95. Flags: 0x02 (SYN)
  96. Window size value: 8192
  97. [Calculated window size: 8192]
  98. Checksum: 0x5955 [validation disabled]
  99. Options: (12 bytes)
  100.  
  101. No. Time Source Destination Protocol Length Info
  102. 11 4.986636 192.168.0.138 192.168.0.147 TCP 66 ndl-aas > 49949 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460 SACK_PERM=1 WS=128
  103.  
  104. Frame 11: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  105. Ethernet II, Src: AewinTec_36:ab:da (00:0d:48:36:ab:da), Dst: Dell_b5:da:71 (00:1c:23:b5:da:71)
  106. Internet Protocol Version 4, Src: 192.168.0.138 (192.168.0.138), Dst: 192.168.0.147 (192.168.0.147)
  107. Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: 49949 (49949), Seq: 0, Ack: 1, Len: 0
  108. Source port: ndl-aas (3128)
  109. Destination port: 49949 (49949)
  110. [Stream index: 0]
  111. Sequence number: 0 (relative sequence number)
  112. Acknowledgement number: 1 (relative ack number)
  113. Header length: 32 bytes
  114. Flags: 0x12 (SYN, ACK)
  115. Window size value: 5840
  116. [Calculated window size: 5840]
  117. Checksum: 0xa22b [validation disabled]
  118. Options: (12 bytes)
  119. [SEQ/ACK analysis]
  120.  
  121. No. Time Source Destination Protocol Length Info
  122. 12 4.986715 192.168.0.147 192.168.0.138 TCP 54 49949 > ndl-aas [ACK] Seq=1 Ack=1 Win=65700 Len=0
  123.  
  124. Frame 12: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  125. Ethernet II, Src: Dell_b5:da:71 (00:1c:23:b5:da:71), Dst: AewinTec_36:ab:da (00:0d:48:36:ab:da)
  126. Internet Protocol Version 4, Src: 192.168.0.147 (192.168.0.147), Dst: 192.168.0.138 (192.168.0.138)
  127. Transmission Control Protocol, Src Port: 49949 (49949), Dst Port: ndl-aas (3128), Seq: 1, Ack: 1, Len: 0
  128. Source port: 49949 (49949)
  129. Destination port: ndl-aas (3128)
  130. [Stream index: 0]
  131. Sequence number: 1 (relative sequence number)
  132. Acknowledgement number: 1 (relative ack number)
  133. Header length: 20 bytes
  134. Flags: 0x10 (ACK)
  135. Window size value: 16425
  136. [Calculated window size: 65700]
  137. [Window size scaling factor: 4]
  138. Checksum: 0xb9a4 [validation disabled]
  139. [SEQ/ACK analysis]
  140.  
  141. No. Time Source Destination Protocol Length Info
  142. 13 4.986820 192.168.0.147 192.168.0.138 HTTP 995 GET http://www.google.com.tr/ HTTP/1.1
  143.  
  144. Frame 13: 995 bytes on wire (7960 bits), 995 bytes captured (7960 bits)
  145. Ethernet II, Src: Dell_b5:da:71 (00:1c:23:b5:da:71), Dst: AewinTec_36:ab:da (00:0d:48:36:ab:da)
  146. Internet Protocol Version 4, Src: 192.168.0.147 (192.168.0.147), Dst: 192.168.0.138 (192.168.0.138)
  147. Transmission Control Protocol, Src Port: 49949 (49949), Dst Port: ndl-aas (3128), Seq: 1, Ack: 1, Len: 941
  148. Source port: 49949 (49949)
  149. Destination port: ndl-aas (3128)
  150. [Stream index: 0]
  151. Sequence number: 1 (relative sequence number)
  152. [Next sequence number: 942 (relative sequence number)]
  153. Acknowledgement number: 1 (relative ack number)
  154. Header length: 20 bytes
  155. Flags: 0x18 (PSH, ACK)
  156. Window size value: 16425
  157. [Calculated window size: 65700]
  158. [Window size scaling factor: 4]
  159. Checksum: 0xb378 [validation disabled]
  160. [SEQ/ACK analysis]
  161. Hypertext Transfer Protocol
  162. GET http://www.google.com.tr/ HTTP/1.1\r\n
  163. [Expert Info (Chat/Sequence): GET http://www.google.com.tr/ HTTP/1.1\r\n]
  164. Request Method: GET
  165. Request URI: http://www.google.com.tr/
  166. Request Version: HTTP/1.1
  167. Host: www.google.com.tr\r\n
  168. User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:8.0) Gecko/20100101 Firefox/8.0\r\n
  169. Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n
  170. Accept-Language: tr-tr,tr;q=0.8,en-us;q=0.5,en;q=0.3\r\n
  171. Accept-Encoding: gzip, deflate\r\n
  172. Accept-Charset: ISO-8859-9,utf-8;q=0.7,*;q=0.7\r\n
  173. Proxy-Connection: keep-alive\r\n
  174. [truncated] Cookie: PREF=ID=90dfa9d21a141205:U=141523004d8f96f3:FF=0:TM=1325603435:LM=1325603437:S=rNMyuNPOyak30W6p; NID=55=OyY0ovhHF6eZmXuC5HMFW8ZfU3uYzbV4hhpnv10vfQMYe3P7Qg6Y8i4NRHf1Io4_MnVTJOIfchbGZPA1yQLmDM4WhcUBwV-G9sqdqY37t7B5x4AdRLN
  175. \r\n
  176. [Full request URI: http://www.google.com.trhttp://www.google.com.tr/]
  177.  
  178. No. Time Source Destination Protocol Length Info
  179. 14 4.987186 192.168.0.138 192.168.0.147 TCP 60 ndl-aas > 49949 [ACK] Seq=1 Ack=942 Win=7808 Len=0
  180.  
  181. Frame 14: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  182. Ethernet II, Src: AewinTec_36:ab:da (00:0d:48:36:ab:da), Dst: Dell_b5:da:71 (00:1c:23:b5:da:71)
  183. Internet Protocol Version 4, Src: 192.168.0.138 (192.168.0.138), Dst: 192.168.0.147 (192.168.0.147)
  184. Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: 49949 (49949), Seq: 1, Ack: 942, Len: 0
  185. Source port: ndl-aas (3128)
  186. Destination port: 49949 (49949)
  187. [Stream index: 0]
  188. Sequence number: 1 (relative sequence number)
  189. Acknowledgement number: 942 (relative ack number)
  190. Header length: 20 bytes
  191. Flags: 0x10 (ACK)
  192. Window size value: 61
  193. [Calculated window size: 7808]
  194. [Window size scaling factor: 128]
  195. Checksum: 0xf5e3 [validation disabled]
  196. [SEQ/ACK analysis]
  197.  
  198. No. Time Source Destination Protocol Length Info
  199. 15 4.988369 192.168.0.138 192.168.0.147 TCP 1514 [TCP segment of a reassembled PDU]
  200.  
  201. Frame 15: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
  202. Ethernet II, Src: AewinTec_36:ab:da (00:0d:48:36:ab:da), Dst: Dell_b5:da:71 (00:1c:23:b5:da:71)
  203. Internet Protocol Version 4, Src: 192.168.0.138 (192.168.0.138), Dst: 192.168.0.147 (192.168.0.147)
  204. Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: 49949 (49949), Seq: 1, Ack: 942, Len: 1460
  205. Source port: ndl-aas (3128)
  206. Destination port: 49949 (49949)
  207. [Stream index: 0]
  208. Sequence number: 1 (relative sequence number)
  209. [Next sequence number: 1461 (relative sequence number)]
  210. Acknowledgement number: 942 (relative ack number)
  211. Header length: 20 bytes
  212. Flags: 0x10 (ACK)
  213. Window size value: 61
  214. [Calculated window size: 7808]
  215. [Window size scaling factor: 128]
  216. Checksum: 0x4562 [validation disabled]
  217. [SEQ/ACK analysis]
  218. TCP segment data (1460 bytes)
  219.  
  220. No. Time Source Destination Protocol Length Info
  221. 16 4.988415 192.168.0.138 192.168.0.147 HTTP 118 HTTP/1.0 407 Proxy Authentication Required (text/html)
  222.  
  223. Frame 16: 118 bytes on wire (944 bits), 118 bytes captured (944 bits)
  224. Ethernet II, Src: AewinTec_36:ab:da (00:0d:48:36:ab:da), Dst: Dell_b5:da:71 (00:1c:23:b5:da:71)
  225. Internet Protocol Version 4, Src: 192.168.0.138 (192.168.0.138), Dst: 192.168.0.147 (192.168.0.147)
  226. Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: 49949 (49949), Seq: 1461, Ack: 942, Len: 64
  227. Source port: ndl-aas (3128)
  228. Destination port: 49949 (49949)
  229. [Stream index: 0]
  230. Sequence number: 1461 (relative sequence number)
  231. [Next sequence number: 1525 (relative sequence number)]
  232. Acknowledgement number: 942 (relative ack number)
  233. Header length: 20 bytes
  234. Flags: 0x18 (PSH, ACK)
  235. Window size value: 61
  236. [Calculated window size: 7808]
  237. [Window size scaling factor: 128]
  238. Checksum: 0xe6e9 [validation disabled]
  239. [SEQ/ACK analysis]
  240. TCP segment data (64 bytes)
  241. [2 Reassembled TCP Segments (1524 bytes): #15(1460), #16(64)]
  242. Hypertext Transfer Protocol
  243. HTTP/1.0 407 Proxy Authentication Required\r\n
  244. [Expert Info (Chat/Sequence): HTTP/1.0 407 Proxy Authentication Required\r\n]
  245. Request Version: HTTP/1.0
  246. Status Code: 407
  247. Response Phrase: Proxy Authentication Required
  248. Server: squid/3.1.12\r\n
  249. Mime-Version: 1.0\r\n
  250. Date: Wed, 11 Jan 2012 11:28:01 GMT\r\n
  251. Content-Type: text/html\r\n
  252. Content-Length: 1152\r\n
  253. X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\n
  254. Proxy-Authenticate: Negotiate\r\n
  255. X-Cache: MISS from labris-1\r\n
  256. X-Cache-Lookup: NONE from labris-1:3128\r\n
  257. Via: 1.0 labris-1 (squid/3.1.12)\r\n
  258. Connection: keep-alive\r\n
  259. \r\n
  260. Line-based text data: text/html
  261.  
  262. No. Time Source Destination Protocol Length Info
  263. 17 4.988445 192.168.0.147 192.168.0.138 TCP 54 49949 > ndl-aas [ACK] Seq=942 Ack=1525 Win=65700 Len=0
  264.  
  265. Frame 17: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  266. Ethernet II, Src: Dell_b5:da:71 (00:1c:23:b5:da:71), Dst: AewinTec_36:ab:da (00:0d:48:36:ab:da)
  267. Internet Protocol Version 4, Src: 192.168.0.147 (192.168.0.147), Dst: 192.168.0.138 (192.168.0.138)
  268. Transmission Control Protocol, Src Port: 49949 (49949), Dst Port: ndl-aas (3128), Seq: 942, Ack: 1525, Len: 0
  269. Source port: 49949 (49949)
  270. Destination port: ndl-aas (3128)
  271. [Stream index: 0]
  272. Sequence number: 942 (relative sequence number)
  273. Acknowledgement number: 1525 (relative ack number)
  274. Header length: 20 bytes
  275. Flags: 0x10 (ACK)
  276. Window size value: 16425
  277. [Calculated window size: 65700]
  278. [Window size scaling factor: 4]
  279. Checksum: 0xb003 [validation disabled]
  280. [SEQ/ACK analysis]
  281.  
  282. No. Time Source Destination Protocol Length Info
  283. 18 4.992247 192.168.0.147 192.168.0.138 HTTP 1084 GET http://www.google.com.tr/ HTTP/1.1 , NTLMSSP_NEGOTIATE
  284.  
  285. Frame 18: 1084 bytes on wire (8672 bits), 1084 bytes captured (8672 bits)
  286. Ethernet II, Src: Dell_b5:da:71 (00:1c:23:b5:da:71), Dst: AewinTec_36:ab:da (00:0d:48:36:ab:da)
  287. Internet Protocol Version 4, Src: 192.168.0.147 (192.168.0.147), Dst: 192.168.0.138 (192.168.0.138)
  288. Transmission Control Protocol, Src Port: 49949 (49949), Dst Port: ndl-aas (3128), Seq: 942, Ack: 1525, Len: 1030
  289. Source port: 49949 (49949)
  290. Destination port: ndl-aas (3128)
  291. [Stream index: 0]
  292. Sequence number: 942 (relative sequence number)
  293. [Next sequence number: 1972 (relative sequence number)]
  294. Acknowledgement number: 1525 (relative ack number)
  295. Header length: 20 bytes
  296. Flags: 0x18 (PSH, ACK)
  297. Window size value: 16425
  298. [Calculated window size: 65700]
  299. [Window size scaling factor: 4]
  300. Checksum: 0x0263 [validation disabled]
  301. [SEQ/ACK analysis]
  302. Hypertext Transfer Protocol
  303. GET http://www.google.com.tr/ HTTP/1.1\r\n
  304. [Expert Info (Chat/Sequence): GET http://www.google.com.tr/ HTTP/1.1\r\n]
  305. Request Method: GET
  306. Request URI: http://www.google.com.tr/
  307. Request Version: HTTP/1.1
  308. Host: www.google.com.tr\r\n
  309. User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:8.0) Gecko/20100101 Firefox/8.0\r\n
  310. Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n
  311. Accept-Language: tr-tr,tr;q=0.8,en-us;q=0.5,en;q=0.3\r\n
  312. Accept-Encoding: gzip, deflate\r\n
  313. Accept-Charset: ISO-8859-9,utf-8;q=0.7,*;q=0.7\r\n
  314. Proxy-Connection: keep-alive\r\n
  315. [truncated] Cookie: PREF=ID=90dfa9d21a141205:U=141523004d8f96f3:FF=0:TM=1325603435:LM=1325603437:S=rNMyuNPOyak30W6p; NID=55=OyY0ovhHF6eZmXuC5HMFW8ZfU3uYzbV4hhpnv10vfQMYe3P7Qg6Y8i4NRHf1Io4_MnVTJOIfchbGZPA1yQLmDM4WhcUBwV-G9sqdqY37t7B5x4AdRLN
  316. Proxy-Authorization: Negotiate TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==\r\n
  317. NTLM Secure Service Provider
  318. NTLMSSP identifier: NTLMSSP
  319. NTLM Message Type: NTLMSSP_NEGOTIATE (0x00000001)
  320. Flags: 0xe2088297
  321. Calling workstation domain: NULL
  322. Calling workstation name: NULL
  323. Version 6.1 (Build 7601); NTLM Current Revision 15
  324. Major Version: 6
  325. Minor Version: 1
  326. Build Number: 7601
  327. NTLM Current Revision: 15
  328. \r\n
  329. [Full request URI: http://www.google.com.trhttp://www.google.com.tr/]
  330.  
  331. No. Time Source Destination Protocol Length Info
  332. 19 4.994808 192.168.0.138 192.168.0.147 TCP 1514 [TCP segment of a reassembled PDU]
  333.  
  334. Frame 19: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
  335. Ethernet II, Src: AewinTec_36:ab:da (00:0d:48:36:ab:da), Dst: Dell_b5:da:71 (00:1c:23:b5:da:71)
  336. Internet Protocol Version 4, Src: 192.168.0.138 (192.168.0.138), Dst: 192.168.0.147 (192.168.0.147)
  337. Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: 49949 (49949), Seq: 1525, Ack: 1972, Len: 1460
  338. Source port: ndl-aas (3128)
  339. Destination port: 49949 (49949)
  340. [Stream index: 0]
  341. Sequence number: 1525 (relative sequence number)
  342. [Next sequence number: 2985 (relative sequence number)]
  343. Acknowledgement number: 1972 (relative ack number)
  344. Header length: 20 bytes
  345. Flags: 0x10 (ACK)
  346. Window size value: 77
  347. [Calculated window size: 9856]
  348. [Window size scaling factor: 128]
  349. Checksum: 0x3b58 [validation disabled]
  350. [SEQ/ACK analysis]
  351. TCP segment data (1460 bytes)
  352.  
  353. No. Time Source Destination Protocol Length Info
  354. 20 4.994857 192.168.0.138 192.168.0.147 HTTP 118 HTTP/1.0 407 Proxy Authentication Required (text/html)
  355.  
  356. Frame 20: 118 bytes on wire (944 bits), 118 bytes captured (944 bits)
  357. Ethernet II, Src: AewinTec_36:ab:da (00:0d:48:36:ab:da), Dst: Dell_b5:da:71 (00:1c:23:b5:da:71)
  358. Internet Protocol Version 4, Src: 192.168.0.138 (192.168.0.138), Dst: 192.168.0.147 (192.168.0.147)
  359. Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: 49949 (49949), Seq: 2985, Ack: 1972, Len: 64
  360. Source port: ndl-aas (3128)
  361. Destination port: 49949 (49949)
  362. [Stream index: 0]
  363. Sequence number: 2985 (relative sequence number)
  364. [Next sequence number: 3049 (relative sequence number)]
  365. Acknowledgement number: 1972 (relative ack number)
  366. Header length: 20 bytes
  367. Flags: 0x18 (PSH, ACK)
  368. Window size value: 77
  369. [Calculated window size: 9856]
  370. [Window size scaling factor: 128]
  371. Checksum: 0xdcdf [validation disabled]
  372. [SEQ/ACK analysis]
  373. TCP segment data (64 bytes)
  374. [2 Reassembled TCP Segments (1524 bytes): #19(1460), #20(64)]
  375. Hypertext Transfer Protocol
  376. HTTP/1.0 407 Proxy Authentication Required\r\n
  377. [Expert Info (Chat/Sequence): HTTP/1.0 407 Proxy Authentication Required\r\n]
  378. Request Version: HTTP/1.0
  379. Status Code: 407
  380. Response Phrase: Proxy Authentication Required
  381. Server: squid/3.1.12\r\n
  382. Mime-Version: 1.0\r\n
  383. Date: Wed, 11 Jan 2012 11:28:01 GMT\r\n
  384. Content-Type: text/html\r\n
  385. Content-Length: 1152\r\n
  386. X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\n
  387. Proxy-Authenticate: Negotiate\r\n
  388. X-Cache: MISS from labris-1\r\n
  389. X-Cache-Lookup: NONE from labris-1:3128\r\n
  390. Via: 1.0 labris-1 (squid/3.1.12)\r\n
  391. Connection: keep-alive\r\n
  392. \r\n
  393. Line-based text data: text/html
  394.  
  395. No. Time Source Destination Protocol Length Info
  396. 21 4.994883 192.168.0.147 192.168.0.138 TCP 54 49949 > ndl-aas [ACK] Seq=1972 Ack=3049 Win=65700 Len=0
  397.  
  398. Frame 21: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
  399. Ethernet II, Src: Dell_b5:da:71 (00:1c:23:b5:da:71), Dst: AewinTec_36:ab:da (00:0d:48:36:ab:da)
  400. Internet Protocol Version 4, Src: 192.168.0.147 (192.168.0.147), Dst: 192.168.0.138 (192.168.0.138)
  401. Transmission Control Protocol, Src Port: 49949 (49949), Dst Port: ndl-aas (3128), Seq: 1972, Ack: 3049, Len: 0
  402. Source port: 49949 (49949)
  403. Destination port: ndl-aas (3128)
  404. [Stream index: 0]
  405. Sequence number: 1972 (relative sequence number)
  406. Acknowledgement number: 3049 (relative ack number)
  407. Header length: 20 bytes
  408. Flags: 0x10 (ACK)
  409. Window size value: 16425
  410. [Calculated window size: 65700]
  411. [Window size scaling factor: 4]
  412. Checksum: 0xa609 [validation disabled]
  413. [SEQ/ACK analysis]
  414.  
  415. No. Time Source Destination Protocol Length Info
  416. 22 5.221317 Hewlett-_8c:43:80 HP_00:00:67 HP 109 HP Switch Protocol
  417.  
  418. Frame 22: 109 bytes on wire (872 bits), 109 bytes captured (872 bits)
  419. IEEE 802.3 Ethernet
  420. Logical-Link Control
  421. HP Extended Local-Link Control
  422. HP Switch Protocol
  423.  
  424. No. Time Source Destination Protocol Length Info
  425. 23 5.999894 3com_dc:2d:95 Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/00:1a:c1:dc:2d:80 Cost = 0 Port = 0x8013
  426.  
  427. Frame 23: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
  428. IEEE 802.3 Ethernet
  429. Logical-Link Control
  430. Spanning Tree Protocol
  431.  
  432. No. Time Source Destination Protocol Length Info
  433. 24 6.817226 ZyxelCom_5e:85:6d Broadcast 0x8899 60 Ethernet II
  434.  
  435. Frame 24: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  436. Ethernet II, Src: ZyxelCom_5e:85:6d (50:67:f0:5e:85:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
  437. Data (46 bytes)
  438.  
  439. 0000 23 d7 fe df 70 b3 26 50 67 f0 5e 85 6d 01 00 00 #...p.&Pg.^.m...
  440. 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  441. 0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..............
  442.  
  443. No. Time Source Destination Protocol Length Info
  444. 25 7.999846 3com_dc:2d:95 Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/00:1a:c1:dc:2d:80 Cost = 0 Port = 0x8013
  445.  
  446. Frame 25: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
  447. IEEE 802.3 Ethernet
  448. Logical-Link Control
  449. Spanning Tree Protocol
  450.  
  451. No. Time Source Destination Protocol Length Info
  452. 26 8.816856 ZyxelCom_5e:85:6d Broadcast 0x8899 60 Ethernet II
  453.  
  454. Frame 26: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
  455. Ethernet II, Src: ZyxelCom_5e:85:6d (50:67:f0:5e:85:6d), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
  456. Data (46 bytes)
  457.  
  458. 0000 23 d7 fe df 70 b3 26 50 67 f0 5e 85 6d 01 00 00 #...p.&Pg.^.m...
  459. 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
  460. 0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..............
  461.  
  462. No. Time Source Destination Protocol Length Info
  463. 27 9.999804 3com_dc:2d:95 Spanning-tree-(for-bridges)_00 STP 64 RST. Root = 32768/0/00:1a:c1:dc:2d:80 Cost = 0 Port = 0x8013
  464.  
  465. Frame 27: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
  466. IEEE 802.3 Ethernet
  467. Logical-Link Control
  468. Spanning Tree Protocol
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!