API tools faq
paste
Guest User

pcap 2 text

a guest
Dec 29th, 2011
218
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 26.57 KB | None | 0 0
raw download clone embed print report
  1. Frame 1: 534 bytes on wire (4272 bits), 534 bytes captured (4272 bits)
  2. Arrival Time: Dec 29, 2011 19:14:32.669370000 EST
  3. Epoch Time: 1325146472.669370000 seconds
  4. [Time delta from previous captured frame: 0.000000000 seconds]
  5. [Time delta from previous displayed frame: 0.000000000 seconds]
  6. [Time since reference or first frame: 0.000000000 seconds]
  7. Frame Number: 1
  8. Frame Length: 534 bytes (4272 bits)
  9. Capture Length: 534 bytes (4272 bits)
  10. [Frame is marked: False]
  11. [Frame is ignored: False]
  12. [Protocols in frame: eth:ip:tcp:data]
  13. Ethernet II, Src: Apple_9c:21:e1 (40:d3:2d:9c:21:e1), Dst: Apple_15:77:8a (60:33:4b:15:77:8a)
  14. Destination: Apple_15:77:8a (60:33:4b:15:77:8a)
  15. Address: Apple_15:77:8a (60:33:4b:15:77:8a)
  16. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  17. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  18. Source: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  19. Address: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  20. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  21. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  22. Type: IP (0x0800)
  23. Internet Protocol Version 4, Src: 10.0.1.5 (10.0.1.5), Dst: 10.0.1.3 (10.0.1.3)
  24. Version: 4
  25. Header length: 20 bytes
  26. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  27. 0000 00.. = Differentiated Services Codepoint: Default (0x00)
  28. .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
  29. Total Length: 520
  30. Identification: 0x9564 (38244)
  31. Flags: 0x02 (Don't Fragment)
  32. 0... .... = Reserved bit: Not set
  33. .1.. .... = Don't fragment: Set
  34. ..0. .... = More fragments: Not set
  35. Fragment offset: 0
  36. Time to live: 64
  37. Protocol: TCP (6)
  38. Header checksum: 0x8d84 [correct]
  39. [Good: True]
  40. [Bad: False]
  41. Source: 10.0.1.5 (10.0.1.5)
  42. Destination: 10.0.1.3 (10.0.1.3)
  43. Transmission Control Protocol, Src Port: 54449 (54449), Dst Port: 57097 (57097), Seq: 1, Ack: 1, Len: 468
  44. Source port: 54449 (54449)
  45. Destination port: 57097 (57097)
  46. [Stream index: 0]
  47. Sequence number: 1 (relative sequence number)
  48. [Next sequence number: 469 (relative sequence number)]
  49. Acknowledgement number: 1 (relative ack number)
  50. Header length: 32 bytes
  51. Flags: 0x18 (PSH, ACK)
  52. 000. .... .... = Reserved: Not set
  53. ...0 .... .... = Nonce: Not set
  54. .... 0... .... = Congestion Window Reduced (CWR): Not set
  55. .... .0.. .... = ECN-Echo: Not set
  56. .... ..0. .... = Urgent: Not set
  57. .... ...1 .... = Acknowledgement: Set
  58. .... .... 1... = Push: Set
  59. .... .... .0.. = Reset: Not set
  60. .... .... ..0. = Syn: Not set
  61. .... .... ...0 = Fin: Not set
  62. Window size value: 8192
  63. [Calculated window size: 8192]
  64. [Window size scaling factor: -1 (unknown)]
  65. Checksum: 0xe27a [validation disabled]
  66. [Good Checksum: False]
  67. [Bad Checksum: False]
  68. Options: (12 bytes)
  69. No-Operation (NOP)
  70. No-Operation (NOP)
  71. Timestamps: TSval 802015701, TSecr 350202652
  72. Kind: Timestamp (8)
  73. Length: 10
  74. Timestamp value: 802015701
  75. Timestamp echo reply: 350202652
  76. [SEQ/ACK analysis]
  77. [Bytes in flight: 468]
  78. Data (468 bytes)
  79.  
  80. 0000 d0 01 00 00 62 70 6c 69 73 74 30 30 d4 01 02 03 ....bplist00....
  81. 0010 04 05 08 28 29 54 24 74 6f 70 58 24 6f 62 6a 65 ...()T$topX$obje
  82. 0020 63 74 73 58 24 76 65 72 73 69 6f 6e 59 24 61 72 ctsX$versionY$ar
  83. 0030 63 68 69 76 65 72 d1 06 07 54 72 6f 6f 74 80 01 chiver...Troot..
  84. 0040 a8 09 0a 15 16 17 1b 23 24 55 24 6e 75 6c 6c d3 .......#$U$null.
  85. 0050 0b 0c 0d 0e 11 14 5a 4e 53 2e 6f 62 6a 65 63 74 ......ZNS.object
  86. 0060 73 57 4e 53 2e 6b 65 79 73 56 24 63 6c 61 73 73 sWNS.keysV$class
  87. 0070 a2 0f 10 80 04 80 06 a2 12 13 80 02 80 03 80 07 ................
  88. 0080 57 6d 65 73 73 61 67 65 54 66 72 6f 6d d2 18 0d WmessageTfrom...
  89. 0090 19 1a 59 4e 53 2e 73 74 72 69 6e 67 5a 50 6c 61 ..YNS.stringZPla
  90. 00a0 79 20 6d 75 73 69 63 80 05 d2 1c 1d 1e 22 58 24 y music......"X$
  91. 00b0 63 6c 61 73 73 65 73 5a 24 63 6c 61 73 73 6e 61 classesZ$classna
  92. 00c0 6d 65 a3 1f 20 21 5f 10 0f 4e 53 4d 75 74 61 62 me.. !_..NSMutab
  93. 00d0 6c 65 53 74 72 69 6e 67 58 4e 53 53 74 72 69 6e leStringXNSStrin
  94. 00e0 67 58 4e 53 4f 62 6a 65 63 74 5f 10 0f 4e 53 4d gXNSObject_..NSM
  95. 00f0 75 74 61 62 6c 65 53 74 72 69 6e 67 5f 10 28 65 utableString_.(e
  96. 0100 62 39 63 30 37 36 36 32 66 65 62 38 31 64 38 38 b9c07662feb81d88
  97. 0110 33 62 63 31 39 64 30 37 31 66 32 61 64 62 38 39 3bc19d071f2adb89
  98. 0120 36 66 37 66 65 35 66 d2 1c 1d 25 27 a2 26 21 5c 6f7fe5f...%'.&!\
  99. 0130 4e 53 44 69 63 74 69 6f 6e 61 72 79 5c 4e 53 44 NSDictionary\NSD
  100. 0140 69 63 74 69 6f 6e 61 72 79 12 00 01 86 a0 5f 10 ictionary....._.
  101. 0150 0f 4e 53 4b 65 79 65 64 41 72 63 68 69 76 65 72 .NSKeyedArchiver
  102. 0160 00 08 00 11 00 16 00 1f 00 28 00 32 00 35 00 3a .........(.2.5.:
  103. 0170 00 3c 00 45 00 4b 00 52 00 5d 00 65 00 6c 00 6f .<.E.K.R.].e.l.o
  104. 0180 00 71 00 73 00 76 00 78 00 7a 00 7c 00 84 00 89 .q.s.v.x.z.|....
  105. 0190 00 8e 00 98 00 a3 00 a5 00 aa 00 b3 00 be 00 c2 ................
  106. 01a0 00 d4 00 dd 00 e6 00 f8 01 23 01 28 01 2b 01 38 .........#.(.+.8
  107. 01b0 01 45 01 4a 00 00 00 00 00 00 02 01 00 00 00 00 .E.J............
  108. 01c0 00 00 00 2a 00 00 00 00 00 00 00 00 00 00 00 00 ...*............
  109. 01d0 00 00 01 5c ...\
  110. Data: d001000062706c6973743030d40102030405082829542474...
  111. [Length: 468]
  112.  
  113. Frame 2: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  114. Arrival Time: Dec 29, 2011 19:14:32.669566000 EST
  115. Epoch Time: 1325146472.669566000 seconds
  116. [Time delta from previous captured frame: 0.000196000 seconds]
  117. [Time delta from previous displayed frame: 0.000196000 seconds]
  118. [Time since reference or first frame: 0.000196000 seconds]
  119. Frame Number: 2
  120. Frame Length: 66 bytes (528 bits)
  121. Capture Length: 66 bytes (528 bits)
  122. [Frame is marked: False]
  123. [Frame is ignored: False]
  124. [Protocols in frame: eth:ip:tcp]
  125. Ethernet II, Src: Apple_15:77:8a (60:33:4b:15:77:8a), Dst: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  126. Destination: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  127. Address: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  128. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  129. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  130. Source: Apple_15:77:8a (60:33:4b:15:77:8a)
  131. Address: Apple_15:77:8a (60:33:4b:15:77:8a)
  132. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  133. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  134. Type: IP (0x0800)
  135. Internet Protocol Version 4, Src: 10.0.1.3 (10.0.1.3), Dst: 10.0.1.5 (10.0.1.5)
  136. Version: 4
  137. Header length: 20 bytes
  138. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  139. 0000 00.. = Differentiated Services Codepoint: Default (0x00)
  140. .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
  141. Total Length: 52
  142. Identification: 0xf239 (62009)
  143. Flags: 0x02 (Don't Fragment)
  144. 0... .... = Reserved bit: Not set
  145. .1.. .... = Don't fragment: Set
  146. ..0. .... = More fragments: Not set
  147. Fragment offset: 0
  148. Time to live: 64
  149. Protocol: TCP (6)
  150. Header checksum: 0x3283 [correct]
  151. [Good: True]
  152. [Bad: False]
  153. Source: 10.0.1.3 (10.0.1.3)
  154. Destination: 10.0.1.5 (10.0.1.5)
  155. Transmission Control Protocol, Src Port: 57097 (57097), Dst Port: 54449 (54449), Seq: 1, Ack: 469, Len: 0
  156. Source port: 57097 (57097)
  157. Destination port: 54449 (54449)
  158. [Stream index: 0]
  159. Sequence number: 1 (relative sequence number)
  160. Acknowledgement number: 469 (relative ack number)
  161. Header length: 32 bytes
  162. Flags: 0x10 (ACK)
  163. 000. .... .... = Reserved: Not set
  164. ...0 .... .... = Nonce: Not set
  165. .... 0... .... = Congestion Window Reduced (CWR): Not set
  166. .... .0.. .... = ECN-Echo: Not set
  167. .... ..0. .... = Urgent: Not set
  168. .... ...1 .... = Acknowledgement: Set
  169. .... .... 0... = Push: Not set
  170. .... .... .0.. = Reset: Not set
  171. .... .... ..0. = Syn: Not set
  172. .... .... ...0 = Fin: Not set
  173. Window size value: 65535
  174. [Calculated window size: 65535]
  175. [Window size scaling factor: -1 (unknown)]
  176. Checksum: 0x65ed [validation disabled]
  177. [Good Checksum: False]
  178. [Bad Checksum: False]
  179. Options: (12 bytes)
  180. No-Operation (NOP)
  181. No-Operation (NOP)
  182. Timestamps: TSval 350233444, TSecr 802015701
  183. Kind: Timestamp (8)
  184. Length: 10
  185. Timestamp value: 350233444
  186. Timestamp echo reply: 802015701
  187. [SEQ/ACK analysis]
  188. [This is an ACK to the segment in frame: 1]
  189. [The RTT to ACK the segment was: 0.000196000 seconds]
  190.  
  191. Frame 3: 387 bytes on wire (3096 bits), 387 bytes captured (3096 bits)
  192. Arrival Time: Dec 29, 2011 19:14:32.795418000 EST
  193. Epoch Time: 1325146472.795418000 seconds
  194. [Time delta from previous captured frame: 0.125852000 seconds]
  195. [Time delta from previous displayed frame: 0.125852000 seconds]
  196. [Time since reference or first frame: 0.126048000 seconds]
  197. Frame Number: 3
  198. Frame Length: 387 bytes (3096 bits)
  199. Capture Length: 387 bytes (3096 bits)
  200. [Frame is marked: False]
  201. [Frame is ignored: False]
  202. [Protocols in frame: eth:ip:tcp:data]
  203. Ethernet II, Src: Apple_15:77:8a (60:33:4b:15:77:8a), Dst: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  204. Destination: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  205. Address: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  206. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  207. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  208. Source: Apple_15:77:8a (60:33:4b:15:77:8a)
  209. Address: Apple_15:77:8a (60:33:4b:15:77:8a)
  210. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  211. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  212. Type: IP (0x0800)
  213. Internet Protocol Version 4, Src: 10.0.1.3 (10.0.1.3), Dst: 10.0.1.5 (10.0.1.5)
  214. Version: 4
  215. Header length: 20 bytes
  216. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  217. 0000 00.. = Differentiated Services Codepoint: Default (0x00)
  218. .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
  219. Total Length: 373
  220. Identification: 0xbe27 (48679)
  221. Flags: 0x02 (Don't Fragment)
  222. 0... .... = Reserved bit: Not set
  223. .1.. .... = Don't fragment: Set
  224. ..0. .... = More fragments: Not set
  225. Fragment offset: 0
  226. Time to live: 64
  227. Protocol: TCP (6)
  228. Header checksum: 0x6554 [correct]
  229. [Good: True]
  230. [Bad: False]
  231. Source: 10.0.1.3 (10.0.1.3)
  232. Destination: 10.0.1.5 (10.0.1.5)
  233. Transmission Control Protocol, Src Port: 57097 (57097), Dst Port: 54449 (54449), Seq: 1, Ack: 469, Len: 321
  234. Source port: 57097 (57097)
  235. Destination port: 54449 (54449)
  236. [Stream index: 0]
  237. Sequence number: 1 (relative sequence number)
  238. [Next sequence number: 322 (relative sequence number)]
  239. Acknowledgement number: 469 (relative ack number)
  240. Header length: 32 bytes
  241. Flags: 0x18 (PSH, ACK)
  242. 000. .... .... = Reserved: Not set
  243. ...0 .... .... = Nonce: Not set
  244. .... 0... .... = Congestion Window Reduced (CWR): Not set
  245. .... .0.. .... = ECN-Echo: Not set
  246. .... ..0. .... = Urgent: Not set
  247. .... ...1 .... = Acknowledgement: Set
  248. .... .... 1... = Push: Set
  249. .... .... .0.. = Reset: Not set
  250. .... .... ..0. = Syn: Not set
  251. .... .... ...0 = Fin: Not set
  252. Window size value: 65535
  253. [Calculated window size: 65535]
  254. [Window size scaling factor: -1 (unknown)]
  255. Checksum: 0x6359 [validation disabled]
  256. [Good Checksum: False]
  257. [Bad Checksum: False]
  258. Options: (12 bytes)
  259. No-Operation (NOP)
  260. No-Operation (NOP)
  261. Timestamps: TSval 350233568, TSecr 802015701
  262. Kind: Timestamp (8)
  263. Length: 10
  264. Timestamp value: 350233568
  265. Timestamp echo reply: 802015701
  266. [SEQ/ACK analysis]
  267. [Bytes in flight: 321]
  268. Data (321 bytes)
  269.  
  270. 0000 3d 01 00 00 62 70 6c 69 73 74 30 30 d4 01 02 03 =...bplist00....
  271. 0010 04 05 06 1d 1e 58 24 76 65 72 73 69 6f 6e 58 24 .....X$versionX$
  272. 0020 6f 62 6a 65 63 74 73 59 24 61 72 63 68 69 76 65 objectsY$archive
  273. 0030 72 54 24 74 6f 70 12 00 01 86 a0 a7 07 08 13 14 rT$top..........
  274. 0040 15 16 17 55 24 6e 75 6c 6c d3 09 0a 0b 0c 0d 10 ...U$null.......
  275. 0050 56 24 63 6c 61 73 73 57 4e 53 2e 6b 65 79 73 5a V$classWNS.keysZ
  276. 0060 4e 53 2e 6f 62 6a 65 63 74 73 80 06 a2 0e 0f 80 NS.objects......
  277. 0070 02 80 03 a2 11 12 80 04 80 05 57 6d 65 73 73 61 ..........Wmessa
  278. 0080 67 65 54 66 72 6f 6d 5f 10 1f 50 6c 61 79 69 6e geTfrom_..Playin
  279. 0090 67 20 79 6f 75 72 20 6d 75 73 69 63 2e 2e 2e 7c g your music...|
  280. 00a0 7c 7c 6d 65 73 73 61 67 65 58 43 6f 6d 70 75 74 ||messageXComput
  281. 00b0 65 72 d2 18 19 1a 1b 5a 24 63 6c 61 73 73 6e 61 er.....Z$classna
  282. 00c0 6d 65 58 24 63 6c 61 73 73 65 73 5c 4e 53 44 69 meX$classes\NSDi
  283. 00d0 63 74 69 6f 6e 61 72 79 a2 1a 1c 58 4e 53 4f 62 ctionary...XNSOb
  284. 00e0 6a 65 63 74 5f 10 0f 4e 53 4b 65 79 65 64 41 72 ject_..NSKeyedAr
  285. 00f0 63 68 69 76 65 72 d1 1f 20 54 72 6f 6f 74 80 01 chiver.. Troot..
  286. 0100 08 11 1a 23 2d 32 37 3f 45 4c 53 5b 66 68 6b 6d ...#-27?ELS[fhkm
  287. 0110 6f 72 74 76 7e 83 a5 ae b3 be c7 d4 d7 e0 f2 f5 ortv~...........
  288. 0120 fa 00 00 00 00 00 00 01 01 00 00 00 00 00 00 00 ................
  289. 0130 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 !...............
  290. 0140 fc .
  291. Data: 3d01000062706c6973743030d40102030405061d1e582476...
  292. [Length: 321]
  293.  
  294. Frame 4: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  295. Arrival Time: Dec 29, 2011 19:14:32.878666000 EST
  296. Epoch Time: 1325146472.878666000 seconds
  297. [Time delta from previous captured frame: 0.083248000 seconds]
  298. [Time delta from previous displayed frame: 0.083248000 seconds]
  299. [Time since reference or first frame: 0.209296000 seconds]
  300. Frame Number: 4
  301. Frame Length: 66 bytes (528 bits)
  302. Capture Length: 66 bytes (528 bits)
  303. [Frame is marked: False]
  304. [Frame is ignored: False]
  305. [Protocols in frame: eth:ip:tcp]
  306. Ethernet II, Src: Apple_9c:21:e1 (40:d3:2d:9c:21:e1), Dst: Apple_15:77:8a (60:33:4b:15:77:8a)
  307. Destination: Apple_15:77:8a (60:33:4b:15:77:8a)
  308. Address: Apple_15:77:8a (60:33:4b:15:77:8a)
  309. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  310. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  311. Source: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  312. Address: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  313. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  314. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  315. Type: IP (0x0800)
  316. Internet Protocol Version 4, Src: 10.0.1.5 (10.0.1.5), Dst: 10.0.1.3 (10.0.1.3)
  317. Version: 4
  318. Header length: 20 bytes
  319. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  320. 0000 00.. = Differentiated Services Codepoint: Default (0x00)
  321. .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
  322. Total Length: 52
  323. Identification: 0x5e09 (24073)
  324. Flags: 0x02 (Don't Fragment)
  325. 0... .... = Reserved bit: Not set
  326. .1.. .... = Don't fragment: Set
  327. ..0. .... = More fragments: Not set
  328. Fragment offset: 0
  329. Time to live: 64
  330. Protocol: TCP (6)
  331. Header checksum: 0xc6b3 [correct]
  332. [Good: True]
  333. [Bad: False]
  334. Source: 10.0.1.5 (10.0.1.5)
  335. Destination: 10.0.1.3 (10.0.1.3)
  336. Transmission Control Protocol, Src Port: 54449 (54449), Dst Port: 57097 (57097), Seq: 469, Ack: 322, Len: 0
  337. Source port: 54449 (54449)
  338. Destination port: 57097 (57097)
  339. [Stream index: 0]
  340. Sequence number: 469 (relative sequence number)
  341. Acknowledgement number: 322 (relative ack number)
  342. Header length: 32 bytes
  343. Flags: 0x10 (ACK)
  344. 000. .... .... = Reserved: Not set
  345. ...0 .... .... = Nonce: Not set
  346. .... 0... .... = Congestion Window Reduced (CWR): Not set
  347. .... .0.. .... = ECN-Echo: Not set
  348. .... ..0. .... = Urgent: Not set
  349. .... ...1 .... = Acknowledgement: Set
  350. .... .... 0... = Push: Not set
  351. .... .... .0.. = Reset: Not set
  352. .... .... ..0. = Syn: Not set
  353. .... .... ...0 = Fin: Not set
  354. Window size value: 8171
  355. [Calculated window size: 8171]
  356. [Window size scaling factor: -1 (unknown)]
  357. Checksum: 0x4295 [validation disabled]
  358. [Good Checksum: False]
  359. [Bad Checksum: False]
  360. Options: (12 bytes)
  361. No-Operation (NOP)
  362. No-Operation (NOP)
  363. Timestamps: TSval 802016133, TSecr 350233568
  364. Kind: Timestamp (8)
  365. Length: 10
  366. Timestamp value: 802016133
  367. Timestamp echo reply: 350233568
  368. [SEQ/ACK analysis]
  369. [This is an ACK to the segment in frame: 3]
  370. [The RTT to ACK the segment was: 0.083248000 seconds]
  371.  
  372. Frame 5: 489 bytes on wire (3912 bits), 489 bytes captured (3912 bits)
  373. Arrival Time: Dec 29, 2011 19:14:33.198805000 EST
  374. Epoch Time: 1325146473.198805000 seconds
  375. [Time delta from previous captured frame: 0.320139000 seconds]
  376. [Time delta from previous displayed frame: 0.320139000 seconds]
  377. [Time since reference or first frame: 0.529435000 seconds]
  378. Frame Number: 5
  379. Frame Length: 489 bytes (3912 bits)
  380. Capture Length: 489 bytes (3912 bits)
  381. [Frame is marked: False]
  382. [Frame is ignored: False]
  383. [Protocols in frame: eth:ip:tcp:data]
  384. Ethernet II, Src: Apple_15:77:8a (60:33:4b:15:77:8a), Dst: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  385. Destination: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  386. Address: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  387. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  388. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  389. Source: Apple_15:77:8a (60:33:4b:15:77:8a)
  390. Address: Apple_15:77:8a (60:33:4b:15:77:8a)
  391. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  392. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  393. Type: IP (0x0800)
  394. Internet Protocol Version 4, Src: 10.0.1.3 (10.0.1.3), Dst: 10.0.1.5 (10.0.1.5)
  395. Version: 4
  396. Header length: 20 bytes
  397. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  398. 0000 00.. = Differentiated Services Codepoint: Default (0x00)
  399. .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
  400. Total Length: 475
  401. Identification: 0x0b08 (2824)
  402. Flags: 0x02 (Don't Fragment)
  403. 0... .... = Reserved bit: Not set
  404. .1.. .... = Don't fragment: Set
  405. ..0. .... = More fragments: Not set
  406. Fragment offset: 0
  407. Time to live: 64
  408. Protocol: TCP (6)
  409. Header checksum: 0x180e [correct]
  410. [Good: True]
  411. [Bad: False]
  412. Source: 10.0.1.3 (10.0.1.3)
  413. Destination: 10.0.1.5 (10.0.1.5)
  414. Transmission Control Protocol, Src Port: 57097 (57097), Dst Port: 54449 (54449), Seq: 322, Ack: 469, Len: 423
  415. Source port: 57097 (57097)
  416. Destination port: 54449 (54449)
  417. [Stream index: 0]
  418. Sequence number: 322 (relative sequence number)
  419. [Next sequence number: 745 (relative sequence number)]
  420. Acknowledgement number: 469 (relative ack number)
  421. Header length: 32 bytes
  422. Flags: 0x18 (PSH, ACK)
  423. 000. .... .... = Reserved: Not set
  424. ...0 .... .... = Nonce: Not set
  425. .... 0... .... = Congestion Window Reduced (CWR): Not set
  426. .... .0.. .... = ECN-Echo: Not set
  427. .... ..0. .... = Urgent: Not set
  428. .... ...1 .... = Acknowledgement: Set
  429. .... .... 1... = Push: Set
  430. .... .... .0.. = Reset: Not set
  431. .... .... ..0. = Syn: Not set
  432. .... .... ...0 = Fin: Not set
  433. Window size value: 65535
  434. [Calculated window size: 65535]
  435. [Window size scaling factor: -1 (unknown)]
  436. Checksum: 0x3807 [validation disabled]
  437. [Good Checksum: False]
  438. [Bad Checksum: False]
  439. Options: (12 bytes)
  440. No-Operation (NOP)
  441. No-Operation (NOP)
  442. Timestamps: TSval 350233969, TSecr 802016133
  443. Kind: Timestamp (8)
  444. Length: 10
  445. Timestamp value: 350233969
  446. Timestamp echo reply: 802016133
  447. [SEQ/ACK analysis]
  448. [Bytes in flight: 423]
  449. Data (423 bytes)
  450.  
  451. 0000 a3 01 00 00 62 70 6c 69 73 74 30 30 d4 01 02 03 ....bplist00....
  452. 0010 04 05 06 1d 1e 58 24 76 65 72 73 69 6f 6e 58 24 .....X$versionX$
  453. 0020 6f 62 6a 65 63 74 73 59 24 61 72 63 68 69 76 65 objectsY$archive
  454. 0030 72 54 24 74 6f 70 12 00 01 86 a0 a7 07 08 13 14 rT$top..........
  455. 0040 15 16 17 55 24 6e 75 6c 6c d3 09 0a 0b 0c 0d 10 ...U$null.......
  456. 0050 56 24 63 6c 61 73 73 57 4e 53 2e 6b 65 79 73 5a V$classWNS.keysZ
  457. 0060 4e 53 2e 6f 62 6a 65 63 74 73 80 06 a2 0e 0f 80 NS.objects......
  458. 0070 02 80 03 a2 11 12 80 04 80 05 57 6d 65 73 73 61 ..........Wmessa
  459. 0080 67 65 54 66 72 6f 6d 5f 10 64 43 6f 70 69 65 64 geTfrom_.dCopied
  460. 0090 20 74 68 65 20 74 65 78 74 20 6f 6e 74 6f 20 79 the text onto y
  461. 00a0 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 63 6c 69 our computer cli
  462. 00b0 70 62 6f 61 72 64 20 28 61 6e 64 20 70 6c 61 63 pboard (and plac
  463. 00c0 65 64 20 69 74 20 69 6e 74 6f 20 61 6e 79 20 73 ed it into any s
  464. 00d0 65 6c 65 63 74 65 64 20 74 65 78 74 20 66 69 65 elected text fie
  465. 00e0 6c 64 73 29 7c 7c 7c 6d 65 73 73 61 67 65 58 43 lds)|||messageXC
  466. 00f0 6f 6d 70 75 74 65 72 d2 18 19 1a 1b 5a 24 63 6c omputer.....Z$cl
  467. 0100 61 73 73 6e 61 6d 65 58 24 63 6c 61 73 73 65 73 assnameX$classes
  468. 0110 5c 4e 53 44 69 63 74 69 6f 6e 61 72 79 a2 1a 1c \NSDictionary...
  469. 0120 58 4e 53 4f 62 6a 65 63 74 5f 10 0f 4e 53 4b 65 XNSObject_..NSKe
  470. 0130 79 65 64 41 72 63 68 69 76 65 72 d1 1f 20 54 72 yedArchiver.. Tr
  471. 0140 6f 6f 74 80 01 00 08 00 11 00 1a 00 23 00 2d 00 oot.........#.-.
  472. 0150 32 00 37 00 3f 00 45 00 4c 00 53 00 5b 00 66 00 2.7.?.E.L.S.[.f.
  473. 0160 68 00 6b 00 6d 00 6f 00 72 00 74 00 76 00 7e 00 h.k.m.o.r.t.v.~.
  474. 0170 83 00 ea 00 f3 00 f8 01 03 01 0c 01 19 01 1c 01 ................
  475. 0180 25 01 37 01 3a 01 3f 00 00 00 00 00 00 02 01 00 %.7.:.?.........
  476. 0190 00 00 00 00 00 00 21 00 00 00 00 00 00 00 00 00 ......!.........
  477. 01a0 00 00 00 00 00 01 41 ......A
  478. Data: a301000062706c6973743030d40102030405061d1e582476...
  479. [Length: 423]
  480.  
  481. Frame 6: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
  482. Arrival Time: Dec 29, 2011 19:14:33.390478000 EST
  483. Epoch Time: 1325146473.390478000 seconds
  484. [Time delta from previous captured frame: 0.191673000 seconds]
  485. [Time delta from previous displayed frame: 0.191673000 seconds]
  486. [Time since reference or first frame: 0.721108000 seconds]
  487. Frame Number: 6
  488. Frame Length: 66 bytes (528 bits)
  489. Capture Length: 66 bytes (528 bits)
  490. [Frame is marked: False]
  491. [Frame is ignored: False]
  492. [Protocols in frame: eth:ip:tcp]
  493. Ethernet II, Src: Apple_9c:21:e1 (40:d3:2d:9c:21:e1), Dst: Apple_15:77:8a (60:33:4b:15:77:8a)
  494. Destination: Apple_15:77:8a (60:33:4b:15:77:8a)
  495. Address: Apple_15:77:8a (60:33:4b:15:77:8a)
  496. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  497. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  498. Source: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  499. Address: Apple_9c:21:e1 (40:d3:2d:9c:21:e1)
  500. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  501. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  502. Type: IP (0x0800)
  503. Internet Protocol Version 4, Src: 10.0.1.5 (10.0.1.5), Dst: 10.0.1.3 (10.0.1.3)
  504. Version: 4
  505. Header length: 20 bytes
  506. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  507. 0000 00.. = Differentiated Services Codepoint: Default (0x00)
  508. .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
  509. Total Length: 52
  510. Identification: 0x4c0a (19466)
  511. Flags: 0x02 (Don't Fragment)
  512. 0... .... = Reserved bit: Not set
  513. .1.. .... = Don't fragment: Set
  514. ..0. .... = More fragments: Not set
  515. Fragment offset: 0
  516. Time to live: 64
  517. Protocol: TCP (6)
  518. Header checksum: 0xd8b2 [correct]
  519. [Good: True]
  520. [Bad: False]
  521. Source: 10.0.1.5 (10.0.1.5)
  522. Destination: 10.0.1.3 (10.0.1.3)
  523. Transmission Control Protocol, Src Port: 54449 (54449), Dst Port: 57097 (57097), Seq: 469, Ack: 745, Len: 0
  524. Source port: 54449 (54449)
  525. Destination port: 57097 (57097)
  526. [Stream index: 0]
  527. Sequence number: 469 (relative sequence number)
  528. Acknowledgement number: 745 (relative ack number)
  529. Header length: 32 bytes
  530. Flags: 0x10 (ACK)
  531. 000. .... .... = Reserved: Not set
  532. ...0 .... .... = Nonce: Not set
  533. .... 0... .... = Congestion Window Reduced (CWR): Not set
  534. .... .0.. .... = ECN-Echo: Not set
  535. .... ..0. .... = Urgent: Not set
  536. .... ...1 .... = Acknowledgement: Set
  537. .... .... 0... = Push: Not set
  538. .... .... .0.. = Reset: Not set
  539. .... .... ..0. = Syn: Not set
  540. .... .... ...0 = Fin: Not set
  541. Window size value: 8165
  542. [Calculated window size: 8165]
  543. [Window size scaling factor: -1 (unknown)]
  544. Checksum: 0x3d68 [validation disabled]
  545. [Good Checksum: False]
  546. [Bad Checksum: False]
  547. Options: (12 bytes)
  548. No-Operation (NOP)
  549. No-Operation (NOP)
  550. Timestamps: TSval 802016640, TSecr 350233969
  551. Kind: Timestamp (8)
  552. Length: 10
  553. Timestamp value: 802016640
  554. Timestamp echo reply: 350233969
  555. [SEQ/ACK analysis]
  556. [This is an ACK to the segment in frame: 5]
  557. [The RTT to ACK the segment was: 0.191673000 seconds]
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!