No. Time Source Destination Protocol Length Info 137730 1170.850870 10.10.35.125 10.10.37.184 TCP 62 53499 > jprinter [SYN] Seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1 Frame 137730: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Arrival Time: Jul 9, 2012 13:46:56.411040000 Pacific Daylight Time Epoch Time: 1341866816.411040000 seconds [Time delta from previous captured frame: 0.000427000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 1170.850870000 seconds] Frame Number: 137730 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Dell_38:33:18 (00:1e:4f:38:33:18), Dst: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Destination: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.35.125 (10.10.35.125), Dst: 10.10.37.184 (10.10.37.184) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 48 Identification: 0x61f5 (25077) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x3b8a [correct] [Good: True] [Bad: False] Source: 10.10.35.125 (10.10.35.125) Destination: 10.10.37.184 (10.10.37.184) Transmission Control Protocol, Src Port: 53499 (53499), Dst Port: jprinter (5309), Seq: 0, Len: 0 Source port: 53499 (53499) Destination port: jprinter (5309) [Stream index: 6359] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port jprinter] [Message: Connection establish request (SYN): server port jprinter] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size value: 8192 [Calculated window size: 8192] Checksum: 0x5aeb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1460 bytes No-Operation (NOP) No-Operation (NOP) TCP SACK Permitted Option: True No. Time Source Destination Protocol Length Info 137731 1170.850890 10.10.37.184 10.10.35.125 TCP 62 jprinter > 53499 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 SACK_PERM=1 Frame 137731: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Arrival Time: Jul 9, 2012 13:46:56.411060000 Pacific Daylight Time Epoch Time: 1341866816.411060000 seconds [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 1170.850890000 seconds] Frame Number: 137731 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Dell_a5:20:2d (bc:30:5b:a5:20:2d), Dst: Dell_38:33:18 (00:1e:4f:38:33:18) Destination: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.37.184 (10.10.37.184), Dst: 10.10.35.125 (10.10.35.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 48 Identification: 0x5706 (22278) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x4679 [correct] [Good: True] [Bad: False] Source: 10.10.37.184 (10.10.37.184) Destination: 10.10.35.125 (10.10.35.125) Transmission Control Protocol, Src Port: jprinter (5309), Dst Port: 53499 (53499), Seq: 0, Ack: 1, Len: 0 Source port: jprinter (5309) Destination port: 53499 (53499) [Stream index: 6359] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port jprinter] [Message: Connection establish acknowledge (SYN+ACK): server port jprinter] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size value: 8192 [Calculated window size: 8192] Checksum: 0xa655 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1460 bytes No-Operation (NOP) No-Operation (NOP) TCP SACK Permitted Option: True [SEQ/ACK analysis] [This is an ACK to the segment in frame: 137730] [The RTT to ACK the segment was: 0.000020000 seconds] No. Time Source Destination Protocol Length Info 137732 1170.851034 10.10.35.125 10.10.37.184 TCP 60 53499 > jprinter [ACK] Seq=1 Ack=1 Win=64240 Len=0 Frame 137732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Arrival Time: Jul 9, 2012 13:46:56.411204000 Pacific Daylight Time Epoch Time: 1341866816.411204000 seconds [Time delta from previous captured frame: 0.000144000 seconds] [Time delta from previous displayed frame: 0.000144000 seconds] [Time since reference or first frame: 1170.851034000 seconds] Frame Number: 137732 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_38:33:18 (00:1e:4f:38:33:18), Dst: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Destination: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol Version 4, Src: 10.10.35.125 (10.10.35.125), Dst: 10.10.37.184 (10.10.37.184) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x61f6 (25078) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x3b91 [correct] [Good: True] [Bad: False] Source: 10.10.35.125 (10.10.35.125) Destination: 10.10.37.184 (10.10.37.184) Transmission Control Protocol, Src Port: 53499 (53499), Dst Port: jprinter (5309), Seq: 1, Ack: 1, Len: 0 Source port: 53499 (53499) Destination port: jprinter (5309) [Stream index: 6359] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf828 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 137731] [The RTT to ACK the segment was: 0.000144000 seconds] No. Time Source Destination Protocol Length Info 137733 1170.851058 10.10.35.125 10.10.37.184 TCP 110 53499 > jprinter [PSH, ACK] Seq=1 Ack=1 Win=64240 Len=56 Frame 137733: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Arrival Time: Jul 9, 2012 13:46:56.411228000 Pacific Daylight Time Epoch Time: 1341866816.411228000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 1170.851058000 seconds] Frame Number: 137733 Frame Length: 110 bytes (880 bits) Capture Length: 110 bytes (880 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_38:33:18 (00:1e:4f:38:33:18), Dst: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Destination: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.35.125 (10.10.35.125), Dst: 10.10.37.184 (10.10.37.184) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 96 Identification: 0x61f7 (25079) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x3b58 [correct] [Good: True] [Bad: False] Source: 10.10.35.125 (10.10.35.125) Destination: 10.10.37.184 (10.10.37.184) Transmission Control Protocol, Src Port: 53499 (53499), Dst Port: jprinter (5309), Seq: 1, Ack: 1, Len: 56 Source port: 53499 (53499) Destination port: jprinter (5309) [Stream index: 6359] Sequence number: 1 (relative sequence number) [Next sequence number: 57 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa81f [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 56] Data (56 bytes) XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X...XXXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX;XXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=X.X.X.XXXX;XXX XXXX XX XX XX XX XX XX XX XX XXXXX=X. Data: 340000004d414348494e453d52555353454c4c3b534f434b... [Length: 56] No. Time Source Destination Protocol Length Info 137734 1170.851409 10.10.35.125 10.10.37.184 TCP 1514 53499 > jprinter [ACK] Seq=57 Ack=1 Win=64240 Len=1460 Frame 137734: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Arrival Time: Jul 9, 2012 13:46:56.411579000 Pacific Daylight Time Epoch Time: 1341866816.411579000 seconds [Time delta from previous captured frame: 0.000351000 seconds] [Time delta from previous displayed frame: 0.000351000 seconds] [Time since reference or first frame: 1170.851409000 seconds] Frame Number: 137734 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_38:33:18 (00:1e:4f:38:33:18), Dst: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Destination: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.35.125 (10.10.35.125), Dst: 10.10.37.184 (10.10.37.184) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1500 Identification: 0x61f8 (25080) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x35db [correct] [Good: True] [Bad: False] Source: 10.10.35.125 (10.10.35.125) Destination: 10.10.37.184 (10.10.37.184) Transmission Control Protocol, Src Port: 53499 (53499), Dst Port: jprinter (5309), Seq: 57, Ack: 1, Len: 1460 Source port: 53499 (53499) Destination port: jprinter (5309) [Stream index: 6359] Sequence number: 57 (relative sequence number) [Next sequence number: 1517 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb0f [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 1516] Data (1460 bytes) XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X$XX$XX......... XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ..........X..... XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ....XXX......... XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ................ XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX `...XXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX.XX.X...X... XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X...X...X...X... XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X...X........... XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ................ XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ................ XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ................ XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ................ XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ................ XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ............X.@. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ................ XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ................ XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX $...<.......!... XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ....X.......XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXX.... XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX.....[XXXXX]. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .XXXXXX=XXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX..XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =XXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXX=XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXX..XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX=XXXX..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX..XXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =X..XXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=XXXX....[XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX]....[XXX]..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX=XXXXX.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX=XXXX..XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXX::XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX :XXXX:XXXX:XXXX. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .XXXXXXXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX..XXXXXXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX::XXX:XXXX:XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX:XXXX..XXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX=XX..XXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX=XXXX::XXX:XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX:XXXX:XXXX..XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXX=XX..XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX=XXX..XXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXX..XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX=XXXXXXX..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXX=XXX.X.X. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX=X.X.X-XX.XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ..XXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX=XXXXX..XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX :XXXX:XXXX:XXXX: XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX:XXXX:XXXX:X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX..XXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX=XXXX:XXXX:X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX:XXXX:XXXX:XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX:XXXX:XXXX..XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX:XXXX:XXXX:XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX:XXXX:XXXX:XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X:XXXX..XXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX=XXX- XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX=XXX- XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX-X..XXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXX..XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =/XXXXX/XX/XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX/XXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .XXX..XXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX=XXXX/X.X.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X/XXXX; XXXXXXX= XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX-X..XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=XXX..XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX=XX..XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ..XXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=XXX..XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=XXXX..XXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX=XXX. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .XXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=XXX..XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX=XXX..XXXXXXX XXXX XX XX XX XX XXXX Data: 5424535024303100010000008c1700008c1700008c170000... [Length: 1460] No. Time Source Destination Protocol Length Info 137735 1170.851432 10.10.37.184 10.10.35.125 TCP 54 jprinter > 53499 [ACK] Seq=1 Ack=1517 Win=64240 Len=0 Frame 137735: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Arrival Time: Jul 9, 2012 13:46:56.411602000 Pacific Daylight Time Epoch Time: 1341866816.411602000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 1170.851432000 seconds] Frame Number: 137735 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_a5:20:2d (bc:30:5b:a5:20:2d), Dst: Dell_38:33:18 (00:1e:4f:38:33:18) Destination: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.37.184 (10.10.37.184), Dst: 10.10.35.125 (10.10.35.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x5707 (22279) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x4680 [correct] [Good: True] [Bad: False] Source: 10.10.37.184 (10.10.37.184) Destination: 10.10.35.125 (10.10.35.125) Transmission Control Protocol, Src Port: jprinter (5309), Dst Port: 53499 (53499), Seq: 1, Ack: 1517, Len: 0 Source port: jprinter (5309) Destination port: 53499 (53499) [Stream index: 6359] Sequence number: 1 (relative sequence number) Acknowledgement number: 1517 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf23c [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 137734] [The RTT to ACK the segment was: 0.000023000 seconds] No. Time Source Destination Protocol Length Info 137736 1170.851639 10.10.37.184 10.10.35.125 TCP 54 jprinter > 53499 [FIN, ACK] Seq=1 Ack=1517 Win=64240 Len=0 Frame 137736: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Arrival Time: Jul 9, 2012 13:46:56.411809000 Pacific Daylight Time Epoch Time: 1341866816.411809000 seconds [Time delta from previous captured frame: 0.000207000 seconds] [Time delta from previous displayed frame: 0.000207000 seconds] [Time since reference or first frame: 1170.851639000 seconds] Frame Number: 137736 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Dell_a5:20:2d (bc:30:5b:a5:20:2d), Dst: Dell_38:33:18 (00:1e:4f:38:33:18) Destination: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.37.184 (10.10.37.184), Dst: 10.10.35.125 (10.10.35.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x5708 (22280) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x467f [correct] [Good: True] [Bad: False] Source: 10.10.37.184 (10.10.37.184) Destination: 10.10.35.125 (10.10.35.125) Transmission Control Protocol, Src Port: jprinter (5309), Dst Port: 53499 (53499), Seq: 1, Ack: 1517, Len: 0 Source port: jprinter (5309) Destination port: 53499 (53499) [Stream index: 6359] Sequence number: 1 (relative sequence number) Acknowledgement number: 1517 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...1 = Fin: Set [Expert Info (Chat/Sequence): Connection finish (FIN)] [Message: Connection finish (FIN)] [Severity level: Chat] [Group: Sequence] Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf23b [validation disabled] [Good Checksum: False] [Bad Checksum: False] No. Time Source Destination Protocol Length Info 137737 1170.851898 10.10.35.125 10.10.37.184 TCP 1514 53499 > jprinter [ACK] Seq=1517 Ack=1 Win=64240 Len=1460 Frame 137737: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Arrival Time: Jul 9, 2012 13:46:56.412068000 Pacific Daylight Time Epoch Time: 1341866816.412068000 seconds [Time delta from previous captured frame: 0.000259000 seconds] [Time delta from previous displayed frame: 0.000259000 seconds] [Time since reference or first frame: 1170.851898000 seconds] Frame Number: 137737 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_38:33:18 (00:1e:4f:38:33:18), Dst: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Destination: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.35.125 (10.10.35.125), Dst: 10.10.37.184 (10.10.37.184) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1500 Identification: 0x61f9 (25081) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x35da [correct] [Good: True] [Bad: False] Source: 10.10.35.125 (10.10.35.125) Destination: 10.10.37.184 (10.10.37.184) Transmission Control Protocol, Src Port: 53499 (53499), Dst Port: jprinter (5309), Seq: 1517, Ack: 1, Len: 1460 Source port: 53499 (53499) Destination port: jprinter (5309) [Stream index: 6359] Sequence number: 1517 (relative sequence number) [Next sequence number: 2977 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x45f2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 1460] Data (1460 bytes) XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXX=XXX-X..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXXXXXXX= XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX..XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX=XXXXX..XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX=X..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXX=*/*.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX=XX-XX..XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXX=XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX..XXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX=XXXX://XXX. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X.XXX/XXXXX/XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X.XXX/XXX-XXX-XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX/XXXXXX-XXXX.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXX=XXX.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXX=/XXXXX/X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX.XXX/XXX-XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX -XXXX/XXXXXX-XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX=XXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX; XXXX..XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX..XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX /XXX..XXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=X..XXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=X..XXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXX= XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXX=X.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX=XXXX.X.X.X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ..XXXXXXXXXXX=XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXX=XXXX, XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX..XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXXXXX/X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .X (XXXXXXXXXX; XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX X.X; XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X XX X.X; .XXX X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X.X.XXXX; .XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X XXX X.X.XXXXX; XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .XXX XXX X.X.XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX.XX; XX-XXX X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X X)..XXXXXXXXX= XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX.XXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX.XXX..XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX..XXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX=XXXX-XXXXX.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=XX-XXXXX..XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX=XXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =XXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X; XXXXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX; XXXXX=X; XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX; XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =XXXXXXXXX.XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXX.X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXX.XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX.XXXXXXXXXX. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X; XXXXXX=XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX.XX.XX.XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX; XXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX.XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X.X.X.XXXXXX=(XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX)|XXXXXX=(XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX)|XXXXXX=(XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX); XXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX.XXXXXX%XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXX; XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX; XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =XXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X; XXXXXX=XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX; XXXX=XXXX; XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX=%XX%XXX%XX% XXXX XX XX XX XX XX.. Data: 4e434f44494e473d5554462d380d0a52657143616e63656c... [Length: 1460] No. Time Source Destination Protocol Length Info 137738 1170.851926 10.10.37.184 10.10.35.125 TCP 54 jprinter > 53499 [RST, ACK] Seq=2 Ack=2977 Win=0 Len=0 Frame 137738: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Arrival Time: Jul 9, 2012 13:46:56.412096000 Pacific Daylight Time Epoch Time: 1341866816.412096000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 1170.851926000 seconds] Frame Number: 137738 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: Dell_a5:20:2d (bc:30:5b:a5:20:2d), Dst: Dell_38:33:18 (00:1e:4f:38:33:18) Destination: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.37.184 (10.10.37.184), Dst: 10.10.35.125 (10.10.35.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x570b (22283) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x467c [correct] [Good: True] [Bad: False] Source: 10.10.37.184 (10.10.37.184) Destination: 10.10.35.125 (10.10.35.125) Transmission Control Protocol, Src Port: jprinter (5309), Dst Port: 53499 (53499), Seq: 2, Ack: 2977, Len: 0 Source port: jprinter (5309) Destination port: 53499 (53499) [Stream index: 6359] Sequence number: 2 (relative sequence number) Acknowledgement number: 2977 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .1.. = Reset: Set [Expert Info (Chat/Sequence): Connection reset (RST)] [Message: Connection reset (RST)] [Severity level: Chat] [Group: Sequence] .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe774 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 137737] [The RTT to ACK the segment was: 0.000028000 seconds] No. Time Source Destination Protocol Length Info 137739 1170.851986 10.10.35.125 10.10.37.184 TCP 1514 53499 > jprinter [ACK] Seq=2977 Ack=1 Win=64240 Len=1460 Frame 137739: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Arrival Time: Jul 9, 2012 13:46:56.412156000 Pacific Daylight Time Epoch Time: 1341866816.412156000 seconds [Time delta from previous captured frame: 0.000060000 seconds] [Time delta from previous displayed frame: 0.000060000 seconds] [Time since reference or first frame: 1170.851986000 seconds] Frame Number: 137739 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_38:33:18 (00:1e:4f:38:33:18), Dst: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Destination: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.35.125 (10.10.35.125), Dst: 10.10.37.184 (10.10.37.184) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1500 Identification: 0x61fa (25082) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x35d9 [correct] [Good: True] [Bad: False] Source: 10.10.35.125 (10.10.35.125) Destination: 10.10.37.184 (10.10.37.184) Transmission Control Protocol, Src Port: 53499 (53499), Dst Port: jprinter (5309), Seq: 2977, Ack: 1, Len: 1460 Source port: 53499 (53499) Destination port: jprinter (5309) [Stream index: 6359] Sequence number: 2977 (relative sequence number) [Next sequence number: 4437 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc7e5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 1460] Data (1460 bytes) XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXX= XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXX; XXXX=/; XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=.XXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXX.XXX.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX..XXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ....[XXXXXXXXX]. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .XXXXXXXXXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX-XX-XXXXX:XX: XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX.XXXX..XXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X-XX-XXXXX:XX:XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .XXXX..XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX=XXXX-XX-XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX:XX:XX.XXXX.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=XXXX-XX-XXXXX: XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX:XX.XXXXXXX..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=XXXX-XX-XXXXX: XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX:XX.XXXXXXX..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XX..XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=XXX..XXXXXXX= XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXX=XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ..XXXXXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX..XXXXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =XXX..XXXXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXX..XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=X..XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=XXXXX..XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=XXXXXXXXXXX.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXX=X..XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXXX..XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX=XXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX..XXXXXXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ............[XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX]....[XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX]..XXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXX..XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX=XXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX..XXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =XXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX..XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=X..XXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXX..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX=XXXXXXXXX. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX.XXXXXXXXXX.X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXX.XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX.X..XXXXXX=X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXX.XX.XX.X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXX..XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=XXXXXXXXX.XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX.X.X.XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=(XXXXXX)|XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=(XXXXXX)|XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X=(XXXX)..XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX =XXXXXXXXX.XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X/XXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX..XXXXXX=XXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXX..XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX=XXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX..XXXXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX..XXXX=XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXX=[[X]]..X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXX=XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ......[XXXX]...... XXXX XX XX XX XX 53499 [RST] Seq=1 Win=0 Len=0 Frame 137740: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Arrival Time: Jul 9, 2012 13:46:56.412167000 Pacific Daylight Time Epoch Time: 1341866816.412167000 seconds [Time delta from previous captured frame: 0.000011000 seconds] [Time delta from previous displayed frame: 0.000011000 seconds] [Time since reference or first frame: 1170.851997000 seconds] Frame Number: 137740 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: Dell_a5:20:2d (bc:30:5b:a5:20:2d), Dst: Dell_38:33:18 (00:1e:4f:38:33:18) Destination: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.37.184 (10.10.37.184), Dst: 10.10.35.125 (10.10.35.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x570c (22284) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x467b [correct] [Good: True] [Bad: False] Source: 10.10.37.184 (10.10.37.184) Destination: 10.10.35.125 (10.10.35.125) Transmission Control Protocol, Src Port: jprinter (5309), Dst Port: 53499 (53499), Seq: 1, Len: 0 Source port: jprinter (5309) Destination port: 53499 (53499) [Stream index: 6359] Sequence number: 1 (relative sequence number) Acknowledgement number: Broken TCP. The acknowledge field is nonzero while the ACK flag is not set Header length: 20 bytes Flags: 0x04 (RST) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .1.. = Reset: Set [Expert Info (Chat/Sequence): Connection reset (RST)] [Message: Connection reset (RST)] [Severity level: Chat] [Group: Sequence] .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x03d4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] No. Time Source Destination Protocol Length Info 137741 1170.852095 10.10.35.125 10.10.37.184 TCP 1514 53499 > jprinter [ACK] Seq=4437 Ack=1 Win=64240 Len=1460 Frame 137741: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Arrival Time: Jul 9, 2012 13:46:56.412265000 Pacific Daylight Time Epoch Time: 1341866816.412265000 seconds [Time delta from previous captured frame: 0.000098000 seconds] [Time delta from previous displayed frame: 0.000098000 seconds] [Time since reference or first frame: 1170.852095000 seconds] Frame Number: 137741 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp:data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_38:33:18 (00:1e:4f:38:33:18), Dst: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Destination: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.35.125 (10.10.35.125), Dst: 10.10.37.184 (10.10.37.184) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 1500 Identification: 0x61fb (25083) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x35d8 [correct] [Good: True] [Bad: False] Source: 10.10.35.125 (10.10.35.125) Destination: 10.10.37.184 (10.10.37.184) Transmission Control Protocol, Src Port: 53499 (53499), Dst Port: jprinter (5309), Seq: 4437, Ack: 1, Len: 1460 Source port: 53499 (53499) Destination port: jprinter (5309) [Stream index: 6359] Sequence number: 4437 (relative sequence number) [Next sequence number: 5897 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8bf6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Bytes in flight: 2920] Data (1460 bytes) XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX>.. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX .. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX ....XXXX/X.X XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX..XXXX: XXX, XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX XXXX XX:X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X:XX XXX..XXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX : XXXXXX/X.X.X ( XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXX)..XXX-XXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX: XXXXXX=XXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXXX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXX; XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX=/; XXXXXX=.XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXXXXXXXXXXXX. XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXX..X-XXXXXXX-X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X: XXX/X.X.X..XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXXX-XXXXXX: XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX X..XXXXXXXXXX: X XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XXXX..XXXXXXX-XX XXXX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX: XXXX/XXXX; X XXXX XX XX XX XX XXXX Data: 71756573743e0d0a20202020202020202020202020202020... [Length: 1460] No. Time Source Destination Protocol Length Info 137742 1170.852098 10.10.35.125 10.10.37.184 TCP 60 53499 > jprinter [ACK] Seq=5897 Ack=2 Win=64240 Len=0 Frame 137742: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Arrival Time: Jul 9, 2012 13:46:56.412268000 Pacific Daylight Time Epoch Time: 1341866816.412268000 seconds [Time delta from previous captured frame: 0.000003000 seconds] [Time delta from previous displayed frame: 0.000003000 seconds] [Time since reference or first frame: 1170.852098000 seconds] Frame Number: 137742 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_38:33:18 (00:1e:4f:38:33:18), Dst: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Destination: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol Version 4, Src: 10.10.35.125 (10.10.35.125), Dst: 10.10.37.184 (10.10.37.184) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x61fd (25085) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x3b8a [correct] [Good: True] [Bad: False] Source: 10.10.35.125 (10.10.35.125) Destination: 10.10.37.184 (10.10.37.184) Transmission Control Protocol, Src Port: 53499 (53499), Dst Port: jprinter (5309), Seq: 5897, Ack: 2, Len: 0 Source port: 53499 (53499) Destination port: jprinter (5309) [Stream index: 6359] Sequence number: 5897 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgement: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe11f [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 137736] [The RTT to ACK the segment was: 0.000459000 seconds] No. Time Source Destination Protocol Length Info 137743 1170.852113 10.10.37.184 10.10.35.125 TCP 54 jprinter > 53499 [RST] Seq=1 Win=0 Len=0 Frame 137743: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Arrival Time: Jul 9, 2012 13:46:56.412283000 Pacific Daylight Time Epoch Time: 1341866816.412283000 seconds [Time delta from previous captured frame: 0.000015000 seconds] [Time delta from previous displayed frame: 0.000015000 seconds] [Time since reference or first frame: 1170.852113000 seconds] Frame Number: 137743 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: Dell_a5:20:2d (bc:30:5b:a5:20:2d), Dst: Dell_38:33:18 (00:1e:4f:38:33:18) Destination: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.37.184 (10.10.37.184), Dst: 10.10.35.125 (10.10.35.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x570d (22285) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x467a [correct] [Good: True] [Bad: False] Source: 10.10.37.184 (10.10.37.184) Destination: 10.10.35.125 (10.10.35.125) Transmission Control Protocol, Src Port: jprinter (5309), Dst Port: 53499 (53499), Seq: 1, Len: 0 Source port: jprinter (5309) Destination port: 53499 (53499) [Stream index: 6359] Sequence number: 1 (relative sequence number) Acknowledgement number: Broken TCP. The acknowledge field is nonzero while the ACK flag is not set Header length: 20 bytes Flags: 0x04 (RST) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .1.. = Reset: Set [Expert Info (Chat/Sequence): Connection reset (RST)] [Message: Connection reset (RST)] [Severity level: Chat] [Group: Sequence] .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x03d4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] No. Time Source Destination Protocol Length Info 137744 1170.852129 10.10.37.184 10.10.35.125 TCP 54 jprinter > 53499 [RST] Seq=2 Win=0 Len=0 Frame 137744: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Arrival Time: Jul 9, 2012 13:46:56.412299000 Pacific Daylight Time Epoch Time: 1341866816.412299000 seconds [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 1170.852129000 seconds] Frame Number: 137744 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: True] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: Dell_a5:20:2d (bc:30:5b:a5:20:2d), Dst: Dell_38:33:18 (00:1e:4f:38:33:18) Destination: Dell_38:33:18 (00:1e:4f:38:33:18) Address: Dell_38:33:18 (00:1e:4f:38:33:18) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Dell_a5:20:2d (bc:30:5b:a5:20:2d) Address: Dell_a5:20:2d (bc:30:5b:a5:20:2d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol Version 4, Src: 10.10.37.184 (10.10.37.184), Dst: 10.10.35.125 (10.10.35.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 40 Identification: 0x570e (22286) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x4679 [correct] [Good: True] [Bad: False] Source: 10.10.37.184 (10.10.37.184) Destination: 10.10.35.125 (10.10.35.125) Transmission Control Protocol, Src Port: jprinter (5309), Dst Port: 53499 (53499), Seq: 2, Len: 0 Source port: jprinter (5309) Destination port: 53499 (53499) [Stream index: 6359] Sequence number: 2 (relative sequence number) Acknowledgement number: Broken TCP. The acknowledge field is nonzero while the ACK flag is not set Header length: 20 bytes Flags: 0x04 (RST) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .1.. = Reset: Set [Expert Info (Chat/Sequence): Connection reset (RST)] [Message: Connection reset (RST)] [Severity level: Chat] [Group: Sequence] .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x03d2 [validation disabled] [Good Checksum: False] [Bad Checksum: False]