Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Frame 2451 (182 bytes on wire, 182 bytes captured)
- Arrival Time: Aug 8, 2011 08:52:18.482870000
- [Time delta from previous captured frame: 0.000485000 seconds]
- [Time delta from previous displayed frame: 0.008419000 seconds]
- [Time since reference or first frame: 7.796408000 seconds]
- Frame Number: 2451
- Frame Length: 182 bytes
- Capture Length: 182 bytes
- [Frame is marked: False]
- [Protocols in frame: eth:ip:tcp:rpc:nfs]
- [Coloring Rule Name: TCP]
- [Coloring Rule String: tcp]
- Ethernet II, Src: Apple_28:41:89 (00:23:12:28:41:89), Dst: Apple_d7:9c:90 (00:25:00:d7:9c:90)
- Destination: Apple_d7:9c:90 (00:25:00:d7:9c:90)
- Address: Apple_d7:9c:90 (00:25:00:d7:9c:90)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- Source: Apple_28:41:89 (00:23:12:28:41:89)
- Address: Apple_28:41:89 (00:23:12:28:41:89)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- Type: IP (0x0800)
- Internet Protocol, Src: 192.168.0.135 (192.168.0.135), Dst: 192.168.0.75 (192.168.0.75)
- Version: 4
- Header length: 20 bytes
- Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
- 0000 00.. = Differentiated Services Codepoint: Default (0x00)
- .... ..0. = ECN-Capable Transport (ECT): 0
- .... ...0 = ECN-CE: 0
- Total Length: 168
- Identification: 0x6e99 (28313)
- Flags: 0x02 (Don't Fragment)
- 0.. = Reserved bit: Not Set
- .1. = Don't fragment: Set
- ..0 = More fragments: Not Set
- Fragment offset: 0
- Time to live: 64
- Protocol: TCP (0x06)
- Header checksum: 0x4994 [correct]
- [Good: True]
- [Bad : False]
- Source: 192.168.0.135 (192.168.0.135)
- Destination: 192.168.0.75 (192.168.0.75)
- Transmission Control Protocol, Src Port: 50090 (50090), Dst Port: nfs (2049), Seq: 22105, Ack: 3553601, Len: 128
- Source port: 50090 (50090)
- Destination port: nfs (2049)
- [Stream index: 12]
- Sequence number: 22105 (relative sequence number)
- [Next sequence number: 22233 (relative sequence number)]
- Acknowledgement number: 3553601 (relative ack number)
- Header length: 20 bytes
- Flags: 0x18 (PSH, ACK)
- 0... .... = Congestion Window Reduced (CWR): Not set
- .0.. .... = ECN-Echo: Not set
- ..0. .... = Urgent: Not set
- ...1 .... = Acknowledgement: Set
- .... 1... = Push: Set
- .... .0.. = Reset: Not set
- .... ..0. = Syn: Not set
- .... ...0 = Fin: Not set
- Window size: 65535
- Checksum: 0x8b09 [validation disabled]
- [Good Checksum: False]
- [Bad Checksum: False]
- [SEQ/ACK analysis]
- [Number of bytes in flight: 128]
- Remote Procedure Call, Type:Call XID:0x000000af
- Fragment header: Last fragment, 124 bytes
- 1... .... .... .... .... .... .... .... = Last Fragment: Yes
- .000 0000 0000 0000 0000 0000 0111 1100 = Fragment Length: 124
- XID: 0xaf (175)
- Message Type: Call (0)
- RPC Version: 2
- Program: NFS (100003)
- Program Version: 3
- Procedure: READ (6)
- [The reply to this request is in frame 2455]
- Credentials
- Flavor: AUTH_UNIX (1)
- Length: 44
- Stamp: 0x4e3f4140
- Machine Name: slurp
- length: 5
- contents: slurp
- fill bytes: opaque data
- UID: 501
- GID: 501
- Auxiliary GIDs
- GID: 501
- GID: 79
- GID: 80
- GID: 81
- Verifier
- Flavor: AUTH_NULL (0)
- Length: 0
- Network File System, READ Call FH:0xa3330d1c Offset:214378574 Len:32768
- [Program Version: 3]
- [V3 Procedure: READ (6)]
- file
- length: 24
- [hash: 0xa3330d1c]
- decode type as: unknown
- filehandle: 4E580000ED6BAE2600000001000000080000079000000790
- offset: 214378574
- count: 32768
- No. Time Source Destination Protocol Info
- 2455 7.797887 192.168.0.75 192.168.0.135 NFS V3 READ Reply (Call In 2451) Len:32768
- Frame 2455 (834 bytes on wire, 834 bytes captured)
- Arrival Time: Aug 8, 2011 08:52:18.484349000
- [Time delta from previous captured frame: 0.000016000 seconds]
- [Time delta from previous displayed frame: 0.001479000 seconds]
- [Time since reference or first frame: 7.797887000 seconds]
- Frame Number: 2455
- Frame Length: 834 bytes
- Capture Length: 834 bytes
- [Frame is marked: False]
- [Protocols in frame: eth:ip:tcp:rpc]
- [Coloring Rule Name: Checksum Errors]
- [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
- Ethernet II, Src: Apple_d7:9c:90 (00:25:00:d7:9c:90), Dst: Apple_28:41:89 (00:23:12:28:41:89)
- Destination: Apple_28:41:89 (00:23:12:28:41:89)
- Address: Apple_28:41:89 (00:23:12:28:41:89)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- Source: Apple_d7:9c:90 (00:25:00:d7:9c:90)
- Address: Apple_d7:9c:90 (00:25:00:d7:9c:90)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- Type: IP (0x0800)
- Internet Protocol, Src: 192.168.0.75 (192.168.0.75), Dst: 192.168.0.135 (192.168.0.135)
- Version: 4
- Header length: 20 bytes
- Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
- 0000 00.. = Differentiated Services Codepoint: Default (0x00)
- .... ..0. = ECN-Capable Transport (ECT): 0
- .... ...0 = ECN-CE: 0
- Total Length: 820
- Identification: 0x47d7 (18391)
- Flags: 0x02 (Don't Fragment)
- 0.. = Reserved bit: Not Set
- .1. = Don't fragment: Set
- ..0 = More fragments: Not Set
- Fragment offset: 0
- Time to live: 64
- Protocol: TCP (0x06)
- Header checksum: 0x0000 [incorrect, should be 0x6dca]
- [Good: False]
- [Bad : True]
- [Expert Info (Error/Checksum): Bad checksum]
- [Message: Bad checksum]
- [Severity level: Error]
- [Group: Checksum]
- Source: 192.168.0.75 (192.168.0.75)
- Destination: 192.168.0.135 (192.168.0.135)
- Transmission Control Protocol, Src Port: nfs (2049), Dst Port: 50090 (50090), Seq: 3585721, Ack: 22233, Len: 780
- Source port: nfs (2049)
- Destination port: 50090 (50090)
- [Stream index: 12]
- Sequence number: 3585721 (relative sequence number)
- [Next sequence number: 3586501 (relative sequence number)]
- Acknowledgement number: 22233 (relative ack number)
- Header length: 20 bytes
- Flags: 0x18 (PSH, ACK)
- 0... .... = Congestion Window Reduced (CWR): Not set
- .0.. .... = ECN-Echo: Not set
- ..0. .... = Urgent: Not set
- ...1 .... = Acknowledgement: Set
- .... 1... = Push: Set
- .... .0.. = Reset: Not set
- .... ..0. = Syn: Not set
- .... ...0 = Fin: Not set
- Window size: 33580
- Checksum: 0x8549 [validation disabled]
- [Good Checksum: False]
- [Bad Checksum: False]
- [SEQ/ACK analysis]
- [Number of bytes in flight: 32900]
- TCP segment data (780 bytes)
- [Reassembled TCP Segments (32900 bytes): #2453(16060), #2454(16060), #2455(780)]
- [Frame: 2453, payload: 0-16059 (16060 bytes)]
- [Frame: 2454, payload: 16060-32119 (16060 bytes)]
- [Frame: 2455, payload: 32120-32899 (780 bytes)]
- Remote Procedure Call, Type:Reply XID:0x000000af
- Fragment header: Last fragment, 32896 bytes
- 1... .... .... .... .... .... .... .... = Last Fragment: Yes
- .000 0000 0000 0000 1000 0000 1000 0000 = Fragment Length: 32896
- XID: 0xaf (175)
- Message Type: Reply (1)
- [Program: NFS (100003)]
- [Program Version: 3]
- [Procedure: READ (6)]
- Reply State: accepted (0)
- [This is a reply to a request in frame 2451]
- [Time from request: 0.001479000 seconds]
- Verifier
- Flavor: AUTH_NULL (0)
- Length: 0
- Accept State: RPC executed successfully (0)
- Network File System, READ Reply Len:32768
- [Program Version: 3]
- [V3 Procedure: READ (6)]
- Status: NFS3_OK (0)
- file_attributes Regular File mode:0777 uid:501 gid:20
- attributes_follow: value follows (1)
- attributes Regular File mode:0777 uid:501 gid:20
- Type: Regular File (1)
- mode: 0777
- 0... .... .... = not SUID
- .0.. .... .... = not SGID
- ..0. .... .... = not save swapped text
- ...1 .... .... = Read permission for owner
- .... 1... .... = Write permission for owner
- .... .1.. .... = Execute permission for owner
- .... ..1. .... = Read permission for group
- .... ...1 .... = Write permission for group
- .... .... 1... = Execute permission for group
- .... .... .1.. = Read permission for others
- .... .... ..1. = Write permission for others
- .... .... ...1 = Execute permission for others
- nlink: 1
- uid: 501
- gid: 20
- size: 575084500
- used: 575086592
- rdev: 0,0
- specdata1: 0
- specdata2: 0
- fsid: 0x000000000e00000a
- fileid: 1936
- atime: Aug 8, 2011 08:52:18.000000000
- seconds: 1312768338
- nano seconds: 0
- mtime: Oct 11, 2010 08:38:46.000000000
- seconds: 1286761126
- nano seconds: 0
- ctime: Jul 31, 2011 23:57:02.000000000
- seconds: 1312131422
- nano seconds: 0
- count: 32768
- EOF: No
- Data: <DATA>
- length: 32768
- contents: <DATA>
- No. Time Source Destination Protocol Info
- 2462 7.819163 192.168.0.135 192.168.0.75 NFS V3 READ Call, FH:0xa3330d1c Offset:214411342 Len:38724
- Frame 2462 (182 bytes on wire, 182 bytes captured)
- Arrival Time: Aug 8, 2011 08:52:18.505625000
- [Time delta from previous captured frame: 0.012659000 seconds]
- [Time delta from previous displayed frame: 0.021276000 seconds]
- [Time since reference or first frame: 7.819163000 seconds]
- Frame Number: 2462
- Frame Length: 182 bytes
- Capture Length: 182 bytes
- [Frame is marked: False]
- [Protocols in frame: eth:ip:tcp:rpc:nfs]
- [Coloring Rule Name: TCP]
- [Coloring Rule String: tcp]
- Ethernet II, Src: Apple_28:41:89 (00:23:12:28:41:89), Dst: Apple_d7:9c:90 (00:25:00:d7:9c:90)
- Destination: Apple_d7:9c:90 (00:25:00:d7:9c:90)
- Address: Apple_d7:9c:90 (00:25:00:d7:9c:90)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- Source: Apple_28:41:89 (00:23:12:28:41:89)
- Address: Apple_28:41:89 (00:23:12:28:41:89)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- Type: IP (0x0800)
- Internet Protocol, Src: 192.168.0.135 (192.168.0.135), Dst: 192.168.0.75 (192.168.0.75)
- Version: 4
- Header length: 20 bytes
- Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
- 0000 00.. = Differentiated Services Codepoint: Default (0x00)
- .... ..0. = ECN-Capable Transport (ECT): 0
- .... ...0 = ECN-CE: 0
- Total Length: 168
- Identification: 0x6ea0 (28320)
- Flags: 0x02 (Don't Fragment)
- 0.. = Reserved bit: Not Set
- .1. = Don't fragment: Set
- ..0 = More fragments: Not Set
- Fragment offset: 0
- Time to live: 64
- Protocol: TCP (0x06)
- Header checksum: 0x498d [correct]
- [Good: True]
- [Bad : False]
- Source: 192.168.0.135 (192.168.0.135)
- Destination: 192.168.0.75 (192.168.0.75)
- Transmission Control Protocol, Src Port: 50090 (50090), Dst Port: nfs (2049), Seq: 22233, Ack: 3586501, Len: 128
- Source port: 50090 (50090)
- Destination port: nfs (2049)
- [Stream index: 12]
- Sequence number: 22233 (relative sequence number)
- [Next sequence number: 22361 (relative sequence number)]
- Acknowledgement number: 3586501 (relative ack number)
- Header length: 20 bytes
- Flags: 0x18 (PSH, ACK)
- 0... .... = Congestion Window Reduced (CWR): Not set
- .0.. .... = ECN-Echo: Not set
- ..0. .... = Urgent: Not set
- ...1 .... = Acknowledgement: Set
- .... 1... = Push: Set
- .... .0.. = Reset: Not set
- .... ..0. = Syn: Not set
- .... ...0 = Fin: Not set
- Window size: 65535
- Checksum: 0x72bf [validation disabled]
- [Good Checksum: False]
- [Bad Checksum: False]
- [SEQ/ACK analysis]
- [This is an ACK to the segment in frame: 2455]
- [The RTT to ACK the segment was: 0.021276000 seconds]
- [Number of bytes in flight: 128]
- Remote Procedure Call, Type:Call XID:0x000000b0
- Fragment header: Last fragment, 124 bytes
- 1... .... .... .... .... .... .... .... = Last Fragment: Yes
- .000 0000 0000 0000 0000 0000 0111 1100 = Fragment Length: 124
- XID: 0xb0 (176)
- Message Type: Call (0)
- RPC Version: 2
- Program: NFS (100003)
- Program Version: 3
- Procedure: READ (6)
- Credentials
- Flavor: AUTH_UNIX (1)
- Length: 44
- Stamp: 0x4e3f4140
- Machine Name: slurp
- length: 5
- contents: slurp
- fill bytes: opaque data
- UID: 501
- GID: 501
- Auxiliary GIDs
- GID: 501
- GID: 79
- GID: 80
- GID: 81
- Verifier
- Flavor: AUTH_NULL (0)
- Length: 0
- Network File System, READ Call FH:0xa3330d1c Offset:214411342 Len:38724
- [Program Version: 3]
- [V3 Procedure: READ (6)]
- file
- length: 24
- [hash: 0xa3330d1c]
- decode type as: unknown
- filehandle: 4E580000ED6BAE2600000001000000080000079000000790
- offset: 214411342
- count: 38724
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement