[En-Nut-Discussion] TCP/IP-Problems
Brett Abbott
Brett.Abbott at digital-telemetry.com
Fri Jun 2 04:59:49 CEST 2006
Hi
Things are hectic here at present, apologies for delay.
From what I can tell from your trace, it looks like the Ethernut isnt
listening to all of the packets. I suspect this is due to the resends
from the Siemens unit. It looks like the siemens is resending packets -
even on the trace that you say works with the oirignal unit!
also, It looks like the nut is confused by the sequence numbers
following a RST from the Siemens unit.
A couple of basics to check.
1. I note the working trace and the faulty trace both have the same mac
address for the nut. If this is a single Nut then no issue. If you
have two nut's - they have the same MAC address and youll have to fix it.
2. I suggest you do some tracing inside the stack - looking at the IP
packet trace, the resend timer shouldnt be kicking in. This will
possibly be due to confusion with the RST's and multiple SYN's. I have
seen something similar within Vodafone's network - it happens every few
months when their firewall comes under DOS attack - the result is a Nut
gets some odd RST packets and results in Nut losing the plot and it
becomes Resend City Arizona. As yet I havent been able to reproduce the
cause and have included reboot code when I detect it. Sounds like a
similar issue - but reproduceable. Looking at the IP trace you provided
- it initially looks like the SYN, SYN/ACK, ACK sequence is fine but
clearly the Nut (probably) thinks other wise. I suspect the prior
packets RST as culprits.
Please let me know of any progress.
Thanks
Brett
Dirk Becker wrote:
> Hi Brett,
>
> thanx for your reply.
> Further down you can find a tcpip-dump of the working station.
> The problem with the long delay seems to be the TCP/IP-retransmission
> timer, it happens only shortly after sytem start (a bit strange, but
> probably not the real problem). A bit further down you can find
> packets where no retransmissions happen, but also no data is sent and
> the Ethernut? ends the connection.
> Dusan Ferbas pointed out, that it might be connected with MSS not
> accepted by the Ethernut and he suggestet me changing MSS. With his
> help the LEAN version now sometimes accepts some data but then the
> connection is dropped again suddenly after 1 packet with data (300
> Bytes).
>
> Kind regards,
>
> Dirk
>
>
>
>
> ---------------------------------------
> Dump of old SPS-version (working):
> Packetyzer Trace:
>
> Frame 1 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 15:18:17.970579000
> Time delta from previous packet: -8.618967000 seconds
> Time since reference or first frame: 0.000000000 seconds
> Frame Number: 1
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:6f:15:cf
> Destination: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Type: IP (0x0800)
> Trailer: 0000
> Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
> 192.168.98.89 (192.168.98.89)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 44
> Identification: 0x0002 (2)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 64
> Protocol: TCP (0x06)
> Header checksum: 0x34e6 (correct)
> Source: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Destination: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 0, Ack: 0, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 0 (relative sequence number)
> Header length: 24 bytes
> Flags: 0x0002 (SYN)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...0 .... = Acknowledgment: Not set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..1. = Syn: Set
> .... ...0 = Fin: Not set
> Window size: 3216
> Checksum: 0x01e7 (correct)
> Options: (4 bytes)
> TCP MSS Option: True
> Maximum segment size: 536 bytes
>
> 0000: 08 00 06 6F 15 CF 00 06 98 01 04 FB 08 00 45 00 ...o..........E.
> 0010: 00 2C 00 02 00 00 40 06 34 E6 C0 A8 62 3A C0 A8 .,.... at .4...b:..
> 0020: 62 59 0F A1 0F A1 00 00 28 25 00 00 00 00 60 02 bY......(%....`.
> 0030: 0C 90 01 E7 00 00 02 04 02 18 00 00 ............
>
> Frame 2 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 15:18:17.971319000
> Time delta from previous packet: 0.000740000 seconds
> Time since reference or first frame: 0.000740000 seconds
> Frame Number: 2
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 08:00:06:6f:15:cf, Dst: 00:06:98:01:04:fb
> Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Type: IP (0x0800)
> Trailer: 0000
> Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
> 192.168.98.58 (192.168.98.58)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 44
> Identification: 0x0a6f (2671)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 60
> Protocol: TCP (0x06)
> Header checksum: 0x2e79 (correct)
> Source: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Destination: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 0, Ack: 1, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 0 (relative sequence number)
> Acknowledgement number: 1 (relative ack number)
> Header length: 24 bytes
> Flags: 0x0012 (SYN, ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..1. = Syn: Set
> .... ...0 = Fin: Not set
> Window size: 560
> Checksum: 0x11f9 (correct)
> Options: (4 bytes)
> TCP MSS Option: True
> Maximum segment size: 512 bytes
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 1
> The RTT to ACK the segment was: 0.000740000 seconds
>
> 0000: 00 06 98 01 04 FB 08 00 06 6F 15 CF 08 00 45 00 .........o....E.
> 0010: 00 2C 0A 6F 00 00 3C 06 2E 79 C0 A8 62 59 C0 A8 .,.o..<..y..bY..
> 0020: 62 3A 0F A1 0F A1 09 B5 F0 9F 00 00 28 26 60 12 b:..........(&`.
> 0030: 02 30 11 F9 00 00 02 04 02 00 00 00 .0..........
>
> Frame 3 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 15:18:17.972600000
> Time delta from previous packet: 0.001281000 seconds
> Time since reference or first frame: 0.002021000 seconds
> Frame Number: 3
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:6f:15:cf
> Destination: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
> 192.168.98.89 (192.168.98.89)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0x0003 (3)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 64
> Protocol: TCP (0x06)
> Header checksum: 0x34e9 (correct)
> Source: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Destination: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 1, Ack: 1, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 1 (relative sequence number)
> Acknowledgement number: 1 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0010 (ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 3216
> Checksum: 0x1ba2 (correct)
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 2
> The RTT to ACK the segment was: 0.001281000 seconds
> TCP Analysis Flags
> This is a TCP duplicate ack
> Duplicate ACK #: 1
> Duplicate to the ACK in frame: 3
>
> 0000: 08 00 06 6F 15 CF 00 06 98 01 04 FB 08 00 45 00 ...o..........E.
> 0010: 00 28 00 03 00 00 40 06 34 E9 C0 A8 62 3A C0 A8 .(.... at .4...b:..
> 0020: 62 59 0F A1 0F A1 00 00 28 26 09 B5 F0 A0 50 10 bY......(&....P.
> 0030: 0C 90 1B A2 00 00 00 00 00 00 00 00 ............
>
> Frame 4 (354 bytes on wire, 354 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 15:18:18.958219000
> Time delta from previous packet: 0.985619000 seconds
> Time since reference or first frame: 0.987640000 seconds
> Frame Number: 4
> Packet Length: 354 bytes
> Capture Length: 354 bytes
> Protocols in frame: eth:ip:tcp:data
> Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:6f:15:cf
> Destination: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Type: IP (0x0800)
> Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
> 192.168.98.89 (192.168.98.89)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 340
> Identification: 0x0004 (4)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 64
> Protocol: TCP (0x06)
> Header checksum: 0x33bc (correct)
> Source: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Destination: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 1, Ack: 1, Len: 300
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 300
> Sequence number: 1 (relative sequence number)
> Next sequence number: 301 (relative sequence number)
> Acknowledgement number: 1 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0018 (PSH, ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 1... = Push: Set
> .... .0.. = Reset: Not set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 3216
> Checksum: 0x9485 (correct)
> SEQ/ACK analysis
> TCP Analysis Flags
> This frame is a (suspected) retransmission
> Data (300 bytes)
>
> 0000: 08 00 06 6F 15 CF 00 06 98 01 04 FB 08 00 45 00 ...o..........E.
> 0010: 01 54 00 04 00 00 40 06 33 BC C0 A8 62 3A C0 A8 .T.... at .3...b:..
> 0020: 62 59 0F A1 0F A1 00 00 28 26 09 B5 F0 A0 50 18 bY......(&....P.
> 0030: 0C 90 94 85 00 00 41 42 43 44 00 00 00 01 00 F9 ......ABCD......
> 0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................
> 0050: 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .`..............
> 0060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 0160: 00 00 ..
>
> Frame 5 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 15:18:18.959123000
> Time delta from previous packet: 0.000904000 seconds
> Time since reference or first frame: 0.988544000 seconds
> Frame Number: 5
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 08:00:06:6f:15:cf, Dst: 00:06:98:01:04:fb
> Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
> 192.168.98.58 (192.168.98.58)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0x0a70 (2672)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 60
> Protocol: TCP (0x06)
> Header checksum: 0x2e7c (correct)
> Source: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Destination: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 1, Ack: 301, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 1 (relative sequence number)
> Acknowledgement number: 301 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0010 (ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 500
> Checksum: 0x2512 (correct)
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 4
> The RTT to ACK the segment was: 0.000904000 seconds
> TCP Analysis Flags
> This is a TCP duplicate ack
> This is a ZeroWindow segment
> Duplicate ACK #: 1
> Duplicate to the ACK in frame: 5
>
> 0000: 00 06 98 01 04 FB 08 00 06 6F 15 CF 08 00 45 00 .........o....E.
> 0010: 00 28 0A 70 00 00 3C 06 2E 7C C0 A8 62 59 C0 A8 .(.p..<..|..bY..
> 0020: 62 3A 0F A1 0F A1 09 B5 F0 A0 00 00 29 52 50 10 b:..........)RP.
> 0030: 01 F4 25 12 00 00 00 00 00 00 00 00 ..%.........
>
> Frame 6 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 15:18:18.960939000
> Time delta from previous packet: 0.001816000 seconds
> Time since reference or first frame: 0.990360000 seconds
> Frame Number: 6
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 08:00:06:6f:15:cf, Dst: 00:06:98:01:04:fb
> Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
> 192.168.98.58 (192.168.98.58)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0x0a71 (2673)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 60
> Protocol: TCP (0x06)
> Header checksum: 0x2e7b (correct)
> Source: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Destination: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 1, Ack: 301, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 1 (relative sequence number)
> Acknowledgement number: 301 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0010 (ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 560
> Checksum: 0x24d6 (correct)
> SEQ/ACK analysis
> TCP Analysis Flags
> This is a tcp window update
> This is a TCP duplicate ack
> Duplicate ACK #: 3
> Duplicate to the ACK in frame: 5
>
> 0000: 00 06 98 01 04 FB 08 00 06 6F 15 CF 08 00 45 00 .........o....E.
> 0010: 00 28 0A 71 00 00 3C 06 2E 7B C0 A8 62 59 C0 A8 .(.q..<..{..bY..
> 0020: 62 3A 0F A1 0F A1 09 B5 F0 A0 00 00 29 52 50 10 b:..........)RP.
> 0030: 02 30 24 D6 00 00 00 00 00 00 00 00 .0$.........
>
>
>
>
> ---------------------------------------
> Dump of LEAN-version (non working):
>
> Packetyzer Trace:
>
> Frame 1 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:35.835677000
> Time delta from previous packet: -144.303443000 seconds
> Time since reference or first frame: 26.981429000 seconds
> Frame Number: 1
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
> Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Type: IP (0x0800)
> Trailer: 0000
> Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
> 192.168.98.89 (192.168.98.89)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 44
> Identification: 0x0014 (20)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 64
> Protocol: TCP (0x06)
> Header checksum: 0x34d4 (correct)
> Source: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Destination: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 0, Ack: 0, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 0 (relative sequence number)
> Header length: 24 bytes
> Flags: 0x0002 (SYN)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...0 .... = Acknowledgment: Not set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..1. = Syn: Set
> .... ...0 = Fin: Not set
> Window size: 3216
> Checksum: 0x9946 (correct)
> Options: (4 bytes)
> TCP MSS Option: True
> Maximum segment size: 536 bytes
>
> 0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
> 0010: 00 2C 00 14 00 00 40 06 34 D4 C0 A8 62 3A C0 A8 .,.... at .4...b:..
> 0020: 62 59 0F A1 0F A1 00 00 90 C5 00 00 00 00 60 02 bY............`.
> 0030: 0C 90 99 46 00 00 02 04 02 18 00 00 ...F........
>
> Frame 2 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:35.836832000
> Time delta from previous packet: 0.001155000 seconds
> Time since reference or first frame: 26.982584000 seconds
> Frame Number: 2
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
> Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
> 192.168.98.58 (192.168.98.58)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0xbf94 (49044)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 60
> Protocol: TCP (0x06)
> Header checksum: 0x7957 (correct)
> Source: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Destination: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 0, Ack: 1, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 0 (relative sequence number)
> Acknowledgement number: 1 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0014 (RST, ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .1.. = Reset: Set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 0
> Checksum: 0xb9e3 (correct)
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 1
> The RTT to ACK the segment was: 0.001155000 seconds
>
> 0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
> 0010: 00 28 BF 94 00 00 3C 06 79 57 C0 A8 62 59 C0 A8 .(....<.yW..bY..
> 0020: 62 3A 0F A1 0F A1 00 00 00 00 00 00 90 C6 50 14 b:............P.
> 0030: 00 00 B9 E3 00 00 00 00 00 00 00 00 ............
>
> Frame 3 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:38.816883000
> Time delta from previous packet: 2.980051000 seconds
> Time since reference or first frame: 29.962635000 seconds
> Frame Number: 3
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
> Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Type: IP (0x0800)
> Trailer: 0000
> Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
> 192.168.98.89 (192.168.98.89)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 44
> Identification: 0x0025 (37)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 64
> Protocol: TCP (0x06)
> Header checksum: 0x34c3 (correct)
> Source: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Destination: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 0, Ack: 0, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 0 (relative sequence number)
> Header length: 24 bytes
> Flags: 0x0002 (SYN)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...0 .... = Acknowledgment: Not set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..1. = Syn: Set
> .... ...0 = Fin: Not set
> Window size: 3216
> Checksum: 0x8d9c (correct)
> Options: (4 bytes)
> TCP MSS Option: True
> Maximum segment size: 536 bytes
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 2
> The RTT to ACK the segment was: 0.001269000 seconds
> TCP Analysis Flags
> This is a TCP keep-alive segment
> This is a TCP duplicate ack
> Duplicate ACK #: 1
> Duplicate to the ACK in frame: 3
>
> 0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
> 0010: 00 2C 00 25 00 00 40 06 34 C3 C0 A8 62 3A C0 A8 .,.%.. at .4...b:..
> 0020: 62 59 0F A1 0F A1 00 00 9C 6F 00 00 00 00 60 02 bY.......o....`.
> 0030: 0C 90 8D 9C 00 00 02 04 02 18 00 00 ............
>
> Frame 4 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:38.818618000
> Time delta from previous packet: 0.001735000 seconds
> Time since reference or first frame: 29.964370000 seconds
> Frame Number: 4
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
> Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Type: IP (0x0800)
> Trailer: 0000
> Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
> 192.168.98.58 (192.168.98.58)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 44
> Identification: 0xbf95 (49045)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 30
> Protocol: TCP (0x06)
> Header checksum: 0x9752 (correct)
> Source: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Destination: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 0, Ack: 1, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 0 (relative sequence number)
> Acknowledgement number: 1 (relative ack number)
> Header length: 24 bytes
> Flags: 0x0012 (SYN, ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..1. = Syn: Set
> .... ...0 = Fin: Not set
> Window size: 280
> Checksum: 0x694f (correct)
> Options: (4 bytes)
> TCP MSS Option: True
> Maximum segment size: 456 bytes
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 3
> The RTT to ACK the segment was: 0.001735000 seconds
> TCP Analysis Flags
> This frame is a (suspected) retransmission
> This frame is a (suspected) out-of-order segment
>
> 0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
> 0010: 00 2C BF 95 00 00 1E 06 97 52 C0 A8 62 59 C0 A8 .,.......R..bY..
> 0020: 62 3A 0F A1 0F A1 0D B2 22 52 00 00 9C 70 60 12 b:......"R...p`.
> 0030: 01 18 69 4F 00 00 02 04 01 C8 00 00 ..iO........
>
> Frame 5 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:38.820013000
> Time delta from previous packet: 0.001395000 seconds
> Time since reference or first frame: 29.965765000 seconds
> Frame Number: 5
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
> Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
> 192.168.98.89 (192.168.98.89)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0x0026 (38)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 64
> Protocol: TCP (0x06)
> Header checksum: 0x34c6 (correct)
> Source: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Destination: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 1, Ack: 1, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 1 (relative sequence number)
> Acknowledgement number: 1 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0010 (ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 3216
> Checksum: 0x71a8 (correct)
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 4
> The RTT to ACK the segment was: 0.001395000 seconds
> TCP Analysis Flags
> This is an ACK to a TCP keep-alive segment
> This is a TCP duplicate ack
> This is a ZeroWindow segment
> Duplicate ACK #: 1
> Duplicate to the ACK in frame: 5
>
> 0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
> 0010: 00 28 00 26 00 00 40 06 34 C6 C0 A8 62 3A C0 A8 .(.&.. at .4...b:..
> 0020: 62 59 0F A1 0F A1 00 00 9C 70 0D B2 22 53 50 10 bY.......p.."SP.
> 0030: 0C 90 71 A8 00 00 00 00 00 00 00 00 ..q.........
>
> Frame 6 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:45.697809000
> Time delta from previous packet: 6.877796000 seconds
> Time since reference or first frame: 36.843561000 seconds
> Frame Number: 6
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
> Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
> 192.168.98.89 (192.168.98.89)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0x0030 (48)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 64
> Protocol: TCP (0x06)
> Header checksum: 0x34bc (correct)
> Source: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Destination: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 1, Ack: 1, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 1 (relative sequence number)
> Acknowledgement number: 1 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0011 (FIN, ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..0. = Syn: Not set
> .... ...1 = Fin: Set
> Window size: 3216
> Checksum: 0x71a7 (correct)
> SEQ/ACK analysis
> TCP Analysis Flags
> This is a tcp window update
> This is a TCP duplicate ack
> Duplicate ACK #: 3
> Duplicate to the ACK in frame: 5
>
> 0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
> 0010: 00 28 00 30 00 00 40 06 34 BC C0 A8 62 3A C0 A8 .(.0.. at .4...b:..
> 0020: 62 59 0F A1 0F A1 00 00 9C 70 0D B2 22 53 50 11 bY.......p.."SP.
> 0030: 0C 90 71 A7 00 00 00 00 00 00 00 00 ..q.........
>
> Frame 7 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:45.699297000
> Time delta from previous packet: 0.001488000 seconds
> Time since reference or first frame: 36.845049000 seconds
> Frame Number: 7
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
> Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
> 192.168.98.58 (192.168.98.58)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0xbf96 (49046)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 30
> Protocol: TCP (0x06)
> Header checksum: 0x9755 (correct)
> Source: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Destination: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 1, Ack: 2, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 1 (relative sequence number)
> Acknowledgement number: 2 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0010 (ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 0
> Checksum: 0x7e37 (correct)
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 6
> The RTT to ACK the segment was: 0.001488000 seconds
> TCP Analysis Flags
> This frame is a (suspected) retransmission
> This is a ZeroWindow segment
>
> 0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
> 0010: 00 28 BF 96 00 00 1E 06 97 55 C0 A8 62 59 C0 A8 .(.......U..bY..
> 0020: 62 3A 0F A1 0F A1 0D B2 22 53 00 00 9C 71 50 10 b:......"S...qP.
> 0030: 00 00 7E 37 00 00 00 00 00 00 00 00 ..~7........
>
> Frame 8 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:45.700690000
> Time delta from previous packet: 0.001393000 seconds
> Time since reference or first frame: 36.846442000 seconds
> Frame Number: 8
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
> Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
> 192.168.98.58 (192.168.98.58)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0xbf97 (49047)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 30
> Protocol: TCP (0x06)
> Header checksum: 0x9754 (correct)
> Source: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Destination: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 1, Ack: 4294927249, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 1 (relative sequence number)
> Header length: 20 bytes
> Flags: 0x0004 (RST)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...0 .... = Acknowledgment: Not set
> .... 0... = Push: Not set
> .... .1.. = Reset: Set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 0
> Checksum: 0x1ab5 (correct)
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 7
> The RTT to ACK the segment was: 0.001007000 seconds
> TCP Analysis Flags
> This is a TCP duplicate ack
> Duplicate ACK #: 1
> Duplicate to the ACK in frame: 8
>
> 0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
> 0010: 00 28 BF 97 00 00 1E 06 97 54 C0 A8 62 59 C0 A8 .(.......T..bY..
> 0020: 62 3A 0F A1 0F A1 0D B2 22 53 00 00 00 00 50 04 b:......"S....P.
> 0030: 00 00 1A B5 00 00 00 00 00 00 00 00 ............
>
> Frame 9 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:47.831389000
> Time delta from previous packet: 2.130699000 seconds
> Time since reference or first frame: 38.977141000 seconds
> Frame Number: 9
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
> Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Type: IP (0x0800)
> Trailer: 0000
> Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
> 192.168.98.89 (192.168.98.89)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 44
> Identification: 0x0034 (52)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 64
> Protocol: TCP (0x06)
> Header checksum: 0x34b4 (correct)
> Source: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Destination: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 0, Ack: 0, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 0 (relative sequence number)
> Header length: 24 bytes
> Flags: 0x0002 (SYN)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...0 .... = Acknowledgment: Not set
> .... 0... = Push: Not set
> .... .0.. = Reset: Not set
> .... ..1. = Syn: Set
> .... ...0 = Fin: Not set
> Window size: 3216
> Checksum: 0x6a9f (correct)
> Options: (4 bytes)
> TCP MSS Option: True
> Maximum segment size: 536 bytes
> SEQ/ACK analysis
> TCP Analysis Flags
> This is a tcp window update
> This is a TCP duplicate ack
> Duplicate ACK #: 3
> Duplicate to the ACK in frame: 8
>
> 0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
> 0010: 00 2C 00 34 00 00 40 06 34 B4 C0 A8 62 3A C0 A8 .,.4.. at .4...b:..
> 0020: 62 59 0F A1 0F A1 00 00 BF 6C 00 00 00 00 60 02 bY.......l....`.
> 0030: 0C 90 6A 9F 00 00 02 04 02 18 00 00 ..j.........
>
> Frame 10 (60 bytes on wire, 60 bytes captured)
> Frame is marked: False
> Arrival Time: May 29, 2006 10:40:47.832392000
> Time delta from previous packet: 0.001003000 seconds
> Time since reference or first frame: 38.978144000 seconds
> Frame Number: 10
> Packet Length: 60 bytes
> Capture Length: 60 bytes
> Protocols in frame: eth:ip:tcp
> Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
> Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source: 08:00:06:95:17:82 (Siemens_95:17:82)
> Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
> Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
> Type: IP (0x0800)
> Trailer: 000000000000
> Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
> 192.168.98.58 (192.168.98.58)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 40
> Identification: 0xbf98 (49048)
> Flags: 0x00
> 0... = Reserved bit: Not set
> .0.. = Don't fragment: Not set
> ..0. = More fragments: Not set
> Fragment offset: 0
> Time to live: 60
> Protocol: TCP (0x06)
> Header checksum: 0x7953 (correct)
> Source: 192.168.98.89 (192.168.98.89)
> Source or Destination Address: 192.168.98.89 (192.168.98.89)
> Destination: 192.168.98.58 (192.168.98.58)
> Source or Destination Address: 192.168.98.58 (192.168.98.58)
> Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
> (4001), Seq: 0, Ack: 1, Len: 0
> Source port: 4001 (4001)
> Destination port: 4001 (4001)
> Source or Destination Port: 4001
> Source or Destination Port: 4001
> TCP Segment Len: 0
> Sequence number: 0 (relative sequence number)
> Acknowledgement number: 1 (relative ack number)
> Header length: 20 bytes
> Flags: 0x0014 (RST, ACK)
> 0... .... = Congestion Window Reduced (CWR): Not set
> .0.. .... = ECN-Echo: Not set
> ..0. .... = Urgent: Not set
> ...1 .... = Acknowledgment: Set
> .... 0... = Push: Not set
> .... .1.. = Reset: Set
> .... ..0. = Syn: Not set
> .... ...0 = Fin: Not set
> Window size: 0
> Checksum: 0x8b3c (correct)
> SEQ/ACK analysis
> This is an ACK to the segment in frame: 9
> The RTT to ACK the segment was: 0.001003000 seconds
> TCP Analysis Flags
> This frame is a (suspected) retransmission
>
> 0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
> 0010: 00 28 BF 98 00 00 3C 06 79 53 C0 A8 62 59 C0 A8 .(....<.yS..bY..
> 0020: 62 3A 0F A1 0F A1 00 00 00 00 00 00 BF 6D 50 14 b:...........mP.
> 0030: 00 00 8B 3C 00 00 00 00 00 00 00 00 ...<........
>
>
>
> _______________________________________________
> En-Nut-Discussion mailing list
> En-Nut-Discussion at egnite.de
> http://www.egnite.de/mailman/listinfo.cgi/en-nut-discussion
>
>
--
-----------------------------------------------------------------
Brett Abbott, Managing Director, Digital Telemetry Limited
Email: Brett.Abbott at digital-telemetry.com
PO Box 24 036 Manners Street, Wellington, New Zealand
Phone +64 (4) 5666-860 Mobile +64 (21) 656-144
------------------- Commercial in confidence --------------------
More information about the En-Nut-Discussion
mailing list