[En-Nut-Discussion] TCP/IP-Problems
Dirk Becker
nospam at anode.de
Tue May 30 18:29:45 CEST 2006
Hi Brett,
thanx for your reply.
Further down you can find a tcpip-dump of the working station.
The problem with the long delay seems to be the TCP/IP-retransmission
timer, it happens only shortly after sytem start (a bit strange, but
probably not the real problem). A bit further down you can find packets
where no retransmissions happen, but also no data is sent and the
Ethernut? ends the connection.
Dusan Ferbas pointed out, that it might be connected with MSS not
accepted by the Ethernut and he suggestet me changing MSS. With his help
the LEAN version now sometimes accepts some data but then the connection
is dropped again suddenly after 1 packet with data (300 Bytes).
Kind regards,
Dirk
---------------------------------------
Dump of old SPS-version (working):
Packetyzer Trace:
Frame 1 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 15:18:17.970579000
Time delta from previous packet: -8.618967000 seconds
Time since reference or first frame: 0.000000000 seconds
Frame Number: 1
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:6f:15:cf
Destination: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Type: IP (0x0800)
Trailer: 0000
Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
192.168.98.89 (192.168.98.89)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0x0002 (2)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x34e6 (correct)
Source: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Destination: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 0, Ack: 0, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 0 (relative sequence number)
Header length: 24 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 3216
Checksum: 0x01e7 (correct)
Options: (4 bytes)
TCP MSS Option: True
Maximum segment size: 536 bytes
0000: 08 00 06 6F 15 CF 00 06 98 01 04 FB 08 00 45 00 ...o..........E.
0010: 00 2C 00 02 00 00 40 06 34 E6 C0 A8 62 3A C0 A8 .,.... at .4...b:..
0020: 62 59 0F A1 0F A1 00 00 28 25 00 00 00 00 60 02 bY......(%....`.
0030: 0C 90 01 E7 00 00 02 04 02 18 00 00 ............
Frame 2 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 15:18:17.971319000
Time delta from previous packet: 0.000740000 seconds
Time since reference or first frame: 0.000740000 seconds
Frame Number: 2
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 08:00:06:6f:15:cf, Dst: 00:06:98:01:04:fb
Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Type: IP (0x0800)
Trailer: 0000
Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
192.168.98.58 (192.168.98.58)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0x0a6f (2671)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 60
Protocol: TCP (0x06)
Header checksum: 0x2e79 (correct)
Source: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Destination: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 0, Ack: 1, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 24 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 560
Checksum: 0x11f9 (correct)
Options: (4 bytes)
TCP MSS Option: True
Maximum segment size: 512 bytes
SEQ/ACK analysis
This is an ACK to the segment in frame: 1
The RTT to ACK the segment was: 0.000740000 seconds
0000: 00 06 98 01 04 FB 08 00 06 6F 15 CF 08 00 45 00 .........o....E.
0010: 00 2C 0A 6F 00 00 3C 06 2E 79 C0 A8 62 59 C0 A8 .,.o..<..y..bY..
0020: 62 3A 0F A1 0F A1 09 B5 F0 9F 00 00 28 26 60 12 b:..........(&`.
0030: 02 30 11 F9 00 00 02 04 02 00 00 00 .0..........
Frame 3 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 15:18:17.972600000
Time delta from previous packet: 0.001281000 seconds
Time since reference or first frame: 0.002021000 seconds
Frame Number: 3
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:6f:15:cf
Destination: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
192.168.98.89 (192.168.98.89)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x0003 (3)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x34e9 (correct)
Source: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Destination: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 1, Ack: 1, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 3216
Checksum: 0x1ba2 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 2
The RTT to ACK the segment was: 0.001281000 seconds
TCP Analysis Flags
This is a TCP duplicate ack
Duplicate ACK #: 1
Duplicate to the ACK in frame: 3
0000: 08 00 06 6F 15 CF 00 06 98 01 04 FB 08 00 45 00 ...o..........E.
0010: 00 28 00 03 00 00 40 06 34 E9 C0 A8 62 3A C0 A8 .(.... at .4...b:..
0020: 62 59 0F A1 0F A1 00 00 28 26 09 B5 F0 A0 50 10 bY......(&....P.
0030: 0C 90 1B A2 00 00 00 00 00 00 00 00 ............
Frame 4 (354 bytes on wire, 354 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 15:18:18.958219000
Time delta from previous packet: 0.985619000 seconds
Time since reference or first frame: 0.987640000 seconds
Frame Number: 4
Packet Length: 354 bytes
Capture Length: 354 bytes
Protocols in frame: eth:ip:tcp:data
Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:6f:15:cf
Destination: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
192.168.98.89 (192.168.98.89)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 340
Identification: 0x0004 (4)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x33bc (correct)
Source: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Destination: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 1, Ack: 1, Len: 300
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 300
Sequence number: 1 (relative sequence number)
Next sequence number: 301 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 3216
Checksum: 0x9485 (correct)
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
Data (300 bytes)
0000: 08 00 06 6F 15 CF 00 06 98 01 04 FB 08 00 45 00 ...o..........E.
0010: 01 54 00 04 00 00 40 06 33 BC C0 A8 62 3A C0 A8 .T.... at .3...b:..
0020: 62 59 0F A1 0F A1 00 00 28 26 09 B5 F0 A0 50 18 bY......(&....P.
0030: 0C 90 94 85 00 00 41 42 43 44 00 00 00 01 00 F9 ......ABCD......
0040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................
0050: 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .`..............
0060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0160: 00 00 ..
Frame 5 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 15:18:18.959123000
Time delta from previous packet: 0.000904000 seconds
Time since reference or first frame: 0.988544000 seconds
Frame Number: 5
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 08:00:06:6f:15:cf, Dst: 00:06:98:01:04:fb
Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
192.168.98.58 (192.168.98.58)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x0a70 (2672)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 60
Protocol: TCP (0x06)
Header checksum: 0x2e7c (correct)
Source: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Destination: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 1, Ack: 301, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 1 (relative sequence number)
Acknowledgement number: 301 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 500
Checksum: 0x2512 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 4
The RTT to ACK the segment was: 0.000904000 seconds
TCP Analysis Flags
This is a TCP duplicate ack
This is a ZeroWindow segment
Duplicate ACK #: 1
Duplicate to the ACK in frame: 5
0000: 00 06 98 01 04 FB 08 00 06 6F 15 CF 08 00 45 00 .........o....E.
0010: 00 28 0A 70 00 00 3C 06 2E 7C C0 A8 62 59 C0 A8 .(.p..<..|..bY..
0020: 62 3A 0F A1 0F A1 09 B5 F0 A0 00 00 29 52 50 10 b:..........)RP.
0030: 01 F4 25 12 00 00 00 00 00 00 00 00 ..%.........
Frame 6 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 15:18:18.960939000
Time delta from previous packet: 0.001816000 seconds
Time since reference or first frame: 0.990360000 seconds
Frame Number: 6
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 08:00:06:6f:15:cf, Dst: 00:06:98:01:04:fb
Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:6f:15:cf (Siemens_6f:15:cf)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
192.168.98.58 (192.168.98.58)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x0a71 (2673)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 60
Protocol: TCP (0x06)
Header checksum: 0x2e7b (correct)
Source: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Destination: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 1, Ack: 301, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 1 (relative sequence number)
Acknowledgement number: 301 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 560
Checksum: 0x24d6 (correct)
SEQ/ACK analysis
TCP Analysis Flags
This is a tcp window update
This is a TCP duplicate ack
Duplicate ACK #: 3
Duplicate to the ACK in frame: 5
0000: 00 06 98 01 04 FB 08 00 06 6F 15 CF 08 00 45 00 .........o....E.
0010: 00 28 0A 71 00 00 3C 06 2E 7B C0 A8 62 59 C0 A8 .(.q..<..{..bY..
0020: 62 3A 0F A1 0F A1 09 B5 F0 A0 00 00 29 52 50 10 b:..........)RP.
0030: 02 30 24 D6 00 00 00 00 00 00 00 00 .0$.........
---------------------------------------
Dump of LEAN-version (non working):
Packetyzer Trace:
Frame 1 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:35.835677000
Time delta from previous packet: -144.303443000 seconds
Time since reference or first frame: 26.981429000 seconds
Frame Number: 1
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Type: IP (0x0800)
Trailer: 0000
Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
192.168.98.89 (192.168.98.89)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0x0014 (20)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x34d4 (correct)
Source: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Destination: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 0, Ack: 0, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 0 (relative sequence number)
Header length: 24 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 3216
Checksum: 0x9946 (correct)
Options: (4 bytes)
TCP MSS Option: True
Maximum segment size: 536 bytes
0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
0010: 00 2C 00 14 00 00 40 06 34 D4 C0 A8 62 3A C0 A8 .,.... at .4...b:..
0020: 62 59 0F A1 0F A1 00 00 90 C5 00 00 00 00 60 02 bY............`.
0030: 0C 90 99 46 00 00 02 04 02 18 00 00 ...F........
Frame 2 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:35.836832000
Time delta from previous packet: 0.001155000 seconds
Time since reference or first frame: 26.982584000 seconds
Frame Number: 2
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
192.168.98.58 (192.168.98.58)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xbf94 (49044)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 60
Protocol: TCP (0x06)
Header checksum: 0x7957 (correct)
Source: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Destination: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 0, Ack: 1, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0014 (RST, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .1.. = Reset: Set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 0
Checksum: 0xb9e3 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 1
The RTT to ACK the segment was: 0.001155000 seconds
0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
0010: 00 28 BF 94 00 00 3C 06 79 57 C0 A8 62 59 C0 A8 .(....<.yW..bY..
0020: 62 3A 0F A1 0F A1 00 00 00 00 00 00 90 C6 50 14 b:............P.
0030: 00 00 B9 E3 00 00 00 00 00 00 00 00 ............
Frame 3 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:38.816883000
Time delta from previous packet: 2.980051000 seconds
Time since reference or first frame: 29.962635000 seconds
Frame Number: 3
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Type: IP (0x0800)
Trailer: 0000
Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
192.168.98.89 (192.168.98.89)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0x0025 (37)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x34c3 (correct)
Source: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Destination: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 0, Ack: 0, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 0 (relative sequence number)
Header length: 24 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 3216
Checksum: 0x8d9c (correct)
Options: (4 bytes)
TCP MSS Option: True
Maximum segment size: 536 bytes
SEQ/ACK analysis
This is an ACK to the segment in frame: 2
The RTT to ACK the segment was: 0.001269000 seconds
TCP Analysis Flags
This is a TCP keep-alive segment
This is a TCP duplicate ack
Duplicate ACK #: 1
Duplicate to the ACK in frame: 3
0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
0010: 00 2C 00 25 00 00 40 06 34 C3 C0 A8 62 3A C0 A8 .,.%.. at .4...b:..
0020: 62 59 0F A1 0F A1 00 00 9C 6F 00 00 00 00 60 02 bY.......o....`.
0030: 0C 90 8D 9C 00 00 02 04 02 18 00 00 ............
Frame 4 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:38.818618000
Time delta from previous packet: 0.001735000 seconds
Time since reference or first frame: 29.964370000 seconds
Frame Number: 4
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Type: IP (0x0800)
Trailer: 0000
Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
192.168.98.58 (192.168.98.58)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0xbf95 (49045)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 30
Protocol: TCP (0x06)
Header checksum: 0x9752 (correct)
Source: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Destination: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 0, Ack: 1, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 24 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 280
Checksum: 0x694f (correct)
Options: (4 bytes)
TCP MSS Option: True
Maximum segment size: 456 bytes
SEQ/ACK analysis
This is an ACK to the segment in frame: 3
The RTT to ACK the segment was: 0.001735000 seconds
TCP Analysis Flags
This frame is a (suspected) retransmission
This frame is a (suspected) out-of-order segment
0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
0010: 00 2C BF 95 00 00 1E 06 97 52 C0 A8 62 59 C0 A8 .,.......R..bY..
0020: 62 3A 0F A1 0F A1 0D B2 22 52 00 00 9C 70 60 12 b:......"R...p`.
0030: 01 18 69 4F 00 00 02 04 01 C8 00 00 ..iO........
Frame 5 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:38.820013000
Time delta from previous packet: 0.001395000 seconds
Time since reference or first frame: 29.965765000 seconds
Frame Number: 5
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
192.168.98.89 (192.168.98.89)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x0026 (38)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x34c6 (correct)
Source: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Destination: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 1, Ack: 1, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 3216
Checksum: 0x71a8 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 4
The RTT to ACK the segment was: 0.001395000 seconds
TCP Analysis Flags
This is an ACK to a TCP keep-alive segment
This is a TCP duplicate ack
This is a ZeroWindow segment
Duplicate ACK #: 1
Duplicate to the ACK in frame: 5
0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
0010: 00 28 00 26 00 00 40 06 34 C6 C0 A8 62 3A C0 A8 .(.&.. at .4...b:..
0020: 62 59 0F A1 0F A1 00 00 9C 70 0D B2 22 53 50 10 bY.......p.."SP.
0030: 0C 90 71 A8 00 00 00 00 00 00 00 00 ..q.........
Frame 6 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:45.697809000
Time delta from previous packet: 6.877796000 seconds
Time since reference or first frame: 36.843561000 seconds
Frame Number: 6
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
192.168.98.89 (192.168.98.89)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x0030 (48)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x34bc (correct)
Source: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Destination: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 1, Ack: 1, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 3216
Checksum: 0x71a7 (correct)
SEQ/ACK analysis
TCP Analysis Flags
This is a tcp window update
This is a TCP duplicate ack
Duplicate ACK #: 3
Duplicate to the ACK in frame: 5
0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
0010: 00 28 00 30 00 00 40 06 34 BC C0 A8 62 3A C0 A8 .(.0.. at .4...b:..
0020: 62 59 0F A1 0F A1 00 00 9C 70 0D B2 22 53 50 11 bY.......p.."SP.
0030: 0C 90 71 A7 00 00 00 00 00 00 00 00 ..q.........
Frame 7 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:45.699297000
Time delta from previous packet: 0.001488000 seconds
Time since reference or first frame: 36.845049000 seconds
Frame Number: 7
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
192.168.98.58 (192.168.98.58)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xbf96 (49046)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 30
Protocol: TCP (0x06)
Header checksum: 0x9755 (correct)
Source: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Destination: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 1, Ack: 2, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 1 (relative sequence number)
Acknowledgement number: 2 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 0
Checksum: 0x7e37 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 6
The RTT to ACK the segment was: 0.001488000 seconds
TCP Analysis Flags
This frame is a (suspected) retransmission
This is a ZeroWindow segment
0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
0010: 00 28 BF 96 00 00 1E 06 97 55 C0 A8 62 59 C0 A8 .(.......U..bY..
0020: 62 3A 0F A1 0F A1 0D B2 22 53 00 00 9C 71 50 10 b:......"S...qP.
0030: 00 00 7E 37 00 00 00 00 00 00 00 00 ..~7........
Frame 8 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:45.700690000
Time delta from previous packet: 0.001393000 seconds
Time since reference or first frame: 36.846442000 seconds
Frame Number: 8
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
192.168.98.58 (192.168.98.58)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xbf97 (49047)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 30
Protocol: TCP (0x06)
Header checksum: 0x9754 (correct)
Source: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Destination: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 1, Ack: 4294927249, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x0004 (RST)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .1.. = Reset: Set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 0
Checksum: 0x1ab5 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 7
The RTT to ACK the segment was: 0.001007000 seconds
TCP Analysis Flags
This is a TCP duplicate ack
Duplicate ACK #: 1
Duplicate to the ACK in frame: 8
0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
0010: 00 28 BF 97 00 00 1E 06 97 54 C0 A8 62 59 C0 A8 .(.......T..bY..
0020: 62 3A 0F A1 0F A1 0D B2 22 53 00 00 00 00 50 04 b:......"S....P.
0030: 00 00 1A B5 00 00 00 00 00 00 00 00 ............
Frame 9 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:47.831389000
Time delta from previous packet: 2.130699000 seconds
Time since reference or first frame: 38.977141000 seconds
Frame Number: 9
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:06:98:01:04:fb, Dst: 08:00:06:95:17:82
Destination: 08:00:06:95:17:82 (Siemens_95:17:82)
Source: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Type: IP (0x0800)
Trailer: 0000
Internet Protocol, Src Addr: 192.168.98.58 (192.168.98.58), Dst Addr:
192.168.98.89 (192.168.98.89)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0x0034 (52)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x34b4 (correct)
Source: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Destination: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 0, Ack: 0, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 0 (relative sequence number)
Header length: 24 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 3216
Checksum: 0x6a9f (correct)
Options: (4 bytes)
TCP MSS Option: True
Maximum segment size: 536 bytes
SEQ/ACK analysis
TCP Analysis Flags
This is a tcp window update
This is a TCP duplicate ack
Duplicate ACK #: 3
Duplicate to the ACK in frame: 8
0000: 08 00 06 95 17 82 00 06 98 01 04 FB 08 00 45 00 ..............E.
0010: 00 2C 00 34 00 00 40 06 34 B4 C0 A8 62 3A C0 A8 .,.4.. at .4...b:..
0020: 62 59 0F A1 0F A1 00 00 BF 6C 00 00 00 00 60 02 bY.......l....`.
0030: 0C 90 6A 9F 00 00 02 04 02 18 00 00 ..j.........
Frame 10 (60 bytes on wire, 60 bytes captured)
Frame is marked: False
Arrival Time: May 29, 2006 10:40:47.832392000
Time delta from previous packet: 0.001003000 seconds
Time since reference or first frame: 38.978144000 seconds
Frame Number: 10
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 08:00:06:95:17:82, Dst: 00:06:98:01:04:fb
Destination: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source: 08:00:06:95:17:82 (Siemens_95:17:82)
Source or Destination Address: 00:06:98:01:04:fb (EgniteSo_01:04:fb)
Source or Destination Address: 08:00:06:95:17:82 (Siemens_95:17:82)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 192.168.98.89 (192.168.98.89), Dst Addr:
192.168.98.58 (192.168.98.58)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xbf98 (49048)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 60
Protocol: TCP (0x06)
Header checksum: 0x7953 (correct)
Source: 192.168.98.89 (192.168.98.89)
Source or Destination Address: 192.168.98.89 (192.168.98.89)
Destination: 192.168.98.58 (192.168.98.58)
Source or Destination Address: 192.168.98.58 (192.168.98.58)
Transmission Control Protocol, Src Port: 4001 (4001), Dst Port: 4001
(4001), Seq: 0, Ack: 1, Len: 0
Source port: 4001 (4001)
Destination port: 4001 (4001)
Source or Destination Port: 4001
Source or Destination Port: 4001
TCP Segment Len: 0
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0014 (RST, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .1.. = Reset: Set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 0
Checksum: 0x8b3c (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 9
The RTT to ACK the segment was: 0.001003000 seconds
TCP Analysis Flags
This frame is a (suspected) retransmission
0000: 00 06 98 01 04 FB 08 00 06 95 17 82 08 00 45 00 ..............E.
0010: 00 28 BF 98 00 00 3C 06 79 53 C0 A8 62 59 C0 A8 .(....<.yS..bY..
0020: 62 3A 0F A1 0F A1 00 00 00 00 00 00 BF 6D 50 14 b:...........mP.
0030: 00 00 8B 3C 00 00 00 00 00 00 00 00 ...<........
More information about the En-Nut-Discussion
mailing list