Here is the txt version of the Wireshark capture beginning with the penultimate packet of the WU sent to 171.64.65.81 and ending with the last packet to that server before switching to the CS.
Code: Select all
No. Time Source Destination Protocol Length Info
2801 127.878547 192.168.0.99 171.64.65.81 HTTP 1514 Continuation or non-HTTP traffic
Frame 2801: 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
Arrival Time: Nov 6, 2011 11:40:43.195620000 Pacific Standard Time
Epoch Time: 1320608443.195620000 seconds
[Time delta from previous captured frame: 0.000004000 seconds]
[Time delta from previous displayed frame: 0.000004000 seconds]
[Time since reference or first frame: 127.878547000 seconds]
Frame Number: 2801
Frame Length: 1514 bytes (12112 bits)
Capture Length: 1514 bytes (12112 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:http:data]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf), Dst: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Destination: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.99 (192.168.0.99), Dst: 171.64.65.81 (171.64.65.81)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 2189888, Ack: 1, Len: 1460
Source port: 53975 (53975)
Destination port: http (80)
[Stream index: 0]
Sequence number: 2189888 (relative sequence number)
[Next sequence number: 2191348 (relative sequence number)]
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgement: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 16425
[Calculated window size: 16425]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x0c59 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
[Bytes in flight: 20636]
Hypertext Transfer Protocol
No. Time Source Destination Protocol Length Info
2802 128.048092 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [ACK] Seq=1 Ack=2173632 Win=23729 Len=0
Frame 2802: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:43.365165000 Pacific Standard Time
Epoch Time: 1320608443.365165000 seconds
[Time delta from previous captured frame: 0.169545000 seconds]
[Time delta from previous displayed frame: 0.169545000 seconds]
[Time since reference or first frame: 128.048092000 seconds]
Frame Number: 2802
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Ack: 2173632, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 2173632 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgement: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 23729
[Calculated window size: 23729]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x91de [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2784]
[The RTT to ACK the segment was: 0.822952000 seconds]
No. Time Source Destination Protocol Length Info
2803 128.048163 192.168.0.99 171.64.65.81 HTTP 1318 Continuation or non-HTTP traffic
Frame 2803: 1318 bytes on wire (10544 bits), 1318 bytes captured (10544 bits)
Arrival Time: Nov 6, 2011 11:40:43.365236000 Pacific Standard Time
Epoch Time: 1320608443.365236000 seconds
[Time delta from previous captured frame: 0.000071000 seconds]
[Time delta from previous displayed frame: 0.000071000 seconds]
[Time since reference or first frame: 128.048163000 seconds]
Frame Number: 2803
Frame Length: 1318 bytes (10544 bits)
Capture Length: 1318 bytes (10544 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:http:data]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf), Dst: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Destination: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.99 (192.168.0.99), Dst: 171.64.65.81 (171.64.65.81)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 2191348, Ack: 1, Len: 1264
Source port: 53975 (53975)
Destination port: http (80)
[Stream index: 0]
Sequence number: 2191348 (relative sequence number)
[Next sequence number: 2192612 (relative sequence number)]
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgement: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 16425
[Calculated window size: 16425]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xd391 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
[Bytes in flight: 18980]
Hypertext Transfer Protocol
No. Time Source Destination Protocol Length Info
2804 128.120887 AsustekC_54:f3:cf Cisco-Li_46:64:e6 ARP 42 Who has 192.168.0.1? Tell 192.168.0.99
Frame 2804: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
Arrival Time: Nov 6, 2011 11:40:43.437960000 Pacific Standard Time
Epoch Time: 1320608443.437960000 seconds
[Time delta from previous captured frame: 0.072724000 seconds]
[Time delta from previous displayed frame: 0.072724000 seconds]
[Time since reference or first frame: 128.120887000 seconds]
Frame Number: 2804
Frame Length: 42 bytes (336 bits)
Capture Length: 42 bytes (336 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:arp]
[Coloring Rule Name: ARP]
[Coloring Rule String: arp]
Ethernet II, Src: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf), Dst: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Destination: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Address Resolution Protocol (request)
No. Time Source Destination Protocol Length Info
2805 128.125044 Cisco-Li_46:64:e6 AsustekC_54:f3:cf ARP 60 192.168.0.1 is at 00:22:6b:46:64:e6
Frame 2805: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:43.442117000 Pacific Standard Time
Epoch Time: 1320608443.442117000 seconds
[Time delta from previous captured frame: 0.004157000 seconds]
[Time delta from previous displayed frame: 0.004157000 seconds]
[Time since reference or first frame: 128.125044000 seconds]
Frame Number: 2805
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:arp]
[Coloring Rule Name: ARP]
[Coloring Rule String: arp]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Trailer: 000000000000000000000000000020202020
Address Resolution Protocol (reply)
No. Time Source Destination Protocol Length Info
2806 128.217637 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [ACK] Seq=1 Ack=2176552 Win=23729 Len=0
Frame 2806: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:43.534710000 Pacific Standard Time
Epoch Time: 1320608443.534710000 seconds
[Time delta from previous captured frame: 0.092593000 seconds]
[Time delta from previous displayed frame: 0.092593000 seconds]
[Time since reference or first frame: 128.217637000 seconds]
Frame Number: 2806
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Ack: 2176552, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 2176552 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgement: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 23729
[Calculated window size: 23729]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x8676 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2786]
[The RTT to ACK the segment was: 0.992474000 seconds]
No. Time Source Destination Protocol Length Info
2807 128.387321 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [ACK] Seq=1 Ack=2179472 Win=23729 Len=0
Frame 2807: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:43.704394000 Pacific Standard Time
Epoch Time: 1320608443.704394000 seconds
[Time delta from previous captured frame: 0.169684000 seconds]
[Time delta from previous displayed frame: 0.169684000 seconds]
[Time since reference or first frame: 128.387321000 seconds]
Frame Number: 2807
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Ack: 2179472, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 2179472 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgement: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 23729
[Calculated window size: 23729]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x7b0e [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2788]
[The RTT to ACK the segment was: 1.162138000 seconds]
No. Time Source Destination Protocol Length Info
2808 128.472065 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [FIN, ACK] Seq=1 Ack=2180932 Win=23729 Len=0
Frame 2808: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:43.789138000 Pacific Standard Time
Epoch Time: 1320608443.789138000 seconds
[Time delta from previous captured frame: 0.084744000 seconds]
[Time delta from previous displayed frame: 0.084744000 seconds]
[Time since reference or first frame: 128.472065000 seconds]
Frame Number: 2808
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Ack: 2180932, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 2180932 (relative ack number)
Header length: 20 bytes
Flags: 0x11 (FIN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgement: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...1 = Fin: Set
[Expert Info (Chat/Sequence): Connection finish (FIN)]
Window size value: 23729
[Calculated window size: 23729]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x7559 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2790]
[The RTT to ACK the segment was: 1.091785000 seconds]
No. Time Source Destination Protocol Length Info
2809 128.472128 192.168.0.99 171.64.65.81 TCP 54 53975 > http [ACK] Seq=2192612 Ack=2 Win=16425 Len=0
Frame 2809: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)
Arrival Time: Nov 6, 2011 11:40:43.789201000 Pacific Standard Time
Epoch Time: 1320608443.789201000 seconds
[Time delta from previous captured frame: 0.000063000 seconds]
[Time delta from previous displayed frame: 0.000063000 seconds]
[Time since reference or first frame: 128.472128000 seconds]
Frame Number: 2809
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf), Dst: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Destination: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.0.99 (192.168.0.99), Dst: 171.64.65.81 (171.64.65.81)
Transmission Control Protocol, Src Port: 53975 (53975), Dst Port: http (80), Seq: 2192612, Ack: 2, Len: 0
Source port: 53975 (53975)
Destination port: http (80)
[Stream index: 0]
Sequence number: 2192612 (relative sequence number)
Acknowledgement number: 2 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgement: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 16425
[Calculated window size: 16425]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x6441 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2808]
[The RTT to ACK the segment was: 0.000063000 seconds]
No. Time Source Destination Protocol Length Info
2810 128.487364 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2810: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:43.804437000 Pacific Standard Time
Epoch Time: 1320608443.804437000 seconds
[Time delta from previous captured frame: 0.015236000 seconds]
[Time delta from previous displayed frame: 0.015236000 seconds]
[Time since reference or first frame: 128.487364000 seconds]
Frame Number: 2810
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2811 128.572560 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2811: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:43.889633000 Pacific Standard Time
Epoch Time: 1320608443.889633000 seconds
[Time delta from previous captured frame: 0.085196000 seconds]
[Time delta from previous displayed frame: 0.085196000 seconds]
[Time since reference or first frame: 128.572560000 seconds]
Frame Number: 2811
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2812 128.657146 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2812: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:43.974219000 Pacific Standard Time
Epoch Time: 1320608443.974219000 seconds
[Time delta from previous captured frame: 0.084586000 seconds]
[Time delta from previous displayed frame: 0.084586000 seconds]
[Time since reference or first frame: 128.657146000 seconds]
Frame Number: 2812
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2813 128.742145 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2813: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:44.059218000 Pacific Standard Time
Epoch Time: 1320608444.059218000 seconds
[Time delta from previous captured frame: 0.084999000 seconds]
[Time delta from previous displayed frame: 0.084999000 seconds]
[Time since reference or first frame: 128.742145000 seconds]
Frame Number: 2813
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2814 128.826931 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2814: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:44.144004000 Pacific Standard Time
Epoch Time: 1320608444.144004000 seconds
[Time delta from previous captured frame: 0.084786000 seconds]
[Time delta from previous displayed frame: 0.084786000 seconds]
[Time since reference or first frame: 128.826931000 seconds]
Frame Number: 2814
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2815 128.911385 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2815: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:44.228458000 Pacific Standard Time
Epoch Time: 1320608444.228458000 seconds
[Time delta from previous captured frame: 0.084454000 seconds]
[Time delta from previous displayed frame: 0.084454000 seconds]
[Time since reference or first frame: 128.911385000 seconds]
Frame Number: 2815
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2816 128.996408 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2816: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:44.313481000 Pacific Standard Time
Epoch Time: 1320608444.313481000 seconds
[Time delta from previous captured frame: 0.085023000 seconds]
[Time delta from previous displayed frame: 0.085023000 seconds]
[Time since reference or first frame: 128.996408000 seconds]
Frame Number: 2816
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2817 129.081381 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2817: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:44.398454000 Pacific Standard Time
Epoch Time: 1320608444.398454000 seconds
[Time delta from previous captured frame: 0.084973000 seconds]
[Time delta from previous displayed frame: 0.084973000 seconds]
[Time since reference or first frame: 129.081381000 seconds]
Frame Number: 2817
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2818 129.155812 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=1 Win=0 Len=0
Frame 2818: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:44.472885000 Pacific Standard Time
Epoch Time: 1320608444.472885000 seconds
[Time delta from previous captured frame: 0.074431000 seconds]
[Time delta from previous displayed frame: 0.074431000 seconds]
[Time since reference or first frame: 129.155812000 seconds]
Frame Number: 2818
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 1, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2819 129.160622 171.64.65.81 192.168.0.99 TCP 60 http > 53975 [RST] Seq=2 Win=0 Len=0
Frame 2819: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Arrival Time: Nov 6, 2011 11:40:44.477695000 Pacific Standard Time
Epoch Time: 1320608444.477695000 seconds
[Time delta from previous captured frame: 0.004810000 seconds]
[Time delta from previous displayed frame: 0.004810000 seconds]
[Time since reference or first frame: 129.160622000 seconds]
Frame Number: 2819
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6), Dst: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Destination: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
Address: AsustekC_54:f3:cf (bc:ae:c5:54:f3:cf)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
Address: Cisco-Li_46:64:e6 (00:22:6b:46:64:e6)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000020202020
Internet Protocol Version 4, Src: 171.64.65.81 (171.64.65.81), Dst: 192.168.0.99 (192.168.0.99)
Transmission Control Protocol, Src Port: http (80), Dst Port: 53975 (53975), Seq: 2, Len: 0
Source port: http (80)
Destination port: 53975 (53975)
[Stream index: 0]
Sequence number: 2 (relative sequence number)
Header length: 20 bytes
Flags: 0x04 (RST)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgement: Not set
.... .... 0... = Push: Not set
.... .... .1.. = Reset: Set
[Expert Info (Chat/Sequence): Connection reset (RST)]
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 0
[Calculated window size: 0]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf96b [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
No. Time Source Destination Protocol Length Info
2820 129.200763 192.168.0.99 171.67.108.26 TCP 66 54007 > http-alt [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1