Ethereal-users: [Ethereal-users] incorrect tcp checksums
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Davidson, Stuart" <Stuart.Davidson@xxxxxx>
Date: Fri, 11 Oct 2002 18:44:57 +0100
We are seeing apparent tcp checksum corruption which results in retransmits and hence slow network performance. The network configuration is: Sun-Fire-280R (10.10.2.52) | 100 M/bit enet | Cisco Catalyst 3500 Series XL | 100 M/bit enet | Sun-Blade-100 (10.150.0.108) The Sun Blade is being jumpstarted from the Sun Fire hence the Sun Fire is the server and main tranmitter of tcp packets. To investigate the problem we have ethereal running on the Sun Fire and on another Sun Blade in the same VLAN as the Sun Blade. Since it's a switched network a span port is configured from the jumpstart Blade to the monitor Blade. On the server VLAN tcp checksums always appear incorrect e.g. for a 1460 byte packet the value is always 0x1caa. On the client VLAN any packets with incorrect tcp checksum results in a retransmit as expected. The following traces show a retransmit sequence. - on the server VLAN, frames 18822 - 18830 correspond to frames 17910 - 17918 on client VLAN - all frames on the server VLAN appear to have incorrect tcp checksums - note, the last frame 18830 appears to have incorrect tcp checksum on server VLAN. However, the corresponding frame 17918 on the client VLAN has the correct tcp checksum Questions: 1. why is the tcp checksum for a 1460 byte frame always incorrect? 2. how can last frame have incorrect tcp checksum on server VLAN but correct tcp checksum on client VLAN? 3. any ideas how to debug this further? Thanks, Stuart Environment: Solaris 5.8, ethereal 0.8.19 compiled GTK+ 1.2.10, Glib 1.2.10, libpcap 0.6, libz 1.1.3, UCD SNMP 4.2.1 Note, although time is not sync'd between the client and server, the delta time between the packets is the same indicating that frames 18822 - 18830 and 17910 - 17918 do correspond. <<js_cli.txt>> <<js_srv.txt>>
Frame 17909 (97 on wire, 97 captured)
Arrival Time: Oct 11, 2002 09:29:52.764618
Time delta from previous packet: 0.000060 seconds
Time relative to first packet: 536.513655 seconds
Frame Number: 17909
Packet Length: 97 bytes
Capture Length: 97 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Type: IP (0x0800)
Trailer: 00000000000000000000000000000000...
Internet Protocol, Src Addr: 10.150.0.8 (10.150.0.8), Dst Addr: 10.10.2.52 (10.10.2.52)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0d22
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x16bf (correct)
Source: 10.150.0.8 (10.150.0.8)
Destination: 10.10.2.52 (10.10.2.52)
Transmission Control Protocol, Src Port: 1022 (1022), Dst Port: 2049 (2049), Seq: 92857068, Ack: 991586816
Source port: 1022 (1022)
Destination port: 2049 (2049)
Sequence number: 92857068
Acknowledgement number: 991586816
Header length: 40 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x4788 (correct)
Options: (20 bytes)
NOP
NOP
SACK:
left edge = 991594116, right edge = 991597036
left edge = 991591196, right edge = 991592656
Frame 17910 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:29:53.152265
Time delta from previous packet: 0.387647 seconds
Time relative to first packet: 536.901302 seconds
Frame Number: 17910
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x2bf3
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xf34d (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 17911 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:29:53.961424
Time delta from previous packet: 0.809159 seconds
Time relative to first packet: 537.710461 seconds
Frame Number: 17911
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x2bf4
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xf34c (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 17912 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:29:55.579333
Time delta from previous packet: 1.617909 seconds
Time relative to first packet: 539.328370 seconds
Frame Number: 17912
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x2bf5
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xf34b (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 17913 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:29:58.815481
Time delta from previous packet: 3.236148 seconds
Time relative to first packet: 542.564518 seconds
Frame Number: 17913
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x2bf6
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xf34a (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 17914 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:30:05.287981
Time delta from previous packet: 6.472500 seconds
Time relative to first packet: 549.037018 seconds
Frame Number: 17914
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b1
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xec8f (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 17915 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:30:18.232545
Time delta from previous packet: 12.944564 seconds
Time relative to first packet: 561.981582 seconds
Frame Number: 17915
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b2
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xec8e (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 17916 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:30:44.121706
Time delta from previous packet: 25.889161 seconds
Time relative to first packet: 587.870743 seconds
Frame Number: 17916
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b3
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xec8d (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 17917 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:31:35.900272
Time delta from previous packet: 51.778566 seconds
Time relative to first packet: 639.649309 seconds
Frame Number: 17917
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b4
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xec8c (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 17918 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 09:32:35.829250
Time delta from previous packet: 59.928978 seconds
Time relative to first packet: 699.578287 seconds
Frame Number: 17918
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b5
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xec8b (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0xcecc (correct)
Data (1460 bytes)
Frame 17919 (97 on wire, 97 captured)
Arrival Time: Oct 11, 2002 09:32:35.829528
Time delta from previous packet: 0.000278 seconds
Time relative to first packet: 699.578565 seconds
Frame Number: 17919
Packet Length: 97 bytes
Capture Length: 97 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
Type: IP (0x0800)
Trailer: 00000000000000000000000000000000...
Internet Protocol, Src Addr: 10.150.0.8 (10.150.0.8), Dst Addr: 10.10.2.52 (10.10.2.52)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0d23
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x16be (correct)
Source: 10.150.0.8 (10.150.0.8)
Destination: 10.10.2.52 (10.10.2.52)
Transmission Control Protocol, Src Port: 1022 (1022), Dst Port: 2049 (2049), Seq: 92857068, Ack: 991588276
Source port: 1022 (1022)
Destination port: 2049 (2049)
Sequence number: 92857068
Acknowledgement number: 991588276
Header length: 40 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x41d4 (correct)
Options: (20 bytes)
NOP
NOP
SACK:
left edge = 991594116, right edge = 991597036
left edge = 991591196, right edge = 991592656
Frame 18821 (74 on wire, 74 captured)
Arrival Time: Oct 11, 2002 08:30:36.869912
Time delta from previous packet: 0.000016 seconds
Time relative to first packet: 535.144095 seconds
Frame Number: 18821
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II
Destination: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.150.0.8 (10.150.0.8), Dst Addr: 10.10.2.52 (10.10.2.52)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0d22
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0x17bf (correct)
Source: 10.150.0.8 (10.150.0.8)
Destination: 10.10.2.52 (10.10.2.52)
Transmission Control Protocol, Src Port: 1022 (1022), Dst Port: 2049 (2049), Seq: 92857068, Ack: 991586816
Source port: 1022 (1022)
Destination port: 2049 (2049)
Sequence number: 92857068
Acknowledgement number: 991586816
Header length: 40 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x4788 (correct)
Options: (20 bytes)
NOP
NOP
SACK:
left edge = 991594116, right edge = 991597036
left edge = 991591196, right edge = 991592656
Frame 18822 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:30:37.256963
Time delta from previous packet: 0.387051 seconds
Time relative to first packet: 535.531146 seconds
Frame Number: 18822
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x2bf3
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xf24d (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18823 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:30:38.066941
Time delta from previous packet: 0.809978 seconds
Time relative to first packet: 536.341124 seconds
Frame Number: 18823
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x2bf4
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xf24c (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18824 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:30:39.686922
Time delta from previous packet: 1.619981 seconds
Time relative to first packet: 537.961105 seconds
Frame Number: 18824
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x2bf5
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xf24b (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18825 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:30:42.926907
Time delta from previous packet: 3.239985 seconds
Time relative to first packet: 541.201090 seconds
Frame Number: 18825
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x2bf6
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xf24a (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18826 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:30:49.406988
Time delta from previous packet: 6.480081 seconds
Time relative to first packet: 547.681171 seconds
Frame Number: 18826
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b1
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xeb8f (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18827 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:31:02.366861
Time delta from previous packet: 12.959873 seconds
Time relative to first packet: 560.641044 seconds
Frame Number: 18827
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b2
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xeb8e (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18828 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:31:28.286582
Time delta from previous packet: 25.919721 seconds
Time relative to first packet: 586.560765 seconds
Frame Number: 18828
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b3
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xeb8d (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18829 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:32:20.126191
Time delta from previous packet: 51.839609 seconds
Time relative to first packet: 638.400374 seconds
Frame Number: 18829
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b4
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xeb8c (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18830 (1514 on wire, 1514 captured)
Arrival Time: Oct 11, 2002 08:33:20.125748
Time delta from previous packet: 59.999557 seconds
Time relative to first packet: 698.399931 seconds
Frame Number: 18830
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II
Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x32b5
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xeb8b (correct)
Source: 10.10.2.52 (10.10.2.52)
Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
Source port: 2049 (2049)
Destination port: 1022 (1022)
Sequence number: 991586816
Next sequence number: 991588276
Acknowledgement number: 92857068
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)
Frame 18831 (74 on wire, 74 captured)
Arrival Time: Oct 11, 2002 08:33:20.127233
Time delta from previous packet: 0.001485 seconds
Time relative to first packet: 698.401416 seconds
Frame Number: 18831
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II
Destination: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
Type: IP (0x0800)
Internet Protocol, Src Addr: 10.150.0.8 (10.150.0.8), Dst Addr: 10.10.2.52 (10.10.2.52)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0d23
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0x17be (correct)
Source: 10.150.0.8 (10.150.0.8)
Destination: 10.10.2.52 (10.10.2.52)
Transmission Control Protocol, Src Port: 1022 (1022), Dst Port: 2049 (2049), Seq: 92857068, Ack: 991588276
Source port: 1022 (1022)
Destination port: 2049 (2049)
Sequence number: 92857068
Acknowledgement number: 991588276
Header length: 40 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 24820
Checksum: 0x41d4 (correct)
Options: (20 bytes)
NOP
NOP
SACK:
left edge = 991594116, right edge = 991597036
left edge = 991591196, right edge = 991592656
- Prev by Date: [Ethereal-users] Using ethereal with wireless system.
- Next by Date: [Ethereal-users] Kerberos decoding
- Previous by thread: [Ethereal-users] Using ethereal with wireless system.
- Next by thread: RE: [Ethereal-users] incorrect tcp checksums
- Index(es):
- Get Wireshark
- Download
- Code of Conduct