No. Time Source Destination Protocol Info 1 0.000000 0.0.0.0 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x62818267 Frame 1 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:18:53.070314000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0xb160 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Discover Option: (53) DHCP Message Type Length: 1 Value: 01 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c b1 60 01 01 06 00 62 81 ...D.C.,.`....b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 01 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 37 09 01 03 06 0c 0f 1c 28 9.9-pre7.......( 0140 29 2a ff 00 00 00 00 00 00 00 00 00 00 00 00 00 )*.............. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 2 0.001384 AmigoTec_08:f8:7b Broadcast ARP Who has 10.0.0.6? Tell 10.0.0.2 Frame 2 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:18:53.071698000 [Time delta from previous captured frame: 0.001384000 seconds] [Time delta from previous displayed frame: 0.001384000 seconds] [Time since reference or first frame: 0.001384000 seconds] Frame Number: 2 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Sender IP address: 10.0.0.2 (10.0.0.2) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.6 (10.0.0.6) 0000 ff ff ff ff ff ff 00 d0 41 08 f8 7b 08 06 00 01 ........A..{.... 0010 08 00 06 04 00 01 00 d0 41 08 f8 7b 0a 00 00 02 ........A..{.... 0020 00 00 00 00 00 00 0a 00 00 06 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 3 0.230006 0.0.0.0 255.255.255.255 DHCP DHCP Request - Transaction ID 0x62818267 Frame 3 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:18:53.300320000 [Time delta from previous captured frame: 0.228622000 seconds] [Time delta from previous displayed frame: 0.228622000 seconds] [Time since reference or first frame: 0.230006000 seconds] Frame Number: 3 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0x9ee4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Request Option: (53) DHCP Message Type Length: 1 Value: 03 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=50,l=4) Requested IP Address = 10.0.0.6 Option: (50) Requested IP Address Length: 4 Value: 0A000006 Option: (t=54,l=4) DHCP Server Identifier = 10.0.0.2 Option: (54) DHCP Server Identifier Length: 4 Value: 0A000002 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c 9e e4 01 01 06 00 62 81 ...D.C.,......b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 03 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 32 04 0a 00 00 06 36 04 0a 9.9-pre2.....6.. 0140 00 00 02 37 09 01 03 06 0c 0f 1c 28 29 2a ff 00 ...7.......()*.. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 4 33.090041 0.0.0.0 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x62818267 Frame 4 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:19:26.160355000 [Time delta from previous captured frame: 32.860035000 seconds] [Time delta from previous displayed frame: 32.860035000 seconds] [Time since reference or first frame: 33.090041000 seconds] Frame Number: 4 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0xb160 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Discover Option: (53) DHCP Message Type Length: 1 Value: 01 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c b1 60 01 01 06 00 62 81 ...D.C.,.`....b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 01 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 37 09 01 03 06 0c 0f 1c 28 9.9-pre7.......( 0140 29 2a ff 00 00 00 00 00 00 00 00 00 00 00 00 00 )*.............. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 5 33.091184 AmigoTec_08:f8:7b Broadcast ARP Who has 10.0.0.6? Tell 10.0.0.2 Frame 5 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:19:26.161498000 [Time delta from previous captured frame: 0.001143000 seconds] [Time delta from previous displayed frame: 0.001143000 seconds] [Time since reference or first frame: 33.091184000 seconds] Frame Number: 5 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Sender IP address: 10.0.0.2 (10.0.0.2) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.6 (10.0.0.6) 0000 ff ff ff ff ff ff 00 d0 41 08 f8 7b 08 06 00 01 ........A..{.... 0010 08 00 06 04 00 01 00 d0 41 08 f8 7b 0a 00 00 02 ........A..{.... 0020 00 00 00 00 00 00 0a 00 00 06 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 6 33.320052 0.0.0.0 255.255.255.255 DHCP DHCP Request - Transaction ID 0x62818267 Frame 6 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:19:26.390366000 [Time delta from previous captured frame: 0.228868000 seconds] [Time delta from previous displayed frame: 0.228868000 seconds] [Time since reference or first frame: 33.320052000 seconds] Frame Number: 6 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0x9ee4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Request Option: (53) DHCP Message Type Length: 1 Value: 03 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=50,l=4) Requested IP Address = 10.0.0.6 Option: (50) Requested IP Address Length: 4 Value: 0A000006 Option: (t=54,l=4) DHCP Server Identifier = 10.0.0.2 Option: (54) DHCP Server Identifier Length: 4 Value: 0A000002 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c 9e e4 01 01 06 00 62 81 ...D.C.,......b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 03 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 32 04 0a 00 00 06 36 04 0a 9.9-pre2.....6.. 0140 00 00 02 37 09 01 03 06 0c 0f 1c 28 29 2a ff 00 ...7.......()*.. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 7 76.061303 0.0.0.0 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x62818267 Frame 7 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:20:09.131617000 [Time delta from previous captured frame: 42.741251000 seconds] [Time delta from previous displayed frame: 42.741251000 seconds] [Time since reference or first frame: 76.061303000 seconds] Frame Number: 7 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0xb160 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Discover Option: (53) DHCP Message Type Length: 1 Value: 01 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c b1 60 01 01 06 00 62 81 ...D.C.,.`....b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 01 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 37 09 01 03 06 0c 0f 1c 28 9.9-pre7.......( 0140 29 2a ff 00 00 00 00 00 00 00 00 00 00 00 00 00 )*.............. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 8 76.062591 AmigoTec_08:f8:7b Broadcast ARP Who has 10.0.0.6? Tell 10.0.0.2 Frame 8 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:20:09.132905000 [Time delta from previous captured frame: 0.001288000 seconds] [Time delta from previous displayed frame: 0.001288000 seconds] [Time since reference or first frame: 76.062591000 seconds] Frame Number: 8 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Sender IP address: 10.0.0.2 (10.0.0.2) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.6 (10.0.0.6) 0000 ff ff ff ff ff ff 00 d0 41 08 f8 7b 08 06 00 01 ........A..{.... 0010 08 00 06 04 00 01 00 d0 41 08 f8 7b 0a 00 00 02 ........A..{.... 0020 00 00 00 00 00 00 0a 00 00 06 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 9 76.291357 0.0.0.0 255.255.255.255 DHCP DHCP Request - Transaction ID 0x62818267 Frame 9 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:20:09.361671000 [Time delta from previous captured frame: 0.228766000 seconds] [Time delta from previous displayed frame: 0.228766000 seconds] [Time since reference or first frame: 76.291357000 seconds] Frame Number: 9 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0x9ee4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Request Option: (53) DHCP Message Type Length: 1 Value: 03 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=50,l=4) Requested IP Address = 10.0.0.6 Option: (50) Requested IP Address Length: 4 Value: 0A000006 Option: (t=54,l=4) DHCP Server Identifier = 10.0.0.2 Option: (54) DHCP Server Identifier Length: 4 Value: 0A000002 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c 9e e4 01 01 06 00 62 81 ...D.C.,......b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 03 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 32 04 0a 00 00 06 36 04 0a 9.9-pre2.....6.. 0140 00 00 02 37 09 01 03 06 0c 0f 1c 28 29 2a ff 00 ...7.......()*.. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 10 80.532316 10.0.0.5 10.0.0.255 BROWSER Local Master Announcement ZLRVM, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 10 (286 bytes on wire, 286 bytes captured) Arrival Time: May 16, 2010 16:20:13.602630000 [Time delta from previous captured frame: 4.240959000 seconds] [Time delta from previous displayed frame: 4.240959000 seconds] [Time since reference or first frame: 80.532316000 seconds] Frame Number: 10 Frame Length: 286 bytes Capture Length: 286 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:nbdgm:smb:browser] [Coloring Rule Name: SMB] [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.255 (10.0.0.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 272 Identification: 0x0139 (313) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x23a1 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.255 (10.0.0.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) Source port: netbios-dgm (138) Destination port: netbios-dgm (138) Length: 252 Checksum: 0xc569 [validation disabled] [Good Checksum: False] [Bad Checksum: False] NetBIOS Datagram Service Message Type: Direct_group datagram (17) More fragments follow: No This is first fragment: Yes Node Type: B node (0) Datagram ID: 0x802b Source IP: 10.0.0.5 (10.0.0.5) Source Port: 138 Datagram length: 230 bytes Packet offset: 0 bytes Source name: ZLRVM<20> (Server service) Destination name: WORKGROUP<1e> (Browser Election Service) SMB (Server Message Block Protocol) SMB Header Server Component: SMB SMB Command: Trans (0x25) Error Class: Success (0x00) Reserved: 00 Error Code: No Error Flags: 0x00 0... .... = Request/Response: Message is a request to the server .0.. .... = Notify: Notify client only on open ..0. .... = Oplocks: OpLock not requested/granted ...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized .... 0... = Case Sensitivity: Path names are case sensitive .... ..0. = Receive Buffer Posted: Receive buffer has not been posted .... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported Flags2: 0x0000 0... .... .... .... = Unicode Strings: Strings are ASCII .0.. .... .... .... = Error Code Type: Error codes are DOS error codes ..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only ...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs .... 0... .... .... = Extended Security Negotiation: Extended security negotiation is not supported .... .... .0.. .... = Long Names Used: Path names in request are not long file names .... .... .... .0.. = Security Signatures: Security signatures are not supported .... .... .... ..0. = Extended Attributes: Extended attributes are not supported .... .... .... ...0 = Long Names Allowed: Long file names are not allowed in the response Process ID High: 0 Signature: 0000000000000000 Reserved: 0000 Tree ID: 0 Process ID: 0 User ID: 0 Multiplex ID: 0 Trans Request (0x25) Word Count (WCT): 17 Total Parameter Count: 0 Total Data Count: 76 Max Parameter Count: 0 Max Data Count: 0 Max Setup Count: 0 Reserved: 00 Flags: 0x0000 .... .... .... ..0. = One Way Transaction: Two way transaction .... .... .... ...0 = Disconnect TID: Do NOT disconnect TID Timeout: 1 second Reserved: 0000 Parameter Count: 0 Parameter Offset: 0 Data Count: 76 Data Offset: 86 Setup Count: 3 Reserved: 00 Byte Count (BCC): 93 Transaction Name: \MAILSLOT\BROWSE SMB MailSlot Protocol Opcode: Write Mail Slot (1) Priority: 0 Class: Unreliable & Broadcast (2) Size: 93 Mailslot Name: \MAILSLOT\BROWSE Microsoft Windows Browser Protocol Command: Local Master Announcement (0x0f) Update Count: 0 Update Periodicity: 4 minutes Host Name: ZLRVM OS Major Version: 5 OS Minor Version: 1 Server Type: 0x00051003 .... .... .... .... .... .... .... ...1 = Workstation: This is a Workstation .... .... .... .... .... .... .... ..1. = Server: This is a Server .... .... .... .... .... .... .... .0.. = SQL: This is NOT an SQL server .... .... .... .... .... .... .... 0... = Domain Controller: This is NOT a Domain Controller .... .... .... .... .... .... ...0 .... = Backup Controller: This is NOT a Backup Controller .... .... .... .... .... .... ..0. .... = Time Source: This is NOT a Time Source .... .... .... .... .... .... .0.. .... = Apple: This is NOT an Apple host .... .... .... .... .... .... 0... .... = Novell: This is NOT a Novell server .... .... .... .... .... ...0 .... .... = Member: This is NOT a Domain Member server .... .... .... .... .... ..0. .... .... = Print: This is NOT a Print Queue server .... .... .... .... .... .0.. .... .... = Dialin: This is NOT a Dialin server .... .... .... .... .... 0... .... .... = Xenix: This is NOT a Xenix server .... .... .... .... ...1 .... .... .... = NT Workstation: This is an NT Workstation .... .... .... .... ..0. .... .... .... = WfW: This is NOT a WfW host .... .... .... .... 0... .... .... .... = NT Server: This is NOT an NT Server .... .... .... ...1 .... .... .... .... = Potential Browser: This is a Potential Browser .... .... .... ..0. .... .... .... .... = Backup Browser: This is NOT a Backup Browser .... .... .... .1.. .... .... .... .... = Master Browser: This is a Master Browser .... .... .... 0... .... .... .... .... = Domain Master Browser: This is NOT a Domain Master Browser .... .... ...0 .... .... .... .... .... = OSF: This is NOT an OSF host .... .... ..0. .... .... .... .... .... = VMS: This is NOT a VMS host .... .... .0.. .... .... .... .... .... = Windows 95+: This is NOT a Windows 95 or above host .... .... 0... .... .... .... .... .... = DFS: THis is NOT a DFS server .0.. .... .... .... .... .... .... .... = Local: This is NOT a local list only request 0... .... .... .... .... .... .... .... = Domain Enum: This is NOT a Domain Enum request Browser Protocol Major Version: 15 Browser Protocol Minor Version: 1 Signature: 0xaa55 Host Comment: Portatile di Mauro Zanardi, Laboratorio RVM 0000 ff ff ff ff ff ff 00 1b 24 4f c3 04 08 00 45 00 ........$O....E. 0010 01 10 01 39 00 00 80 11 23 a1 0a 00 00 05 0a 00 ...9....#....... 0020 00 ff 00 8a 00 8a 00 fc c5 69 11 02 80 2b 0a 00 .........i...+.. 0030 00 05 00 8a 00 e6 00 00 20 46 4b 45 4d 46 43 46 ........ FKEMFCF 0040 47 45 4e 43 41 43 41 43 41 43 41 43 41 43 41 43 GENCACACACACACAC 0050 41 43 41 43 41 43 41 43 41 00 20 46 48 45 50 46 ACACACACA. FHEPF 0060 43 45 4c 45 48 46 43 45 50 46 46 46 41 43 41 43 CELEHFCEPFFFACAC 0070 41 43 41 43 41 43 41 43 41 42 4f 00 ff 53 4d 42 ACACACACABO..SMB 0080 25 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 %............... 0090 00 00 00 00 00 00 00 00 00 00 00 00 11 00 00 4c ...............L 00a0 00 00 00 00 00 00 00 00 00 e8 03 00 00 00 00 00 ................ 00b0 00 00 00 4c 00 56 00 03 00 01 00 00 00 02 00 5d ...L.V.........] 00c0 00 5c 4d 41 49 4c 53 4c 4f 54 5c 42 52 4f 57 53 .\MAILSLOT\BROWS 00d0 45 00 0f 00 80 a9 03 00 5a 4c 52 56 4d 00 18 ba E.......ZLRVM... 00e0 55 06 08 b9 55 06 f8 b7 05 01 03 10 05 00 0f 01 U...U........... 00f0 55 aa 50 6f 72 74 61 74 69 6c 65 20 64 69 20 4d U.Portatile di M 0100 61 75 72 6f 20 5a 61 6e 61 72 64 69 2c 20 4c 61 auro Zanardi, La 0110 62 6f 72 61 74 6f 72 69 6f 20 52 56 4d 00 boratorio RVM. No. Time Source Destination Protocol Info 11 114.573824 0.0.0.0 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x62818267 Frame 11 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:20:47.644138000 [Time delta from previous captured frame: 34.041508000 seconds] [Time delta from previous displayed frame: 34.041508000 seconds] [Time since reference or first frame: 114.573824000 seconds] Frame Number: 11 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0xb160 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Discover Option: (53) DHCP Message Type Length: 1 Value: 01 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c b1 60 01 01 06 00 62 81 ...D.C.,.`....b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 01 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 37 09 01 03 06 0c 0f 1c 28 9.9-pre7.......( 0140 29 2a ff 00 00 00 00 00 00 00 00 00 00 00 00 00 )*.............. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 12 114.575042 AmigoTec_08:f8:7b Broadcast ARP Who has 10.0.0.6? Tell 10.0.0.2 Frame 12 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:20:47.645356000 [Time delta from previous captured frame: 0.001218000 seconds] [Time delta from previous displayed frame: 0.001218000 seconds] [Time since reference or first frame: 114.575042000 seconds] Frame Number: 12 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Sender IP address: 10.0.0.2 (10.0.0.2) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.6 (10.0.0.6) 0000 ff ff ff ff ff ff 00 d0 41 08 f8 7b 08 06 00 01 ........A..{.... 0010 08 00 06 04 00 01 00 d0 41 08 f8 7b 0a 00 00 02 ........A..{.... 0020 00 00 00 00 00 00 0a 00 00 06 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 13 114.803823 0.0.0.0 255.255.255.255 DHCP DHCP Request - Transaction ID 0x62818267 Frame 13 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:20:47.874137000 [Time delta from previous captured frame: 0.228781000 seconds] [Time delta from previous displayed frame: 0.228781000 seconds] [Time since reference or first frame: 114.803823000 seconds] Frame Number: 13 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0x9ee4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Request Option: (53) DHCP Message Type Length: 1 Value: 03 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=50,l=4) Requested IP Address = 10.0.0.6 Option: (50) Requested IP Address Length: 4 Value: 0A000006 Option: (t=54,l=4) DHCP Server Identifier = 10.0.0.2 Option: (54) DHCP Server Identifier Length: 4 Value: 0A000002 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c 9e e4 01 01 06 00 62 81 ...D.C.,......b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 03 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 32 04 0a 00 00 06 36 04 0a 9.9-pre2.....6.. 0140 00 00 02 37 09 01 03 06 0c 0f 1c 28 29 2a ff 00 ...7.......()*.. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 14 166.443953 0.0.0.0 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x62818267 Frame 14 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:21:39.514267000 [Time delta from previous captured frame: 51.640130000 seconds] [Time delta from previous displayed frame: 51.640130000 seconds] [Time since reference or first frame: 166.443953000 seconds] Frame Number: 14 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0xb160 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Discover Option: (53) DHCP Message Type Length: 1 Value: 01 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c b1 60 01 01 06 00 62 81 ...D.C.,.`....b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 01 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 37 09 01 03 06 0c 0f 1c 28 9.9-pre7.......( 0140 29 2a ff 00 00 00 00 00 00 00 00 00 00 00 00 00 )*.............. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 15 166.445175 AmigoTec_08:f8:7b Broadcast ARP Who has 10.0.0.6? Tell 10.0.0.2 Frame 15 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:21:39.515489000 [Time delta from previous captured frame: 0.001222000 seconds] [Time delta from previous displayed frame: 0.001222000 seconds] [Time since reference or first frame: 166.445175000 seconds] Frame Number: 15 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Sender IP address: 10.0.0.2 (10.0.0.2) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.6 (10.0.0.6) 0000 ff ff ff ff ff ff 00 d0 41 08 f8 7b 08 06 00 01 ........A..{.... 0010 08 00 06 04 00 01 00 d0 41 08 f8 7b 0a 00 00 02 ........A..{.... 0020 00 00 00 00 00 00 0a 00 00 06 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 16 166.673924 0.0.0.0 255.255.255.255 DHCP DHCP Request - Transaction ID 0x62818267 Frame 16 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:21:39.744238000 [Time delta from previous captured frame: 0.228749000 seconds] [Time delta from previous displayed frame: 0.228749000 seconds] [Time since reference or first frame: 166.673924000 seconds] Frame Number: 16 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0x9ee4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x62818267 Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Request Option: (53) DHCP Message Type Length: 1 Value: 03 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=50,l=4) Requested IP Address = 10.0.0.6 Option: (50) Requested IP Address Length: 4 Value: 0A000006 Option: (t=54,l=4) DHCP Server Identifier = 10.0.0.2 Option: (54) DHCP Server Identifier Length: 4 Value: 0A000002 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c 9e e4 01 01 06 00 62 81 ...D.C.,......b. 0030 82 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .g.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 03 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 32 04 0a 00 00 06 36 04 0a 9.9-pre2.....6.. 0140 00 00 02 37 09 01 03 06 0c 0f 1c 28 29 2a ff 00 ...7.......()*.. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 17 195.746991 10.0.0.5 255.255.255.255 UDP Source port: 50127 Destination port: 50127 Frame 17 (62 bytes on wire, 62 bytes captured) Arrival Time: May 16, 2010 16:22:08.817305000 [Time delta from previous captured frame: 29.073067000 seconds] [Time delta from previous displayed frame: 29.073067000 seconds] [Time since reference or first frame: 195.746991000 seconds] Frame Number: 17 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:data] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x013a (314) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x2f7f [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: 50127 (50127), Dst Port: 50127 (50127) Source port: 50127 (50127) Destination port: 50127 (50127) Length: 28 Checksum: 0x7b46 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Data (20 bytes) Data: 00420201001B244FC30400140A000005FFFFFF00 [Length: 20] 0000 ff ff ff ff ff ff 00 1b 24 4f c3 04 08 00 45 00 ........$O....E. 0010 00 30 01 3a 00 00 80 11 2f 7f 0a 00 00 05 ff ff .0.:..../....... 0020 ff ff c3 cf c3 cf 00 1c 7b 46 00 42 02 01 00 1b ........{F.B.... 0030 24 4f c3 04 00 14 0a 00 00 05 ff ff ff 00 $O............ No. Time Source Destination Protocol Info 18 196.398510 10.0.0.6 255.255.255.255 UDP Source port: 44163 Destination port: 50127 Frame 18 (176 bytes on wire, 176 bytes captured) Arrival Time: May 16, 2010 16:22:09.468824000 [Time delta from previous captured frame: 0.651519000 seconds] [Time delta from previous displayed frame: 0.651519000 seconds] [Time since reference or first frame: 196.398510000 seconds] Frame Number: 18 Frame Length: 176 bytes Capture Length: 176 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:data] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 162 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3046 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: 44163 (44163), Dst Port: 50127 (50127) Source port: 44163 (44163) Destination port: 50127 (50127) Length: 142 Checksum: 0x38c1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Data (134 bytes) Data: 00420102001B244FC30400860023F82C0D3605014E534132... [Length: 134] 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 00 a2 00 00 40 00 40 11 30 46 0a 00 00 06 ff ff ....@.@.0F...... 0020 ff ff ac 83 c3 cf 00 8e 38 c1 00 42 01 02 00 1b ........8..B.... 0030 24 4f c3 04 00 86 00 23 f8 2c 0d 36 05 01 4e 53 $O.....#.,.6..NS 0040 41 32 31 30 00 00 31 00 00 00 44 e7 2b 40 0a 00 A210..1...D.+@.. 0050 00 06 ff ff ff 00 0a 00 00 02 01 0a 00 00 02 00 ................ 0060 00 00 00 44 45 56 5f 49 44 3a 56 33 2e 32 30 28 ...DEV_ID:V3.20( 0070 41 46 44 2e 30 29 09 4d 4f 44 5f 49 44 3a 4e 53 AFD.0).MOD_ID:NS 0080 41 32 31 30 09 55 52 4c 3a 68 74 74 70 3a 2f 2f A210.URL:http:// 0090 31 30 2e 30 2e 30 2e 36 09 45 52 52 4f 52 3a 09 10.0.0.6.ERROR:. 00a0 48 44 44 5f 45 78 69 73 74 3a 31 09 4b 45 59 3a HDD_Exist:1.KEY: No. Time Source Destination Protocol Info 19 197.523799 QuantaCo_4f:c3:04 Broadcast ARP Who has 10.0.0.6? Tell 10.0.0.5 Frame 19 (42 bytes on wire, 42 bytes captured) Arrival Time: May 16, 2010 16:22:10.594113000 [Time delta from previous captured frame: 1.125289000 seconds] [Time delta from previous displayed frame: 1.125289000 seconds] [Time since reference or first frame: 197.523799000 seconds] Frame Number: 19 Frame Length: 42 bytes Capture Length: 42 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Sender IP address: 10.0.0.5 (10.0.0.5) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.6 (10.0.0.6) 0000 ff ff ff ff ff ff 00 1b 24 4f c3 04 08 06 00 01 ........$O...... 0010 08 00 06 04 00 01 00 1b 24 4f c3 04 0a 00 00 05 ........$O...... 0020 00 00 00 00 00 00 0a 00 00 06 .......... No. Time Source Destination Protocol Info 20 197.524009 ZyxelCom_2c:0d:36 QuantaCo_4f:c3:04 ARP 10.0.0.6 is at 00:23:f8:2c:0d:36 Frame 20 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:10.594323000 [Time delta from previous captured frame: 0.000210000 seconds] [Time delta from previous displayed frame: 0.000210000 seconds] [Time since reference or first frame: 197.524009000 seconds] Frame Number: 20 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) [Is gratuitous: False] Sender MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Sender IP address: 10.0.0.6 (10.0.0.6) Target MAC address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Target IP address: 10.0.0.5 (10.0.0.5) 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 06 00 01 ..$O...#.,.6.... 0010 08 00 06 04 00 02 00 23 f8 2c 0d 36 0a 00 00 06 .......#.,.6.... 0020 00 1b 24 4f c3 04 0a 00 00 05 00 00 00 00 00 00 ..$O............ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 21 197.524029 10.0.0.5 10.0.0.6 TCP veracity > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=3 Frame 21 (66 bytes on wire, 66 bytes captured) Arrival Time: May 16, 2010 16:22:10.594343000 [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 197.524029000 seconds] Frame Number: 21 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x013b (315) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe57e [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: veracity (1062), Dst Port: http (80), Seq: 0, Len: 0 Source port: veracity (1062) Destination port: http (80) [Stream index: 1] Sequence number: 0 (relative sequence number) Header length: 32 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgement: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http] [Message: Connection establish request (SYN): server port http] [Severity level: Chat] [Group: Sequence] .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x77e9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (12 bytes) Maximum segment size: 1460 bytes NOP Window scale: 3 (multiply by 8) NOP NOP SACK permitted 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 34 01 3b 40 00 80 06 e5 7e 0a 00 00 05 0a 00 .4.;@....~...... 0020 00 06 04 26 00 50 c2 ac 1b ff 00 00 00 00 80 02 ...&.P.......... 0030 ff ff 77 e9 00 00 02 04 05 b4 01 03 03 03 01 01 ..w............. 0040 04 02 .. No. Time Source Destination Protocol Info 22 197.524180 10.0.0.6 10.0.0.5 TCP http > veracity [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 Frame 22 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:10.594494000 [Time delta from previous captured frame: 0.000151000 seconds] [Time delta from previous displayed frame: 0.000151000 seconds] [Time since reference or first frame: 197.524180000 seconds] Frame Number: 22 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x26c6 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: http (80), Dst Port: veracity (1062), Seq: 1, Ack: 1, Len: 0 Source port: http (80) Destination port: veracity (1062) [Stream index: 1] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .1.. = Reset: Set [Expert Info (Chat/Sequence): Connection reset (RST)] [Message: Connection reset (RST)] [Severity level: Chat] [Group: Sequence] .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0xb8a3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 21] [The RTT to ACK the segment was: 0.000151000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 00 ..$O...#.,.6..E. 0010 00 28 00 00 40 00 40 06 26 c6 0a 00 00 06 0a 00 .(..@.@.&....... 0020 00 05 00 50 04 26 00 00 00 00 c2 ac 1c 00 50 14 ...P.&........P. 0030 00 00 b8 a3 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 23 198.023995 10.0.0.5 10.0.0.6 TCP veracity > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=3 Frame 23 (66 bytes on wire, 66 bytes captured) Arrival Time: May 16, 2010 16:22:11.094309000 [Time delta from previous captured frame: 0.499815000 seconds] [Time delta from previous displayed frame: 0.499815000 seconds] [Time since reference or first frame: 198.023995000 seconds] Frame Number: 23 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x013c (316) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe57d [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: veracity (1062), Dst Port: http (80), Seq: 0, Len: 0 Source port: veracity (1062) Destination port: http (80) [Stream index: 1] Sequence number: 0 (relative sequence number) Header length: 32 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgement: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http] [Message: Connection establish request (SYN): server port http] [Severity level: Chat] [Group: Sequence] .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x77e9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (12 bytes) Maximum segment size: 1460 bytes NOP Window scale: 3 (multiply by 8) NOP NOP SACK permitted [SEQ/ACK analysis] [This is an ACK to the segment in frame: 22] [The RTT to ACK the segment was: 0.499815000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 34 01 3c 40 00 80 06 e5 7d 0a 00 00 05 0a 00 .4.<@....}...... 0020 00 06 04 26 00 50 c2 ac 1b ff 00 00 00 00 80 02 ...&.P.......... 0030 ff ff 77 e9 00 00 02 04 05 b4 01 03 03 03 01 01 ..w............. 0040 04 02 .. No. Time Source Destination Protocol Info 24 198.024182 10.0.0.6 10.0.0.5 TCP http > veracity [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 Frame 24 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:11.094496000 [Time delta from previous captured frame: 0.000187000 seconds] [Time delta from previous displayed frame: 0.000187000 seconds] [Time since reference or first frame: 198.024182000 seconds] Frame Number: 24 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x26c6 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: http (80), Dst Port: veracity (1062), Seq: 1, Ack: 1, Len: 0 Source port: http (80) Destination port: veracity (1062) [Stream index: 1] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .1.. = Reset: Set [Expert Info (Chat/Sequence): Connection reset (RST)] [Message: Connection reset (RST)] [Severity level: Chat] [Group: Sequence] .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0xb8a3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 23] [The RTT to ACK the segment was: 0.000187000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 00 ..$O...#.,.6..E. 0010 00 28 00 00 40 00 40 06 26 c6 0a 00 00 06 0a 00 .(..@.@.&....... 0020 00 05 00 50 04 26 00 00 00 00 c2 ac 1c 00 50 14 ...P.&........P. 0030 00 00 b8 a3 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 25 198.527005 10.0.0.5 10.0.0.6 TCP veracity > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=3 Frame 25 (66 bytes on wire, 66 bytes captured) Arrival Time: May 16, 2010 16:22:11.597319000 [Time delta from previous captured frame: 0.502823000 seconds] [Time delta from previous displayed frame: 0.502823000 seconds] [Time since reference or first frame: 198.527005000 seconds] Frame Number: 25 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x013d (317) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe57c [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: veracity (1062), Dst Port: http (80), Seq: 0, Len: 0 Source port: veracity (1062) Destination port: http (80) [Stream index: 1] Sequence number: 0 (relative sequence number) Header length: 32 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgement: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http] [Message: Connection establish request (SYN): server port http] [Severity level: Chat] [Group: Sequence] .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x77e9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (12 bytes) Maximum segment size: 1460 bytes NOP Window scale: 3 (multiply by 8) NOP NOP SACK permitted [SEQ/ACK analysis] [This is an ACK to the segment in frame: 24] [The RTT to ACK the segment was: 0.502823000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 34 01 3d 40 00 80 06 e5 7c 0a 00 00 05 0a 00 .4.=@....|...... 0020 00 06 04 26 00 50 c2 ac 1b ff 00 00 00 00 80 02 ...&.P.......... 0030 ff ff 77 e9 00 00 02 04 05 b4 01 03 03 03 01 01 ..w............. 0040 04 02 .. No. Time Source Destination Protocol Info 26 198.527330 10.0.0.6 10.0.0.5 TCP http > veracity [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 Frame 26 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:11.597644000 [Time delta from previous captured frame: 0.000325000 seconds] [Time delta from previous displayed frame: 0.000325000 seconds] [Time since reference or first frame: 198.527330000 seconds] Frame Number: 26 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x26c6 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: http (80), Dst Port: veracity (1062), Seq: 1, Ack: 1, Len: 0 Source port: http (80) Destination port: veracity (1062) [Stream index: 1] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .1.. = Reset: Set [Expert Info (Chat/Sequence): Connection reset (RST)] [Message: Connection reset (RST)] [Severity level: Chat] [Group: Sequence] .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0xb8a3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 25] [The RTT to ACK the segment was: 0.000325000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 00 ..$O...#.,.6..E. 0010 00 28 00 00 40 00 40 06 26 c6 0a 00 00 06 0a 00 .(..@.@.&....... 0020 00 05 00 50 04 26 00 00 00 00 c2 ac 1c 00 50 14 ...P.&........P. 0030 00 00 b8 a3 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 27 200.079292 Cisco-Li_97:72:71 Broadcast ARP Who has 10.0.0.2? Tell 10.0.0.11 Frame 27 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:13.149606000 [Time delta from previous captured frame: 1.551962000 seconds] [Time delta from previous displayed frame: 1.551962000 seconds] [Time since reference or first frame: 200.079292000 seconds] Frame Number: 27 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: Cisco-Li_97:72:71 (00:1a:70:97:72:71), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Cisco-Li_97:72:71 (00:1a:70:97:72:71) Address: Cisco-Li_97:72:71 (00:1a:70:97:72:71) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: Cisco-Li_97:72:71 (00:1a:70:97:72:71) Sender IP address: 10.0.0.11 (10.0.0.11) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.2 (10.0.0.2) 0000 ff ff ff ff ff ff 00 1a 70 97 72 71 08 06 00 01 ........p.rq.... 0010 08 00 06 04 00 01 00 1a 70 97 72 71 0a 00 00 0b ........p.rq.... 0020 00 00 00 00 00 00 0a 00 00 02 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 28 202.516984 ZyxelCom_2c:0d:36 QuantaCo_4f:c3:04 ARP Who has 10.0.0.5? Tell 10.0.0.6 Frame 28 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:15.587298000 [Time delta from previous captured frame: 2.437692000 seconds] [Time delta from previous displayed frame: 2.437692000 seconds] [Time since reference or first frame: 202.516984000 seconds] Frame Number: 28 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Sender IP address: 10.0.0.6 (10.0.0.6) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.5 (10.0.0.5) 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 06 00 01 ..$O...#.,.6.... 0010 08 00 06 04 00 01 00 23 f8 2c 0d 36 0a 00 00 06 .......#.,.6.... 0020 00 00 00 00 00 00 0a 00 00 05 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 29 202.517023 QuantaCo_4f:c3:04 ZyxelCom_2c:0d:36 ARP 10.0.0.5 is at 00:1b:24:4f:c3:04 Frame 29 (42 bytes on wire, 42 bytes captured) Arrival Time: May 16, 2010 16:22:15.587337000 [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 202.517023000 seconds] Frame Number: 29 Frame Length: 42 bytes Capture Length: 42 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Address Resolution Protocol (reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) [Is gratuitous: False] Sender MAC address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Sender IP address: 10.0.0.5 (10.0.0.5) Target MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Target IP address: 10.0.0.6 (10.0.0.6) 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 06 00 01 .#.,.6..$O...... 0010 08 00 06 04 00 02 00 1b 24 4f c3 04 0a 00 00 05 ........$O...... 0020 00 23 f8 2c 0d 36 0a 00 00 06 .#.,.6.... No. Time Source Destination Protocol Info 30 209.679996 10.0.0.5 255.255.255.255 UDP Source port: 50127 Destination port: 50127 Frame 30 (179 bytes on wire, 179 bytes captured) Arrival Time: May 16, 2010 16:22:22.750310000 [Time delta from previous captured frame: 7.162973000 seconds] [Time delta from previous displayed frame: 7.162973000 seconds] [Time since reference or first frame: 209.679996000 seconds] Frame Number: 30 Frame Length: 179 bytes Capture Length: 179 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:data] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 165 Identification: 0x013e (318) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x2f06 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: 50127 (50127), Dst Port: 50127 (50127) Source port: 50127 (50127) Destination port: 50127 (50127) Length: 145 Checksum: 0x4dc7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Data (137 bytes) Data: 00420205001B244FC30400890023F82C0D36014E53413231... [Length: 137] 0000 ff ff ff ff ff ff 00 1b 24 4f c3 04 08 00 45 00 ........$O....E. 0010 00 a5 01 3e 00 00 80 11 2f 06 0a 00 00 05 ff ff ...>..../....... 0020 ff ff c3 cf c3 cf 00 91 4d c7 00 42 02 05 00 1b ........M..B.... 0030 24 4f c3 04 00 89 00 23 f8 2c 0d 36 01 4e 53 41 $O.....#.,.6.NSA 0040 32 31 30 00 00 78 01 3d 00 01 00 00 00 0a 00 00 210..x.=........ 0050 06 ff ff ff 00 0a 00 00 02 01 0a 00 00 02 00 00 ................ 0060 00 00 44 45 56 5f 49 44 3a 56 33 2e 32 30 28 41 ..DEV_ID:V3.20(A 0070 46 44 2e 30 29 09 4d 4f 44 5f 49 44 3a 4e 53 41 FD.0).MOD_ID:NSA 0080 32 31 30 09 55 52 4c 3a 68 74 74 70 3a 2f 2f 31 210.URL:http://1 0090 30 2e 30 2e 30 2e 36 09 45 52 52 4f 52 3a 4e 65 0.0.0.6.ERROR:Ne 00a0 74 77 6f 72 6b 53 65 74 74 69 6e 67 09 44 44 4e tworkSetting.DDN 00b0 53 3a 31 S:1 No. Time Source Destination Protocol Info 31 210.517808 0.0.0.0 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x93a6284a Frame 31 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:22:23.588122000 [Time delta from previous captured frame: 0.837812000 seconds] [Time delta from previous displayed frame: 0.837812000 seconds] [Time since reference or first frame: 210.517808000 seconds] Frame Number: 31 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0xda58 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x93a6284a Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Discover Option: (53) DHCP Message Type Length: 1 Value: 01 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c da 58 01 01 06 00 93 a6 ...D.C.,.X...... 0030 28 4a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 (J.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 01 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 37 09 01 03 06 0c 0f 1c 28 9.9-pre7.......( 0140 29 2a ff 00 00 00 00 00 00 00 00 00 00 00 00 00 )*.............. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 32 210.518958 AmigoTec_08:f8:7b Broadcast ARP Who has 10.0.0.6? Tell 10.0.0.2 Frame 32 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:23.589272000 [Time delta from previous captured frame: 0.001150000 seconds] [Time delta from previous displayed frame: 0.001150000 seconds] [Time since reference or first frame: 210.518958000 seconds] Frame Number: 32 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: AmigoTec_08:f8:7b (00:d0:41:08:f8:7b) Sender IP address: 10.0.0.2 (10.0.0.2) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.6 (10.0.0.6) 0000 ff ff ff ff ff ff 00 d0 41 08 f8 7b 08 06 00 01 ........A..{.... 0010 08 00 06 04 00 01 00 d0 41 08 f8 7b 0a 00 00 02 ........A..{.... 0020 00 00 00 00 00 00 0a 00 00 06 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 33 210.747746 0.0.0.0 255.255.255.255 DHCP DHCP Request - Transaction ID 0x93a6284a Frame 33 (590 bytes on wire, 590 bytes captured) Arrival Time: May 16, 2010 16:22:23.818060000 [Time delta from previous captured frame: 0.228788000 seconds] [Time delta from previous displayed frame: 0.228788000 seconds] [Time since reference or first frame: 210.747746000 seconds] Frame Number: 33 Frame Length: 590 bytes Capture Length: 590 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:bootp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 576 Identification: 0x0000 (0) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x78ae [correct] [Good: True] [Bad : False] Source: 0.0.0.0 (0.0.0.0) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Source port: bootpc (68) Destination port: bootps (67) Length: 556 Checksum: 0xc7dc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Bootstrap Protocol Message type: Boot Request (1) Hardware type: Ethernet Hardware address length: 6 Hops: 0 Transaction ID: 0x93a6284a Seconds elapsed: 0 Bootp flags: 0x0000 (Unicast) 0... .... .... .... = Broadcast flag: Unicast .000 0000 0000 0000 = Reserved flags: 0x0000 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 0.0.0.0 (0.0.0.0) Next server IP address: 0.0.0.0 (0.0.0.0) Relay agent IP address: 0.0.0.0 (0.0.0.0) Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Client hardware address padding: 00000000000000000000 Server host name not given Boot file name not given Magic cookie: (OK) Option: (t=53,l=1) DHCP Message Type = DHCP Request Option: (53) DHCP Message Type Length: 1 Value: 03 Option: (t=61,l=7) Client identifier Option: (61) Client identifier Length: 7 Value: 010023F82C0D36 Hardware type: Ethernet Client MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Option: (t=60,l=15) Vendor class identifier = "udhcp 0.9.9-pre" Option: (60) Vendor class identifier Length: 15 Value: 756468637020302E392E392D707265 Option: (t=50,l=4) Requested IP Address = 10.0.0.6 Option: (50) Requested IP Address Length: 4 Value: 0A000006 Option: (t=54,l=4) DHCP Server Identifier = 10.0.0.2 Option: (54) DHCP Server Identifier Length: 4 Value: 0A000002 Option: (t=55,l=9) Parameter Request List Option: (55) Parameter Request List Length: 9 Value: 0103060C0F1C28292A 1 = Subnet Mask 3 = Router 6 = Domain Name Server 12 = Host Name 15 = Domain Name 28 = Broadcast Address 40 = Network Information Service Domain 41 = Network Information Service Servers 42 = Network Time Protocol Servers End Option Padding 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 02 40 00 00 00 00 40 11 78 ae 00 00 00 00 ff ff .@....@.x....... 0020 ff ff 00 44 00 43 02 2c c7 dc 01 01 06 00 93 a6 ...D.C.,........ 0030 28 4a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 (J.............. 0040 00 00 00 00 00 00 00 23 f8 2c 0d 36 00 00 00 00 .......#.,.6.... 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0110 00 00 00 00 00 00 63 82 53 63 35 01 03 3d 07 01 ......c.Sc5..=.. 0120 00 23 f8 2c 0d 36 3c 0f 75 64 68 63 70 20 30 2e .#.,.6<.udhcp 0. 0130 39 2e 39 2d 70 72 65 32 04 0a 00 00 06 36 04 0a 9.9-pre2.....6.. 0140 00 00 02 37 09 01 03 06 0c 0f 1c 28 29 2a ff 00 ...7.......()*.. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .............. No. Time Source Destination Protocol Info 34 211.587588 10.0.0.6 255.255.255.255 UDP Source port: 44163 Destination port: 50127 Frame 34 (189 bytes on wire, 189 bytes captured) Arrival Time: May 16, 2010 16:22:24.657902000 [Time delta from previous captured frame: 0.839842000 seconds] [Time delta from previous displayed frame: 0.839842000 seconds] [Time since reference or first frame: 211.587588000 seconds] Frame Number: 34 Frame Length: 189 bytes Capture Length: 189 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:data] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 255.255.255.255 (255.255.255.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 175 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3039 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: 44163 (44163), Dst Port: 50127 (50127) Source port: 44163 (44163) Destination port: 50127 (50127) Length: 155 Checksum: 0x5227 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Data (147 bytes) Data: 00420106001B244FC30400930023F82C0D3606014E534132... [Length: 147] 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 00 45 00 .......#.,.6..E. 0010 00 af 00 00 40 00 40 11 30 39 0a 00 00 06 ff ff ....@.@.09...... 0020 ff ff ac 83 c3 cf 00 9b 52 27 00 42 01 06 00 1b ........R'.B.... 0030 24 4f c3 04 00 93 00 23 f8 2c 0d 36 06 01 4e 53 $O.....#.,.6..NS 0040 41 32 31 30 00 00 29 00 00 00 3c e7 2b 40 0a 00 A210..)...<.+@.. 0050 00 06 ff ff ff 00 0a 00 00 02 0a 00 00 02 00 00 ................ 0060 00 00 44 45 56 5f 49 44 3a 56 33 2e 32 30 28 41 ..DEV_ID:V3.20(A 0070 46 44 2e 30 29 09 4d 4f 44 5f 49 44 3a 4e 53 41 FD.0).MOD_ID:NSA 0080 32 31 30 09 55 52 4c 3a 68 74 74 70 3a 2f 2f 31 210.URL:http://1 0090 30 2e 30 2e 30 2e 36 09 45 52 52 4f 52 3a 4e 65 0.0.0.6.ERROR:Ne 00a0 74 77 6f 72 6b 53 65 74 74 69 6e 67 09 49 6e 69 tworkSetting.Ini 00b0 74 48 44 44 3a 30 09 44 44 4e 53 3a 31 tHDD:0.DDNS:1 No. Time Source Destination Protocol Info 35 211.615764 10.0.0.5 10.0.0.6 TCP syscomlan > ftp [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=3 Frame 35 (66 bytes on wire, 66 bytes captured) Arrival Time: May 16, 2010 16:22:24.686078000 [Time delta from previous captured frame: 0.028176000 seconds] [Time delta from previous displayed frame: 0.028176000 seconds] [Time since reference or first frame: 211.615764000 seconds] Frame Number: 35 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x0142 (322) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe577 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 0, Len: 0 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 0 (relative sequence number) Header length: 32 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgement: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port ftp] [Message: Connection establish request (SYN): server port ftp] [Severity level: Chat] [Group: Sequence] .... ...0 = Fin: Not set Window size: 65535 Checksum: 0xc6d6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (12 bytes) Maximum segment size: 1460 bytes NOP Window scale: 3 (multiply by 8) NOP NOP SACK permitted 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 34 01 42 40 00 80 06 e5 77 0a 00 00 05 0a 00 .4.B@....w...... 0020 00 06 04 29 00 15 53 44 3c b2 00 00 00 00 80 02 ...)..SD<....... 0030 ff ff c6 d6 00 00 02 04 05 b4 01 03 03 03 01 01 ................ 0040 04 02 .. No. Time Source Destination Protocol Info 36 211.617747 ZyxelCom_2c:0d:36 Broadcast ARP Who has 10.0.0.5? Tell 10.0.0.6 Frame 36 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.688061000 [Time delta from previous captured frame: 0.001983000 seconds] [Time delta from previous displayed frame: 0.001983000 seconds] [Time since reference or first frame: 211.617747000 seconds] Frame Number: 36 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Sender IP address: 10.0.0.6 (10.0.0.6) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.5 (10.0.0.5) 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 06 00 01 .......#.,.6.... 0010 08 00 06 04 00 01 00 23 f8 2c 0d 36 0a 00 00 06 .......#.,.6.... 0020 00 00 00 00 00 00 0a 00 00 05 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 37 211.617768 QuantaCo_4f:c3:04 ZyxelCom_2c:0d:36 ARP 10.0.0.5 is at 00:1b:24:4f:c3:04 Frame 37 (42 bytes on wire, 42 bytes captured) Arrival Time: May 16, 2010 16:22:24.688082000 [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 211.617768000 seconds] Frame Number: 37 Frame Length: 42 bytes Capture Length: 42 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Address Resolution Protocol (reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) [Is gratuitous: False] Sender MAC address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Sender IP address: 10.0.0.5 (10.0.0.5) Target MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Target IP address: 10.0.0.6 (10.0.0.6) 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 06 00 01 .#.,.6..$O...... 0010 08 00 06 04 00 02 00 1b 24 4f c3 04 0a 00 00 05 ........$O...... 0020 00 23 f8 2c 0d 36 0a 00 00 06 .#.,.6.... No. Time Source Destination Protocol Info 38 211.617961 10.0.0.6 10.0.0.5 TCP ftp > syscomlan [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460 WS=2 Frame 38 (66 bytes on wire, 66 bytes captured) Arrival Time: May 16, 2010 16:22:24.688275000 [Time delta from previous captured frame: 0.000193000 seconds] [Time delta from previous displayed frame: 0.000193000 seconds] [Time since reference or first frame: 211.617961000 seconds] Frame Number: 38 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x26ba [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 0, Ack: 1, Len: 0 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x12 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port ftp] [Message: Connection establish acknowledge (SYN+ACK): server port ftp] [Severity level: Chat] [Group: Sequence] .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x0657 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (12 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted NOP Window scale: 2 (multiply by 4) [SEQ/ACK analysis] [This is an ACK to the segment in frame: 35] [The RTT to ACK the segment was: 0.002197000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 00 ..$O...#.,.6..E. 0010 00 34 00 00 40 00 40 06 26 ba 0a 00 00 06 0a 00 .4..@.@.&....... 0020 00 05 00 15 04 29 04 88 a5 17 53 44 3c b3 80 12 .....)....SD<... 0030 16 d0 06 57 00 00 02 04 05 b4 01 01 04 02 01 03 ...W............ 0040 03 02 .. No. Time Source Destination Protocol Info 39 211.618003 10.0.0.5 10.0.0.6 TCP syscomlan > ftp [ACK] Seq=1 Ack=1 Win=516096 Len=0 Frame 39 (54 bytes on wire, 54 bytes captured) Arrival Time: May 16, 2010 16:22:24.688317000 [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 211.618003000 seconds] Frame Number: 39 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0143 (323) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe582 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 1, Ack: 1, Len: 0 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x61f3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 38] [The RTT to ACK the segment was: 0.000042000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 28 01 43 40 00 80 06 e5 82 0a 00 00 05 0a 00 .(.C@........... 0020 00 06 04 29 00 15 53 44 3c b3 04 88 a5 18 50 10 ...)..SD<.....P. 0030 fc 00 61 f3 00 00 ..a... No. Time Source Destination Protocol Info 40 211.624732 10.0.0.6 10.0.0.5 FTP Response: 220---------- Welcome to Pure-FTPd ---------- Frame 40 (252 bytes on wire, 252 bytes captured) Arrival Time: May 16, 2010 16:22:24.695046000 [Time delta from previous captured frame: 0.006729000 seconds] [Time delta from previous displayed frame: 0.006729000 seconds] [Time since reference or first frame: 211.624732000 seconds] Frame Number: 40 Frame Length: 252 bytes Capture Length: 252 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 238 Identification: 0x00bd (189) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x2533 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 1, Ack: 1, Len: 198 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 1 (relative sequence number) [Next sequence number: 199 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0x1415 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 39] [The RTT to ACK the segment was: 0.006729000 seconds] [Number of bytes in flight: 198] File Transfer Protocol (FTP) 220---------- Welcome to Pure-FTPd ----------\r\n Response code: Service ready for new user (220) Response arg: --------- Welcome to Pure-FTPd ---------- 220-You are user number 1 of 50 allowed.\r\n 220-Local time is now 16:22. Server port: 21.\r\n 220 You will be disconnected after 15 minutes of inactivity.\r\n 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 ee 00 bd 40 00 40 06 25 33 0a 00 00 06 0a 00 ....@.@.%3...... 0020 00 05 00 15 04 29 04 88 a5 18 53 44 3c b3 50 18 .....)....SD<.P. 0030 05 b4 14 15 00 00 32 32 30 2d 2d 2d 2d 2d 2d 2d ......220------- 0040 2d 2d 2d 20 57 65 6c 63 6f 6d 65 20 74 6f 20 50 --- Welcome to P 0050 75 72 65 2d 46 54 50 64 20 2d 2d 2d 2d 2d 2d 2d ure-FTPd ------- 0060 2d 2d 2d 0d 0a 32 32 30 2d 59 6f 75 20 61 72 65 ---..220-You are 0070 20 75 73 65 72 20 6e 75 6d 62 65 72 20 31 20 6f user number 1 o 0080 66 20 35 30 20 61 6c 6c 6f 77 65 64 2e 0d 0a 32 f 50 allowed...2 0090 32 30 2d 4c 6f 63 61 6c 20 74 69 6d 65 20 69 73 20-Local time is 00a0 20 6e 6f 77 20 31 36 3a 32 32 2e 20 53 65 72 76 now 16:22. Serv 00b0 65 72 20 70 6f 72 74 3a 20 32 31 2e 0d 0a 32 32 er port: 21...22 00c0 30 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 64 69 0 You will be di 00d0 73 63 6f 6e 6e 65 63 74 65 64 20 61 66 74 65 72 sconnected after 00e0 20 31 35 20 6d 69 6e 75 74 65 73 20 6f 66 20 69 15 minutes of i 00f0 6e 61 63 74 69 76 69 74 79 2e 0d 0a nactivity... No. Time Source Destination Protocol Info 41 211.624985 10.0.0.5 10.0.0.6 TCP syscomlan > ftp [ACK] Seq=1 Ack=199 Win=515896 Len=0 Frame 41 (54 bytes on wire, 54 bytes captured) Arrival Time: May 16, 2010 16:22:24.695299000 [Time delta from previous captured frame: 0.000253000 seconds] [Time delta from previous displayed frame: 0.000253000 seconds] [Time since reference or first frame: 211.624985000 seconds] Frame Number: 41 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0144 (324) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe581 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 1, Ack: 199, Len: 0 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 1 (relative sequence number) Acknowledgement number: 199 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515896 (scaled) Checksum: 0x6146 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 40] [The RTT to ACK the segment was: 0.000253000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 28 01 44 40 00 80 06 e5 81 0a 00 00 05 0a 00 .(.D@........... 0020 00 06 04 29 00 15 53 44 3c b3 04 88 a5 de 50 10 ...)..SD<.....P. 0030 fb e7 61 46 00 00 ..aF.. No. Time Source Destination Protocol Info 42 211.625928 10.0.0.5 10.0.0.6 FTP Request: USER sysinit Frame 42 (68 bytes on wire, 68 bytes captured) Arrival Time: May 16, 2010 16:22:24.696242000 [Time delta from previous captured frame: 0.000943000 seconds] [Time delta from previous displayed frame: 0.000943000 seconds] [Time since reference or first frame: 211.625928000 seconds] Frame Number: 42 Frame Length: 68 bytes Capture Length: 68 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 54 Identification: 0x0149 (329) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe56e [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 1, Ack: 199, Len: 14 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 1 (relative sequence number) [Next sequence number: 15 (relative sequence number)] Acknowledgement number: 199 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515896 (scaled) Checksum: 0x4cb7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 14] File Transfer Protocol (FTP) USER sysinit\r\n Request command: USER Request arg: sysinit 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 36 01 49 40 00 80 06 e5 6e 0a 00 00 05 0a 00 .6.I@....n...... 0020 00 06 04 29 00 15 53 44 3c b3 04 88 a5 de 50 18 ...)..SD<.....P. 0030 fb e7 4c b7 00 00 55 53 45 52 20 73 79 73 69 6e ..L...USER sysin 0040 69 74 0d 0a it.. No. Time Source Destination Protocol Info 43 211.626135 10.0.0.6 10.0.0.5 TCP ftp > syscomlan [ACK] Seq=199 Ack=15 Win=5840 Len=0 Frame 43 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.696449000 [Time delta from previous captured frame: 0.000207000 seconds] [Time delta from previous displayed frame: 0.000207000 seconds] [Time since reference or first frame: 211.626135000 seconds] Frame Number: 43 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x00be (190) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x25f8 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 199, Ack: 15, Len: 0 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 199 (relative sequence number) Acknowledgement number: 15 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0x576c [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 42] [The RTT to ACK the segment was: 0.000207000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 28 00 be 40 00 40 06 25 f8 0a 00 00 06 0a 00 .(..@.@.%....... 0020 00 05 00 15 04 29 04 88 a5 de 53 44 3c c1 50 10 .....)....SD<.P. 0030 05 b4 57 6c 00 00 00 00 00 00 00 00 ..Wl........ No. Time Source Destination Protocol Info 44 211.626745 10.0.0.6 10.0.0.5 FTP Response: 331 User sysinit OK. Password required Frame 44 (94 bytes on wire, 94 bytes captured) Arrival Time: May 16, 2010 16:22:24.697059000 [Time delta from previous captured frame: 0.000610000 seconds] [Time delta from previous displayed frame: 0.000610000 seconds] [Time since reference or first frame: 211.626745000 seconds] Frame Number: 44 Frame Length: 94 bytes Capture Length: 94 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x00bf (191) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x25cf [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 199, Ack: 15, Len: 40 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 199 (relative sequence number) [Next sequence number: 239 (relative sequence number)] Acknowledgement number: 15 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0xd732 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 40] File Transfer Protocol (FTP) 331 User sysinit OK. Password required\r\n Response code: User name okay, need password (331) Response arg: User sysinit OK. Password required 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 50 00 bf 40 00 40 06 25 cf 0a 00 00 06 0a 00 .P..@.@.%....... 0020 00 05 00 15 04 29 04 88 a5 de 53 44 3c c1 50 18 .....)....SD<.P. 0030 05 b4 d7 32 00 00 33 33 31 20 55 73 65 72 20 73 ...2..331 User s 0040 79 73 69 6e 69 74 20 4f 4b 2e 20 50 61 73 73 77 ysinit OK. Passw 0050 6f 72 64 20 72 65 71 75 69 72 65 64 0d 0a ord required.. No. Time Source Destination Protocol Info 45 211.626934 10.0.0.5 10.0.0.6 TCP syscomlan > ftp [ACK] Seq=15 Ack=239 Win=515856 Len=0 Frame 45 (54 bytes on wire, 54 bytes captured) Arrival Time: May 16, 2010 16:22:24.697248000 [Time delta from previous captured frame: 0.000189000 seconds] [Time delta from previous displayed frame: 0.000189000 seconds] [Time since reference or first frame: 211.626934000 seconds] Frame Number: 45 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x014a (330) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe57b [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 15, Ack: 239, Len: 0 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 15 (relative sequence number) Acknowledgement number: 239 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515856 (scaled) Checksum: 0x6115 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 44] [The RTT to ACK the segment was: 0.000189000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 28 01 4a 40 00 80 06 e5 7b 0a 00 00 05 0a 00 .(.J@....{...... 0020 00 06 04 29 00 15 53 44 3c c1 04 88 a6 06 50 10 ...)..SD<.....P. 0030 fb e2 61 15 00 00 ..a... No. Time Source Destination Protocol Info 46 211.627525 10.0.0.5 10.0.0.6 FTP Request: PASS sysinit Frame 46 (68 bytes on wire, 68 bytes captured) Arrival Time: May 16, 2010 16:22:24.697839000 [Time delta from previous captured frame: 0.000591000 seconds] [Time delta from previous displayed frame: 0.000591000 seconds] [Time since reference or first frame: 211.627525000 seconds] Frame Number: 46 Frame Length: 68 bytes Capture Length: 68 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 54 Identification: 0x014f (335) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe568 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 15, Ack: 239, Len: 14 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 15 (relative sequence number) [Next sequence number: 29 (relative sequence number)] Acknowledgement number: 239 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515856 (scaled) Checksum: 0x4397 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 14] File Transfer Protocol (FTP) PASS sysinit\r\n Request command: PASS Request arg: sysinit 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 36 01 4f 40 00 80 06 e5 68 0a 00 00 05 0a 00 .6.O@....h...... 0020 00 06 04 29 00 15 53 44 3c c1 04 88 a6 06 50 18 ...)..SD<.....P. 0030 fb e2 43 97 00 00 50 41 53 53 20 73 79 73 69 6e ..C...PASS sysin 0040 69 74 0d 0a it.. No. Time Source Destination Protocol Info 47 211.627741 ZyxelCom_2c:0d:36 Broadcast ARP Who has 10.0.0.2? Tell 10.0.0.6 Frame 47 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.698055000 [Time delta from previous captured frame: 0.000216000 seconds] [Time delta from previous displayed frame: 0.000216000 seconds] [Time since reference or first frame: 211.627741000 seconds] Frame Number: 47 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [Is gratuitous: False] Sender MAC address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Sender IP address: 10.0.0.6 (10.0.0.6) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00) Target IP address: 10.0.0.2 (10.0.0.2) 0000 ff ff ff ff ff ff 00 23 f8 2c 0d 36 08 06 00 01 .......#.,.6.... 0010 08 00 06 04 00 01 00 23 f8 2c 0d 36 0a 00 00 06 .......#.,.6.... 0020 00 00 00 00 00 00 0a 00 00 02 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 48 211.657810 10.0.0.6 10.0.0.5 TCP ftp > syscomlan [ACK] Seq=239 Ack=29 Win=5840 Len=0 Frame 48 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.728124000 [Time delta from previous captured frame: 0.030069000 seconds] [Time delta from previous displayed frame: 0.030069000 seconds] [Time since reference or first frame: 211.657810000 seconds] Frame Number: 48 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x00c0 (192) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x25f6 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 239, Ack: 29, Len: 0 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 239 (relative sequence number) Acknowledgement number: 29 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0x5736 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 46] [The RTT to ACK the segment was: 0.030285000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 28 00 c0 40 00 40 06 25 f6 0a 00 00 06 0a 00 .(..@.@.%....... 0020 00 05 00 15 04 29 04 88 a6 06 53 44 3c cf 50 10 .....)....SD<.P. 0030 05 b4 57 36 00 00 00 00 00 00 00 00 ..W6........ No. Time Source Destination Protocol Info 49 211.660596 10.0.0.6 10.0.0.5 FTP Response: 230-User sysinit has group access to: 500 Frame 49 (146 bytes on wire, 146 bytes captured) Arrival Time: May 16, 2010 16:22:24.730910000 [Time delta from previous captured frame: 0.002786000 seconds] [Time delta from previous displayed frame: 0.002786000 seconds] [Time since reference or first frame: 211.660596000 seconds] Frame Number: 49 Frame Length: 146 bytes Capture Length: 146 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x00c1 (193) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x2599 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 239, Ack: 29, Len: 92 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 239 (relative sequence number) [Next sequence number: 331 (relative sequence number)] Acknowledgement number: 29 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0x71d2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 92] File Transfer Protocol (FTP) 230-User sysinit has group access to: 500 \r\n Response code: User logged in, proceed (230) Response arg: User sysinit has group access to: 500 230 OK. Current restricted directory is /\r\n 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 84 00 c1 40 00 40 06 25 99 0a 00 00 06 0a 00 ....@.@.%....... 0020 00 05 00 15 04 29 04 88 a6 06 53 44 3c cf 50 18 .....)....SD<.P. 0030 05 b4 71 d2 00 00 32 33 30 2d 55 73 65 72 20 73 ..q...230-User s 0040 79 73 69 6e 69 74 20 68 61 73 20 67 72 6f 75 70 ysinit has group 0050 20 61 63 63 65 73 73 20 74 6f 3a 20 20 35 30 30 access to: 500 0060 20 20 20 20 20 0d 0a 32 33 30 20 4f 4b 2e 20 43 ..230 OK. C 0070 75 72 72 65 6e 74 20 72 65 73 74 72 69 63 74 65 urrent restricte 0080 64 20 64 69 72 65 63 74 6f 72 79 20 69 73 20 2f d directory is / 0090 0d 0a .. No. Time Source Destination Protocol Info 50 211.660829 10.0.0.5 10.0.0.6 TCP syscomlan > ftp [ACK] Seq=29 Ack=331 Win=515760 Len=0 Frame 50 (54 bytes on wire, 54 bytes captured) Arrival Time: May 16, 2010 16:22:24.731143000 [Time delta from previous captured frame: 0.000233000 seconds] [Time delta from previous displayed frame: 0.000233000 seconds] [Time since reference or first frame: 211.660829000 seconds] Frame Number: 50 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0150 (336) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe575 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 29, Ack: 331, Len: 0 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 29 (relative sequence number) Acknowledgement number: 331 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515760 (scaled) Checksum: 0x60b7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 49] [The RTT to ACK the segment was: 0.000233000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 28 01 50 40 00 80 06 e5 75 0a 00 00 05 0a 00 .(.P@....u...... 0020 00 06 04 29 00 15 53 44 3c cf 04 88 a6 62 50 10 ...)..SD<....bP. 0030 fb d6 60 b7 00 00 ..`... No. Time Source Destination Protocol Info 51 211.671386 10.0.0.5 10.0.0.6 FTP Request: TYPE I Frame 51 (62 bytes on wire, 62 bytes captured) Arrival Time: May 16, 2010 16:22:24.741700000 [Time delta from previous captured frame: 0.010557000 seconds] [Time delta from previous displayed frame: 0.010557000 seconds] [Time since reference or first frame: 211.671386000 seconds] Frame Number: 51 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x0155 (341) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe568 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 29, Ack: 331, Len: 8 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 29 (relative sequence number) [Next sequence number: 37 (relative sequence number)] Acknowledgement number: 331 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515760 (scaled) Checksum: 0x8eb5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 8] File Transfer Protocol (FTP) TYPE I\r\n Request command: TYPE Request arg: I 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 30 01 55 40 00 80 06 e5 68 0a 00 00 05 0a 00 .0.U@....h...... 0020 00 06 04 29 00 15 53 44 3c cf 04 88 a6 62 50 18 ...)..SD<....bP. 0030 fb d6 8e b5 00 00 54 59 50 45 20 49 0d 0a ......TYPE I.. No. Time Source Destination Protocol Info 52 211.671593 10.0.0.6 10.0.0.5 TCP ftp > syscomlan [ACK] Seq=331 Ack=37 Win=5840 Len=0 Frame 52 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.741907000 [Time delta from previous captured frame: 0.000207000 seconds] [Time delta from previous displayed frame: 0.000207000 seconds] [Time since reference or first frame: 211.671593000 seconds] Frame Number: 52 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x00c2 (194) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x25f4 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 331, Ack: 37, Len: 0 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 331 (relative sequence number) Acknowledgement number: 37 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0x56d2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 51] [The RTT to ACK the segment was: 0.000207000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 28 00 c2 40 00 40 06 25 f4 0a 00 00 06 0a 00 .(..@.@.%....... 0020 00 05 00 15 04 29 04 88 a6 62 53 44 3c d7 50 10 .....)...bSD<.P. 0030 05 b4 56 d2 00 00 00 00 00 00 00 00 ..V......... No. Time Source Destination Protocol Info 53 211.671938 10.0.0.6 10.0.0.5 FTP Response: 200 TYPE is now 8-bit binary Frame 53 (84 bytes on wire, 84 bytes captured) Arrival Time: May 16, 2010 16:22:24.742252000 [Time delta from previous captured frame: 0.000345000 seconds] [Time delta from previous displayed frame: 0.000345000 seconds] [Time since reference or first frame: 211.671938000 seconds] Frame Number: 53 Frame Length: 84 bytes Capture Length: 84 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 70 Identification: 0x00c3 (195) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x25d5 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 331, Ack: 37, Len: 30 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 331 (relative sequence number) [Next sequence number: 361 (relative sequence number)] Acknowledgement number: 37 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0x779e [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 30] File Transfer Protocol (FTP) 200 TYPE is now 8-bit binary\r\n Response code: Command okay (200) Response arg: TYPE is now 8-bit binary 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 46 00 c3 40 00 40 06 25 d5 0a 00 00 06 0a 00 .F..@.@.%....... 0020 00 05 00 15 04 29 04 88 a6 62 53 44 3c d7 50 18 .....)...bSD<.P. 0030 05 b4 77 9e 00 00 32 30 30 20 54 59 50 45 20 69 ..w...200 TYPE i 0040 73 20 6e 6f 77 20 38 2d 62 69 74 20 62 69 6e 61 s now 8-bit bina 0050 72 79 0d 0a ry.. No. Time Source Destination Protocol Info 54 211.672174 10.0.0.5 10.0.0.6 TCP syscomlan > ftp [ACK] Seq=37 Ack=361 Win=515736 Len=0 Frame 54 (54 bytes on wire, 54 bytes captured) Arrival Time: May 16, 2010 16:22:24.742488000 [Time delta from previous captured frame: 0.000236000 seconds] [Time delta from previous displayed frame: 0.000236000 seconds] [Time since reference or first frame: 211.672174000 seconds] Frame Number: 54 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0156 (342) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe56f [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 37, Ack: 361, Len: 0 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 37 (relative sequence number) Acknowledgement number: 361 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515736 (scaled) Checksum: 0x6094 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 53] [The RTT to ACK the segment was: 0.000236000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 28 01 56 40 00 80 06 e5 6f 0a 00 00 05 0a 00 .(.V@....o...... 0020 00 06 04 29 00 15 53 44 3c d7 04 88 a6 80 50 10 ...)..SD<.....P. 0030 fb d3 60 94 00 00 ..`... No. Time Source Destination Protocol Info 55 211.673040 10.0.0.5 10.0.0.6 FTP Request: PASV Frame 55 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.743354000 [Time delta from previous captured frame: 0.000866000 seconds] [Time delta from previous displayed frame: 0.000866000 seconds] [Time since reference or first frame: 211.673040000 seconds] Frame Number: 55 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 46 Identification: 0x015b (347) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe564 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 37, Ack: 361, Len: 6 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 37 (relative sequence number) [Next sequence number: 43 (relative sequence number)] Acknowledgement number: 361 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515736 (scaled) Checksum: 0xafe4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 6] File Transfer Protocol (FTP) PASV\r\n Request command: PASV 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 2e 01 5b 40 00 80 06 e5 64 0a 00 00 05 0a 00 ...[@....d...... 0020 00 06 04 29 00 15 53 44 3c d7 04 88 a6 80 50 18 ...)..SD<.....P. 0030 fb d3 af e4 00 00 50 41 53 56 0d 0a ......PASV.. No. Time Source Destination Protocol Info 56 211.673616 10.0.0.6 10.0.0.5 FTP Response: 227 Entering Passive Mode (10,0,0,6,115,195) Frame 56 (100 bytes on wire, 100 bytes captured) Arrival Time: May 16, 2010 16:22:24.743930000 [Time delta from previous captured frame: 0.000576000 seconds] [Time delta from previous displayed frame: 0.000576000 seconds] [Time since reference or first frame: 211.673616000 seconds] Frame Number: 56 Frame Length: 100 bytes Capture Length: 100 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 86 Identification: 0x00c4 (196) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x25c4 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 361, Ack: 43, Len: 46 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 361 (relative sequence number) [Next sequence number: 407 (relative sequence number)] Acknowledgement number: 43 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0x2971 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 55] [The RTT to ACK the segment was: 0.000576000 seconds] [Number of bytes in flight: 46] File Transfer Protocol (FTP) 227 Entering Passive Mode (10,0,0,6,115,195)\r\n Response code: Entering Passive Mode (227) Response arg: Entering Passive Mode (10,0,0,6,115,195) Passive IP address: 10.0.0.6 (10.0.0.6) Passive port: 29635 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 56 00 c4 40 00 40 06 25 c4 0a 00 00 06 0a 00 .V..@.@.%....... 0020 00 05 00 15 04 29 04 88 a6 80 53 44 3c dd 50 18 .....)....SD<.P. 0030 05 b4 29 71 00 00 32 32 37 20 45 6e 74 65 72 69 ..)q..227 Enteri 0040 6e 67 20 50 61 73 73 69 76 65 20 4d 6f 64 65 20 ng Passive Mode 0050 28 31 30 2c 30 2c 30 2c 36 2c 31 31 35 2c 31 39 (10,0,0,6,115,19 0060 35 29 0d 0a 5).. No. Time Source Destination Protocol Info 57 211.673819 10.0.0.5 10.0.0.6 TCP syscomlan > ftp [ACK] Seq=43 Ack=407 Win=515688 Len=0 Frame 57 (54 bytes on wire, 54 bytes captured) Arrival Time: May 16, 2010 16:22:24.744133000 [Time delta from previous captured frame: 0.000203000 seconds] [Time delta from previous displayed frame: 0.000203000 seconds] [Time since reference or first frame: 211.673819000 seconds] Frame Number: 57 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x015c (348) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe569 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 43, Ack: 407, Len: 0 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 43 (relative sequence number) Acknowledgement number: 407 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515688 (scaled) Checksum: 0x6066 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 56] [The RTT to ACK the segment was: 0.000203000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 28 01 5c 40 00 80 06 e5 69 0a 00 00 05 0a 00 .(.\@....i...... 0020 00 06 04 29 00 15 53 44 3c dd 04 88 a6 ae 50 10 ...)..SD<.....P. 0030 fb cd 60 66 00 00 ..`f.. No. Time Source Destination Protocol Info 58 211.674248 10.0.0.5 10.0.0.6 TCP fpo-fns > 29635 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=3 Frame 58 (66 bytes on wire, 66 bytes captured) Arrival Time: May 16, 2010 16:22:24.744562000 [Time delta from previous captured frame: 0.000429000 seconds] [Time delta from previous displayed frame: 0.000429000 seconds] [Time since reference or first frame: 211.674248000 seconds] Frame Number: 58 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x015f (351) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe55a [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 0, Len: 0 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 0 (relative sequence number) Header length: 32 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgement: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 29635] [Message: Connection establish request (SYN): server port 29635] [Severity level: Chat] [Group: Sequence] .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x8591 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (12 bytes) Maximum segment size: 1460 bytes NOP Window scale: 3 (multiply by 8) NOP NOP SACK permitted 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 34 01 5f 40 00 80 06 e5 5a 0a 00 00 05 0a 00 .4._@....Z...... 0020 00 06 04 2a 73 c3 5e 9d fe ee 00 00 00 00 80 02 ...*s.^......... 0030 ff ff 85 91 00 00 02 04 05 b4 01 03 03 03 01 01 ................ 0040 04 02 .. No. Time Source Destination Protocol Info 59 211.674449 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460 WS=2 Frame 59 (66 bytes on wire, 66 bytes captured) Arrival Time: May 16, 2010 16:22:24.744763000 [Time delta from previous captured frame: 0.000201000 seconds] [Time delta from previous displayed frame: 0.000201000 seconds] [Time since reference or first frame: 211.674449000 seconds] Frame Number: 59 Frame Length: 66 bytes Capture Length: 66 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x26ba [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 0, Ack: 1, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x12 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 29635] [Message: Connection establish acknowledge (SYN+ACK): server port 29635] [Severity level: Chat] [Group: Sequence] .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xb7cf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Options: (12 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted NOP Window scale: 2 (multiply by 4) [SEQ/ACK analysis] [This is an ACK to the segment in frame: 58] [The RTT to ACK the segment was: 0.000201000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 00 ..$O...#.,.6..E. 0010 00 34 00 00 40 00 40 06 26 ba 0a 00 00 06 0a 00 .4..@.@.&....... 0020 00 05 73 c3 04 2a 04 ad b2 34 5e 9d fe ef 80 12 ..s..*...4^..... 0030 16 d0 b7 cf 00 00 02 04 05 b4 01 01 04 02 01 03 ................ 0040 03 02 .. No. Time Source Destination Protocol Info 60 211.674473 10.0.0.5 10.0.0.6 TCP fpo-fns > 29635 [ACK] Seq=1 Ack=1 Win=516096 Len=0 Frame 60 (54 bytes on wire, 54 bytes captured) Arrival Time: May 16, 2010 16:22:24.744787000 [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 211.674473000 seconds] Frame Number: 60 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0160 (352) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe565 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 1, Ack: 1, Len: 0 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x136c [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 59] [The RTT to ACK the segment was: 0.000024000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 28 01 60 40 00 80 06 e5 65 0a 00 00 05 0a 00 .(.`@....e...... 0020 00 06 04 2a 73 c3 5e 9d fe ef 04 ad b2 35 50 10 ...*s.^......5P. 0030 fc 00 13 6c 00 00 ...l.. No. Time Source Destination Protocol Info 61 211.674859 10.0.0.5 10.0.0.6 FTP Request: STOR toolpack.tar.gz Frame 61 (76 bytes on wire, 76 bytes captured) Arrival Time: May 16, 2010 16:22:24.745173000 [Time delta from previous captured frame: 0.000386000 seconds] [Time delta from previous displayed frame: 0.000386000 seconds] [Time since reference or first frame: 211.674859000 seconds] Frame Number: 61 Frame Length: 76 bytes Capture Length: 76 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 62 Identification: 0x0163 (355) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe54c [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 43, Ack: 407, Len: 22 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 43 (relative sequence number) [Next sequence number: 65 (relative sequence number)] Acknowledgement number: 407 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515688 (scaled) Checksum: 0x99a7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 22] File Transfer Protocol (FTP) STOR toolpack.tar.gz\r\n Request command: STOR Request arg: toolpack.tar.gz 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 3e 01 63 40 00 80 06 e5 4c 0a 00 00 05 0a 00 .>.c@....L...... 0020 00 06 04 29 00 15 53 44 3c dd 04 88 a6 ae 50 18 ...)..SD<.....P. 0030 fb cd 99 a7 00 00 53 54 4f 52 20 74 6f 6f 6c 70 ......STOR toolp 0040 61 63 6b 2e 74 61 72 2e 67 7a 0d 0a ack.tar.gz.. No. Time Source Destination Protocol Info 62 211.675778 10.0.0.6 10.0.0.5 FTP Response: 150 Accepted data connection Frame 62 (84 bytes on wire, 84 bytes captured) Arrival Time: May 16, 2010 16:22:24.746092000 [Time delta from previous captured frame: 0.000919000 seconds] [Time delta from previous displayed frame: 0.000919000 seconds] [Time since reference or first frame: 211.675778000 seconds] Frame Number: 62 Frame Length: 84 bytes Capture Length: 84 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 70 Identification: 0x00c5 (197) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x25d3 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: ftp (21), Dst Port: syscomlan (1065), Seq: 407, Ack: 65, Len: 30 Source port: ftp (21) Destination port: syscomlan (1065) [Stream index: 2] Sequence number: 407 (relative sequence number) [Next sequence number: 437 (relative sequence number)] Acknowledgement number: 65 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 (scaled) Checksum: 0x6f31 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 61] [The RTT to ACK the segment was: 0.000919000 seconds] [Number of bytes in flight: 30] File Transfer Protocol (FTP) 150 Accepted data connection\r\n Response code: File status okay; about to open data connection (150) Response arg: Accepted data connection 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 10 ..$O...#.,.6..E. 0010 00 46 00 c5 40 00 40 06 25 d3 0a 00 00 06 0a 00 .F..@.@.%....... 0020 00 05 00 15 04 29 04 88 a6 ae 53 44 3c f3 50 18 .....)....SD<.P. 0030 05 b4 6f 31 00 00 31 35 30 20 41 63 63 65 70 74 ..o1..150 Accept 0040 65 64 20 64 61 74 61 20 63 6f 6e 6e 65 63 74 69 ed data connecti 0050 6f 6e 0d 0a on.. No. Time Source Destination Protocol Info 63 211.675988 10.0.0.5 10.0.0.6 TCP syscomlan > ftp [ACK] Seq=65 Ack=437 Win=515656 Len=0 Frame 63 (54 bytes on wire, 54 bytes captured) Arrival Time: May 16, 2010 16:22:24.746302000 [Time delta from previous captured frame: 0.000210000 seconds] [Time delta from previous displayed frame: 0.000210000 seconds] [Time since reference or first frame: 211.675988000 seconds] Frame Number: 63 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0164 (356) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe561 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: syscomlan (1065), Dst Port: ftp (21), Seq: 65, Ack: 437, Len: 0 Source port: syscomlan (1065) Destination port: ftp (21) [Stream index: 2] Sequence number: 65 (relative sequence number) Acknowledgement number: 437 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 515656 (scaled) Checksum: 0x6036 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 62] [The RTT to ACK the segment was: 0.000210000 seconds] 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 00 28 01 64 40 00 80 06 e5 61 0a 00 00 05 0a 00 .(.d@....a...... 0020 00 06 04 29 00 15 53 44 3c f3 04 88 a6 cc 50 10 ...)..SD<.....P. 0030 fb c9 60 36 00 00 ..`6.. No. Time Source Destination Protocol Info 64 211.692592 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 64 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.762906000 [Time delta from previous captured frame: 0.016604000 seconds] [Time delta from previous displayed frame: 0.016604000 seconds] [Time since reference or first frame: 211.692592000 seconds] Frame Number: 64 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0167 (359) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdfaa [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 1, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 1 (relative sequence number) [Next sequence number: 1461 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0xca81 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 1460] FTP Data [truncated] FTP Data: \037\213\b\000\227R\371I\000\003\354Z\017p\224\307u\337\357\356\004\342$\360\t\204\243 \331\376\210O\314A\245\343\2238\201\342Q=\207%\214\210\204\255\200phBF:I'\351\342\323\335\371\356\023\177\246\264\221@\200\354B,\0 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 67 40 00 80 06 df aa 0a 00 00 05 0a 00 ...g@........... 0020 00 06 04 2a 73 c3 5e 9d fe ef 04 ad b2 35 50 10 ...*s.^......5P. 0030 fc 00 ca 81 00 00 1f 8b 08 00 97 52 f9 49 00 03 ...........R.I.. 0040 ec 5a 0f 70 94 c7 75 df ef ee 04 e2 24 f0 09 84 .Z.p..u.....$... 0050 a3 20 d9 fe 88 4f cc 41 a5 e3 93 38 81 e2 51 3d . ...O.A...8..Q= 0060 87 25 8c 88 84 ad 80 70 68 42 46 3a 49 27 e9 e2 .%.....phBF:I'.. 0070 d3 dd f9 ee 13 7f a6 b4 91 40 80 ec 42 2c 17 9c .........@..B,.. 0080 b4 0e e4 2e 63 9a 30 1e a6 a1 2d e9 b8 0e f6 e0 ....c.0...-..... 0090 9a b6 94 52 17 07 ea 32 2e 53 df 1f be 44 16 4c ...R...2.S...D.L 00a0 4d 3a b4 f5 24 98 eb ef 7d bb a7 5b 04 18 33 1e M:..$...}..[..3. 00b0 c7 e3 99 7e 9a a7 f7 76 f7 ed 7b 6f 77 df be fd ...~...v..{ow... 00c0 f6 7b e7 5e dc 15 08 d5 46 7d 03 ec d3 7b 34 3c .{.^....F}...{4< 00d0 cb ea ea 4c 8c 67 0a ae a9 ab 5b e2 61 35 35 35 ...L.g....[.a555 00e0 4b eb 96 d6 6a da d2 65 4c ab a9 a9 d5 ea 98 aa K...j..eL....... 00f0 7d 8a 36 4d 3e 83 31 dd 17 55 55 16 0d 87 f5 8f }.6M>.1..UU..... 0100 e2 bb 53 fb e7 f4 f9 f6 8a d6 47 15 45 99 2c 5b ..S.......G.E.,[ 0110 98 8b 51 a9 73 27 63 1e e0 73 f7 52 1d b3 79 98 ..Q.s'c..s.R..y. 0120 ca 0a d1 76 1f ab a0 f6 88 a7 04 ed cf 71 28 64 ...v.........q(d 0130 1c 6c 02 a6 31 de d7 33 c4 c1 14 08 28 10 ed 56 .l..1..3....(..V 0140 6a 43 d9 33 cc 61 0e e3 60 cb b3 f2 67 88 83 b7 jC.3.a..`...g... 0150 84 43 81 a8 a3 76 5e a7 98 70 14 06 7e 60 e1 7a .C...v^..p..~`.z 0160 a9 1d 24 6b 2d 21 50 4c 18 47 79 5c d8 95 b3 b1 ..$k-!PL.Gy\.... 0170 19 42 9a 87 39 a8 8c 83 4d 82 7e b4 f7 0f 73 a0 .B..9...M.~...s. 0180 75 d7 a5 b6 c5 c1 40 d7 e2 60 4f 75 30 10 1a dc u.....@..`Ou0... 0190 ec 8e 85 dd 4b 78 bd 43 d8 be f2 b1 75 62 2e 79 ....Kx.C....ub.y 01a0 3d 4c 61 a5 80 76 c0 5c c0 ea 70 48 f7 3d 11 80 =La..v.\..pH.=.. 01b0 e3 a9 6b c3 bd fa 26 5f d4 ff 09 56 f0 f6 4f 89 ..k...&_...V..O. 01c0 d0 37 5d 94 67 02 66 4b 6d d3 84 cd f4 d0 9a e4 .7].g.fKm....... 01d0 d6 a0 98 e5 d7 a0 f4 2e 75 16 08 3c 83 71 9f a0 ........u..<.q.. 01e0 87 e6 c1 2e e8 59 80 7b 00 45 b7 e8 db 0d d8 b7 .....Y.{.E...... 01f0 83 b1 51 61 67 23 20 81 f2 39 85 97 57 01 0e a3 ..Qag# ..9..W... 0200 7c 55 b4 3f 0e 78 19 e5 8b a2 fc 63 c0 09 94 cb |U.?.x.....c.... 0210 04 7f 04 70 06 e5 2a d1 fe 34 e0 02 ca 6d a2 fc ...p..*..4...m.. 0220 2d c0 38 ca 9d 82 ff 6b 00 7d 17 63 27 cd f6 99 -.8....k.}.c'... 0230 ec 61 e0 ab 68 5f 2f f8 37 91 91 d8 17 e7 45 b9 .a..h_/.7.....E. 0240 8e e6 0a e5 fd a2 bc 9d c6 8c fe 41 d1 ff 05 e0 ...........A.... 0250 32 b4 5f 10 f2 7f 08 70 ee e4 f3 42 e5 6f 02 b4 2._....p...B.o.. 0260 9d 79 7b ff 00 d0 b0 93 fb 2a 95 f3 bb 92 fb a7 .y{......*...... 0270 1b d0 8e f6 06 d1 3e 77 4a 3b eb f8 ca c6 8e 35 ......>wJ;.....5 0280 fe 3e 78 96 3f da 18 f4 c5 62 fe 18 eb e8 e8 1b .>x.?....b...... 0290 08 87 3a 28 ca e9 1d 1d 0c ae db 4d 2e bb 94 45 ..:(.......M...E 02a0 a2 81 90 de cb 62 7a d4 1f 8d 86 a3 ac d7 1f ee .....bz......... 02b0 65 be ae 70 54 67 bd 31 bf ff 49 6a 09 75 0f 44 e..pTg.1..Ij.u.D 02c0 58 bf 1e 0e 05 59 6f d4 ef eb 61 03 fe 81 98 1f X....Yo...a..... 02d0 0c ba 3f 18 24 06 6a ef ed f3 eb dd ac 37 32 88 ..?.$.j......72. 02e0 ff c4 4b 3a 21 32 14 ee 08 86 bb 7d 7a 20 1c 62 ..K:!2.....}z .b 02f0 bd dd c1 70 cc cf 7a c3 11 7f 08 ad 64 84 b0 68 ...p..z.....d..h 0300 c0 17 08 b1 95 ad ab 1e 69 ec a8 75 7b b8 b7 dc ........i..u{... 0310 f8 a7 4c c1 16 e1 51 34 3f 0a 73 b2 bc 0f 97 06 ..L...Q4?.s..... 0320 02 33 a9 ed 6f 44 79 64 b6 c2 e6 c2 81 bd c0 f7 .3..oDyd........ 0330 62 32 9b 08 a3 6b 33 61 38 7c 2b 61 38 7c 1b 61 b2...k3a8|+a8|.a 0340 38 6e 3b 61 6c 8a f5 84 b1 69 36 10 c6 62 75 12 8n;al....i6..bu. 0350 86 03 f7 10 86 e3 f6 13 c6 26 09 12 86 43 47 08 .........&...CG. 0360 c3 a9 75 c2 30 66 33 61 6c b0 ad 84 b1 50 43 84 ..u.0f3al....PC. 0370 b1 b9 6c c9 6a c3 76 66 75 7a 25 63 97 6c 67 f6 ..l.j.vfuz%c.lg. 0380 a4 d9 d0 ab e3 66 5d 32 6e cc 4a 3e 9b 2c bc f2 .....f]2n.J>.,.. 0390 9a 71 70 37 0c ff fb 67 d3 85 a7 76 a7 0f 5e 3b .qp7...g...v..^; 03a0 66 e4 e8 fd 12 bd 4f a2 77 4b f4 88 44 6f 95 68 f.....O.wK..Do.h 03b0 5d a2 83 12 dd 23 d1 1b 24 ba 5d a2 5b 25 ba 49 ]....#..$.].[%.I 03c0 a2 1b 24 da 23 d1 55 12 ed 04 ed 3c 1e 37 d8 91 ..$.#.U....<.7.. 03d0 44 c6 e6 38 70 71 a6 9a 48 d9 54 8c 97 55 1b 0e D..8pq..H.T..U.. 03e0 16 37 1c 5a dc b0 1d af 36 de cc 66 2f 9d 00 14 .7.Z....6..f/... 03f0 8f 31 96 c4 26 3d fc 2c e6 a0 a9 fa bd b2 44 dc .1..&=.,......D. 0400 28 03 8f 3d f1 6c d2 aa bd f0 4b c6 d6 66 d8 c8 (..=.l....K..f.. 0410 ab 85 4b b2 8b 53 c0 e3 a3 7f c4 f7 b2 43 85 0e ..K..S.......C.. 0420 ed e7 06 b5 2b da 76 0b d3 fe b6 e0 7e f0 5c 9d ....+.v.....~.\. 0430 a3 b0 32 46 6d 63 66 1b ea 94 62 c8 cb d1 6f 65 ..2Fmcf...b...oe 0440 b3 13 cd 25 7c 97 cd 3c 9e 48 b1 f3 d5 ef d9 8e ...%|..<.H...... 0450 b4 a6 0b b1 46 af b1 96 d4 2c ad 25 5d aa 15 19 ....F....,.%]... 0460 a5 8e 96 34 d3 9e 33 ac b0 9f a9 3f 37 8e cc 6f ...4..3....?7..o 0470 49 41 0f ea 86 8d 23 35 df 48 59 3d 89 d4 91 9a IA....#5.HY=.... 0480 96 54 a9 56 0e 5d 67 4d 3e aa b7 68 db cd 7a 93 .T.V.]gM>..h..z. 0490 87 25 52 c5 67 20 e7 d0 81 71 59 97 03 ba 1c ac .%R.g ...qY..... 04a0 08 73 d1 92 2e 83 ae b2 29 ba 4a d5 22 23 a7 8b .s......).J."#.. 04b0 e4 93 2e b2 a9 8c 81 4f 1d 33 2c 1a f8 1c 67 cd .......O.3,...g. 04c0 36 f0 a5 14 75 1b ea 87 0c d3 ee 4f c2 4f 63 51 6...u......O.OcQ 04d0 39 1f 8d 63 b2 fd 36 e3 50 c5 38 4a 1d 45 98 83 9..c..6.P.8J.E.. 04e0 44 46 d5 68 4c e5 46 99 e8 f7 22 f4 6e c7 98 a8 DF.hL.F...".n... 04f0 ce aa 6d 4b 56 90 0e b5 dc a8 30 65 ae 49 3d c8 ..mKV.....0e.I=. 0500 d8 a2 e6 1a 5a ab bd e6 fa 60 db d9 c9 86 23 ec ....Z....`....#. 0510 6c ea 7b f0 0d 27 64 ab 28 3b d1 c7 aa 6e 4b 3a l.{..'d.(;...nK: 0520 31 2f d8 aa 13 26 8f 76 36 e5 d4 6e 6e 77 a2 4c 1/...&.v6..nnw.L 0530 76 a8 a8 cb 36 24 32 59 cc 23 e9 c2 96 7f 41 e5 v...6$2Y.#....A. 0540 e3 4f 5b eb 13 a9 07 01 aa 18 33 c6 6a ae c3 bf .O[.......3.j... 0550 c1 37 f8 1c 59 d3 64 4f 25 ec 39 a4 e5 ed 2b 92 .7..Y.dO%.9...+. 0560 ec 0b c3 3e 17 ec 73 91 9e 2a 4b da a5 72 5b 5c ...>..s..*K..r[\ 0570 c2 16 2a cf 90 6c 75 41 be 4b 23 9b ac 69 97 76 ..*..luA.K#..i.v 0580 33 af eb 2e ed a6 ba 5c 59 5e 9f 0f e0 ff f2 1a 3......\Y^...... 0590 59 de 5e 9d 76 49 eb d4 59 19 37 d7 8a 69 db 8c Y.^.vI..Y.7..i.. 05a0 f5 05 a0 1d 89 8c a6 26 32 ff 71 3d 7b 29 b7 86 .......&2.q={).. 05b0 96 a5 2d e9 62 ad 31 ad 02 2c 4b b7 9b f6 6a e0 ..-.b.1..,K...j. 05c0 2d c0 98 cd b5 c4 5c 20 74 9e 52 a9 3f ed 61 53 -.....\ t.R.?.aS 05d0 66 d2 94 b9 48 61 13 36 c8 2b 15 6b ce d8 5e e3 f...Ha.6.+.k..^. 05e0 5a 69 dc f8 57 2e 3f 45 f3 88 Zi..W.?E.. No. Time Source Destination Protocol Info 65 211.692621 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 65 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.762935000 [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 211.692621000 seconds] Frame Number: 65 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0168 (360) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdfa9 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 1461, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 1461 (relative sequence number) [Next sequence number: 2921 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x0cf4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 2920] FTP Data [truncated] FTP Data: 0<\357\2623o\a\302\345M}\316\240\317\311)}^F\037E\364\201\376\211\204-n$\301\263\333\231\327o\207\376\302)\262F!\353\024\370F<\024\a\266O\256'\302\367\274\277\234\324\261\327\370\031\321\230;\271\177\273\215\346h\257Q 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 68 40 00 80 06 df a9 0a 00 00 05 0a 00 ...h@........... 0020 00 06 04 2a 73 c3 5e 9e 04 a3 04 ad b2 35 50 10 ...*s.^......5P. 0030 fc 00 0c f4 00 00 30 3c ef b2 33 6f 07 c2 e5 4d ......0<..3o...M 0040 7d ce a0 cf c9 29 7d 5e 46 1f 45 f4 81 fe 89 84 }....)}^F.E..... 0050 2d 6e 24 c1 b3 db 99 d7 6f 87 fe c2 29 b2 46 21 -n$.....o...).F! 0060 eb 14 f8 46 3c 14 07 b6 4f ae 27 c2 f7 bc bf 9c ...F<...O.'..... 0070 d4 b1 d7 f8 19 d1 98 3b b9 7f bb 8d e6 68 af 51 .......;.....h.Q 0080 0c 3f fe 3b b4 ab d0 65 11 ba de 87 0d c5 53 74 .?.;...e......St 0090 b9 a0 eb 27 e0 73 de 42 d7 f7 24 5d 09 a1 4b ee ...'.s.B..$]..K. 00a0 3f 6e cd eb 7a 09 ed 47 1f a4 f1 72 5d e7 a0 eb ?n..z..G...r]... 00b0 c4 12 92 b9 d7 5c 33 0b fa 6d 02 cf 11 51 b7 1d .....\3..m...Q.. 00c0 f4 62 d6 46 7a 9e 39 24 ea fe f0 16 e3 19 93 74 .b.Fz.9$.......t 00d0 68 98 cb 31 f0 b4 3e 98 1f d3 2b d0 b3 41 d2 c3 h..1..>...+..A.. 00e0 d0 f7 9b e0 69 46 9d 0b 7d 35 d4 29 2a ad c1 5e ....iF..}5.)*..^ 00f0 63 33 ea 9b 50 d7 34 27 4e b1 2b f3 84 b4 5e f0 c3..P.4'N.+...^. 0100 7d bb ac d7 29 f4 ea e0 b9 f0 a5 fc 7a fd 00 fa }...).......z... 0110 3e a8 bd 51 df 72 f0 9c 17 75 9a a8 6b 40 9d ec >..Q.r...u..k@.. 0120 97 b4 f7 8f 0a 9e 95 a4 17 63 af c7 1c 27 44 dd .........c...'D. 0130 0a d4 55 c0 e7 29 d6 28 2c 96 c1 3e b2 53 9c 70 ..U..).(,..>.S.p 0140 89 d8 83 f0 bf 68 1e 74 5b a6 41 26 f3 a6 55 c0 .....h.t[.A&..U. 0150 0d f2 55 8a 0b dd 49 ab 23 91 7a 9d d6 dd 8c f3 ..U...I.#.z..... 0160 db 93 53 f7 87 f3 2e f6 6c ce 96 33 d9 ac dd 29 ..S.....l..3...) 0170 62 b3 19 0b a1 83 e6 c3 aa 29 49 8b 49 bf 6e e4 b........)I.I.n. 0180 62 f4 05 c4 c7 0a 56 6e ce dd 03 b0 e3 75 c4 28 b.....Vn.....u.( 0190 79 ef 93 dc 44 cd 8d 31 6a 08 e5 52 c4 f1 b9 74 y...D..1j..R...t 01a0 2e 21 b6 53 2c 37 f9 0b 13 a9 e5 62 2c 56 d6 96 .!.S,7.....b,V.. 01b0 02 ef bc 2f 62 0e da 6e c7 ef 22 f9 93 f3 35 0f .../b..n.."...5. 01c0 af 3d 13 ce db f1 02 9a 94 b8 39 16 9a 8f 5f 7f .=........9..._. 01d0 98 bd 74 55 cd af b3 93 d6 59 8a a5 78 b5 b2 9f ..tU.....Y..x... 01e0 d7 6e 6f e7 17 68 bd ef 6d 49 7b 98 62 e0 5c 98 .no..h..mI{.b.\. 01f0 38 7c 3b de 32 d0 0b c0 e7 b0 18 27 71 ee 73 7a 8|;.2......'q.sz 0200 b6 f1 0e f4 eb d0 af a3 df 0c f4 21 1b fa 05 4d ...........!...M 0210 72 35 4d 31 f0 ba 36 b1 55 b2 09 af 89 f6 a0 c6 r5M1..6.U....... 0220 fd e7 67 e8 df 3e a5 ad 49 b4 1d 45 5b 99 68 23 ..g..>..I..E[.h# 0230 7d 9a 66 31 7d 42 63 73 8c 5c 1c be 86 38 5c 58 }.f1}Bcs.\...8\X 0240 aa b0 31 bc 07 ba 40 eb 78 cf a1 d8 bc 19 78 08 ..1...@.x.....x. 0250 60 43 db 08 f0 be 31 7a 89 55 d8 9f 00 cf 02 3e `C....1z.U.....> 0260 0a fc 32 60 1c a0 e2 9e 1d c1 3b 51 73 82 bf 0f ..2`......;Qs... 0270 31 2f de a9 10 cb 03 d0 5f 8f b1 d5 c3 06 ab d6 1/......_....... 0280 95 6c 54 da 53 16 f5 99 24 ce c6 45 96 4e 9c 07 .lT.S...$..E.N.. 0290 6d 89 d4 3d 49 bc 77 fd ea bb bf 54 bc 23 e9 15 m..=I.w....T.#.. 02a0 68 ff 75 36 fb 10 bd 7f 46 f0 0e b5 79 1b ee 30 h.u6....F...y..0 02b0 d9 6c d6 01 f0 42 8e 57 c8 d1 a0 ab 71 79 22 e5 .l...B.W....qy". 02c0 81 3e c5 db 94 26 9d b0 3c 63 d1 9e 49 d2 fe c9 .>...&..R.c.1=.... 0530 1b 8e e1 8f 46 98 1b a1 d0 ef 5e fe c8 aa 6a dd ....F.....^...j. 0540 d7 27 4a a1 c1 01 5f 24 1c 0c 74 6f 61 ee 7e 5f .'J..._$..toa.~_ 0550 ac 9f b9 7b b6 84 62 5b 06 38 d6 a3 cc dd 17 1a ...{..b[.8...... 0560 74 8b 0d 73 43 a1 03 6d 51 7f 90 f8 38 11 09 ea t..sC..mQ...8... 0570 a4 2a 80 ff ba 7f 33 fe f7 a2 80 a6 70 8f 4f f7 .*....3.....p.O. 0580 31 f7 f2 35 ab dd a8 26 7b 38 19 e8 d9 cc dc fe 1..5...&{8...... 0590 fe 8e de a8 6f c0 cf 7b 76 f8 a2 51 df 16 de 33 ....o..{v..Q...3 05a0 47 7f ab 3b 6a 1a e3 1b 08 74 c3 80 30 04 73 81 G..;j....t..0.s. 05b0 5d b1 18 73 77 23 0e f8 43 ba 18 0d 99 87 09 70 ]..sw#..C......p 05c0 07 7a a8 ee 63 3f 14 57 15 31 8f e6 b7 68 85 c7 .z..c?.W.1...h.. 05d0 ca dc 93 8b 72 54 37 5d f0 99 df 8c 15 f1 bd 4d ....rT7].......M 05e0 3c 36 81 e7 4b 7c e6 b7 63 85 <6..K|..c. No. Time Source Destination Protocol Info 66 211.692810 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=1461 Win=8760 Len=0 Frame 66 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.763124000 [Time delta from previous captured frame: 0.000189000 seconds] [Time delta from previous displayed frame: 0.000189000 seconds] [Time since reference or first frame: 211.692810000 seconds] Frame Number: 66 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x179f (6047) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f1f [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 1461, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 1461 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 8760 (scaled) Checksum: 0x012b [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 9f 40 00 40 06 0f 1f 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 04 a3 50 10 ..s..*...5^...P. 0030 08 8e 01 2b 00 00 00 00 00 00 00 00 ...+........ No. Time Source Destination Protocol Info 67 211.692848 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1176 bytes Frame 67 (1230 bytes on wire, 1230 bytes captured) Arrival Time: May 16, 2010 16:22:24.763162000 [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 211.692848000 seconds] Frame Number: 67 Frame Length: 1230 bytes Capture Length: 1230 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1216 Identification: 0x0169 (361) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe0c4 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 2921, Ack: 1, Len: 1176 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 2921 (relative sequence number) [Next sequence number: 4097 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x9b0b [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 66] [The RTT to ACK the segment was: 0.000038000 seconds] [Number of bytes in flight: 4096] FTP Data [truncated] FTP Data: \1777\236\312W\313x\254'>\212\373\364}0\301\362\337NsgB\275\260\221\370\350<\330\n\242M\341\347\203\302\362\337\234\275\214\237\t\304G\347\307i+?7\246\216\243\231\361\330O|\024\367\307 `\221\2447\367e\215\276^_\027|t^ 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 04 c0 01 69 40 00 80 06 e0 c4 0a 00 00 05 0a 00 ...i@........... 0020 00 06 04 2a 73 c3 5e 9e 0a 57 04 ad b2 35 50 18 ...*s.^..W...5P. 0030 fc 00 9b 0b 00 00 7f 37 9e ca 57 cb 78 ac 27 3e .......7..W.x.'> 0040 8a fb f4 7d 30 c1 f2 df 4e 73 67 42 bd b0 91 f8 ...}0...NsgB.... 0050 e8 3c d8 0a a2 4d e1 e7 83 c2 f2 df 9c bd 8c 9f .<...M.......... 0060 09 c4 47 e7 c7 69 2b 3f 37 a6 8e a3 99 f1 d8 4f ..G..i+?7......O 0070 7c 14 f7 c7 20 60 91 a4 37 f7 65 8d be 5e 5f 17 |... `..7.e..^_. 0080 7c 74 5e 1c b3 f1 f1 ca 7a e9 e9 61 fc 3b af 39 |t^.....z..a.;.9 0090 0e f0 5d b0 71 bf 94 c7 41 e5 01 89 8f ce a7 8b ..].q...A....... 00a0 36 7e 6e 11 5f b1 c4 b7 51 c8 27 3d 74 7e 06 0b 6~n._...Q.'=t~.. 00b0 6e fc fe 9c d3 fb 94 c4 67 9e 21 e0 4b 4e e1 23 n.......g.!.KN.# 00c0 d8 2a f1 51 3e a3 93 08 fb cd f2 b6 c9 7c 38 af .*.Q>........|8. 00d0 3b 1d f9 6f 8a 32 df 28 cb fb 4b 04 7c 11 30 9d ;..o.2.(..K.|.0. 00e0 b8 05 df 98 c4 67 e6 48 4a d8 0d 4f 6e 3d be cf .....g.HJ..On=.. 00f0 e9 c8 36 89 af 50 e2 cb c9 fb 91 24 af 01 7c 0d ..6..P.....$..|. 0100 25 f9 36 99 ef 08 e3 df d7 c9 17 78 6e e4 d6 7c %.6........xn..| 0110 c7 18 ff 06 4f 7c f4 1e d2 74 1b be 93 42 2f f1 ....O|...t...B/. 0120 d1 77 b2 e6 db f0 fd 33 e3 73 47 7c 3c e7 92 cf .w.....3.sG|<... 0130 b7 e4 f8 68 5c 6f 4b f2 e8 fd c5 33 9b e7 44 64 ...h\oK....3..Dd 0140 79 04 ff 2e f1 8d 82 6f 14 7c 41 e5 46 3e 7a 52 y......o.|A.F>zR 0150 42 2e f1 d1 b7 be ab d8 a8 4d b7 b0 ef 17 ec c6 B........M...... 0160 6f e9 c4 77 5c aa c8 91 b8 c3 4f e6 4a e8 39 8a o..w\.....O.J.9. 0170 17 ae 0a 76 33 5f ce b6 dc 73 06 7c d6 5b c8 fb ...v3_...s.|.[.. 0180 3c 3c ee c5 bd 41 c4 ff ee c8 a7 a8 e3 a3 f3 bf <<...A.......... 0190 b5 cb b4 65 9a 99 ff 5d ba 14 b4 b6 c4 cc ff 2e ...e...]........ 01a0 5d f6 ff f9 df df c6 73 bb fc 6f fd d3 3c 87 3b ]......s..o..<.; 01b0 ba 30 9f ff 9d 81 b6 fb d9 7d 66 cc 6a c5 45 a7 .0.......}f.j.E. 01c0 f5 20 87 3b e5 7f 55 85 83 9c ff 6d 47 b9 7d 98 . .;..U....mG.}. 01d0 c3 9d f2 bf c7 9c 1c e4 fc 2f af 53 4c d8 8f 8a ........./.SL... 01e0 0d 53 f2 bf 27 9d 04 8a 09 57 50 be c2 6e cc ff .S..'....WP..n.. 01f0 ca f9 5d 95 dd 9c ff 1d 45 fb e8 30 87 a9 f9 df ..].....E..0.... 0200 36 43 ef 69 87 fc f6 83 1c 28 46 c8 77 b9 cf 53 6C.i.....(F.w..S 0210 7e f8 4b 80 72 51 a6 7b e9 fd 8c af 4f 81 98 93 ~.K.rQ.{....O... 0220 7b 59 fe 4c ba 8f e5 f3 8e a5 62 3c f3 ef 42 9f {Y.L......b<..B. 0230 7c 76 e4 ce 33 7a 28 e6 d2 5d b9 58 94 a5 23 da |v..3z(..].X..#. 0240 5c 33 7a 77 a0 f3 8a 7c 84 ce b7 32 c6 ef d4 64 \3zw...|...2...d 0250 3f cd 3b dd 7b e9 3d e9 81 5b e8 a4 33 fb cc ae ?.;.{.=..[..3... 0260 7c 0e 99 72 b5 eb 17 28 62 de e7 b1 2e e0 0b bb |..r...(b....... 0270 f8 bb 02 b5 d3 59 3c be 8b 8f 8d ca ab 01 57 77 .....Y<.......Ww 0280 71 db a8 fc bf 42 68 2e 67 4b 39 e2 e2 d1 3c ff q....Bh.gK9...<. 0290 8b 64 1f ca a7 45 f9 f7 00 4e 94 5d a2 fc 1d 80 .d...E...N.].... 02a0 86 72 ab 28 93 5f 35 8c e6 73 c2 df 05 34 8f f2 .r.(._5..s...4.. 02b0 7a 2a cf a6 7d 32 ca df 05 a9 7c 1c b0 41 b2 ff z*..}2....|..A.. 02c0 0c 70 e7 68 3e a7 6d 07 7f 70 94 af 1d 95 ff 0b .p.h>.m..p...... 02d0 b0 59 92 f7 0f 80 91 d1 fc 78 ff 1a 30 26 d9 37 .Y.......x..0&.7 02e0 0f fd f7 4b e3 a3 f3 f4 d0 68 3e c7 fd 12 e0 a8 ...K.....h>..... 02f0 24 ef 9f c8 26 c9 fe 19 e8 77 1a e5 91 06 5e be $...&....w....^. 0300 04 38 3f ca df 15 a9 fc 13 c0 45 94 0f 5b 79 99 .8?.......E..[y. 0310 ce f0 2b 28 1f 12 ed 13 80 6b a3 f9 9c f9 af 00 ..+(.....k...... 0320 85 4f e7 e5 cb af 52 34 c6 df 27 fc 74 7e 3c e4 .O....R4..'.t~<. 0330 07 55 28 9f 14 fd 2b a7 f0 53 02 7c 80 27 c0 7b .U(...+..S.|.'.{ 0340 83 e1 70 f4 ee 72 e6 81 70 b7 1e cc a7 cc fb fc ..p..r..p....... 0350 7a 38 a2 77 04 c3 a1 3e 16 0b 89 84 7a 47 07 dd z8.w...>....zG.. 0360 bf c2 c1 0e f3 fa 15 f2 05 89 2d 12 e8 61 b1 2d ..........-..a.- 0370 d0 31 c0 82 66 72 9d 27 da c1 89 fb 5b 94 d1 f7 .1..fr.'....[... 0380 07 3f 83 ac 40 08 7c f4 55 2b c8 72 f9 76 4a b1 .?..@.|.U+.r.vJ. 0390 53 22 3d a8 07 70 5f 8a e9 3d d0 4d 1d 7b cd f2 S"=..p_..=.M.{.. 03a0 4d a9 f6 8e 8e de cd 30 5c bf 53 ce 7d 63 ef a4 M......0\.S.}c.. 03b0 bd dd 9b 7d 1d 3e dc dd 70 85 fb c8 4c fc c7 ff ...}.>..p...L... 03c0 a3 be fc 0d 49 31 ff f8 fe a0 f9 e7 39 7a 2b 7b ....I1......9z+{ 03d0 40 04 79 6a f5 b0 9b 73 f8 b9 76 2f 7c 7d ee 7c @.yj...s..v/|}.| 03e0 be 67 4b 2d dc f7 4b 11 04 4e 54 f2 9c fe c9 4a .gK-..K..NT....J 03f0 9e cb 3f 5d c9 73 f9 67 2a 79 2e ff 5c 25 cf e5 ..?].s.g*y..\%.. 0400 9f af e4 b9 fc 0b 95 3c 97 9f 24 8c 80 72 b1 92 .......<..$..r.. 0410 e7 f4 c7 2b 79 4e ff 72 25 cf e9 5f 21 0c 0b ae ...+yN.r%.._!... 0420 56 f2 9c fe 07 95 3c a7 7f ad 92 e7 f4 d9 02 9e V.....<......... 0430 d3 b7 2d e0 39 fd 42 c2 08 86 c5 84 11 18 1d 84 ..-.9.B......... 0440 11 34 4b 09 23 30 95 11 46 c0 aa 20 8c a0 a5 12 .4K.#0..F.. .... 0450 46 a0 75 12 46 e0 75 11 46 10 ab 22 8c 00 ab 11 F.u.F.u.F..".... 0460 46 10 f6 10 46 40 ab 27 ac e6 bf a3 86 3e e2 b7 F...F@.'.....>.. 0470 03 97 0f 30 f3 b7 03 33 4e ed 4e 5f fe 90 e7 e1 ...0...3N.N_.... 0480 89 be 28 d1 17 24 fa 9c 44 9f 96 e8 13 12 7d 4c ..(..$..D.....}L 0490 a2 8f 4a f4 61 89 3e 28 d1 fb 25 7a 9f 44 ef 96 ..J.a.>(..%z.D.. 04a0 e8 11 89 de 2a d1 ba 44 07 25 ba 47 a2 37 48 74 ....*..D.%.G.7Ht 04b0 bb 44 b7 4a 74 93 44 37 48 b4 47 a2 ab 24 da 29 .D.Jt.D7H.G..$.) 04c0 d1 15 12 5d 2a d1 c5 12 6d fb f0 e3 fd ae ...]*...m..... No. Time Source Destination Protocol Info 68 211.692867 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=2921 Win=11680 Len=0 Frame 68 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.763181000 [Time delta from previous captured frame: 0.000019000 seconds] [Time delta from previous displayed frame: 0.000019000 seconds] [Time since reference or first frame: 211.692867000 seconds] Frame Number: 68 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a0 (6048) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f1e [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 2921, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 2921 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 11680 (scaled) Checksum: 0xf89c [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a0 40 00 40 06 0f 1e 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 0a 57 50 10 ..s..*...5^..WP. 0030 0b 68 f8 9c 00 00 00 00 00 00 00 00 .h.......... No. Time Source Destination Protocol Info 69 211.692969 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=4097 Win=14600 Len=0 Frame 69 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.763283000 [Time delta from previous captured frame: 0.000102000 seconds] [Time delta from previous displayed frame: 0.000102000 seconds] [Time since reference or first frame: 211.692969000 seconds] Frame Number: 69 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a1 (6049) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f1d [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 4097, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 4097 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 14600 (scaled) Checksum: 0xf12a [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 67] [The RTT to ACK the segment was: 0.000121000 seconds] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a1 40 00 40 06 0f 1d 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 0e ef 50 10 ..s..*...5^...P. 0030 0e 42 f1 2a 00 00 00 00 00 00 00 00 .B.*........ No. Time Source Destination Protocol Info 70 211.707847 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 70 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778161000 [Time delta from previous captured frame: 0.014878000 seconds] [Time delta from previous displayed frame: 0.014878000 seconds] [Time since reference or first frame: 211.707847000 seconds] Frame Number: 70 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x016a (362) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdfa7 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 4097, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 4097 (relative sequence number) [Next sequence number: 5557 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0xc9f4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 68] [The RTT to ACK the segment was: 0.014980000 seconds] [Number of bytes in flight: 1460] FTP Data [truncated] FTP Data: \341\307\331\354\245\027\000Gq\321K\354F\034\247\v\337\307\370]\203g??\267n\367\273\206\316\005\037\375\273\2067\263\331\211\023N\276\201f\261\352\367\372\301\333\357\210\033\252\267\372=\362\2417`\023k\243\334\[\246\ 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 6a 40 00 80 06 df a7 0a 00 00 05 0a 00 ...j@........... 0020 00 06 04 2a 73 c3 5e 9e 0e ef 04 ad b2 35 50 10 ...*s.^......5P. 0030 fc 00 c9 f4 00 00 e1 c7 d9 ec a5 17 00 47 71 d1 .............Gq. 0040 4b ec 46 1c a7 0b df c7 f8 5d 83 67 3f 3f b7 6e K.F......].g??.n 0050 f7 bb 86 ce 05 1f fd bb 86 37 b3 d9 89 13 4e be .........7....N. 0060 81 66 b1 ea f7 fa c1 db ef 88 1b aa b7 fa 3d f2 .f............=. 0070 a1 37 60 13 6b a3 dc 5c 5b a6 d8 71 c0 70 a8 7b .7`.k..\[..q.p.{ 0080 d2 d8 2a f6 3f 47 7d 01 4b a4 5e 06 26 1f 53 bd ..*.?G}.K.^.&.S. 0090 af 8e 17 03 93 ce dd 93 7d c6 8c ef 83 ae 20 7d ........}..... } 00a0 18 77 99 43 e4 eb b4 e7 8d 9d a8 bf 02 dd 7f 01 .w.C............ 00b0 fb 5a f7 f3 bd da 46 07 07 fd 96 81 7d 35 43 fa .Z....F.....}5C. 00c0 15 c8 50 58 c2 6a 61 89 39 a5 8e 38 ff 3d 42 db ..PX.ja.9..8.=B. 00d0 ba 34 ea e7 9c 15 fa 87 80 b7 a2 9f 06 7e e6 05 .4...........~.. 00e0 3f fa 90 dd 4f 65 79 6e 0f 23 7b 85 ec d3 86 28 ?...Oeyn.#{....( 00f0 df 90 c8 78 21 c7 06 1d 34 2e 0b 9b 9b 21 d9 9a ...x!...4....!.. 0100 23 3e b7 d0 3c ce e6 52 be 6f 1e f1 a9 e0 7b 05 #>..<..R.o....{. 0110 3c d0 9f e9 03 36 f5 83 fe 29 e8 ff 81 dd c7 7e <....6...).....~ 0120 80 38 01 38 8c 43 fc 2a f0 95 15 d0 9f 80 fe 48 .8.8.C.*.......H 0130 22 65 19 4a a4 ac 94 4f f1 26 32 c5 b0 a5 d0 91 "e.J...O.&2..... 0140 48 4d 83 4e 3b ec fd fa e4 dc ac cb 1c 14 32 a9 HM.N;.........2. 0150 6d 3a c6 86 90 62 47 38 79 89 72 24 94 37 62 de m:...bG8y.r$.7b. 0160 3d c6 9f 82 ff 3f a1 6f 2b 78 73 7c d4 67 af b0 =....?.o+xs|.g.. 0170 cd 4b 79 74 8c ef ca 8e 57 c7 a7 b1 75 a9 df 64 .Kyt....W...u..d 0180 b3 76 97 76 c0 5c df 69 e6 6b da 3a fa 7d c4 4b .v.v.\.i.k.:.}.K 0190 34 ee e9 e8 3f 4d f4 27 99 d4 bf 0a f5 34 87 57 4...?M.'.....4.W 01a0 51 96 db cd b5 6a db 63 6c 41 db 45 b4 15 c6 31 Q....j.clA.E...1 01b0 9b 80 7d 80 32 bc c7 9e 8c f3 39 b7 d0 58 d4 44 ..}.2.....9..X.D 01c0 46 f1 f2 79 7f ff fa ad e7 9d e6 bc 00 b2 0b 21 F..y...........! 01d0 b7 47 d8 5e 02 ac 26 78 bc f2 88 1c 19 f5 25 39 .G.^..&x......%9 01e0 f0 84 77 ca a8 5d aa c7 9c bc 43 32 6d c9 03 17 ..w..]....C2m... 01f0 d1 77 22 17 db da c8 87 16 f0 df 2f 5c 79 97 ff .w"......../\y.. 0200 7e 41 c1 5a b0 31 c0 50 22 73 ad ad 25 fd 68 b8 ~A.Z.1.P"s..%.h. 0210 25 bd fa 5d c8 f5 3e 67 2c 76 c0 1e ac c5 db 64 %..]..>g,v.....d 0220 ab 23 99 31 75 46 12 8a 12 19 9a ad 95 14 19 6d .#.1uF.........m 0230 8f c6 0d 0f b0 3a 5c 64 b8 00 55 80 37 c1 db 46 .....:\d..U.7..F 0240 39 65 8c c1 b3 20 6e 90 ef bd 71 9d fb 20 fd 96 9e... n...q.. .. 0250 c1 96 4c a4 ee 61 af 8d af f8 97 96 f4 3d ec f0 ..L..a.......=.. 0260 f8 91 e5 e7 52 d3 e8 f7 15 4f c4 8d 23 de d3 a9 ....R....O..#... 0270 77 c1 4b e5 b7 24 39 2b 16 b7 a4 af 14 c4 8d 7f w.K..$9+........ 0280 44 dd e5 ca b8 71 b1 2e 6e 74 a3 ed 22 ea 0e a3 D....q..nt.."... 0290 4e 01 3d 13 f3 f4 a3 eb 7c be 18 fc e8 45 f1 7b N.=.....|....E.{ 02a0 8b 95 d0 53 51 53 84 7d f5 bc 31 03 72 ed 68 3b ...SQS.}..1.r.h; 02b0 82 fe ec f8 1e e3 39 93 3f 82 be cc de 8f b1 b9 ......9.?....... 02c0 4a ca 0b 2c 8e 61 ab ab a4 a8 e0 7d f8 c7 46 aa J..,.a.....}..F. 02d0 9b 5f 5e a0 a8 db ac ae f9 45 05 13 a8 9b 0e 19 ._^......E...... 02e0 a4 ef 7e 8c e5 17 98 db fe 15 90 95 dc 67 d8 b4 ..~..........g.. 02f0 ef a4 67 b0 b5 29 57 8d 99 97 ce b8 a0 f3 2c e4 ..g..)W.......,. 0300 42 a6 f1 43 33 67 ff 35 8a 37 56 85 cd c9 1c 36 B..C3g.5.7V....6 0310 fd 6d 7d 06 ef 7d f6 2a 8c 41 b7 b2 4b 1a fa f5 .m}..}.*.A..K... 0320 98 79 d0 c4 f6 8a b9 f1 1d 63 8c 3d e3 79 9d ea .y.......c.=.y.. 0330 36 64 16 2a ec 19 0d 72 3c f3 cb b1 0f be 4a 7e 6d.*...r<.....J~ 0340 f7 e2 b5 d2 f8 9f ed a2 3d 30 2f 91 81 cd e9 42 ........=0/....B 0350 d8 35 1d 36 8d 7b e2 c6 f0 17 31 07 58 e3 99 15 .5.6.{....1.X... 0360 c3 e9 69 25 c3 e9 56 b5 25 cd 8e 6f 37 be 21 7c ..i%..V.%..o7.!| 0370 0e fd ff ea 44 69 fc a7 9b e0 7b f4 9b 00 55 29 ....Di....{...U) 0380 37 3e a0 df 43 d0 6f 2a e8 b7 2d 98 a3 c3 e8 63 7>..C.o*..-....c 0390 a5 b9 44 bf 9d 39 5f 55 d8 2b 43 c7 cb 8d 26 33 ..D..9_U.+C...&3 03a0 67 bd 21 55 ff 7a 91 31 0d b6 79 bd e5 46 bd 52 g.!U.z.1..y..F.R 03b0 ce 7f 6f a2 f6 a4 6d e8 6f 69 63 49 2b f6 78 bb ..o...m.oicI+.x. 03c0 56 64 bc a4 b0 4b b3 b4 91 f4 74 d6 86 7d f9 46 Vd...K....t..}.F 03d0 c6 d6 b6 c3 d1 f0 56 91 31 f3 4c 77 92 78 c9 37 ......V.1.Lw.x.7 03e0 1c 89 3d 69 2a df 07 5e 9a 5f 8a 9f 88 6f a9 66 ..=i*..^._...o.f 03f0 a5 c8 98 0e ff 74 c2 cf bc 4f c1 e7 bc 45 46 d3 .....t...O...EF. 0400 fc 22 e3 14 63 a7 f8 5c 5b 93 ad 98 eb 19 9d 89 ."..c..\[....... 0410 cc e5 37 e2 c6 0c ca ef b3 fd 46 21 f6 91 8a f9 ..7.......F!.... 0420 38 3f 87 f6 c5 73 c6 7c cc 09 cd c7 0c cc 47 3b 8?...s.|......G; 0430 c6 56 26 7e bb 81 88 9a f1 62 6e 55 73 6e 13 99 .V&~.....bnUsn.. 0440 43 6b e1 d3 98 97 dc 6f 3c ee 31 e3 e3 f3 a6 5c Ck.....o<.1....\ 0450 92 59 84 72 3d d6 85 fa d0 b8 8b 55 5f d2 c2 da .Y.r=......U_... 0460 53 16 6f 62 be 8e 3e ad 90 63 ee 43 75 0f 7c 02 S.ob..>..c.Cu.|. 0470 36 80 cf 8e 7e c7 a1 8f 7c cf 66 c6 ed e7 8d e9 6...~...|.f..... 0480 28 db 30 1f 64 43 4e 76 95 79 4d db 90 b1 69 bb (.0.dCNv.yM...i. 0490 92 64 8b 6b 0e 8f 45 c5 c9 5d c9 0a 8a 13 49 92 .d.k..E..]....I. 04a0 c9 db 1c 34 ae a1 3d 06 ad 07 f1 14 c2 9f d7 93 ...4..=......... 04b0 3f 77 3e 91 3e 96 cd ce bb 3a 9b c7 cc b5 b9 3d ?w>.>....:.....= 04c0 01 4c e3 2e 66 7f 3c 4e bf 17 39 8f f6 76 b5 dc .L..f.......r.q... 0040 dc a7 f9 c3 ad da 7e af a4 0d 07 2e 33 77 c0 37 ......~.....3w.7 0050 0c d3 36 9a 86 35 da a9 c7 c3 cf af 4d 46 d5 86 ..6..5......MF.. 0060 cb 4c e8 eb f9 37 51 df d5 e0 e5 41 97 55 6c 0b .L...7Q....A.Ul. 0070 fd 1f 93 27 cc b1 e0 84 f9 d2 19 31 6f b8 8f 11 ...'.......1o... 0080 eb b6 13 bc 2a d4 b5 e7 8c 58 0f ff 06 f7 28 da ....*....X....(. 0090 5d 15 a1 6f 33 a6 d1 6e a2 e8 4f 14 f3 ab 25 2d ]..o3..n..O...%- 00a0 6c cc 0b 3e 6d b3 25 3d df ec 26 ee 09 b4 0f f5 l..>m.%=..&..... 00b0 10 bf e2 1b ff 81 46 db 2e c7 7c 70 6c a8 9d 79 ......F...|pl..y 00c0 a0 87 b5 1c 23 d6 a3 7c cc c1 ab b3 d9 77 e1 2d ....#..|.....w.- 00d0 19 ab de be cc fc 1e da 1c 57 1e b4 ec 00 1b f9 .........W...... 00e0 29 fa 35 df 39 93 f3 43 76 58 f2 db 67 f9 21 6f ).5.9..CvX..g.!o 00f0 d9 fb ee cb 67 e8 03 a8 c6 2b 78 fe 5b d0 c4 78 ....g....+x.[..x 0100 5a 7b 3f fa f2 1c f7 ff 33 c2 c6 e2 36 9f fb f5 Z{?.....3...6... 0110 4f c0 db 42 db 80 5d 36 06 72 f3 cb 17 80 6d 40 O..B..]6.r....m@ 0120 0f bb 90 e7 59 bb dc cd 96 0d 39 d7 d4 b5 31 ec ....Y.....9...1. 0130 75 db 91 5a b0 57 b5 22 1d 00 4d ff 67 f1 61 f1 u..Z.W."..M.g.a. 0140 cd 72 0b fc be 17 c0 9b 42 e2 9e 16 7e 52 b2 f6 .r......B...~R.. 0150 b5 6e dc 0f 23 f9 9f 82 8f 8f d4 8f 74 10 e9 13 .n..#.......t... 0160 a4 32 f8 1f 61 a4 7a a4 06 a4 16 a4 9d 48 cf 21 .2..a.z......H.! 0170 9d e4 3f 18 b8 ae 2b 1b e8 97 c9 f8 0e 5f 09 2f ..?...+......_./ 0180 4b bf 4b 92 1e f3 48 41 bd 1b ba 0b 7c ad 4f 0f K.K...HA....|.O. 0190 d6 f6 e9 de f0 75 da e5 e1 c1 cc 48 78 24 c0 fd .....u.....Hx$.. 01a0 dc fb f3 07 03 2c 9b 5c d0 a4 7b 94 a7 b4 e4 82 .....,.\..{..... 01b0 a8 22 db b4 0c 3a 59 64 f3 8b c0 b7 69 19 74 f2 ."...:Yd....i.t. 01c0 22 9b 7f 11 f8 36 2d 83 4e fa 6d be 1f 7c 9b 96 "....6-.N.m..|.. 01d0 41 27 e7 db fc f9 e0 db b4 0c 3a 59 68 f3 0b c1 A'........:Yh... 01e0 b7 69 19 74 f2 4b 36 ff 4b e0 db b4 0c 3a 59 60 .i.t.K6.K....:Y` 01f0 f3 0b c0 b7 69 19 74 72 9e cd 9f 07 be 4d cb a0 ....i.tr.....M.. 0200 93 f9 36 3f 1f 7c 9b 96 41 27 f3 6c 7e 1e f8 36 ..6?.|..A'.l~..6 0210 2d 83 4e fa 6c be 0f 7c 9b 96 41 27 bd 36 df 0b -.N.l..|..A'.6.. 0220 be 4d cb a0 93 1e 9b ef 01 df a6 65 d0 49 d9 e6 .M.........e.I.. 0230 cb e0 db b4 0c 3a 29 d9 7c 09 7c 9b 96 41 c3 b6 .....:).|.|..A.. 0240 74 fa d4 f4 83 a1 8f 12 d2 d4 d7 e5 4a 5b 26 ec t...........J[&. 0250 11 ef e8 3f dd 6a fd fb 04 76 38 75 e8 03 2f fc ...?.j...v8u../. 0260 b2 24 d6 f3 7c f8 e4 7b 25 af e6 0d 5c ab 59 75 .$..|..{%...\.Yu 0270 c0 0e be 29 6c 00 5f a7 f4 ab 83 49 7e 7f e3 dd ...)l._....I~... 0280 1e d6 49 5b f0 2a b0 03 65 20 73 8f 4b ff 8e ee ..I[.*..e s.K... 0290 1d bd 3b 3a 77 f4 ed e8 da d1 b3 a3 63 47 bf 8e ..;:w.......cG.. 02a0 6e 1d bd 3a 3a 75 f4 e9 e8 d2 d1 a3 a3 43 47 7f n..::u.......CG. 02b0 8e ee 1c bd 39 3a 73 f4 e5 e8 ca d1 93 a3 23 47 ....9:s.......#G 02c0 3f 8e 6e 1c bd 38 3a 71 f4 e1 e8 c2 d1 83 a3 03 ?.n..8:q........ 02d0 ca df 91 af ec 92 2f 79 9e e0 12 fa a8 1f 7b 22 ....../y......{" 02e0 cb e0 ab 87 75 6f 7a 89 e4 91 57 79 e1 df 14 26 ....uoz...Wy...& 02f0 d3 e3 f4 65 64 6f 40 95 47 d2 7b 83 9c 7b f4 95 ...edo@.G.{..{.. 0300 bf ff 8a 6a 2c 78 6d cc f0 47 65 cd df e4 d5 fc ...j,xm..Ge..... 0310 52 3d 7c fe ab 82 0f a0 8c af 69 93 26 35 c5 ff R=|.......i.&5.. 0320 1a 3e fb bb 79 d1 5d 9a 47 51 f0 bd b7 04 eb e0 .>..y.].GQ...... 0330 52 4d 0e 2c 9b 7e 5e 91 bf c9 80 4f 7d bf 47 0e RM.,.~^....O}.G. 0340 1a 63 81 63 ba bc 30 49 5f 1b cb 73 7f 46 0a e8 .c.c..0I_..s.F.. 0350 19 8f 5c 62 8c 85 8f eb f2 8a 11 c1 87 2e a5 b0 ..\b............ 0360 91 c9 43 5b ed 7c 4e ab 46 c5 6d 93 7a 09 ff fd ..C[.|N.F.m.z... 0370 97 5f 6f e1 1b 87 a5 49 3d 19 78 56 93 d7 34 e2 ._o....I=.xV..4. 0380 db 6a 53 86 df 21 8a 36 94 c1 bb e7 8b df 54 f5 .jS..!.6......T. 0390 ba 0a 55 2f a9 b9 47 df 78 15 7d 1a e9 63 a5 69 ..U/..G.x.}..c.i 03a0 75 46 d1 1e c8 c8 52 b3 51 f2 e6 b3 da 46 bc ff uF....R.Q....F.. 03b0 ba f5 dd 30 0e 5b 7b 52 f3 6c 08 f2 fb e5 36 29 ...0.[{R.l....6) 03c0 bd 13 32 9a b2 fa 25 e7 6f 30 2e 85 ed 79 70 9f ..2...%.o0...yp. 03d0 4f 1b cc db c0 b6 57 3e 19 98 d4 b7 a0 fd ee f4 O.....W>........ 03e0 a4 2e a7 c7 96 c9 6b 76 65 e6 e2 3d bb 60 1c fb ......kve..=.`.. 03f0 e3 93 18 df 2a 8c 2b ed f5 e4 07 0d f0 8b e5 d7 ....*.+......... 0400 1e ce ac 94 a4 eb bd 0b 8f 61 0d 4e ea 79 48 fc .........a.N.yH. 0410 e6 90 a4 08 fd 65 fe 5a ee 0d c2 ae 15 7c 13 cf .....e.Z.....|.. 0420 27 f6 52 d9 08 7f 4d fa b1 5f d9 cb f1 bd 5b 9a '.R...M.._....[. 0430 be 27 e3 c7 5c 0a fa 55 3d 52 ac 12 83 f9 71 29 .'..\..U=R....q) 0440 f6 20 25 dd f6 0f 41 3c 87 17 27 df 0e 78 d4 b7 . %...A<..'..x.. 0450 bd d7 b7 68 66 36 fb 7a e3 f5 9a fe 27 f8 3e e3 ...hf6.z....'.>. 0460 77 9a 3f fa 70 86 78 e6 d2 e8 2e d4 1b cb 84 7d w.?.p.x........} 0470 aa 1e f4 0c eb 91 d2 7b ad 3e f8 a3 31 c1 c7 3c .......{.>..1..< 0480 0d fa 86 d1 37 d5 e2 47 90 cf a1 b1 72 1b f2 c2 ....7..G....r... 0490 25 1e 8c c5 23 af 58 96 91 6f 5a 5d bc 8f df 66 %...#.X..oZ]...f 04a0 af ad 43 bf 60 27 52 9d ee b9 64 cc 8b b1 94 d0 ..C.`'R...d..... 04b0 fe 68 7b df 2f bd d7 58 00 bd f3 d9 6a 07 ba 85 .h{./..X....j... 04c0 ad 05 61 73 41 d8 93 0c 5e 99 bc 66 5c f7 ae d9 ..asA...^..f\... 04d0 2b 7b a5 88 ec b9 e4 5e 96 2d 11 ed 85 29 17 af +{.....^.-...).. 04e0 63 93 f2 b5 aa 71 25 e4 8b 7d 92 f5 d1 47 36 fe c....q%..}...G6. 04f0 ca da b7 e6 ce e7 d9 10 80 4e b7 5c e7 e4 3d 8c .........N.\..=. 0500 bc c3 ca a4 0e 99 16 be 1c 54 f5 56 fa c8 45 aa .........T.V..E. 0510 9e 2d 2f a6 6c 0a b3 be 3a a3 a8 64 49 31 fb 2d .-/.l...:..dI1.- 0520 59 3e ac 18 03 eb 2c fa ba 4a 1d a2 4e 39 e3 09 Y>....,..J..N9.. 0530 1e 33 f6 70 dc ca b8 ee b4 c9 3e 11 b7 ef e6 d1 .3.p......>..... 0540 b6 64 da 96 6d ef 4e bf 9e fc fb 49 1d fb 74 21 .d..m.N....I..t! 0550 f1 c4 cf 1e 9b c4 3a 76 4f b1 73 57 c2 6d 99 c0 ......:vO.sW.m.. 0560 71 c8 9b 7a f0 0e 5b 7a f6 5c bf 4b bb 15 ed 71 q..z..[z.\.K...q 0570 ae 96 a2 9f ed b0 df e9 f9 69 cb 3d c0 39 72 ec .........i.=.9r. 0580 0d f8 58 cd c4 bc ae bc fc b5 b1 0c 69 cc 8f 10 ..X.........i... 0590 6c 46 4b be 8a 7a 8e 8d 19 ea eb 63 fa d2 10 68 lFK..z.....c...h 05a0 cc bd 55 1e 8e 71 8b 18 af 3d 56 39 9f eb 81 b4 ..U..q...=V9.... 05b0 08 ef 61 bf 9a d7 fd 6e 2e 9c 66 d1 6f 7e 37 9c ..a....n..f.o~7. 05c0 66 cb 6e 7c 53 67 b3 d9 82 df 13 4e 93 f8 5d d6 f.n|Sg.....N..]. 05d0 45 ec 27 63 6e 7c 6a b5 b9 18 75 2c 76 fe 2f a5 E.'cn|j...u,v./. 05e0 f0 ff 52 cd 86 c0 61 ef bd 58 ..R...a..X No. Time Source Destination Protocol Info 72 211.707912 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1176 bytes Frame 72 (1230 bytes on wire, 1230 bytes captured) Arrival Time: May 16, 2010 16:22:24.778226000 [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 211.707912000 seconds] Frame Number: 72 Frame Length: 1230 bytes Capture Length: 1230 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1216 Identification: 0x016c (364) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xe0c1 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 7017, Ack: 1, Len: 1176 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 7017 (relative sequence number) [Next sequence number: 8193 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0xc268 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 4096] FTP Data [truncated] FTP Data: \362\275x\262\3407\331\217\017"/!\203s\341:[\301_\335\334|c\363JE@:\227+\366\217\313Jw\337\235JGkW7\021\236JeEl9\275\230\3025|\253\020\361\247T+7\333\030\274\266\035\312\265m\003\255\235\255=\312\326\326^%\026\037P\32 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 04 c0 01 6c 40 00 80 06 e0 c1 0a 00 00 05 0a 00 ...l@........... 0020 00 06 04 2a 73 c3 5e 9e 1a 57 04 ad b2 35 50 18 ...*s.^..W...5P. 0030 fc 00 c2 68 00 00 f2 bd 78 b2 e0 37 d9 8f 0f 22 ...h....x..7..." 0040 2f 21 83 73 e1 3a 5b c1 5f dd dc 7c 63 f3 4a 45 /!.s.:[._..|c.JE 0050 40 3a 97 2b f6 8f cb 4a 77 df 9d 4a 47 6b 57 37 @:.+...Jw..JGkW7 0060 11 9e 4a 65 45 6c 39 bd 98 c2 35 7c ab 10 f1 a7 ..JeEl9...5|.... 0070 54 2b 37 db 18 bc b6 1d ca b5 6d 03 ad 9d ad 3d T+7.......m....= 0080 ca d6 d6 5e 25 16 1f 50 d6 c7 07 b6 c5 95 55 ad ...^%..P......U. 0090 82 1d ad 8b 5d 19 ab 69 ef ab b9 bb f5 9a c2 c2 ....]..i........ 00a0 21 e2 f2 ac 6a bf a5 54 6f 55 76 2a d5 d5 5b e3 !...j..ToUv*..[. 00b0 03 6d 7d 83 71 e5 db ca 2a 42 de 7a 5b 7b 08 d1 .m}.q...*B.z[{.. 00c0 8b c5 b7 76 b5 93 b0 fe 09 5e 51 01 2a de 1b c3 ...v.....^Q.*... 00d0 bd 50 11 17 aa a8 ee b4 2a e8 8c 77 f7 17 92 ed .P......*..w.... 00e0 7a 16 79 36 76 f6 6d 53 12 9d 5d 83 8a c5 eb 89 z.y6v.mS..]..... 00f0 0f b2 79 2b eb cc b6 ed ac fd 03 7d 77 0e 20 93 ..y+.......}w. . 0100 32 10 ef ef 1b 48 0c 32 a7 ab 53 e2 5a 43 e4 de 2....H.2..S.ZC.. 0110 b6 ce ae f6 4e 65 47 df 90 b2 ad b5 37 41 20 5f ....NeG.....7A _ 0120 3b e5 82 bb 25 43 ab a0 33 04 e7 12 f2 13 5c e6 ;...%C..3.....\. 0130 b4 7e 46 20 51 19 af b9 b3 46 a9 c5 9b da 9e 44 .~F Q....F.....D 0140 2c 5c 35 4d 46 aa 94 78 a2 bd 66 b9 55 dd b4 20 ,\5MF..x..f.U.. 0150 9c 6b 23 19 4a 7f 7c a0 3d de 9b 20 74 10 55 0d .k#.J.|.=.. t.U. 0160 72 18 5d bd 4a 6d a2 a7 bf b6 63 db 50 ff 9d 03 r.].Jm....c.P... 0170 ad b1 38 28 aa 54 b4 53 17 86 20 5a 7b 07 15 ab ..8(.T.S.. Z{... 0180 42 a5 35 01 4e 85 68 42 48 58 c9 5d ab 7b 63 9f B.5.N.hBHX.].{c. 0190 bf 81 06 a7 01 54 c7 ea 1b 58 7d a1 63 6b 37 77 .....T...X}.ck7w 01a0 5a c8 c7 81 1d 84 49 a2 42 9a 1e 94 29 49 b0 c2 Z.....I.B...)I.. 01b0 01 85 3f a3 d4 0a c1 b4 b6 b7 43 15 36 7f 26 6b ..?.......C.6.&k 01c0 66 5d 2c c3 ca 08 38 b3 32 0f 76 dd 1d 57 2a 62 f],...8.2.v..W*b 01d0 4a c7 40 5f 8f 65 c1 eb e2 1d 09 32 06 e2 89 81 J.@_.e.....2.... 01e0 ae f8 e0 f2 1a a5 a2 c7 fa d9 f2 73 d6 73 e3 90 ...........s.s.. 01f0 85 36 65 35 3b a6 2b f9 5c 75 ac 14 85 ec 32 30 .6e5;.+.\u....20 0200 3a 68 80 65 60 3e 43 bd 24 13 43 03 bd f1 18 ed :h.e`>C.$.C..... 0210 cb 55 db 74 07 5a 07 ef 72 d7 5a 25 ca da 4f cb .U.t.Z..r.Z%..O. 0220 cf 92 31 7f b9 72 84 dc d1 41 a4 6c 45 f7 90 85 ..1..r...A.lE... 0230 95 76 ba 21 75 6e 45 c2 d4 a0 2c ec b9 20 55 dc .v.!unE...,.. U. 0240 5a 5d d1 53 5d 11 6b a9 58 bb b2 62 fd ca 8a 8d Z].S].k.X..b.... 0250 78 17 6f ef ec 53 96 56 47 ae 5e aa 5c a3 d4 62 x.o..S.VG.^.\..b 0260 9a b4 d7 56 c4 6a fb fa 7a ee 68 8d 31 2e b7 b6 ...V.j..z.h.1... 0270 ab 9a 23 ae ed 89 85 6b 6b ee de b1 3d de ed 00 ..#....kk...=... 0280 55 ee a8 18 ac 81 69 e4 e4 34 cb 6a 73 98 ee 6d U.....i..4.js..m 0290 5d 98 ab bd 4a 98 3d 8e 84 c3 85 17 52 c6 42 99 ]...J.=.....R.B. 02a0 63 d1 49 74 62 f5 89 cf 30 d7 5c f9 16 2e 01 b1 c.Itb...0.\..... 02b0 be f8 60 ef 57 12 14 4b 0f 5b 40 e1 56 ac 59 dd ..`.W..K.[@.V.Y. 02c0 5d 31 65 7d 4b a3 98 b7 f6 ec 5c 32 4b af b4 bf ]1e}K.....\2K... 02d0 69 bd a2 70 78 7b 45 4d c3 f6 6a 71 53 fa 7a 5d i..px{EM..jqS.z] 02e0 32 9d a1 5b 61 b7 73 2a d7 a9 12 b5 cd 59 59 ac 2..[a.s*.....YY. 02f0 96 ea 6a db 91 88 0f 2a 0e e2 79 7a 7d c9 b5 e3 ..j....*..yz}... 0300 b6 49 85 3f 32 0e 72 7a 8a 76 fb 3b 5b 07 e3 b3 .I.?2.rz.v.;[... 0310 c6 12 1f 68 1d 64 c3 6d dd 7d ed 77 0d 9e 6b 28 ...h.d.m.}.w..k( 0320 e7 6e 83 f5 cc 6e c3 5a 1e 29 6b 0b d3 ef 08 bb .n...n.Z.)k..... 0330 a7 35 81 f5 d2 96 31 64 58 83 7c 03 83 09 a5 a7 .5....1dX.|..... 0340 6b 50 bc c2 3a 31 a3 23 85 e7 6e 1b c6 da d5 b1 kP..:1.#..n..... 0350 63 ba f1 b9 56 23 f6 9f b1 09 15 b1 b3 f7 b9 e9 c...V#.......... 0360 6d cd 3d 46 eb dd dc cb 1a b7 c2 cf 5c bf ee c4 m.=F........\... 0370 bc 4a 74 c6 05 a0 9b 3f e5 0e 0d ce 9c 63 76 b9 .Jt....?.....cv. 0380 b3 96 d2 73 59 fd 74 19 76 d3 99 dc ca b6 3e 5a ...sY.t.v.....>Z 0390 6f 47 57 82 10 f2 be 19 ef 2c 7b 6d 51 73 ff e9 oGW......,{mQs.. 03a0 e8 44 da ec 7a de 2a cd be 3e f9 40 c4 45 c8 97 .D..z.*..>.@.E.. 03b0 79 bf 5a 26 09 7c 47 e3 cf b3 59 fe be 7b f8 17 y.Z&.|G...Y..{.. 03c0 d9 2c 31 0f 0e 9e 53 be bb 59 f2 ec 2c 92 2f f3 .,1...S..Y..,./. 03d0 5f 24 e1 cf e2 13 cb 51 80 fc d6 6f c1 d7 15 f9 _$.....Q...o.... 03e0 1e 90 05 9f e5 9b 7e 31 93 cf eb 28 7c 11 fa 23 ......~1...(|..# 03f0 56 7d ae c4 fc c4 6b 1c b9 4f e0 4a 1a 0e 0a bc V}....k..O.J.... 0400 08 b1 42 ee 18 8c 74 f9 cc 18 8c d3 76 0c c6 d4 ..B...t.....v... 0410 2e 81 3b 79 cb 8e c1 58 2e cf 1d 83 71 b4 42 c4 ..;y...X....q.B. 0420 60 4c 49 33 63 30 8e 8e 0a 5a 1d 15 18 04 ca c2 `LI3c0...Z...... 0430 1d 83 41 2c aa 83 c3 65 0c c6 a2 d1 39 84 79 9e ..A,...e....9.y. 0440 eb 44 79 0e b3 f5 c2 7d ff 33 69 ed 15 33 91 8e .Dy....}.3i..3.. 0450 59 fb 6a 52 a5 2f 62 0c fe 3f 8f ff 8f 2b 46 e1 Y.jR./b..?...+F. 0460 8e ce d8 c0 ff 92 88 85 99 31 0b 16 7e f2 02 62 .........1..~..b 0470 16 9c 58 04 c5 95 6f ae 98 05 0b ef 78 01 31 0b ..X...o.....x.1. 0480 5c 27 4f 23 df 4f a5 73 c7 2c 70 fd 7c 0b 84 e2 \'O#.O.s.,p.|... 0490 39 77 cc 02 d7 db 29 9f 58 67 cf 1e 87 3b 66 81 9w....).Xg...;f. 04a0 eb e4 a2 7c 81 49 3b 57 cc 82 83 f5 67 1b f9 52 ...|.I;W....g..R 04b0 0e 67 c9 cb 1d b3 c0 f5 59 cd 17 eb f3 b9 62 16 .g......Y.....b. 04c0 b8 9e 1f cd 17 eb fc b9 62 16 b8 df 1c 99 ........b..... No. Time Source Destination Protocol Info 73 211.707940 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 73 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778254000 [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 211.707940000 seconds] Frame Number: 73 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x016d (365) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdfa4 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 8193, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 8193 (relative sequence number) [Next sequence number: 9653 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x2d12 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 5556] FTP Data [truncated] FTP Data: w\376\230\005k\375D\276\235ga\332\317\216Y \006\267\201\235p)\330\301b\272c\026\270\2775,>\177\314\302Z\344[\213|\276\202\331\371\3341\v\026\256\267\\232q\315\025\263\340\344;_\314\202\205\223-\237\211\245w\362=\347\3 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 6d 40 00 80 06 df a4 0a 00 00 05 0a 00 ...m@........... 0020 00 06 04 2a 73 c3 5e 9e 1e ef 04 ad b2 35 50 10 ...*s.^......5P. 0030 fc 00 2d 12 00 00 77 fe 98 05 6b fd 44 be 9d 67 ..-...w...k.D..g 0040 61 da cf 8e 59 20 06 b7 81 9d 70 29 d8 c1 62 ba a...Y ....p)..b. 0050 63 16 b8 bf 35 2c 3e 7f cc c2 5a e4 5b 8b 7c be c...5,>...Z.[.|. 0060 82 d9 f9 dc 31 0b 16 ae b7 5c 9a 71 cd 15 b3 e0 ....1....\.q.... 0070 e4 3b 5f cc 82 85 93 2d 9f 89 a5 77 f2 3d e7 ca .;_....-...w.=.. 0080 d7 8f 7c fd e5 02 1b 79 76 be 97 a4 5c 6c 83 c0 ..|....yv...\l.. 0090 fd ce 1d 8b f0 ba 94 8b 6d e0 fe 9e fe 8c 7c ee ........m.....|. 00a0 58 04 62 65 5e f9 8c 7c 8c 45 70 62 1b 04 9e 38 X.be^..|.Epb...8 00b0 87 25 76 f2 71 fc 1f b8 ea a3 5f 70 b4 42 92 c6 .%v.q....._p.B.. 00c0 ce aa 8f e9 23 57 be 46 ec 9f 8d 57 cc 6d 2f 3f ....#W.F...W.m/? 00d0 93 72 b1 0d d6 ef 48 57 08 ec e7 d9 f9 7e 25 cd .r....HW.....~%. 00e0 8c 37 60 be 69 60 ad eb dd 19 69 66 6c c3 2d 95 .7`.i`....ifl.-. 00f0 17 16 db 90 40 be e0 1c f3 f2 8b eb 8f e3 b2 e3 ....@........... 0100 3f ee b0 3e bd f0 e1 fb 87 68 e3 dc f1 1f 57 46 ?..>.....h....WF 0110 ae aa af 9f 8e ff 88 5c 05 7e a4 6e 45 5d f8 8b .......\.~.nE].. 0120 f8 8f ff 8e eb b3 e2 3f 34 fb fc bf e7 6a e6 8e .......?4....j.. 0130 ff 38 82 75 e1 c8 11 91 b8 7f 32 fd a1 e2 3f 2a .8.u......2...?* 0140 97 8b e4 8e ff 10 3c d9 4a 9b 65 e1 b7 b8 e3 3f ......<.J.e....? 0150 ea 97 33 c9 56 9a eb fc bf df 35 fe 23 8d f1 a7 ..3.V.....5.#... 0160 8f 88 f4 7f 39 fe 83 df ab 0b ec e7 8b ec 7e 38 ....9.........~8 0170 7b 1a 2f ba 1f 4e 3c c6 c5 76 9f a9 ab 62 7b 3c {./..N<..v...b{< 0180 0b cf d3 06 75 3d d7 9e e1 f8 5b f4 a5 e8 2f 52 ....u=....[.../R 0190 37 45 73 f4 6f 9e 34 fb a2 0f 57 30 2a 62 3e d9 7Es.o.4...W0*b>. 01a0 0f 9e 87 b7 2b 94 8b 89 e0 79 0f a5 a3 62 9f e6 ....+....y...b.. 01b0 fb 3b 90 94 d1 dc 39 7f f4 c5 aa 46 73 31 21 df .;....9....Fs1!. 01c0 47 ba df 55 fe 2e dc 1b 46 73 31 1d f4 47 1a 47 G..U....Fs1..G.G 01d0 73 31 20 8c 81 68 72 9d db c7 f3 01 37 e3 39 6c s1 ..hr.....7.9l 01e0 c7 34 ac 40 ea 74 95 67 cc 47 62 34 17 33 c1 cf .4.@.t.g.Gb4.3.. 01f0 fd 31 57 7b 29 dc 87 47 c5 1c e1 fb 87 f9 7e 34 .1W{)..G......~4 0200 17 d3 c1 73 07 0f 8c e6 62 3a 18 bf 79 d8 55 df ...s....b:..y.U. 0210 8f 90 26 5d fd e1 b9 89 2f b8 ce 25 74 cb 9f 75 ..&]..../..%t..u 0220 6c 47 fa e9 ef ef 1c c1 a1 44 7b 67 eb c0 74 6c lG.......D{g..tl 0230 44 ac 6f 28 31 77 88 04 83 19 fa 77 b0 c0 a0 d4 D.o(1w.....w.... 0240 d1 d1 3d 84 4f 3a 77 30 84 13 90 e0 84 41 88 48 ..=.O:w0.....A.H 0250 87 0e 11 1b 31 2b ce c1 0a 57 98 1d d6 60 45 3b ....1+...W...`E; 0260 fc 17 a2 18 ce 77 a6 e0 31 fb b9 1f 7a bb 78 a1 .....w..1...z.x. 0270 b0 37 c6 23 d0 6e 4a f3 85 3e 4b 91 b3 32 24 e2 .7.#.nJ..>K..2$. 0280 12 aa 42 22 2e 21 1c 12 71 09 f5 21 11 97 d0 10 ..B".!..q..!.... 0290 12 f1 08 ab 42 22 1e 21 1a 12 f1 08 8d 21 11 8f ....B".!.....!.. 02a0 b0 36 24 e2 11 d6 85 44 3c 42 53 48 9c 31 d8 12 .6$....D.. 0410 b7 51 5e 82 1c 94 c8 fb 18 eb 1e e8 11 fa 50 d5 .Q^...........P. 0420 12 59 55 bd 55 11 f6 af d9 58 1c 49 99 58 ff 0a .YU.U....X.I.X.. 0430 3f 88 4f 98 eb 6f e7 6f d7 fb 4d 4f d3 bd 99 8e ?.O..o.o..MO.... 0440 3f 53 8d 3c a9 59 cf 0b 8f 64 ee 7d 43 35 2e 4d ?S.<.Y...d.}C5.M 0450 8f 65 82 37 40 86 69 55 96 57 a5 32 93 c7 8e eb .e.7@.iU.W.2.... 0460 16 16 98 58 83 bc 09 f3 46 b6 c9 b2 2b 45 39 2f ...X....F...+E9/ 0470 ca c9 6f a4 32 75 d7 a8 25 cc 37 86 3c cc 3b 19 ..o.2u..%.7.<.;. 0480 79 43 6f b4 fa 77 9b f1 af fc b7 72 78 bf 99 87 yCo..w.....rx... 0490 31 fb c3 aa d7 7b a5 5a 52 80 fe 5c 77 63 2a b3 1....{.ZR..\wc*. 04a0 05 f9 7d 02 57 6a 34 d0 d6 5e 9d 30 9b 4c da 82 ..}.Wj4..^.0.L.. 04b0 6a cc e3 39 6a e1 f7 3e 90 c2 cb b4 6c d8 9b f1 j..9j..>....l... 04c0 2e 79 e2 43 39 b0 21 a3 f8 96 6a 9f 66 b3 b7 b1 .y.C9.!...j.f... 04d0 1f eb af 51 0d 8f 7d a6 58 b6 41 2a 5e 56 af 06 ...Q..}.X.A*^V.. 04e0 95 55 23 c1 6c 95 54 ec a9 1f 09 4a a0 a5 b0 2a .U#.l.T....J...* 04f0 b3 8d d3 3e 2b 1e c2 60 db 0d b0 8d c5 3c 9f d0 ...>+..`.....<.. 0500 92 8f 6a f0 ac af 32 39 65 ae 94 a4 d0 3b cf 4d ..j...29e....;.M 0510 98 3c f7 ec b0 75 66 de 5e cb 2e ff 1c b2 7b a5 .<...uf.^.....{. 0520 5e e0 89 7f fd db ec 29 07 8b 4c cc 36 f1 c8 6b ^......)..L.6..k 0530 6a 53 99 f9 b6 3e e0 9f 2f ea 7f 85 65 0f 5a 65 jS...>../...e.Ze 0540 d7 e2 b9 0c ed 54 2d 39 c4 73 14 b5 4a de 21 0b .....T-9.s..J.!. 0550 ea ba 0c 7d f9 32 31 16 01 f6 63 83 a1 67 b3 85 ...}.21...c..g.. 0560 4e dd d6 39 71 51 d5 a8 0e 8a 76 ca 94 54 a6 8c N..9qQ....v..T.. 0570 fd 8e a6 cc 29 1b cf 8d 3d ff dd d3 cb 72 fd 2c ....)...=....r., 0580 0b 1e ca 53 7c 13 79 19 e2 6e d1 9f 73 b5 8b b6 ...S|.y..n..s... 0590 56 a6 89 41 c6 3c 62 d9 1b 2c 97 46 35 36 fc 73 V..A.d.\260\345Q\ty\2041\217\253\360\356Y[\036\021\236\233\370rN\366*\344\000\231\230eh\353%\344y\236\361\035\034?x\ 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 6e 40 00 80 06 df a3 0a 00 00 05 0a 00 ...n@........... 0020 00 06 04 2a 73 c3 5e 9e 24 a3 04 ad b2 35 50 10 ...*s.^.$....5P. 0030 fc 00 fa 7a 00 00 b0 77 c2 dc 22 a5 4e be 83 f2 ...z...w..".N... 0040 cf 58 38 9c db 0c ce c1 52 e5 90 c9 7e 47 2e b5 .X8.....R...~G.. 0050 74 ab d5 1f 9f 30 2b 31 6e ca 24 10 3e 64 2e b0 t....0+1n.$.>d.. 0060 e5 51 09 79 84 31 8f ab f0 ee 59 5b 1e 11 9e 9b .Q.y.1....Y[.... 0070 f8 72 4e f6 2a e4 00 99 98 65 68 eb 25 e4 79 9e .rN.*....eh.%.y. 0080 f1 1d 1c 3f 78 c4 74 ef b5 cb 7d 55 92 9e 27 ff ...?x.t...}U..'. 0090 44 f1 04 cf fd 33 1e 07 df 0f fe 29 e8 e3 09 5b D....3.....)...[ 00a0 0e 47 70 bf bf 6e b6 1c 88 b5 7e 01 f5 16 42 76 .Gp..n....~...Bv 00b0 43 c8 f3 17 a0 31 37 7f 3c 6e 97 bb 03 f5 fc d0 C....17..0..g.. 0210 e2 fe 1e f6 5d 15 77 fa 5e 07 90 76 22 1d 46 7a ....].w.^..v".Fz 0220 1a e9 08 d2 24 63 b8 70 a7 4f 66 7d 17 c0 bf 29 ....$c.p.Of}...) 0230 47 6a 44 4a 20 8d 23 4d 22 bd 83 74 9a f1 fb 70 GjDJ .#M"..t...p 0240 a0 1b 91 62 48 63 4f c3 d7 46 4a 23 7d 80 a4 a0 ...bHcO..FJ#}... 0250 4d 9e 07 2c 6d a9 fe 28 48 1f 4a 3b 64 16 c0 8f M..,m..(H.J;d... 0260 f2 4b 2f 9e e4 1e 3f 75 6d f5 47 8c 0b 63 cc 94 .K/...?um.G..c.. 0270 8c fd 4b c2 1e 0e b7 eb d4 be f0 2e 6d cf ea a5 ..K.........m... 0280 da 7e a5 5c 2b 83 2e bc fd 37 6b be e1 13 da b0 .~.\+....7k..... 0290 7c cf c9 a9 24 7c 87 39 ca f5 c9 17 50 0e 7e c2 |...$|.9....P.~. 02a0 d8 8f ac d8 17 83 eb 28 7d 93 52 f4 cf 8f f5 e1 .......(}.R..... 02b0 2f 19 23 03 dd 3f cd 7b 74 63 86 f5 12 5b 56 20 /.#..?.{tc...[V 02c0 a5 cc f5 56 2c 5c b3 de 06 fb 94 0b 9a 19 57 a3 ...V,\........W. 02d0 47 65 69 a5 ec 6b 36 ca d2 ea b2 40 5a bd 32 ec Gei..k6....@Z.2. 02e0 57 f5 fa 0a ec 6b 81 dd 58 d3 de fe d0 cf 33 2e W....k..X.....3. 02f0 95 41 2b 36 b0 40 3a 64 12 73 17 be 52 d5 03 1e .A+6.@:d.s..R... 0300 ac 2b f7 8c e8 0b db 44 dd 57 1c b0 e3 42 24 62 .+.....D.W...B$b 0310 f1 a4 53 56 5c 4b 54 3c ff d0 23 9d ca df ae ea ..SV\KT<..#..... 0320 5f 41 7a 44 f2 68 05 58 ff 97 34 c0 d6 d7 8e e8 _AzD.h.X..4..... 0330 8c 45 e1 9e 8f 79 13 ca 8f 3e ac c9 c3 51 62 4c .E...y...>...QbL 0340 43 e4 cb c3 6b eb f2 a3 bb c2 be 68 9b c6 fa e8 C...k......h.... 0350 63 fc 87 c7 ae bb 49 3c 27 f0 6c d5 99 3e 64 fa c.....I<'.l..>d. 0360 ed 73 27 f3 6e 61 bd 9b 88 f9 0c e5 37 ed 23 de .s'.na......7.#. 0370 9a d8 c2 10 79 a0 eb 0a 4e 0c eb f4 07 fd 8c cd ....y...N....... 0380 43 b9 f9 51 11 57 c3 f9 c7 fd c2 8d bb 2d 7d 4b C..Q.W.......-}K 0390 ec 0f 32 fb 39 a9 8e cc 4f ab c9 a9 6c 76 b7 5c ..2.9...O...lv.\ 03a0 d0 62 3c 4e bc ab af 65 5a 76 f5 90 dd a7 cb 66 .b..u 03e0 1e 9e a3 ce 6f f0 67 10 c8 bc 60 b8 43 5b 8e 3b ....o.g...`.C[.; 03f0 7c 36 e3 8a ed c2 e7 a3 cc 27 21 97 79 2e 1d 60 |6.......'!.y..` 0400 f0 a7 1e b5 e5 54 f5 39 65 3f cf 96 fd e3 4e 9d .....T.9e?....N. 0410 b6 ec 2f 76 ea 84 3e e5 cf 21 7b 95 f3 1d fd 70 ../v..>..!{....p 0420 30 cc fe b4 a6 d3 76 9b 89 13 4d af cb 38 b2 27 0.....v...M..8.' 0430 ef 9b 8c d1 08 58 f1 a2 c6 af 31 37 e8 0f 53 4e .....X....17..SN 0440 3f c1 7e 2e fb 6e 9a 96 3d e5 b4 73 e9 6c 39 21 ?.~..n..=..s.l9! 0450 9f b0 db 00 ec 36 a2 5a f6 da b0 41 d8 2e 75 52 .....6.Z...A..uR 0460 52 a7 ea 8e dc b8 8e 16 60 bd 6c 75 c9 8e bc 7f R.......`.lu.... 0470 42 bb 94 35 e5 cc f1 56 ba e5 37 49 7c b4 2d bf B..5...V..7I|.-. 0480 c9 68 a6 1f 36 e1 96 d9 0d 67 c9 ec 84 6c cb ec .h..6....g...l.. 0490 2c 79 e5 b9 e4 e5 71 c9 2b bf e9 de f0 fc a3 c3 ,y....q.+....... 04a0 7a de 70 9b 76 1f 64 91 95 5a a6 6d 83 f6 76 ff z.p.v.d..Z.m..v. 04b0 92 d9 63 6e c7 98 39 de 15 11 c6 59 1d 32 4b af ..cn..9....Y.2K. 04c0 1b b1 c6 bc 0a cf 8b 5f 56 f5 f2 a3 aa 3e df 1e ......._V....>.. 04d0 ef f4 1c 86 ac 97 a1 af e4 73 1d e2 bb 43 e8 ab .........s...C.. 04e0 cf 1e 37 e3 6b 1e f5 88 b1 cf db ce 3e df 8c f1 ..7.k.......>... 04f0 a4 e0 c3 4b 21 f6 d9 d7 ff 88 c6 e7 06 8c 7f 5e ...K!..........^ 0500 7f 9b c6 7a 18 7b 55 e4 d4 d9 24 9e ef ff 8c f1 ...z.{U...$..... 0510 73 cc 3e 7b fc cb 28 43 d8 54 5e 53 9b 26 c3 5e s.>{..(C.T^S.&.^ 0520 aa 0a a0 23 e4 95 ca de d0 bd 95 af e9 7b 3c 45 ...#.........{644j. 05e0 ae c1 bc a9 6f 40 b9 8e 6b 92 ....o@..k. No. Time Source Destination Protocol Info 75 211.708109 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=5557 Win=17520 Len=0 Frame 75 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778423000 [Time delta from previous captured frame: 0.000148000 seconds] [Time delta from previous displayed frame: 0.000148000 seconds] [Time since reference or first frame: 211.708109000 seconds] Frame Number: 75 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a2 (6050) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f1c [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 5557, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 5557 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 17520 (scaled) Checksum: 0xe89c [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a2 40 00 40 06 0f 1c 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 14 a3 50 10 ..s..*...5^...P. 0030 11 1c e8 9c 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 76 211.708135 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=7017 Win=20440 Len=0 Frame 76 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778449000 [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 211.708135000 seconds] Frame Number: 76 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a3 (6051) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f1b [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 7017, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 7017 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 20440 (scaled) Checksum: 0xe00e [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a3 40 00 40 06 0f 1b 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 1a 57 50 10 ..s..*...5^..WP. 0030 13 f6 e0 0e 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 77 211.708143 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=8193 Win=23360 Len=0 Frame 77 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778457000 [Time delta from previous captured frame: 0.000008000 seconds] [Time delta from previous displayed frame: 0.000008000 seconds] [Time since reference or first frame: 211.708143000 seconds] Frame Number: 77 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a4 (6052) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f1a [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 8193, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 8193 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 23360 (scaled) Checksum: 0xd89c [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a4 40 00 40 06 0f 1a 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 1e ef 50 10 ..s..*...5^...P. 0030 16 d0 d8 9c 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 78 211.708164 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 78 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778478000 [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 211.708164000 seconds] Frame Number: 78 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x016f (367) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdfa2 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 11113, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 11113 (relative sequence number) [Next sequence number: 12573 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x6a1e [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 75] [The RTT to ACK the segment was: 0.000055000 seconds] [Number of bytes in flight: 4380] FTP Data [truncated] FTP Data: \353\301\006\304\005\301\034\310\017#s`1\301\t\201N\303X\340\230\234%\367\023\311\370\250S\027\352\241\337}\361;\274\343W\303\332\361\233\306F\264\317z\264\317`\177\311\273\270\314\006#f\030e4\224\331\341)\234\035\356 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 6f 40 00 80 06 df a2 0a 00 00 05 0a 00 ...o@........... 0020 00 06 04 2a 73 c3 5e 9e 2a 57 04 ad b2 35 50 18 ...*s.^.*W...5P. 0030 fc 00 6a 1e 00 00 eb c1 06 c4 05 c1 1c c8 0f 23 ..j............# 0040 73 60 31 c1 09 81 4e c3 58 e0 98 9c 25 f7 13 c9 s`1...N.X...%... 0050 f8 a8 53 17 ea a1 df 7d f1 3b bc e3 57 c3 da f1 ..S....}.;..W... 0060 9b c6 46 b4 cf 7a b4 cf 60 7f c9 bb b8 cc 06 23 ..F..z..`......# 0070 66 18 65 34 94 d9 e1 29 9c 1d ee ad 60 87 6f f9 f.e4...)....`.o. 0080 28 db 61 75 33 76 58 2d b3 c3 9f aa ec ed 70 4f (.au3vX-......pO 0090 95 bd 1d 56 ff 0c 3b bc 4a 65 6f 87 3b a8 a8 1d ...V..;.Jeo.;... 00a0 56 ff 9b b6 80 d8 61 81 ea a3 9b 82 ad fd 91 d9 V.....a......... 00b0 da 65 0a b6 f6 84 82 5d 04 ba 2e ea 66 6c ed 65 .e.....]....fl.e 00c0 66 6b fb 33 5b fb bc 82 ad cd 52 a8 f3 f9 56 6c fk.3[.....R...Vl 00d0 ed 04 95 bd ad 3d 2e 50 1d 47 79 92 b1 e2 64 6c .....=.P.Gy...dl 00e0 93 ef f0 16 6d 6d b0 ca de 6e ec 63 75 fe bb f2 ....mm...n.cu... 00f0 fd 98 b3 9f 9f 08 36 fb 79 58 c1 7e ce 55 b0 9f ......6.yX.~.U.. 0100 40 47 f5 4d c1 7e aa 15 ec a7 1a ec 67 7b 95 bd @G.M.~......g{.. 0110 fd 84 f3 c0 03 db cf e9 32 fb d9 20 d8 cb 61 96 ........2.. ..a. 0120 f0 3f b7 9f cb 15 ec e7 12 05 fb 99 cc d9 4f ec .?............O. 0130 3b da 4f ec bb bc df bc 1d c5 7e a3 6c 4a 04 7b ;.O.......~.lJ.{ 0140 1b 1a 2e b4 6c 43 05 99 0d 15 14 6c e8 41 c1 de ....lC.....l.A.. 0150 86 3e db 8c 0c e4 36 54 f8 05 6c a8 ba 05 1b ea .>....6T..l..... 0160 d1 68 b3 a1 ee 8d f6 36 f4 2b 99 0d 7d ab 15 1b .h.....6.+..}... 0170 2a 30 1b 5a b8 82 da d0 87 d8 c6 87 d8 c6 87 d8 *0.Z............ 0180 c6 5f 16 db a8 84 49 fa f1 de cf c3 24 f9 2c f9 ._....I.....$.,. 0190 cf 7d 3b 3e ff 6d 65 8c 11 fe fe a0 6f 33 d3 cf .};>.me.....o3.. 01a0 d4 ee 9f fb c6 b6 7d af 73 71 52 9b 77 ef 24 a6 ......}.sqR.w.$. 01b0 f6 dd 18 7d 75 fd ca 98 b5 7d 16 9d 6f b7 a1 b0 ...}u....}..o... 01c0 62 f6 63 57 4f 57 2e 2a 2f f9 63 af f0 dd 6d 0f b.cWOW.*/.c...m. 01d0 66 6d 7f a3 8d 7f e1 d7 bf ef 7a 68 59 8c 76 4f fm........zhY.vO 01e0 d7 db 62 7e e2 f0 e9 7b bf bb 18 52 94 fd 9b d2 ..b~...{...R.... 01f0 73 5d ae 5f be 90 34 76 57 e9 9d bf 2e 38 35 ff s]._..4vW....85. 0200 a5 55 96 8e 87 f3 a6 c5 cc b9 37 f5 a7 1b 47 cd .U........7...G. 0210 8b c7 44 aa 74 e5 16 e7 e8 e8 81 1e b5 df bb bb ..D.t........... 0220 bc f3 85 98 3c e0 55 6d 42 f8 e5 90 a8 d3 69 d3 ....<.UmB.....i. 0230 e3 3e 3c 79 d9 31 68 58 a9 3a ec a7 05 ee 25 d3 .>< 02d0 da 66 96 f1 9e e0 b1 34 af ed 1f 3c 57 b5 ab da .f.....4... 0370 f3 5a b8 66 d3 d1 2c f7 0b 41 d3 9d 22 36 85 38 .Z.f..,..A.."6.8 0380 3c a5 d5 ba 16 fd 4e 74 3b da 7d 57 fc c4 9d 0b <.....Nt;.}W.... 0390 52 c4 b6 a5 b1 7b d7 5d 36 7d d5 ee de c5 57 57 R....{.]6}....WW 03a0 1d 2d ef f9 c4 aa 13 f9 05 79 67 ff fa e8 c0 9d .-.......yg..... 03b0 93 7e eb 5e 10 30 20 f2 e0 9e ad 96 7d 87 c5 f9 .~.^.0 .....}... 03c0 85 df ec de 79 68 b5 5b f5 6e c7 d5 25 db 33 9e ....yh.[.n..%.3. 03d0 1b 76 fa da a7 33 4b de 7f a4 c7 79 f5 fc 4e 15 .v...3K....y..N. 03e0 e9 1d 5c a3 6b b2 07 c4 ac 78 3e 31 c9 3d 6f 72 ..\.k....x>1.=or 03f0 e2 1c d7 e3 ed 2e bf df d8 36 e7 a9 6d 82 66 fb .........6..m.f. 0400 da 36 bf 09 cd f1 b8 55 b2 de 65 61 fc 6d d5 63 .6.....U..ea.m.c 0410 0d 47 9c 13 5e 99 38 f5 c7 bf c5 99 e7 4e ef 67 .G..^.8......N.g 0420 e9 fc b5 f3 b4 e4 19 5e a5 0d 95 bd 4e bd 35 79 .......^....N.5y 0430 ce 39 ed b1 91 17 e2 52 2e ed bd 77 ef 66 d1 d2 .9.....R...w.f.. 0440 c1 45 7b 1e 3d bd 34 3f ea ca fa 33 67 de c8 39 .E{.=.4?...3g..9 0450 f9 41 f1 91 b2 c0 71 b7 2f 8d f9 36 6e ff c9 b8 .A....q./..6n... 0460 89 07 3e ba e0 bc 6b 50 58 bf 1d c3 cf f5 72 2f ..>...kPX.....r/ 0470 0b f7 d2 7c fa c3 48 c7 7e 51 73 d4 21 9f dd 8c ...|..H.~Qs.!... 0480 ba 34 e1 52 5c de cd a5 c9 86 d9 45 09 43 97 ec .4.R\......E.C.. 0490 34 fd ad cb fc d8 03 b9 25 29 dd fb 55 c7 8f 5b 4.......%)..U..[ 04a0 39 d3 ed 98 e3 30 d7 fd 7b 3b 39 3c d1 bb 87 d3 9....0..{;9<.... 04b0 84 a2 01 fb 3e f7 75 3d b8 63 f9 e4 82 5e ea c4 ....>.u=.c...^.. 04c0 9d 91 1f 37 9e 3d 62 38 7e 62 d7 db 6b cb fd ba ...7.=b8~b..k... 04d0 6e bb 38 25 ff 48 cc 9f 7a dc 8e be b1 66 7d 62 n.8%.H..z....f}b 04e0 a6 26 27 c9 e1 13 e7 b6 6b 06 f5 6b 77 7d 41 5c .&'.....k..kw}A\ 04f0 9b b4 8e 13 05 a7 79 23 0f ad d4 cd 29 ac de d6 ......y#....)... 0500 6b fb eb 81 5e bb dd fe b4 b4 64 b9 7b d1 69 eb k...^.....d.{.i. 0510 9e 9b 15 59 dd 2e 9d 77 2d 2d 39 f5 bb 17 aa 4b ...Y...w--9....K 0520 bf bd bb f3 42 7c f2 fc 73 8f ff bd 53 d1 6f a7 ....B|..s...S.o. 0530 f4 d8 fb 43 d5 cc fc 94 99 c3 f6 78 fe 63 b2 cb ...C.......x.c.. 0540 a2 d4 44 8f c6 2f 07 38 c7 46 ba aa da 37 ae 35 ..D../.8.F...7.5 0550 bf 9b b0 6d ea dd 53 8d d3 4c 43 8e 5b 3a cd 82 ...m..S..LC.[:.. 0560 d9 fc cf 12 f7 b3 e3 e7 ab 47 1f d9 e9 f8 9c a9 .........G...... 0570 47 dc c7 3f 76 8a 3a 31 6a 58 c2 88 f3 33 93 9f G..?v.:1jX...3.. 0580 1f 99 78 72 5b c5 e4 33 e5 b1 ae 97 82 6f 0d 28 ..xr[..3.....o.( 0590 7b f6 c5 6d 07 3e f9 7c ed fe 8b 6f 1e df 31 ec {..m.>.|...o..1. 05a0 6a e3 2e bd f7 ed 83 07 17 1f d9 f7 a5 3e 67 e7 j............>g. 05b0 8b 1f ad 2f f0 71 ea 77 62 5f 8e f3 d9 bf f7 9c .../.q.wb_...... 05c0 78 71 fc a1 b8 f2 27 03 e6 c4 ee 2c 1c 69 2a 76 xq....'....,.i*v 05d0 f0 8a 7f 65 45 af 94 a7 9f 2d 72 2d f8 60 a9 db ...eE....-r-.`.. 05e0 67 5e 97 9c 26 bf 73 d3 c1 3f g^..&.s..? No. Time Source Destination Protocol Info 79 211.708172 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=9653 Win=26280 Len=0 Frame 79 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778486000 [Time delta from previous captured frame: 0.000008000 seconds] [Time delta from previous displayed frame: 0.000008000 seconds] [Time since reference or first frame: 211.708172000 seconds] Frame Number: 79 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a5 (6053) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f19 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 9653, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 9653 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 26280 (scaled) Checksum: 0xd00e [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a5 40 00 40 06 0f 19 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 24 a3 50 10 ..s..*...5^.$.P. 0030 19 aa d0 0e 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 80 211.708183 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=11113 Win=29200 Len=0 Frame 80 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778497000 [Time delta from previous captured frame: 0.000011000 seconds] [Time delta from previous displayed frame: 0.000011000 seconds] [Time since reference or first frame: 211.708183000 seconds] Frame Number: 80 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a6 (6054) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f18 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 11113, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 11113 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 29200 (scaled) Checksum: 0xc780 [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a6 40 00 40 06 0f 18 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 2a 57 50 10 ..s..*...5^.*WP. 0030 1c 84 c7 80 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 81 211.708192 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 81 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778506000 [Time delta from previous captured frame: 0.000009000 seconds] [Time delta from previous displayed frame: 0.000009000 seconds] [Time since reference or first frame: 211.708192000 seconds] Frame Number: 81 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0170 (368) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdfa1 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 12573, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 12573 (relative sequence number) [Next sequence number: 14033 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0xe69f [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 79] [The RTT to ACK the segment was: 0.000020000 seconds] [Number of bytes in flight: 2920] FTP Data [truncated] FTP Data: q\272\035\276\210\274\372\233\030\033\233\216\357\247N\317L0\343\177\342\351\210\257\203\210\375\233M\242\3178\363\214\004,\320_4\004\364\351#\372h\024\234\r\210!i\321)I\350- #-\305"\276H\276\331\227.\206g\304h4\262\3 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 70 40 00 80 06 df a1 0a 00 00 05 0a 00 ...p@........... 0020 00 06 04 2a 73 c3 5e 9e 30 0b 04 ad b2 35 50 10 ...*s.^.0....5P. 0030 fc 00 e6 9f 00 00 71 ba 1d be 88 bc fa 9b 18 1b ......q......... 0040 9b 8e ef a7 4e cf 4c 30 e3 7f e2 e9 88 af 83 88 ....N.L0........ 0050 fd 9b 4d a2 cf 38 f3 8c 04 2c d0 5f 34 04 f4 e9 ..M..8...,._4... 0060 23 fa 68 14 9c 0d 88 21 69 d1 29 49 e8 2d 20 23 #.h....!i.)I.- # 0070 2d c5 22 be 48 be d9 97 2e 86 67 c4 68 34 b2 fa -.".H.....g.h4.. 0080 80 0e 81 34 09 19 f1 e2 e8 31 e2 c4 90 71 e3 42 ...4.....1...q.B 0090 46 8f 9f a4 c9 48 21 e8 0d f3 ac 0c 60 02 01 1a F....H!.....`... 00a0 49 88 b4 89 41 5c a3 c5 34 33 40 a3 99 94 92 29 I...A\..43@....) 00b0 26 99 66 8b 69 e6 98 84 f4 8c b4 84 a9 99 04 d0 &.f.i........... 00c0 93 9a 60 26 38 0f fb 56 34 99 c9 31 04 8c 64 16 ..`&8..V4..1..d. 00d0 33 a0 2a 42 81 37 c3 46 4f 10 87 99 93 81 cc 22 3.*B.7.FO......" 00e0 46 64 4e b5 24 44 8b e1 09 d1 e6 e4 68 73 80 e6 FdN.$D......hs.. 00f0 45 b3 d9 06 20 89 1a 3c 26 62 d2 88 d1 c3 9e 22 E... ..<&b....." 0100 30 af a4 94 34 b3 98 90 0c d1 24 f2 37 3a be 2a 0...4.....$.7:.* 0110 21 68 5e 9c 96 90 9a 4a 00 3c a6 18 0a e2 61 e8 !h^....J.<....a. 0120 19 3d c2 66 04 0d 81 9e 40 40 54 d3 10 82 d1 41 .=.f....@@T....A 0130 00 4b 66 9a 99 3a ec 70 1f c2 f0 3f dd 63 c4 b0 .Kf..:.p...?.c.. 0140 04 c4 17 89 c1 62 f7 59 a2 bf bf d8 bd 8f c5 92 .....b.Y........ 0150 29 76 ef 8e c2 4a b5 98 33 cc d8 a0 38 d8 62 36 )v...J..3...8.b6 0160 25 27 99 d2 a6 99 d3 9a 80 48 d0 60 f7 59 01 f6 %'.......H.`.Y.. 0170 6d 51 cc 91 5d 5b 52 f6 0b 4d 9c 46 a3 83 0e 02 mQ..][R..M.F.... 0180 0d 32 cd 00 4a d3 54 e2 e4 e0 fe 7a 52 52 a6 da .2..J.T....zRR.. 0190 57 45 ea 4a 4e 21 14 0c 43 99 9e 6a 8e 4e 88 4d WE.JN!..C..j.N.M 01a0 30 c7 90 57 5e c6 a7 cd 16 a3 10 15 4a 00 a0 cd 0..W^.......J... 01b0 08 50 de 16 79 a3 c1 be a1 09 36 88 ea 98 88 f1 .P..y.....6..... 01c0 23 c6 8c 7e 05 29 5f 0b 1d f2 d2 88 c1 43 34 44 #..~.)_......C4D 01d0 a0 e9 22 6a 14 1b db 26 2e 38 d6 02 10 8f ea 9f .."j...&.8...... 01e0 e8 07 cc 10 75 47 2c 25 65 82 14 61 fc 23 87 24 ....uG,%e..a.#.$ 01f0 1b 89 a7 23 31 99 13 48 1c 43 c0 3e a0 71 a9 16 ...#1..H.C.>.q.. 0200 d0 bd 26 5c 2a 43 b0 a6 33 10 ac bf 3f 9d 3c 10 ..&\*C..3...?.<. 0210 4d 37 25 99 45 53 ba 54 47 13 41 13 18 56 aa cb M7%.ES.TG.A..V.. 0220 06 87 35 25 c7 88 f8 5e 46 13 2d 9b a1 a2 e4 81 ..5%...^F.-..... 0230 42 ba e7 04 68 2b d4 34 b6 fc 38 67 26 e3 80 4a B...h+.4..8g&..J 0240 b0 28 6e a8 b0 0a 36 86 f7 d3 8d 0e 19 1d 2a c2 .(n...6.......*. 0250 80 53 22 71 88 d9 9c 1a 20 86 64 66 a4 00 c3 d1 .S"q.... .df.... 0260 66 7c 0f 5f 4c 37 5b cc d1 38 2f b1 7d d0 02 73 f|._L7[..8/.}..s 0270 52 6a c6 6c 10 bd 89 d4 8d 85 89 0e d8 8d 2d 56 Rj.l..........-V 0280 6d 9b 22 38 c6 e6 18 a6 4b 05 1f da bd a2 24 1c m."8....K.....$. 0290 90 dd 17 73 f7 88 6f 3c c6 dd e3 fb 48 a5 b2 fb ...s..o<....H... 02a0 fb 7e 2a 07 07 47 f8 a9 d9 cf 49 f6 73 6e e5 d7 .~*..G....I.sn.. 02b0 e6 67 fe 5c 7e e5 5f e0 45 e6 73 e7 eb c6 37 f3 .g.\~._.E.s...7. 02c0 3f 55 cf 5d 75 03 af 0e 73 79 ac 59 c1 77 14 6b ?U.]u...sy.Y.w.k 02d0 a6 fb fe c1 b0 66 b3 be 53 c6 9a 1d be 73 3f d6 .....f..S....s?. 02e0 2c 6a a1 20 84 2e 64 f5 09 36 3f 3f 95 cc cf cf ,j. ..d..6??.... 02f0 9a b5 14 63 86 ef 23 f2 18 33 bf 9e ca 18 33 1d ...c..#..3....3. 0300 c3 98 6d 60 18 33 fc 8e ae 12 c6 cc fb 69 ba eb ..m`.3.......i.. 0310 5d 26 d8 63 cc 22 16 d0 b8 7e 01 7d 87 4b 14 ec ]&.c."...~.}.K.. 0320 31 66 da 05 f6 7e 7e 2a b3 95 94 aa e5 9f 91 03 1f...~~*........ 0330 64 a0 1f dc 5f 22 f0 bf 12 10 48 3e ea fd ff 67 d..._"....H>...g 0340 ac d4 c3 f2 bf 3a 56 ed d7 6e ff 21 56 ee ff 3e .....:V..n.!V..> 0350 56 2e 4f 68 19 2b 87 eb c0 06 88 a4 aa 5a c6 ca V.Oh.+.......Z.. 0360 e1 ba a1 53 d3 f5 42 de 0f 1e 2b 87 f6 1e 1f b6 ...S..B...+..... 0370 04 08 2d 63 e5 70 9d d0 3a d1 fe b6 e4 df 07 d7 ..-c.p..:....... 0380 19 3d a3 6b 09 2b 87 eb 52 84 13 5d af 5a c2 ca .=.k.+..R..].Z.. 0390 e1 ba 59 f9 00 fe 7d c8 ba 01 74 37 64 74 72 ac ..Y...}...t7dtr. 03a0 1c e2 15 f0 c1 d5 81 47 ef af 8f c7 ca e1 3a bd .......G......:. 03b0 e6 b1 d6 b1 72 5b f0 1d 12 a0 ab 6f 7b 3f 1d 8f ....r[.....o{?.. 03c0 95 23 18 08 5f c1 ee a7 84 95 93 e8 3c 15 da e5 .#.._.......<... 03d0 b1 72 04 53 e0 db 3a 56 ae 02 e8 2a 7c 5b c7 ca .r.S..:V...*|[.. 03e0 51 8c 44 eb 58 39 dc a7 f8 35 43 c7 63 e5 f0 7d Q.D.X9...5C.c..} 03f0 55 7d 33 74 3c 56 8e 62 2f 94 fd 00 f1 58 39 dc U}3t 04d0 d2 fe 48 fa 49 b8 2e 7e bd 90 30 5f 1e 5c 1a 2e ..H.I..~..0_.\.. 04e0 db b8 d4 e2 59 1a f5 03 cf b4 78 8e 46 79 a1 df ....Y.....x.Fy.. 04f0 21 f4 4b c4 fb 05 92 7e f3 21 64 2d b4 f9 8f 09 !.K....~.!d-.... 0500 16 28 86 23 98 61 a1 50 e6 2b 16 52 cc 13 de d7 .(.#.a.P.+.R.... 0510 42 c8 e5 e8 bf 81 b0 65 a1 0d 6b 85 fe 80 0a 39 B......e..k....9 0520 7f 41 91 10 8a 65 fe 80 b2 0d 12 76 ab 33 f9 06 .A...e.....v.3.. 0530 02 fa 17 92 b0 57 cf 0a d4 9f 90 e4 4f 07 31 58 .....W......O.1X 0540 e8 4f c8 47 b0 f9 07 42 7f 42 7e ec 7e 25 76 62 .O.G...B.B~.~%vb 0550 11 dd bb e1 3d 7e 67 c7 8d f3 af 33 54 a0 fe 84 ....=~g....3T... 0560 6e b0 fa d1 97 1d fa 13 8a 12 6c 58 b4 45 1c 3f n.........lX.E.? 0570 db 05 ea 5f 48 ea 0f fa c7 41 ff 42 f9 ec 3e 59 ..._H....A.B..>Y 0580 a0 fe 85 44 76 7f 5c a0 fe 85 a4 f6 8e 08 d4 9f ...Dv.\......... 0590 90 d4 9f ef 05 ea 4f a8 8c e5 e3 7e 72 16 e7 0f ......O....~r... 05a0 08 f7 74 d9 5c 79 c4 ba 2d e3 f2 d1 87 e0 1a ce ..t.\y..-....... 05b0 ff 8f 83 8a fa 13 92 e4 8f fe 88 0a 38 7f 3f 5f ............8.?_ 05c0 09 f6 fe 84 e4 d8 b5 14 81 fa 13 fa 65 b0 6b 4d ............e.kM 05d0 30 b5 26 ef 3d b1 71 e6 8c 74 01 3f 01 96 12 8d 0.&.=.q..t.?.... 05e0 48 34 53 5a 9c 40 fc f9 64 5a H4SZ.@..dZ No. Time Source Destination Protocol Info 82 211.708213 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 82 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778527000 [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 211.708213000 seconds] Frame Number: 82 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0171 (369) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdfa0 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 14033, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 14033 (relative sequence number) [Next sequence number: 15493 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0xccb2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 4380] FTP Data [truncated] FTP Data: \354\300j\024\225&A\326\210\257\036 KF|\033\\243M\351f\364\333CJN\303KLf*\303\302\221|\222G\360m\312\300\266V\234\367@\025\0263\271\244NM\233&\304\246\231\021!G\375\37649\000\372\205|\371\264\216\215se\2034\313@}\365\ 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 71 40 00 80 06 df a0 0a 00 00 05 0a 00 ...q@........... 0020 00 06 04 2a 73 c3 5e 9e 35 bf 04 ad b2 35 50 10 ...*s.^.5....5P. 0030 fc 00 cc b2 00 00 ec c0 6a 14 95 26 41 d6 88 af ........j..&A... 0040 1e 20 4b 46 7c 1b 5c a3 4d e9 66 f4 db 43 4a 4e . KF|.\.M.f..CJN 0050 c3 4b 4c 66 2a c3 c2 91 7c 92 47 f0 6d ca c0 b6 .KLf*...|.G.m... 0060 56 9c f7 40 15 16 33 b9 a4 4e 4d 9b 26 c4 a6 99 V..@..3..NM.&... 0070 11 21 47 fd fe 34 39 00 fa 85 7c f9 b4 8e 8d 73 .!G..49...|....s 0080 65 83 34 cb 40 7d f5 e0 fc d0 b9 50 bd d4 a1 d1 e.4.@}.....P.... 0090 31 50 4c 9c 1a af 50 95 8b 81 62 e3 dc 0c 14 1b 1PL...P...b..... 00a0 a7 35 50 6c 9c ce 40 7d f6 78 1a 28 46 ce db 40 .5Pl..@}.x.(F..@ 00b0 b1 71 a2 81 62 e3 7c 0c 14 1b e7 6b a0 d8 38 3f .q..b.|....k..8? 00c0 03 f5 d5 a3 37 50 8c 9c d1 40 31 72 81 06 8a 91 ....7P...@1r.... 00d0 0b 32 50 6c 5c b0 81 62 e3 42 0d 14 1b 37 dc 40 .2Pl\..b.B...7.@ 00e0 b1 71 e1 06 ea ab 27 c2 40 7d f5 8c 37 50 5f 3d .q....'.@}..7P_= 00f0 2f 1b a8 af 9e 48 03 f5 d5 13 65 a0 be 7a 62 0c /....H....e..zb. 0100 d4 57 4f bc 81 fa ea b1 18 a8 af 9e 54 03 f5 d5 .WO.........T... 0110 93 61 78 70 5f 3d 59 9f 08 4d 98 bb ac 7b 36 cc .axp_=Y..M...{6. 0120 5a 06 17 b7 70 f1 18 2e 1e c9 c5 c7 73 f1 70 2e Z...p.......s.p. 0130 1e ca c5 83 b8 b8 91 8b fb 71 71 1f 2e ee cd c5 .........qq..... 0140 75 5c dc 8d 8b ab b9 78 fd 5d 5b fc 0e 17 bf c1 u\.....x.][..... 0150 c5 2f 73 f1 0a 2e 5e ca c5 8f 71 f1 62 2e 7e 80 ./s...^...q.b.~. 0160 8b 17 70 f1 2d 5c 7c 03 17 5f c3 c5 57 dc 7d 30 ..p.-\|.._..W.}0 0170 0c 60 7e 63 e3 f5 4f 20 44 80 61 f2 59 0c fb 8d .`~c..O D.a.Y... 0180 8f 85 07 c2 00 16 7f 4c bf 87 da 1c 06 70 89 a1 .......L.....p.. 0190 75 0c a0 8b 9e 4e 20 f4 75 22 94 51 5f 27 5a d0 u....N .u".Q_'Z. 01a0 1f ad e0 4a fc 54 e8 f4 ae c0 ab 97 75 0d fa ac ...J.T......u... 01b0 81 34 9d de 8b 94 77 c0 23 1c e4 7b 43 be 2b 7e .4....w.#..{C.+~ 01c0 e3 18 d2 55 c2 fc ea 77 11 0f 05 74 9e 50 46 ab ...U...w...t.PF. 01d0 f5 b2 ea 44 2f 6b 0e 49 f3 b2 ce 6b 24 be 46 aa ...D/k.I...k$.F. 01e0 b0 8c 37 dc bb 9d 08 ab 16 f2 de bf c2 b7 ad 06 ..7............. 01f0 7e d1 17 10 a6 97 e5 51 be b4 2c cf 08 7c 61 dd ~......Q..,..|a. 0200 de 5a ca 9b 0f d4 a3 eb 83 b8 25 bc af ac f1 d3 .Z........%..... 0210 d3 76 bd a1 5d e1 89 75 d6 28 f4 f7 02 f4 22 e3 .v..]..u.(....". 0220 19 8e 84 e7 30 1e 04 74 41 70 8d 87 34 f4 69 22 ....0..tAp..4.i" 0230 c5 c1 2c 7c 89 f1 c1 10 c7 bf d6 10 9f 86 f7 09 ..,|............ 0240 70 ef ca e8 32 58 19 98 d2 d7 4e 10 2c 5a 6e 0d p...2X....N.,Zn. 0250 fa 9f 59 61 a0 f8 93 2d 88 77 83 36 09 76 84 a5 ..Ya...-.w.6.v.. 0260 a1 2f 26 1f 48 c3 77 cf 2c 2c 4d 20 be 3b 72 6b ./&.H.w.,,M .;rk 0270 9e 80 3c 3f c8 3b 81 3e 80 58 7d 11 28 2f 22 4f ...X}.(/"O 0280 2a e7 dd 2c 7d 24 d2 82 3c 1b 83 72 6b 1a 19 1e *..,}$..<..rk... 0290 0f 4c d7 39 6f 56 a7 67 fb 75 d6 01 cc 17 ce 20 .L.9oV.g.u..... 02a0 6c 93 f5 1b fd f6 dc 65 7e 6f ee 6a d7 59 fb 40 l......e~o.j.Y.@ 02b0 de 07 8c ae 2f e1 cd 8b f0 e3 ec 9f 5b 93 30 28 ..../.......[.0( 02c0 b7 c6 1f d2 8c c0 93 91 95 87 be 6e 7a 9c 8d 1d ...........nz... 02d0 d6 11 80 f1 e0 dc aa 2e 2c 6d 8d 48 f1 96 e8 cf ........,m.H.... 02e0 42 10 96 5b 57 41 1b 3e c0 27 fa b5 78 14 68 b4 B..[WA.>.'..x.h. 02f0 52 59 a0 09 04 d9 83 f9 bb 66 84 36 7d 61 9c b0 RY.......f.6}a.. 0300 3f 67 9d 84 eb 7a 68 4f cf da 03 b3 ab 19 ce f8 ?g...zhO........ 0310 8d 60 75 39 11 9e bc ac e8 c3 07 e9 b0 1e 47 56 .`u9..........GV 0320 4f 47 2e 2d 10 f5 0e f4 4a 0b fa a3 85 0d 8a 6e OG.-....J......n 0330 13 5d 13 70 3d f0 86 78 14 84 b9 10 f2 36 d9 eb .].p=..x.....6.. 0340 bc 0b d3 79 2d b4 a5 45 3e f4 f3 9a e2 6a 88 2b ...y-..E>....j.+ 0350 e9 2a 5f 06 f5 b1 50 7f a4 4a 8a bb b1 f2 18 d7 .*_...P..J...... 0360 72 71 5d 33 75 49 73 4e 07 ba 4d db 87 f1 44 7d rq]3uIsN..M...D} 0370 d6 53 3f 29 03 c1 9e 7b 32 7e 70 dc 11 3f 8b 79 .S?)...{2~p..?.y 0380 38 97 70 ee 79 43 5e a1 f6 54 55 a1 be a4 ca 51 8.p.yC^..TU....Q 0390 18 5b 85 ef 76 ea d8 5c 80 e5 ea 3a c8 f4 9a a7 .[..v..\...:.... 03a0 42 bd 4f 41 1e 62 6c 75 6c be e2 bb 5b 2d f5 15 B.OA.blul...[-.. 03b0 f9 c3 f6 d0 26 a8 b5 39 64 7e 37 57 86 ef 93 a7 ....&..9d~7W.... 03c0 88 c1 26 4f 94 87 27 27 67 1d 4b d7 71 f2 6f 89 ..&O..''g.K.q.o. 03d0 0f a5 3c 4f 96 87 fe 4b 76 18 c2 aa 94 e4 78 1d ........C.....F|A 0490 55 4b ba 2c e7 e9 0d e0 a9 1c b1 3b ac bf 5a e8 UK.,.......;..Z. 04a0 9f df 66 fb 3e 07 c2 7d 68 33 fd 96 74 d6 93 ad ..f.>..}h3..t... 04b0 65 9e d0 87 0e 0f a0 b3 3a 49 2f a0 4c c5 4f 74 e.......:I/.L.Ot 04c0 5d d3 b2 39 85 3a 74 f2 a7 c6 07 aa e3 11 7d 18 ]..9.:t.......}. 04d0 86 6a 2c 8b b2 52 89 d4 57 0c e6 3d 69 cc ad 52 .j,..R..W..=i..R 04e0 ca df 27 e5 07 2a e7 ef 90 f2 83 94 f3 37 35 c3 ..'..*.......75. 04f0 9b 8b 6c 8e a0 ae 77 84 f2 1d 65 e5 57 43 79 cc ..l...w...e.WCy. 0500 43 fe 94 f2 97 b7 52 3f ea 5a 01 d4 df 5e 56 ee C.....R?.Z...^V. 0510 43 28 d7 41 96 f6 3e a4 b5 d7 4f b1 3a c2 fe a8 C(.A..>...O.:... 0520 03 5e a1 4d f4 bd 84 e5 0b c8 5c 44 8c 46 f3 72 .^.M......\D.F.r 0530 c6 b6 70 6c e5 6d 2d 64 f5 2a e5 cd 95 da f4 c9 ..pl.m-d.*...... 0540 ad 42 bd 44 0c b4 12 dd 0c 89 ce b7 65 3a 8b 44 .B.D........e:.D 0550 e7 67 4f e7 49 e6 91 32 ff 92 ac e4 75 4d 92 ea .gO.I..2....uM.. 0560 6a a5 1c d9 97 75 58 67 ed f9 93 b4 36 93 fd 42 j....uXg....6..B 0570 17 69 df f6 3e be d3 0a 34 88 79 16 65 34 2a 46 .i..>...4.y.e4*F 0580 b3 82 d1 44 02 cd a3 32 1a 07 46 f3 36 a3 09 02 ...D...2..F.6... 0590 9a 76 72 9a 20 4a 33 8f d1 78 03 8d 13 47 e3 c4 .vr. J3..x...G.. 05a0 d1 e8 d8 3c c7 f8 0c 46 7f 0b f6 2c f7 ea 9b a7 ...<...F...,.... 05b0 77 60 f4 89 8c be 18 e8 bf 69 81 de 91 d1 bf ca w`.......i...... 05c0 e8 57 01 7d 95 8c 5e a5 c0 cf 38 46 6f 01 fa d3 .W.}..^...8Fo... 05d0 2d d0 4b fc 0c 65 f4 c1 40 7f b4 05 7a 89 9f fe -.K..e..@...z... 05e0 8c 5e 07 f4 07 eb 65 63 d1 9f .^....ec.. No. Time Source Destination Protocol Info 83 211.708237 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 83 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778551000 [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 211.708237000 seconds] Frame Number: 83 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0172 (370) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdf9f [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 15493, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 15493 (relative sequence number) [Next sequence number: 16953 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0xea7a [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 5840] FTP Data [truncated] FTP Data: \322\033\030\315\035\330\363\024\310\353\354\177?\017\335\031\375\027@\237\327\002\275\232\321wf\364k\200~\215\214\aM\177i\257\317t\006hrduj\024x\200#\364\265F\256\277\r,]\307\255\203\021`\227\243 \304C\310\200\220\ra 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 72 40 00 80 06 df 9f 0a 00 00 05 0a 00 ...r@........... 0020 00 06 04 2a 73 c3 5e 9e 3b 73 04 ad b2 35 50 18 ...*s.^.;s...5P. 0030 fc 00 ea 7a 00 00 d2 1b 18 cd 1d d8 f3 14 c8 eb ...z............ 0040 ec 7f 3f 0f dd 19 fd 17 40 9f d7 02 bd 9a d1 77 ..?.....@......w 0050 66 f4 6b 80 7e 8d 8c 07 4d 7f 69 af cf 74 06 68 f.k.~...M.i..t.h 0060 72 64 75 6a 14 78 80 23 f4 b5 46 ae bf 0d 2c 5d rduj.x.#..F...,] 0070 c7 ad 83 11 60 97 a3 20 c4 43 c8 80 90 0d 61 05 ....`.. .C....a. 0080 84 0d 10 0a 20 1c 80 50 0c e1 18 84 52 08 15 10 .... ..P....R... 0090 2a 21 5c d9 dc cc 1e 0d ea c6 7d e1 28 b9 1c 99 *!\.......}.(... 00a0 be 6a 58 1f f4 40 13 5a af ac d3 2a 74 f7 cc e2 .jX..@.Z...*t... 00b0 3c af b7 a0 cd bb 9b ed cf 1d e8 e7 91 3f 77 a0 <............?w. 00c0 cf 42 bc fa c1 f5 6e 1f ba f7 35 1a e8 d9 e3 06 .B....n...5..... 00d0 e8 ff ac 7a fb 73 07 ec 9f bb 8c a9 b7 ed 9f 5f ...z.s........._ 00e0 ad a7 fb e7 91 2c ed c0 13 f6 fb e7 7c a8 c3 93 .....,......|... 00f0 ed 9f 87 01 4d 70 bd 6d ff 1c 04 ed ac 05 de 47 ....Mp.m.......G 0100 78 84 55 37 a0 4f 42 a0 6b 07 f9 be e8 a3 cd 40 x.U7.OB.k......@ 0110 db 5b 02 6b 76 2a e3 4b 60 67 19 92 a7 3f 25 9d .[.kv*.K`g...?%. 0120 07 34 58 fe 29 56 ef 88 de 61 d5 a1 0e 74 1d 47 .4X.)V...a...t.G 0130 3e 3d e1 5c d0 15 ae 81 50 27 fa 2b 0c 81 f9 8c >=.\....P'.+.... 0140 f4 a3 06 85 55 23 8d 51 d6 1e ec 38 ba a4 00 4f ....U#.Q...8...O 0150 f5 06 5b 9b 20 6b cd 1d 15 9c cd da 7b 59 fb 63 ..[. k......{Y.c 0160 5d 21 b0 97 81 ba 8e c1 7a 5f 28 14 57 05 1a e8 ]!......z_(.W... 0170 5e 0b 75 a7 81 9d 65 60 cf da a5 18 ca 04 d4 d3 ^.u...e`........ 0180 b3 09 f6 2b 8f ab 13 df df 27 e5 60 df 91 ab a2 ...+.....'.`.... 0190 fc 3e 09 34 c8 17 f9 be 08 dc bb cb 78 6b 03 75 .>.4........xk.u 01a0 46 42 1d 81 dd b0 bd 12 22 ff 78 98 83 df d6 d1 FB......".x..... 01b0 36 be 87 6b a8 8c ef 70 c6 b7 1b c7 77 24 fa 45 6..k...p....w$.E 01c0 15 b2 ad d8 be 9b 8d b6 0b ca e7 eb 3a e2 6b f7 ............:.k. 01d0 1a cf c7 f5 ba fb f9 28 d5 db f3 71 05 f4 f3 38 .......(...q...8 01e0 e3 e3 14 a1 f7 b2 96 41 da fa 3a 3a 2e a8 5f 7e .......A..::.._~ 01f0 86 a6 f3 36 1d 43 fc 7e 81 f8 99 75 99 de 9e 67 ...6.C.~...u...g 0200 fc b6 01 f2 7c a9 ce c6 f3 47 10 d7 02 cf 31 1c ....|....G....1. 0210 ad 0a 65 08 79 13 61 4c 71 5f 13 08 65 2a a0 9f ..e.y.aLq_..e*.. 0220 89 c0 7f 90 8c 0e f3 71 5d c3 3d ed 61 ca 53 0d .......q].=.a.S. 0230 ea 5f 90 ca 76 c6 12 b6 08 82 7a 0b 7d de e6 02 ._..v.....z.}... 0240 d7 65 70 f5 83 6b 20 84 e1 10 b2 30 0f 42 31 84 .ep..k ....0.B1. 0250 52 a4 dd 2a 08 2e 5b ed e7 57 16 3b d7 4b fb 6b R..*..[..W.;.K.k 0260 69 2f 8e 32 6a 04 de bc d9 59 01 75 24 12 f9 62 i/.2j....Y.u$..b 0270 7b 72 9c 5f 38 16 2a a6 83 a3 d1 97 14 4b c3 6f {r._8.*......K.o 0280 65 8c 84 34 bc cf 12 71 7d 85 34 18 97 c5 8e 02 e..4...q}.4..... 0290 f9 a6 06 fa e8 49 ac b3 cd c9 d9 75 74 4e 9a 59 .....I.....utN.Y 02a0 9a b1 1b ac 99 87 bd ec e6 a5 0f e8 8d 56 5c 43 .............V\C 02b0 e6 a5 09 e8 26 d7 d9 e6 e5 5c e0 07 ce 68 d7 2c ....&....\...h., 02c0 d0 9e 47 7f c7 6a 87 b6 d4 66 5a d8 1e 4f a5 77 ..G..j...fZ..O.w 02d0 ac 66 73 45 03 e9 d7 50 17 70 ee 62 db f8 2d 0b .fsE...P.p.b..-. 02e0 ad b8 dc 1a 0e f5 89 dc 39 11 e7 e1 80 3a fa ec ........9....:.. 02f0 00 cf e8 af 81 2c f0 2c 2c b2 bd 37 ae 5d 78 e6 .....,.,,..7.]x. 0300 94 d2 b0 df 78 ee f4 09 a6 f7 d8 e7 ee 4c 07 90 ....x........L.. 0310 26 42 8f e7 ac 79 c4 4e f9 c0 1e 16 ed 90 b7 5c &B...y.N.......\ 0320 e6 32 f9 af 03 1a fc fe 89 5e a6 1b 58 87 95 da .2.......^..X... 0330 8f 1a ec fb 5c ee dc 8d ba e0 09 63 ec b7 95 ea ....\......c.... 0340 03 6f c3 f5 30 d6 b8 2f 2e 12 c2 aa 8c 42 58 75 .o..0../.....BXu 0350 91 7e 4a 15 ca 57 04 5b e6 2d ae 23 6b c8 cd 5a .~J..W.[.-.#k..Z 0360 3c eb 87 55 ff 50 4b e5 cb ef 83 22 64 ba 33 f8 <..U.PK...."d.3. 0370 e2 a8 6a 37 ee b9 90 08 e7 4c 1f f6 1c 08 9f 69 ..j7.....L.....i 0380 e0 7e ea 34 d4 13 ac 76 25 67 64 91 e9 11 d8 c0 .~.4...v%gd..... 0390 d5 81 7d e8 33 06 23 d8 db 6f 48 5b 95 35 a1 46 ..}.3.#..oH[.5.F 03a0 57 eb 02 18 1f 94 77 db ae d4 67 ec eb bd b1 9e W.....w...g..... 03b0 79 d5 5f d7 d2 67 3b be dc 73 91 f2 5a 9b 0e 5d y._..g;..s..Z..] 03c0 a9 a5 3a 54 ca d2 ca ba d9 db f5 13 ed 6d cf 45 ..:T.........m.E 03d0 4e 02 cd 97 b5 36 fd c1 76 e3 50 7f 45 2f 22 7b N....6..v.P.E/"{ 03e0 07 7d 74 25 8e af de 48 d7 1a a3 91 7b b6 05 7d .}t%...H....{..} 03f0 ca 45 19 f9 c0 1a 67 a4 fd 89 80 f3 3e c6 31 0d .E....g.....>.1. 0400 71 50 2a 57 62 17 56 ab 06 e4 d6 04 1a e9 b3 12 qP*Wb.V......... 0410 3e 1f d3 5e 78 3e ac 5a ad 1f 5c ed 02 c1 93 ed >..^x>.Z..\..... 0420 3f 03 21 7f 2f d4 1d 04 f2 0a 82 78 20 ab 1f fd ?.!./......x ... 0430 bb ad e5 fa ba 95 f5 f5 bd 5a ea 1f f6 06 7b 5e .........Z....{^ 0440 73 8b f9 c3 c6 6f 03 ad 22 f2 f2 b2 6e 86 eb bb s....o.."...n... 0450 b2 be fa 01 3f 7c fb be 5c fb af 37 d3 fe 1b 5c ....?|..\..7...\ 0460 fb ef b0 f6 67 b3 f6 2d ac fd 0c ae fd 59 ac fd ....g..-.....Y.. 0470 b7 e1 9a 22 6b df 0d 9f 1d 41 dd d8 1e f9 fe 11 ..."k....A...... 0480 a4 6d c2 ef fc 00 fd 9b b5 f4 79 65 b0 8e ca 7a .m........ye...z 0490 08 2d 4b 74 23 54 6d af e7 51 a0 8f 2b 20 14 42 .-Kt#Tm..Q..+ .B 04a0 28 95 e9 e6 0b 32 dd 24 7b 07 6e 9e 49 36 0c f9 (....2.${.n.I6.. 04b0 fe 9c cd 7d 6f a6 9f a3 d0 67 1e c4 51 97 7d d9 ...}o....g..Q.}. 04c0 7e 0b cb fa b0 b9 2f 8d d7 c2 7a fa 9c 4f b2 83 ~...../...z..O.. 04d0 be 60 73 7c d9 9e 4f a2 47 3b e0 c7 fa 2f 95 1b .`s|..O.G;.../.. 04e0 c7 ca 11 1b 81 79 20 33 d6 4e 25 5f ee 31 96 87 .....y 3.N%_.1.. 04f0 f7 f4 99 6e 8e b5 63 2d fd 2e 51 57 d0 ff ce dc ...n..c-..QW.... 0500 98 f8 b2 31 d1 b1 31 49 65 be 81 2d 1d 6d 63 82 ...1..1Ie..-.mc. 0510 65 3d 70 7e 71 76 da 55 c6 b3 27 79 b6 94 5b d3 e=p~qv.U..'y..[. 0520 13 d7 72 59 3a ce 69 5c f3 45 05 19 66 d4 d1 ef ..rY:.i\.E..f... 0530 42 f1 f2 c2 32 8d de b9 35 8d 30 8f 83 9a a9 cf B...2...5.0..... 0540 03 d2 8f f5 b1 5f 4f 0f c3 7e 08 9f 4f ba d6 d2 ....._O..~..O... 0550 32 38 0f 95 c6 6d a2 6c dc 06 71 e3 c6 f7 b1 0f 28...m.l..q..... 0560 f4 51 1a 3b 5c 0b 1c 19 86 1a db eb 85 79 50 87 .Q.;\........yP. 0570 2f b3 cf 92 ec 1d d8 33 59 e7 81 b9 35 5f 20 5e /......3Y...5_ ^ 0580 52 6d 3f 67 03 d5 ec cc d8 2b b7 e6 d8 3d 36 67 Rm?g.....+...=6g 0590 8c d4 36 81 4c cf 29 cd 6f 9c 53 eb 81 d6 17 da ..6.L.).o.S..... 05a0 43 5a 3c 67 a3 2c f0 19 20 d6 77 f8 de fd b2 25 CZ..f...6..... 00f0 40 bf fe 9d df 75 73 e9 e9 e3 23 ca fe 14 c1 fe @....us...#..... 0100 d4 8d f0 dd 76 ea 1a 98 ef 04 a9 9b 91 b3 6a 0d ....v.........j. 0110 97 3e a2 fe 3f e0 b6 4b a7 f5 dc 9b f5 bc 10 c6 .>..?..K........ 0120 f3 a9 76 69 c9 6f 89 6b 4d 9d 33 ed ff a7 d8 36 ..vi.o.kM.3....6 0130 8a 71 1c e3 b7 44 eb 90 2d d3 db 3d 6a fd 34 89 .q...D..-..=j.4. 0140 ff 1f 71 c9 ec 46 2d b3 5c 2d b3 63 fa d9 ef 75 ..q..F-.\-.c...u 0150 3d fb 01 5c bb fa ac 63 87 f7 83 ff 10 64 58 07 =..\...c.....dX. 0160 3d 0c 9a a9 ba 32 34 ac 64 b0 8e f7 0f bd de 35 =....24.d......5 0170 27 f5 f9 e4 77 ed 4c c8 e7 7a f0 33 0b 52 ff 27 '...w.L..z.3.R.' 0180 c2 b5 60 2f df d7 a2 7e 33 ea 17 a1 7e d9 98 fa ..`/...~3...~... 0190 25 a8 4f f9 e6 d8 f5 6f 87 1d d0 f5 21 e3 a7 58 %.O....o....!..X 01a0 f6 37 78 ee fe 4c 97 f9 74 59 cc d5 4e ad 2e fb .7x..L..tY..N... 01b0 69 6a db 4f 55 e9 b9 25 43 ad fb 7d af ea 75 c6 ij.OU..%C..}..u. 01c0 b1 c9 ea db 88 bf c4 bd 09 7f 5f 72 7f 60 a2 75 .........._r.`.u 01d0 40 cf cb f6 fa d0 a7 75 a8 44 af fb ba c6 ec e3 @......u.D...... 01e0 ba 60 97 b8 76 b3 c0 83 be 2c 1b 34 ef 76 7e 1f .`..v....,.4.v~. 01f0 6f 58 ad 61 28 d7 c7 f5 fd 5f 3b a2 ec 86 6c c3 oX.a(...._;...l. 0200 78 38 61 cf a7 59 e0 65 ea ba 8b 51 d7 d4 73 ed x8a..Y.e...Q..s. 0210 4f 5c 7d db a2 79 4c 1d 71 6c 8b 7d 4f 67 f4 ff O\}..yL.ql.}Og.. 0220 9c fc fa 9e f6 b9 da 6e d1 f5 72 46 d4 7a a9 77 .......n..rF.z.w 0230 cc fe aa cf a3 f4 f7 85 61 b5 9e 2d 74 ad c9 ba ........a..-t... 0240 35 df 1e ac 95 b6 bb fa c2 f7 39 b4 59 41 4d bb 5.........9.YAM. 0250 08 b4 4d 9a 96 ef 78 be e7 6a 7f b9 6e df 5e ff ..M...x..j..n.^. 0260 ad 18 56 b2 1c cf 1e 72 3d c4 ba dd b8 bf 6e a4 ..V....r=.....n. 0270 8b b4 7c a8 df 6b 86 1d fd 8e 0e 2b fd be 6f 58 ..|..k.....+..oX 0280 e9 f7 99 71 d6 3b 95 b8 b6 62 38 55 bf 4d f4 65 ...q.;...b8U.M.e 0290 e1 ed 7d c9 4c da c3 02 da 82 a5 89 34 63 4b 5f ..}.L.......4cK_ 02a0 ba f1 90 fc 76 a3 30 0f a7 ac 55 a7 a3 be c7 0c ....v.0...U..... 02b0 c9 f9 69 af eb b9 a7 cc dd fd 3f a0 df bb db f2 ..i.......?..... 02c0 ab 1e d6 f6 45 d9 88 43 b4 a7 f6 da 90 7b 8e 19 ....E..C.....{.. 02d0 5c c3 33 cf 79 27 2b de 2f df 61 63 6f b7 37 63 \.3.y'+./.aco.7c 02e0 e2 a7 fb 01 ca 77 2f 68 be 81 f2 38 ca af 43 9d .....w/h...8..C. 02f0 38 f2 bc 8f fd 63 d6 3d ff a2 ed cb 3c d8 96 12 8....c.=....<... 0300 84 30 c2 56 84 2e 84 83 08 e7 10 82 3f 15 a2 18 .0.V........?... 0310 61 3b c2 8b 08 e3 7d 07 e0 97 9f fc 7e df 01 38 a;....}.....~..8 0320 b3 fd 0f fb 1d 00 9f eb 3b 00 ed e0 ed 31 a4 5f ........;....1._ 0330 5a ee 41 92 87 3e a1 3f 59 27 3f 8c fc 78 df 09 Z.A..>.?Y'?..x.. 0340 f0 69 d0 e5 a7 a7 5b 8d 7b 67 d6 dd 87 3f ad 46 .i....[.{g...?.F 0350 c5 b7 c3 a5 4c 2d 32 ee 5c 51 11 5e 51 51 55 b2 ....L-2.\Q.^QQU. 0360 a4 fc 3e 63 66 bd 71 c7 dd 55 77 2c 29 2b f5 f9 ..>cf.q..Uw,)+.. 0370 56 a8 1a d5 c6 da fa e6 f5 3c 9e a7 a0 b4 fa fa V........<...... 0380 4d c6 1d 1b 9a 8d da b6 6a 22 5a 83 46 fd 5a 10 M.......j"Z.F.Z. 0390 4a 2f 7e 12 0a dc fa dd a6 5a c3 6c 33 4d 73 b6 J/~......Z.l3Ms. 03a0 af be c5 50 8d d7 46 82 9f 22 72 e9 f9 13 a4 0d ...P..F.."r..... 03b0 0d 74 d5 56 b2 b0 62 61 15 69 6f f2 f9 d8 af f9 .t.V..ba.io..... 03c0 46 1d 18 47 6a 6b ea d7 57 37 18 8d 1b d7 af a9 F..Gjk..W7...... 03d0 6d 0e 12 1b ba e1 81 da 88 d1 5c dd b8 ae d6 a8 m.........\..... 03e0 6f 51 fc 4d e5 36 70 2d 7e 37 f9 9c 5b 99 af 00 oQ.M.6p-~7..[... 03f0 a1 f5 cd 8e 47 50 bb 13 b2 9b 41 23 52 bb b6 7a ....GP....A#R..z 0400 63 43 2b 19 d5 6c 6c 6e 26 1a 12 e4 e8 81 3e df cC+..lln&.....>. 0410 55 b7 68 7e fd fc d6 f9 a2 a2 8e 50 48 e2 36 41 U.h~.......PH.6A 0420 b9 41 7b cd 63 17 a6 1a bc 74 05 bd 82 02 4d 9f .A{.c....t....M. 0430 6e 7c 6b 63 4b ab 51 dd d2 52 bf ae d1 96 a1 81 n|kcK.Q..R...... 0440 72 79 9c 4f fa c8 93 d2 bd 61 5a cb 0d 86 3c 8d ry.O.....aZ...<. 0450 a5 dc d4 c9 63 51 86 ed 53 4f 0f c9 a7 03 e2 50 ....cQ..SO.....P 0460 4b 57 75 22 cc 83 58 cb 36 44 6a 0b 15 bd 1c 86 KWu"..X.6Dj..... 0470 05 12 c3 5c 44 0c f3 da 86 ea 75 c8 4f 23 b2 b7 ...\D.....u.O#.. 0480 a5 b5 19 c9 c2 69 2d 20 ad 8e 44 54 46 b7 63 cc .....i- ..DTF.c. 0490 d4 3f 43 72 5c d8 d0 e0 30 55 4e 17 15 13 5d 4f .?Cr\...0UN...]O 04a0 f2 9b 6e ff f8 fd ee d2 85 25 a5 e5 55 2b 4b cb ..n......%..U+K. 04b0 97 2f b9 73 99 10 76 a2 bc 74 e5 12 55 22 c4 a2 ./.s..v..t..U".. 04c0 3b cb 4b ab 16 2d 2e 5d b4 74 f9 0a 9e 27 bc a7 ;.K..-.].t...'.. 04d0 ac c4 9d 15 e5 77 7e 2b 25 bf 64 d9 92 8a 72 17 .....w~+%.d...r. 04e0 c9 b7 ee 2c 29 2d 9b 25 54 3c 5b c7 73 84 58 5a ...,)-.%T<[.s.XZ 04f0 5a be ac b4 cc a6 17 e2 0e 18 e1 d2 55 15 d0 2f Z...........U../ 0500 1d a3 ce a6 ea 86 8d 3c 6d 4a 91 93 f7 55 57 fb .......{...PLJn.Z 0520 e8 a3 f6 fe da c6 05 2a 0f 85 68 96 4a d0 a8 5d .......*..h.J..] 0530 33 42 31 e4 18 c8 06 a7 1a a5 64 4a 60 6d 45 d9 3B1.......dJ`mE. 0540 4a a9 01 18 36 5e 5f 30 ad 4d 8d 5f 75 73 4b ad J...6^_0.M._usK. 0550 6a 5a 3d 2a 0d f5 8d b5 12 10 4d 26 1c 44 32 af jZ=*......M&.D2. 0560 6f ac d9 00 85 ad 69 d5 d8 67 35 f6 b3 1b 23 29 o.....i..g5...#) 0570 7d b9 88 97 ec c3 45 cc 24 e2 97 1c 20 02 31 a7 }.....E.$... .1. 0580 39 95 87 82 fd a6 4a 40 de c3 54 16 d7 2b 5f 94 9.....J@..T..+_. 0590 d5 ca 9f 2a 81 c7 94 e7 54 89 47 be 59 3e d3 6c ...*....T.G.Y>.l 05a0 84 7d a3 9e 10 67 bd bc 62 61 79 85 f6 d1 48 20 .}...g..bay...H 05b0 76 43 75 f3 3a db c9 a8 4d 53 ba ac 44 de 90 f3 vCu.:...MS..D... 05c0 4c a0 29 c7 6b 72 ca 60 48 37 ad 97 18 29 f5 d0 L.).kr.`H7...).. 05d0 8f 7f 51 5e b3 1d 56 ba ca cb a1 db 11 63 96 34 ..Q^..V......c.4 05e0 98 74 02 b9 60 9a c2 c0 ab f2 .t..`..... No. Time Source Destination Protocol Info 85 211.708277 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 85 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778591000 [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 211.708277000 seconds] Frame Number: 85 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0174 (372) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdf9d [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 18413, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 18413 (relative sequence number) [Next sequence number: 19873 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x3e9c [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 8760] FTP Data [truncated] FTP Data: \331\027\225\323X\331cWV\272\354\317+\026\253\234J\313\201\006E\325\252U\253\252\324\255\353\341\250ou9\252\234\026\221\367\313\373W\247\033\027L\333\210\202\365\365-\362s\002\252\242\0343\032.\325n\331J\230\310j~\023 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 74 40 00 80 06 df 9d 0a 00 00 05 0a 00 ...t@........... 0020 00 06 04 2a 73 c3 5e 9e 46 db 04 ad b2 35 50 10 ...*s.^.F....5P. 0030 fc 00 3e 9c 00 00 d9 17 95 d3 58 d9 63 57 56 ba ..>.......X.cWV. 0040 ec cf 2b 16 ab 9c 4a cb 81 06 45 d5 aa 55 ab aa ..+...J...E..U.. 0050 d4 ad eb e1 a8 6f 75 39 aa 9c 16 91 f7 cb fb 57 .....ou9.......W 0060 a7 1b 17 4c db 88 82 f5 f5 2d f2 73 02 aa a2 1c ...L.....-.s.... 0070 33 1a 2e d5 6e d9 4a 98 c8 6a 7e 13 41 73 1c d3 3...n.J..j~.As.. 0080 4e e1 b4 8d 37 ba bd b9 6a 14 fb a7 54 10 32 49 N...7...j...T.2I 0090 a6 8e df 57 5c bd 74 4f 65 3f 6b 1b 23 aa 97 9f ...W\.tOe?k.#... 00a0 71 af 97 70 26 3b 7e 7b 53 2f c5 8b 7d 81 a2 b9 q..p&;~{S/..}... 00b0 35 45 b9 04 c5 30 c8 4a 2b 17 96 ad 28 95 fa 6a 5E...0.J+...(..j 00c0 a4 88 30 68 8c e9 e9 af 35 76 7a 9c 5f 64 07 6c ..0h....5vz._d.l 00d0 96 cb 87 a6 8d 6b ae d0 be 33 8f 1c d0 67 c4 cd .....k...3...g.. 00e0 54 5c 73 86 99 8a 6b 3e b1 45 9d ff ee d5 b8 e6 T\s...k>.E...... 00f0 83 1a d7 9c eb 19 1f d7 7c c6 1c df 77 66 44 fb ........|...wfD. 0100 ce 2c bb 84 ef cc e0 a3 a9 b8 e6 b7 c7 60 8a af .,...........`.. 0110 e4 97 6d 3a d2 a8 db f6 c5 84 94 df 9f f0 cf 7f ..m:............ 0120 bc f8 df 2f ba fe 9f f0 c7 6e fc f1 17 8a 38 76 .../.....n....8v 0130 e3 8d 25 b6 c9 73 79 bc b1 c4 20 79 2e 8f 37 b6 ..%..sy... y..7. 0140 71 c9 97 c3 1b d3 0e 13 4b 71 39 df 9c b4 cf 07 q.......Kq9..... 0150 af c0 37 27 ed 79 6f 86 b2 e3 63 ef c3 8d 37 a6 ..7'.yo...c...7. 0160 1d 7e db 7b 79 df 9c b4 df c1 09 97 c7 1b d3 fe .~.{y........... 0170 97 5d 81 6f 4e ce 17 91 2b f0 cd c9 f9 ac e2 0a .].oN...+....... 0180 7c 73 4a fb 7c 05 be 39 89 8f 1b 40 23 7d 5f bb |sJ.|..9...@#}_. 0190 98 9f 1b 6f cc f9 f3 48 e1 e5 f1 c6 c7 40 77 8c ...o...H.....@w. 01a0 74 99 17 d3 b9 f1 c6 12 73 77 b3 48 f9 d9 5d 75 t.......sw.H..]u 01b0 e3 8d 6d ba cb f9 e6 7c 17 74 ef de 3c 3e 9e 97 ..m....|.t..<>.. 01c0 98 21 1b 47 ac b0 76 e3 d3 d1 1f 95 8d 23 e6 ba .!.G..v......#.. 01d0 20 e3 12 74 af 0a 07 33 cb 33 ef 59 97 a0 7b 5d ..t...3.3.Y..{] 01e0 38 38 62 85 e1 1b 1f 47 ec c6 25 73 3d 71 c6 54 88b....G..%s=q.T 01f0 32 75 f3 63 f8 8d 8b 6e f3 2c 0f c2 f8 72 e9 17 2u.c...n.,...r.. 0200 2e 1c 31 e8 b6 ce 1a 7f dc de 16 63 70 c4 a0 6b ..1........cp..k 0210 1f c7 e7 26 71 c9 6e 1c 71 46 d1 95 e1 88 0d d0 ...&q.n.qF...... 0220 a5 8f f3 bc 7d 1e bf 9b 6e 5e 1f 99 db b2 71 fd ....}...n^....q. 0230 e7 d8 c4 65 f0 bf b7 de 32 47 e1 7f 6f bd 65 f6 ...e....2G..o.e. 0240 dc 59 b3 cd b9 c4 ff 9a b7 fe c9 ff e3 ff cb ef .Y.............. 0250 52 f8 df fd 3b 15 86 37 d0 96 ea ff f1 6b e2 3a R...;..7.....k.: 0260 69 63 4e 37 c2 e6 be a7 c2 e5 f0 bf bf af ff c7 icN7............ 0270 d0 06 15 52 f0 bf fc 02 20 3f 96 81 70 84 fc d3 ...R.... ?..p... 0280 c7 e0 7f 9b 18 3c 32 7c 1e fe 1f 87 71 ff c3 ef .....<2|....q... 0290 a9 c0 39 25 e0 ba fe c7 82 0f 9e 86 30 53 28 9b ..9%........0S(. 02a0 c4 4f 21 7c 45 a4 62 77 27 e9 98 58 55 ee 01 6f .O!|E.bw'..XU..o 02b0 d0 79 7b 4e a6 cd 9f 31 86 a7 21 14 f6 d5 fe d9 .y{N...1..!..... 02c0 7b 3e b6 45 d7 c4 9c 2e 39 d6 5f d7 e5 d7 0b 25 {>.E....9._....% 02d0 03 e2 7b a9 43 dc 7f 8e f5 03 f9 fb fc 6c cc 30 ..{.C........l.0 02e0 d7 05 1c 7f 7b 0c dc 3f 62 9d b9 d7 a4 ad b6 31 ....{..?b......1 02f0 c8 5c 27 71 3f 3a d5 45 67 db 68 e2 91 ed 75 04 .\'q?:.Eg.h...u. 0300 f7 c2 37 5e a2 6d be 4b 3d 12 75 fc 3c 62 4a 11 ..7^.m.K=.u.\342J\277\350J\277\340J?\347J\357w\245\273]\351.Wz\227+\275\325\225\336\354J\267\272\322\r\256t\304\225\256t\245+\\3512W\272\304\225.v\245\213\\351\240+]\340J\347\273\322\001W:\333\225\316p\245\317 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 75 40 00 80 06 df 9c 0a 00 00 05 0a 00 ...u@........... 0020 00 06 04 2a 73 c3 5e 9e 4c 8f 04 ad b2 35 50 18 ...*s.^.L....5P. 0030 fc 00 5b bb 00 00 57 fa 98 2b 7d d4 95 3e e2 4a ..[...W..+}..>.J 0040 bf e8 4a bf e0 4a 3f e7 4a ef 77 a5 bb 5d e9 2e ..J..J?.J.w..].. 0050 57 7a 97 2b bd d5 95 de ec 4a b7 ba d2 0d ae 74 Wz.+.....J.....t 0060 c4 95 ae 74 a5 2b 5c e9 32 57 ba c4 95 2e 76 a5 ...t.+\.2W....v. 0070 8b 5c e9 a0 2b 5d e0 4a e7 bb d2 01 57 3a db 95 .\..+].J....W:.. 0080 ce 70 a5 cf 7d e4 92 ff 47 57 86 5f df 3f 3a 7a .p..}...GW._.?:z 0090 ea 09 84 17 13 98 b3 b0 50 a8 4c 88 2b c2 af 67 ........P.L.+..g 00a0 58 ea 5b 1c 97 c2 af 1f 8f 5e 01 7e bd 49 3d f8 X.[......^.~.I=. 00b0 a7 43 33 df 91 7e 5c 9b 94 bf 23 e2 b5 8d 49 31 .C3..~\...#...I1 00c0 cb cb f3 f2 f4 19 49 5c 23 cf 8b f8 d5 79 8e ec ......I\#....y.. 00d0 59 ca ff 20 71 ed f4 6d f2 2c e2 73 ab 63 16 fd Y.. q..m.,.s.c.. 00e0 10 b2 4e 3d f2 43 d2 47 e1 1e d4 f9 81 35 14 8e ..N=.C.G.....5.. 00f0 59 43 a1 98 e5 c9 2e 4f c6 7b e2 39 ed 3d f1 74 YC.....O.{.9.=.t 0100 af 19 9f 94 61 c6 3d f2 4c 40 4f a7 c4 f1 b3 2e ....a.=.L@O..... 0110 f9 f5 80 cf 2a e2 9e fd 7b 50 e7 ae a4 d7 0f 5a ....*...{P.....Z 0120 7f dc f3 1c 78 3c eb a2 8b 83 6e 99 a4 eb 92 f8 ....x<....n..... 0130 78 bb 7c 17 ca 17 eb f2 cd ae f2 36 94 7f 53 97 x.|........6..S. 0140 6f d2 7d e7 b5 08 ca 8b b5 df d8 4a 53 f5 73 95 o.}........JS.s. 0150 5f 9e 11 99 d4 a1 e9 ca f4 bd 11 ff 5d a2 fc 23 _...........]..# 0160 ca b3 67 fb df 56 f6 30 bf c5 23 0e 20 3e 8a 7c ..g..V.0..#. >.| 0170 1d 46 ab 09 a1 75 50 d9 d2 62 6c 62 f2 20 e1 c5 .F...uP..blb. .. 0180 08 ed 08 9b 4f c2 56 20 74 21 3c 87 70 ba 74 e6 ....O.V t!<.p.t. 0190 3b e9 90 bd 27 0e 79 af 56 be 05 85 bf d7 9a 29 ;...'.y.V......) 01a0 ee 4a ce f4 2f 4c 78 fc bd 5e fa 0c 1c 68 8f 79 .J../Lx..^...h.y 01b0 07 cc 98 97 36 44 84 f6 7a 45 fc 61 2f cc e4 14 ....6D..zE.a/... 01c0 af f6 bb 73 2b 75 83 e3 18 e6 39 3e 62 d9 f6 5a ...s+u....9>b..Z 01d0 e9 a2 82 d8 10 1f af df a5 7d 09 5f a7 fd a8 d2 .........}._.... 01e0 06 9d 7e e4 a5 a1 2e dc 8f ed af 95 e7 74 36 b7 ..~..........t6. 01f0 c7 72 df a1 5f d2 51 75 ee 8f 3e 2b 59 7f 82 19 .r.._.Qu..>+Y... 0200 ef 6f 80 be 15 8c f2 fc 5e bc ff 3d dc ff 97 e8 .o......^..=.... 0210 ff 83 67 76 fc bb ad b0 a1 fc e2 e6 4b cc ba 6a ..gv........K..j 0220 db a3 db 9e ad 31 f3 fd f4 21 e3 e2 eb d5 7c 03 .....1...!....|. 0230 a8 7b 8d a6 39 0e 1a ce 35 03 08 47 20 9f b6 53 .{..9...5..G ..S 0240 ca cf 72 c1 ed 18 9b d5 ca a7 ce 04 d0 41 5f 93 ..r..........A_. 0250 99 bb e3 fd 99 71 e5 7f 92 58 08 61 3c 6c 89 eb .....q...X.a.&@..f..c. 0290 e8 07 ac d3 3a 74 41 c9 8b e7 99 d2 20 9b 6d 88 ....:tA..... .m. 02a0 ab 85 78 2d 0d 65 58 4e fa ea 90 4e 47 3a 9c 46 ..x-.eXN...NG:.F 02b0 df ca f1 64 70 54 f9 f5 24 9f 5d e0 b3 4b f3 39 ...dpT..$.]..K.9 02c0 a0 f9 fc 2f 64 ba f9 ab ca 9f 6d db eb d4 b3 e5 .../d.....m..... 02d0 c9 56 f4 a7 d0 88 e7 18 46 3c 7d 86 19 cf b9 de .V......F<}..... 02e0 8c a7 67 8a bc 7e 61 ee c2 f3 d3 6e fd 3d 7d 27 ..g..~a....n.=}' 02f0 8b 7b 92 02 e5 1e 33 73 32 9f df 27 50 16 22 1f .{....3s2..'P.". 0300 dc b3 c7 bc 21 41 ff 58 ea 7a ba bc be 15 d7 0b ....!A.X.z...... 0310 16 a8 67 74 bc eb 51 cd b3 96 7a a0 e9 e8 2b 39 ..gt..Q...z...+9 0320 27 4d 1c ca 80 7c 7d 62 65 3f a6 c3 e9 bd 47 95 'M...|}be?....G. 0330 9f 5a f6 f3 2e d0 4e b8 eb c9 41 de df ae 0b 6a .Z....N...A....j 0340 fc d2 b4 1f a5 d5 46 67 e2 c8 24 71 ea 40 b6 b2 ......Fg..$q.@.. 0350 37 cf 98 07 a5 5f 60 9e 93 5b 1d ee 84 fe fe 6a 7...._`..[.....j 0360 a0 1b d7 7e 86 7a 5b f3 d5 fd f3 3c d2 33 d0 8f ...~.z[....<.3.. 0370 4f 46 47 e7 4f 98 f4 e4 60 7b 36 c7 f6 d1 c4 f3 OFG.O...`{6..... 0380 17 a8 5b 2b fb ff 07 e5 4d d9 8e fd 2a 42 9f 4d ..[+....M...*B.M 0390 e5 83 38 01 59 e7 ec 00 5d 0d fd 5e 37 c5 d3 ff ..8.Y...]..^7... 03a0 76 74 d4 87 e5 c0 6b 6b b4 1f ec 89 ed 71 4f 07 vt....kk.....qO. 03b0 fd 1c 61 4c 9e 94 fe c3 c2 c9 47 65 3e 9c ec c2 ..aL......Ge>... 03c0 18 08 f1 ed e4 dd 18 b3 40 d0 f1 4b 7c 74 62 cc ........@..K|tb. 03d0 4b 3f cc 42 3c e4 f5 cd da 31 e8 89 77 24 be 8b K?.B<....1..w$.. 03e0 ba ad e4 d9 1e 4f cf 38 18 f7 c0 0e fa 1e 40 fe .....O.8......@. 03f0 61 f0 38 32 23 66 bd f8 95 98 f4 e9 4d bc bd 08 a.82#f......M... 0400 6d b1 d6 83 fe 00 ca 0f 8c 29 5f 87 72 3e 03 fb m........)_.r>.. 0410 d1 67 d8 9d 93 b6 1c e7 8f 23 c7 db 32 c5 a9 e7 .g.......#..2... 0420 64 9f ef 4e ce f1 40 7e 4b f9 4c 75 81 5f 7b 82 d..N..@~K.Lu._{. 0430 fe 9d 7e ee 11 87 bc 22 dc 2f 3c 7b ae 5d 35 23 ..~...."./<{.]5# 0440 e6 0d 8a ce dc c2 5f d0 36 77 5b 41 a3 d3 bb 78 ......_.6w[A...x 0450 46 4c da 4c 9e 89 0b 4a df b2 6f 58 f3 6e 8b 11 FL.L...J..oX.n.. 0460 1f ec 29 34 3a 61 53 c2 c9 a0 b1 cf 3b 53 84 12 ..)4:aS.....;S.. 0470 f9 fe 4e 8c 43 3c 69 20 ce 63 5a fc d2 4b 59 e5 ..N.C.&...x....C. 04c0 ed 89 00 ea 42 f7 de 2a 69 a7 9f aa e3 d6 f5 90 ....B..*i....... 04d0 ff bd d0 95 89 e6 f6 3e 8f b1 dc f2 d9 fa 7a 70 .......>......zp 04e0 69 5a 96 f9 8b 4c 3e e7 a0 f5 92 f6 2a d0 1a 62 iZ...L>.....*..b 04f0 79 8e 1f cf 70 06 71 8b 4d db 12 99 e6 f1 41 bb y...p.q.M.....A. 0500 fc 77 18 a3 bc 29 f4 c1 fe 98 55 76 4f cc 2a fb .w...)....UvO.*. 0510 0b ca 63 65 12 f2 9d 84 31 f0 fc 37 ee 21 73 37 ..ce....1..7.!s7 0520 da 41 99 80 dd b0 e7 96 ab 20 7f fa 5b fe d9 79 .A....... ..[..y 0530 65 07 ff 1a fa e6 0b ed e8 f3 83 17 c7 4e fa 0c e............N.. 0540 d7 d7 38 0f 6e e2 75 73 5b df 44 b3 a6 2f cd d8 ..8.n.us[.D../.. 0550 9a 48 17 cb 13 f3 20 c3 22 43 f6 cb 87 39 79 f0 .H.... ."C...9y. 0560 46 f4 69 58 fa 5d 0f 27 7e 47 bd d3 65 1f b2 4c F.iX.].'~G..e..L 0570 ce ad e5 c9 a7 c1 a7 98 3e da 43 bf c2 58 55 c8 ........>.C..XU. 0580 67 e6 c0 79 e5 eb 77 2b ec e2 41 e3 07 fd 1e df g..y..w+..A..... 0590 e4 64 17 eb 84 3e 92 34 c3 e0 55 04 39 a7 8b dd .d...>.4..U.9... 05a0 43 8b a1 33 85 90 33 bf 79 60 c8 e7 03 fa ea df C..3..3.y`...... 05b0 92 e0 98 1e 42 9d bc 1b b9 8e d8 27 31 34 c4 c4 ....B......'14.. 05c0 c8 33 db 18 b7 0c e8 7f 81 f4 13 f6 38 d6 23 39 .3..........8.#9 05d0 c4 25 4d 31 10 7f 1f f2 2b 11 8a cf 2b b4 23 f4 .%M1....+...+.#. 05e0 f9 09 1b f0 cc 6c cc 4f a1 9c .....l.O.. No. Time Source Destination Protocol Info 87 211.708360 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=12573 Win=32120 Len=0 Frame 87 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778674000 [Time delta from previous captured frame: 0.000012000 seconds] [Time delta from previous displayed frame: 0.000012000 seconds] [Time since reference or first frame: 211.708360000 seconds] Frame Number: 87 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a7 (6055) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f17 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 12573, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 12573 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 32120 (scaled) Checksum: 0xbef2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a7 40 00 40 06 0f 17 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 30 0b 50 10 ..s..*...5^.0.P. 0030 1f 5e be f2 00 00 00 00 00 00 00 00 .^.......... No. Time Source Destination Protocol Info 88 211.708371 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 88 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778685000 [Time delta from previous captured frame: 0.000011000 seconds] [Time delta from previous displayed frame: 0.000011000 seconds] [Time since reference or first frame: 211.708371000 seconds] Frame Number: 88 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0176 (374) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdf9b [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 21333, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 21333 (relative sequence number) [Next sequence number: 22793 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x917e [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 87] [The RTT to ACK the segment was: 0.000011000 seconds] [Number of bytes in flight: 10220] FTP Data [truncated] FTP Data: \304\177\241\354\364<\314\001\2441xv;\314o=\370\210\271\247\215\313\003_C\373\n?\216\366\367\276J\033\330-\373=K\236\317\245_:\335\317\325\253\373\260l\177\353`\236\322/\312\371\036b\346\f\352I\271\234\307\366\346a\27 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 76 40 00 80 06 df 9b 0a 00 00 05 0a 00 ...v@........... 0020 00 06 04 2a 73 c3 5e 9e 52 43 04 ad b2 35 50 10 ...*s.^.RC...5P. 0030 fc 00 91 7e 00 00 c4 7f a1 ec f4 3c cc 01 a4 31 ...~.......<...1 0040 78 76 3b cc 6f 3d f8 88 b9 a7 8d cb 03 5f 43 fb xv;.o=......._C. 0050 0a 3f 8e f6 f7 be 4a 1b d8 2d fb 3d 4b 9e cf a5 .?....J..-.=K... 0060 5f 3a dd cf d5 ab fb b0 6c 7f eb 60 9e d2 2f ca _:......l..`../. 0070 f9 1e 62 e6 0c ea 49 b9 9c c7 f6 e6 61 be 33 1e ..b...I.....a.3. 0080 4a eb ca 8b e5 82 26 87 63 88 30 29 7c 5e 9d 25 J.....&.c.0)|^.% 0090 cd e8 e9 94 73 8e 81 7e 7a f5 f9 42 79 bf 28 7f ....s..~z..By.(. 00a0 50 e2 f4 54 5b 30 7c 6f 55 e4 39 6b 9a 90 ec ef P..T[0|oU.9k.... 00b0 4a 39 df 85 d0 46 48 f1 e7 35 e9 ff 6a 9e e6 2f J9...FH..5..j../ 00c0 e7 49 cd 37 1f 7c a1 db 43 11 f2 85 8e 4f 10 8f .I.7.|..C....O.. 00d0 0d 09 13 f6 08 76 9b 63 09 f9 be a1 70 6a 71 89 .....v.c....pjq. 00e0 6f 54 72 5f 2e cf 90 d2 16 99 d0 fb ee 4c c7 a6 oTr_.........L.. 00f0 bd 76 61 d4 b7 ff 56 75 16 f6 2f b5 fc 5e be 30 .va...Vu../..^.0 0100 3a 65 3e d2 db af 45 79 58 ad 4f c8 2f c0 fe f8 :e>...EyX.O./... 0110 7f 48 4c 8d f4 0b b8 08 79 cc 4f 27 77 5d eb c8 .HL.....y.O'w].. 0120 6e 22 ca e8 0f 97 34 cc cf 3f af e6 d3 47 11 3f n"....4..?...G.? 0130 04 da 88 8b 56 8c a1 bd 59 d3 fe 15 e2 0d a0 2d ....V...Y......- 0140 76 d1 7e 74 2e 95 b6 40 d3 36 21 ae 04 6d c0 45 v.~t...@.6!..m.E 0150 7b 72 0c ed 97 35 6d 2d e2 32 d0 ee de c3 f9 e6 {r...5m-.2...... 0160 49 39 df ec bd 25 e6 f5 ce 7a 34 d3 13 7e 24 8d I9...%...z4..~$. 0170 79 f4 f1 c7 95 3f 8f 29 3f d6 b0 67 e9 5b f6 0c y....?.)?..g.[.. 0180 b6 7d 43 d9 b3 d6 5b 62 16 fd e9 a5 61 dd 98 a5 .}C...[b....a... 0190 6d 25 9f 47 53 eb 92 f0 6f e9 37 a1 f3 15 f4 db m%.GS...o.7..... 01a0 cb 67 19 f6 ef df ce a9 e7 15 03 e0 6b 7d 96 72 .g..........k}.r 01b0 7e ca 0a 18 ed 89 6c f1 f8 50 25 ae f3 7c af c7 ~.....l..P%..|.. 01c0 7f b8 08 65 73 31 40 d3 87 a6 a9 f9 20 65 fe 6a ...es1@..... e.j 01d0 ea 4c f4 79 e9 07 fb cd 81 4c b4 77 e4 65 3d 27 .L.y.....L.w.e=' 01e0 ba e6 2f 37 5f 63 0c df 5c 0f 5f d1 de 9b 9c 23 ../7_c..\._....# 01f0 d7 5c 0e dd f4 31 74 95 7c 95 2b db 8c f7 4b fc .\...1t.|.+...K. 0200 ba 94 5f 79 7f 0f da c6 96 f6 a9 0c ff f1 c1 51 .._y...........Q 0210 d3 93 f0 41 6f 96 83 57 25 e2 03 b8 16 26 df 1e ...Ao..W%....&.. 0220 f2 dd 25 f9 8e f6 79 e4 59 7a 4f df e1 22 fa e8 ..%...y.YzO..".. 0230 bc c6 cf b5 d5 ae b9 5f a6 bf 42 f4 99 fc bb 5d ......._..B....] 0240 fc 57 83 c7 e0 e8 68 87 bb 6f be 31 7d fb 84 7d .W....h..o.1}..} 0250 c3 98 d0 7e 70 0e 12 e6 0e 7e 97 ea e4 78 f7 fd ...~p....~...x.. 0260 1a ca 37 12 83 8c b6 92 dc 63 e4 3a ba 51 33 46 ..7......c.:.Q3F 0270 37 1e d7 58 e5 df 22 ee 3b 3f 7a 72 75 41 cc 3a 7..X..".;?zruA.: 0280 5a 44 1f d9 8f 2b fc 43 11 c7 be 32 79 74 00 e5 ZD...+.C...2yt.. 0290 47 10 02 31 2b 58 a0 d6 e5 47 48 17 ee 1c ca c2 G..1+X...GH..... 02a0 fa 6a 86 1f fb 69 f0 db 0a 3e 07 03 aa 3d ae 4f .j...i...>...=.O 02b0 89 ff f6 e9 f6 98 df a4 db 3b 2c f5 a2 cb 0a 42 .........;,....B 02c0 1f 89 23 a7 6f 63 e1 7f ca 8a ea 7e ff 13 f2 99 ..#.oc.....~.... 02d0 90 77 25 6c 58 ef 7f c6 bc 47 d3 63 b9 18 73 cc .w%lX....G.c..s. 02e0 3f bb 73 27 1a eb 88 2d 4c e3 bd de 2c c4 7c d2 ?.s'...-L...,.|. 02f0 60 0e 4a c3 9c 22 ee f5 2f 4c a3 bf f7 f8 1c b5 `.J.."../L...... 0300 a6 2a de dd 69 a5 35 6d eb e3 fc 64 c8 6f 33 2d .*..i.5m...d.o3- 0310 cf 51 eb 30 ac f7 a4 7f e9 57 06 ed f9 8b d7 a7 .Q.0.....W...... 0320 e3 fa 14 59 be ad 4f 18 6f 58 7e d8 34 5e 9f 4e ...Y..O.oX~.4^.N 0330 5b 08 db 87 39 23 3d 13 73 24 fd 5e cf c3 3c 53 [...9#=.s$.^.......#....... 0510 ed 1c 1d 49 dd 9b f2 7e 7a b0 87 fc 1e ca ff 19 ...I...~z....... 0520 d7 b9 1f 0f bc c3 55 07 f6 e3 08 d9 4f 63 3f 8e ......U.....Oc?. 0530 f8 55 58 2d ee d3 87 10 de 45 e8 43 38 81 c0 77 .UX-.....E.C8..w 0540 9d 9b 71 7d 2b 02 f7 9d 7c e7 b9 0b e9 13 3c ac ..q}+...|.....<. 0550 f0 3c 56 63 49 f5 fe d3 de db 73 84 f6 23 1c 23 . fpo-fns [ACK] Seq=1 Ack=14033 Win=35040 Len=0 Frame 89 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778694000 [Time delta from previous captured frame: 0.000009000 seconds] [Time delta from previous displayed frame: 0.000009000 seconds] [Time since reference or first frame: 211.708380000 seconds] Frame Number: 89 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a8 (6056) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f16 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 14033, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 14033 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 35040 (scaled) Checksum: 0xb664 [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a8 40 00 40 06 0f 16 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 35 bf 50 10 ..s..*...5^.5.P. 0030 22 38 b6 64 00 00 00 00 00 00 00 00 "8.d........ No. Time Source Destination Protocol Info 90 211.708390 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=15493 Win=37960 Len=0 Frame 90 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778704000 [Time delta from previous captured frame: 0.000010000 seconds] [Time delta from previous displayed frame: 0.000010000 seconds] [Time since reference or first frame: 211.708390000 seconds] Frame Number: 90 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17a9 (6057) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f15 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 15493, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 15493 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 37960 (scaled) Checksum: 0xadd6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 a9 40 00 40 06 0f 15 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 3b 73 50 10 ..s..*...5^.;sP. 0030 25 12 ad d6 00 00 00 00 00 00 00 00 %........... No. Time Source Destination Protocol Info 91 211.708397 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 91 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778711000 [Time delta from previous captured frame: 0.000007000 seconds] [Time delta from previous displayed frame: 0.000007000 seconds] [Time since reference or first frame: 211.708397000 seconds] Frame Number: 91 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0177 (375) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdf9a [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 22793, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 22793 (relative sequence number) [Next sequence number: 24253 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0xd337 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 89] [The RTT to ACK the segment was: 0.000017000 seconds] [Number of bytes in flight: 8760] FTP Data [truncated] FTP Data: \255L\320\216\327A\336W\243^\204\357\271D\267E_\320f\350\245\241\374\221\321\223W\311o\002\354\266l\236E\232\347\311\321\321\037K\272\366\227\206\212\260\327)\364\363\231%\026\207<\036\263\344\374\020\356\264&\242\376 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 77 40 00 80 06 df 9a 0a 00 00 05 0a 00 ...w@........... 0020 00 06 04 2a 73 c3 5e 9e 57 f7 04 ad b2 35 50 10 ...*s.^.W....5P. 0030 fc 00 d3 37 00 00 ad 4c d0 8e d7 41 de 57 a3 5e ...7...L...A.W.^ 0040 84 ef b9 44 b7 45 5f d0 66 e8 a5 a1 fc 91 d1 93 ...D.E_.f....... 0050 57 c9 6f 02 ec b6 6c 9e 45 9a e7 c9 d1 d1 1f 4b W.o...l.E......K 0060 ba f6 97 86 8a b0 d7 29 f4 f3 99 25 16 87 3c 1e .......)...%..<. 0070 b3 e4 fc 10 ee b4 26 a2 fe 19 8c 23 65 57 c7 fd ......&....#eW.. 0080 3f 62 ca e5 39 c4 ad 88 83 90 41 50 be fb 6a b7 ?b..9.....AP..j. 0090 0a 4d a9 d7 58 a7 b5 5b 06 ca f2 fc ed 56 16 ca .M..X..[.....V.. 00a0 b3 91 0f 20 ed 47 90 7e 49 af 2f 5d b7 e3 27 af ... .G.~I./]..'. 00b0 bf 7f e1 c4 a1 bd 9b 2a 66 fb 85 81 fe 19 ff c7 .......*f....... 00c0 de f7 80 47 55 9c 7b cf d9 dd 24 9b 10 e2 52 d3 ...GU.{...$...R. 00d0 2b d5 54 0f 10 34 68 c0 05 83 02 45 59 4c 88 80 +.T..4h....EYL.. 00e0 18 16 04 45 8b 92 90 04 12 dd 64 63 fe 08 dc da ...E......dc.... 00f0 36 21 01 22 37 c1 88 fc d3 0f ca da f2 f4 b3 df 6!."7........... 0100 f5 de 62 4b 6f bd ad 6d a3 b6 b7 d6 cb 6d 6d b5 ..bKo..m.....mm. 0110 d6 f6 fa d9 b3 27 59 45 88 d6 b6 5c ff 7c 9f de .....'YE...\.|.. 0120 7c bf df cc 9c ec c9 b2 51 7a fd fa 3d 5f 9f a7 |.......Qz..=_.. 0130 fb 30 9c 33 67 66 de f3 ce ef 7d e7 9d 99 33 93 .0.3gf....}...3. 0140 79 3b 12 3e d8 3f 5f b0 23 e1 47 dc 8f 78 2e e2 y;.>.?_.#.G..x.. 0150 6c 53 b9 78 26 31 5e 3e fd 75 7e 1b 0b 04 e5 18 lS.x&1^>.u~..... 0160 da 32 d0 07 7a 03 4f 0e f4 f0 7b 43 a0 c3 e2 19 .2..z.O...{C.... 0170 75 f9 c1 dd b3 91 36 4b 84 77 73 8c 98 08 a1 bd u.....6K.ws..... 0180 f9 ac dd fc 9b d4 d9 98 cb c5 fd 95 bb 13 b9 a1 ................ 0190 dd 89 32 d8 ed 0c af b8 d4 17 bc d8 f2 f5 ef 1f ..2............. 01a0 cc 0b 7a 2d 5f 70 8a 45 3f c6 19 08 f3 51 f7 2f ..z-_p.E?....Q./ 01b0 af 2e b5 57 df b2 c8 6e bc 6d 91 ed 0f 2f b2 13 ...W...n.m.../.. 01c0 6b d1 8f 87 b7 59 99 c1 19 96 4f ec 1f cc 40 99 k....Y....O...@. 01d0 4c 94 11 c8 ef 63 40 1f f8 7a 59 a7 1d 5f 52 66 L....c@..zY.._Rf 01e0 ef ac 28 b3 73 42 65 76 cd 52 d8 84 50 97 95 17 ..(.sBev.R..P... 01f0 9c 6a 05 d0 ce 7d 7c 8f 7c 9f 7a 57 26 03 b0 ce .j...}|.|.zW&... 0200 ae ee b4 3b ea b7 db 4f 37 6c b7 2f c0 fc fb d5 ...;...O7l./.... 0210 8d b0 9d 95 db c1 4b a1 c5 79 5a 26 cb c9 77 aa ......K..yZ&..w. 0220 f7 e5 31 a0 dd bd 97 28 b5 a7 9c ac b0 27 bc 59 ..1....(.....'.Y 0230 61 7b ac 0a bb 31 11 8b 67 5a bb 2c d6 6b 22 de a{...1..gZ.,.k". 0240 97 a7 df e7 ae db a5 a8 d7 82 5b 17 d9 2b 52 ea ..........[..+R. 0250 04 7b 9c c8 d0 ef 71 d7 eb 3a d4 69 c7 e2 2e fb .{....q..:.i.... 0260 5f 96 75 d9 97 a2 5f 76 d7 c9 1c a3 4e 97 a2 3e _.u..._v....N..> 0270 4f a2 3e 55 8d db 6d 6f 4a 7d 0a c7 a8 cf 07 83 O.>U..moJ}...... 0280 9d 76 f9 89 5d f6 de a1 5d b6 61 ed 1a 55 97 a2 .v..]...].a..U.. 0290 31 ea 52 bf aa d3 f6 ac de 66 5f fc d9 6d f6 4b 1.R......f_..m.K 02a0 b0 4d ee fa 14 8f 51 9f 6d 15 a5 f6 6d a5 65 f6 .M....Q.m...m.e. 02b0 77 17 8f 96 4f 70 8c ba 4c bb b3 d4 5e 5e 59 3e w...Op..L...^^Y> 02c0 aa 0e 73 fa 75 1d fa 55 1d 72 75 1d 76 a2 0e 5f ..s.u..U.ru.v.._ 02d0 39 51 61 3f fc c6 99 f2 f0 1d 4d ea d9 38 cd ff 9Qa?......M..8.. 02e0 9d e0 3f fb a6 6d f6 84 b5 db ec c9 29 fc fb fa ..?..m......)... 02f0 92 3a 96 ad 79 7f f0 ba 52 7b e0 fa 32 fb bf 2d .:..y...R{..2..- 0300 2f b3 8d 14 fd f2 c5 88 8d d7 22 ef 39 9a f7 af /.........".9... 0310 d6 74 da 5b ea b6 db a5 91 ed f6 ae 14 39 f8 da .t.[.........9.. 0320 89 8b d7 22 ff 7e cd ff d6 37 3b ed 95 03 bb ec ...".~...7;..... 0330 86 d7 92 f8 93 17 cc 73 25 36 fc 76 20 b1 14 e4 .......s%6.v ... 0340 bf dd 7a 1b fc 5f b8 66 9b bd f7 36 cd ff 6d 8a ..z.._.f...6..m. 0350 7f f2 53 24 f3 2a 7e 1c ec bd 0b 3b 6d 63 51 97 ..S$.*~....;mcQ. 0360 fd 4d e8 52 08 ba 34 78 bd e2 9f fc e4 69 5e 1c .M.R..4x.....i^. 0370 dc 1f ac 05 ef d0 a1 7a b4 89 09 e0 7d 43 bd e2 .......z....}C.. 0380 9d 58 06 40 3b 43 63 e9 e8 cf 2d 68 0b 0f a0 2d .X.@;Cc...-h...- 0390 6c 43 5b c8 24 f6 af 26 f9 e7 3c d9 e7 6a af c4 lC[.$..&..<..j.. 03a0 fe 45 f0 7e 39 78 5f 08 de 3f 9d c2 fb 9c 34 bc .E.~9x_..?....4. 03b0 df 7f 5d a7 bd e2 86 2e fb dc 31 f8 f6 6b be af ..].......1..k.. 03c0 84 ee 3f 0c cc 5f 05 e6 1d 29 7c 9b 69 f8 9e 37 ..?.._...)|.i..7 03d0 d0 69 8f 7b ad c2 2e 05 df fe 14 be 4b d2 f0 bd .i.{........K... 03e0 63 35 da e3 2d db ec 57 6e df 66 67 a6 f0 9d e9 c5..-..Wn.fg.... 03f0 92 3f 79 fe e3 a2 52 fb be a5 65 f6 56 6d 8f dc .?y...R...e.Vm.. 0400 7c 73 4e ee f0 2e 34 ef df d8 50 6a 7f fd 8e 72 |sN...4...Pj...r 0410 fb 4b d1 72 db 80 ce bb 79 0f a6 e1 7d 11 f4 fd .K.r....y...}... 0420 56 b4 d9 1b df d8 65 4f 67 9b 75 f1 ee 73 e9 2e V.....eOg.u..s.. 0430 f9 fe 1a f0 1e 00 de af 43 d7 33 52 f8 9e 98 06 ........C.3R.... 0440 ef 99 e5 a5 f6 79 d0 75 7f 0a df c5 69 f8 3e 1f .....y.u....i.>. 0450 98 67 6f 28 b7 3f 88 94 db 97 a4 f0 9d e1 6a 73 .go(.?........js 0460 e4 b9 17 3c 7f ed f5 5d f6 2c f0 9c 93 c2 b3 d2 ...<...].,...... 0470 93 24 d6 e7 dd 52 6a df 79 fb 22 3b 0f b6 b2 f6 .$...Rj.y.";.... 0480 f6 24 bf 41 a7 1d 68 5e 77 c0 46 de 05 1b f9 36 .$.A..h^w.F....6 0490 f4 ba 83 fa b1 d4 ad 1f 49 9d 6e 40 7b 3c 04 dd ........I.n@{<.. 04a0 a8 82 6e 4c a6 6e d4 b9 f9 54 72 23 8f db 5f 2b ..nL.n...Tr#.._+ 04b0 b5 1f 3b 55 61 7f f0 bb 0a fb cd c1 24 7f f9 29 ..;Ua.......$..) 04c0 fc 4d bb b1 d3 fe 3e 30 3d 09 4c cb 80 a9 9b 47 .M....>0=.L....G 04d0 33 85 c7 73 4b 3b ed 49 b0 79 4f de 50 66 9f 47 3..sK;.I.yO.Pf.G 04e0 4c 97 a6 62 9a c4 73 6a 6d a9 7d 3d f4 60 69 63 L..b..sjm.}=.`ic 04f0 f9 28 1e e7 48 1d 48 ca ff 07 c0 d2 48 40 77 87 .(..H.H.....H@w. 0500 2a ec 3e 6b 34 af 3e 97 ec a7 41 f6 9f ba 79 91 *.>k4.>...A...y. 0510 dd b1 76 91 3d 2f 05 cb 40 0a 9f ab a1 b3 9f 43 ..v.=/..@......C 0520 1f 9a 09 d9 67 a6 f0 59 90 c2 e7 6c c8 fd 77 c0 ....g..Y...l..w. 0530 f3 29 d8 88 8c 14 3c 8b 52 78 fd 44 02 7d ec c9 .)....<.Rx.D.}.. 0540 5d f6 78 f4 2f 19 90 bb 9b d7 92 14 5c 7f 0d 7e ].x./.......\..~ 0550 67 df bc cd 1e 7f eb 36 7b 6e 0a ae 99 5a 97 c8 g......6{n...Z.. 0560 eb 6b 90 fb fd e0 f5 e2 65 65 f6 05 29 bc e6 b9 .k......ee..)... 0570 6c c2 ae f5 e8 73 ea ca ed ce c8 68 3c 27 a6 f0 l....s.....h<'.. 0580 38 13 b6 e0 32 d8 de 9b c0 63 ad 8b 47 5f d0 8a 8...2....c..G_.. 0590 07 64 dd 3b e3 6e 5b 70 35 e4 3f 0d f2 bf 17 36 .d.;.n[p5.?....6 05a0 cc 47 3e 6f 73 fa 0f 2b 5e 2c 69 77 c6 dd 6d 6a .G>os..+^,iw..mj 05b0 02 74 e0 97 d0 81 7a f6 1d d7 3b 7d 87 15 47 5a .t....z...;}..GZ 05c0 dc d1 3f f2 fb f7 d0 d3 a9 1b d1 67 00 d7 4b d8 ..?........g..K. 05d0 6f d4 39 fd 86 15 2f 94 f2 ea 8c bb ed c0 02 f0 o.9.../......... 05e0 fd 00 ec 40 0e f0 9d 4b be 13 ...@...K.. No. Time Source Destination Protocol Info 92 211.708423 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 92 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778737000 [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 211.708423000 seconds] Frame Number: 92 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0178 (376) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdf99 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 24253, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 24253 (relative sequence number) [Next sequence number: 25713 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x7768 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [Number of bytes in flight: 10220] FTP Data [truncated] FTP Data: I\276\035\236\235>o\003\260\235\006]\370*t\341j\352\202\213\347\2024<\337\a\214\257X\322e\377\244\242\313\366p\374\341\342{\216\224\233\342\335\321\t\0036lFC9\306\035\345\243\370\316O\303\3676\350\357$\340}\033\360\37 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 78 40 00 80 06 df 99 0a 00 00 05 0a 00 ...x@........... 0020 00 06 04 2a 73 c3 5e 9e 5d ab 04 ad b2 35 50 18 ...*s.^.]....5P. 0030 fc 00 77 68 00 00 49 be 1d 9e 9d 3e 6f 03 b0 9d ..wh..I....>o... 0040 06 5d f8 2a 74 e1 6a ea 82 8b e7 82 34 3c df 07 .].*t.j.....4<.. 0050 8c af 58 d2 65 ff a4 a2 cb f6 70 fc e1 e2 7b 8e ..X.e.....p...{. 0060 94 9b e2 dd d1 09 03 36 6c 46 43 39 c6 1d e5 a3 .......6lFC9.... 0070 f8 ce 4f c3 f7 36 e8 ef 24 e0 7d 1b f0 fe 79 0a ..O..6..$.}...y. 0080 df c1 34 78 67 ad ec b4 6f 5e a3 f4 f8 b1 14 de ..4xg...o^...... 0090 1d be fd 9a ef 4f c3 7e fd 0b 74 f8 13 15 a3 b1 .....O.~..t..... 00a0 2e 4a c3 f3 57 80 77 06 fa ba 1f 45 47 63 ed f0 .J..W.w....EGc.. 00b0 9b ad f9 ad 18 54 3a 7c fe 9b 6a 8c e4 e6 d7 4c .....T:|..j....L 00c0 c3 ef ce 9b 4a ed 59 18 c3 ae 5b b7 c8 f6 8c c1 ....J.Y...[..... 00d0 6f ae e6 f7 fb c0 f9 47 d0 8d ab 60 1f c6 a5 e8 o......G...`.... 00e0 c7 c4 34 3c 5f 06 9e 73 36 96 db df 02 d6 19 29 ..4<_..s6......) 00f0 58 97 a4 60 9d 1b e4 f8 ad d3 5a 81 3e 7a 2e c6 X..`......Z.>z.. 0100 47 8f 61 7c 74 39 ed 85 e6 7f be e8 b5 b3 45 df G.a|t9........E. 0110 09 0f eb 62 1e 4a 78 31 56 17 e0 d3 00 3d c8 dc ...b.Jx1V....=.. 0120 ca ff 60 78 de 1c cc 2d 29 93 56 8c bd 4a fa 0f ..`x...-).V..J.. 0130 61 de 71 28 d1 04 ba fc ee 1e c1 33 7e 23 af c3 a.q(.......3~#.. 0140 38 85 38 d4 60 7c 5f 80 f4 4a a4 f3 fb ef 5a a4 8.8.`|_..J....Z. 0150 f3 fb c8 1a a4 b3 1d 75 b5 f7 26 da 63 bd 89 7b .......u..&.c..{ 0160 fa 7a 13 9b 8f f6 26 56 21 7f 18 79 97 21 df 62 .z....&V!..y.!.b 0170 e4 29 43 d9 dc d0 d6 84 19 da 7a c2 5f b9 35 d1 .)C.......z._.5. 0180 c3 35 da fb be 77 42 ae d1 63 1e 66 60 1e c2 f9 .5...wB..c.f`... 0190 d9 44 cc ad 02 72 de 02 0c 31 1f 09 60 be 93 1f .D...r...1..`... 01a0 ec 93 73 90 cd 95 35 76 7e b0 7d f6 55 98 fb cd ..s...5v~.}.U... 01b0 a9 ac d9 ed 13 ed 16 d7 8c 33 31 6e 2f 10 ed f6 .........31n/... 01c0 ce 77 78 7e f1 de 44 66 00 f6 22 d4 61 75 ce e4 .wx~..Df..".au.. 01d0 b7 ed ae 44 81 d8 66 fb 03 1d 36 bf a3 07 82 bc ...D..f...6..... 01e0 7f e0 c4 57 ae 89 c5 7b 66 76 c6 4d a4 3f f1 be ...W...{fv.M.?.. 01f0 5a df cc e2 7a 33 f9 c2 5c ef 1f de 1f 3e f9 b9 Z...z3..\....>.. 0200 53 6a 0d db 03 de b8 7e 6d 70 fd 39 b4 5b 7e f3 Sj.....~mp.9.[~. 0210 e7 7b 3f 89 39 e2 02 b1 7a e0 1c 21 1e f2 8a bf .{?.9...z..!.... 0220 19 28 c6 dc 33 84 f8 38 c4 0b 62 3b 6c ce 43 42 .(..3..8..b;l.CB 0230 fa 9b 5d 35 78 0b 41 5f 42 98 cf 65 81 0f 9e a1 ..]5x.A_B..e.... 0240 c6 bc 21 d8 82 d3 f2 3b e5 6a ae c7 9e ef ac 5d ..!....;.j.....] 0250 b7 b7 d7 d8 86 58 13 37 da 63 93 7c 62 ab 9c d3 .....X.7.c.|b... 0260 b0 8e 7e 94 0d bf c3 73 93 f7 27 fc 81 4e 2b 24 ..~....s..'..N+$ 0270 56 0c 4c 0c ec 48 4c 12 62 67 46 b8 ce f2 43 be V.L..HL.bgF...C. 0280 3c 17 79 62 68 7f c2 27 76 58 2c 43 9d 63 79 d6 <.ybh..'vX,C.cy. 0290 7f 21 ca 2e 00 ff d9 c8 3f 31 b4 23 61 23 ef 82 .!......?1.#a#.. 02a0 d0 8f 06 32 c1 23 e7 a8 e4 8d 67 55 52 ef 16 84 ...2.#....gUR... 02b0 33 6c ae 59 17 84 77 60 6c 59 66 13 23 87 ff a8 3l.Y..w`lYf.#... 02c0 c6 6c 6d 60 87 cd 75 84 cb c8 13 e8 fd 94 f9 51 .lm`..u........Q 02d0 77 d6 99 f9 16 60 3e 59 c3 f3 23 4d f2 db 65 31 w....`>Y..#M..e1 02e0 be c0 f4 d8 59 98 5f 4e 34 77 24 98 af 00 b2 b9 ....Y._N4w$..... 02f0 00 e5 59 d6 ad 0f a5 ff f3 06 bb 18 38 2f 6c e8 ..Y.........8/l. 0300 b5 51 2f 9b 3c 5e a9 ce c9 1c 28 82 7e 17 89 90 .Q/.<^....(.~... 0310 4d 1d 30 2e 05 56 e0 2b 03 f3 ed 05 ef 30 bd cb M.0..V.+.....0.. 0320 32 72 56 f1 2c b6 1c 7e 03 38 4f ae 5b ed 95 eb 2rV.,..~.8O.[... 0330 41 6f f1 db 14 ea cf 73 79 32 b5 cc 6f d3 67 e9 Ao.....sy2..o.g. 0340 0f 01 7b e3 37 c0 1f 73 f8 11 fa 48 a7 7e 71 bf ..{.7..s...H.~q. 0350 c5 1f e4 59 60 ea b9 71 7e 6c 80 cf a7 83 9f df ...Y`..q~l...... 0360 c8 6f 43 7b e5 f7 09 7e 87 1b 1a 1e 3e 3f c1 73 .oC{...~....>?.s 0370 32 16 a9 f9 35 64 18 f7 c4 62 f1 23 a8 cb 78 7e 2...5d...b.#..x~ 0380 d3 7a 5f ed bd f0 f3 6c 4a d0 a8 05 ed f1 ea db .z_....lJ....... 0390 7e 7c 3c ea 3e 17 f1 23 e0 25 06 3d 88 95 2b 3c ~|<.>..#.%.=..+< 03a0 a8 6f 27 df 06 9f a0 53 c8 6f 0f 7d 0f 25 9e cf .o'....S.o.}.%.. 03b0 11 a7 e6 c8 6f 26 ab 07 bc e1 98 91 c1 75 1d bc ....o&.......u.. 03c0 ef 1c f1 c4 89 2c 8b d7 7f 3c c1 7b 5e f9 3e 7e .....,...<.{^.>~ 03d0 43 14 c1 5d 09 d1 b7 33 41 3d 8b 6d ff de 89 d3 C..]...3A=.m.... 03e0 cd fc 7b 96 c3 f2 9b a1 57 70 9d b8 4f 7e 1b 38 ..{.....Wp..O~.8 03f0 e3 b9 fe d6 c0 e7 dc db 35 1c 30 ec 87 67 a9 f5 ........5.0..g.. 0400 4f 6f 3c 16 0f 06 0f 67 08 01 5b d3 df 6e 7b fb Oo<....g..[..n{. 0410 77 09 7e 97 11 e6 c1 c4 45 c8 67 04 85 bd d2 e0 w.~.....E.g..... 0420 fa 8e b0 05 ec d7 b9 93 26 5b c2 ec 49 f8 de 3a ........&[..I..: 0430 34 f8 2e e8 55 3a 32 af 54 df fb 32 02 7a 7d 0a 4...U:2.T..2.z}. 0440 75 ee 79 9b 6d fa 70 82 6b c3 99 e2 26 2f 79 21 u.y.m.p.k...&/y! 0450 ef 95 fc ce 32 a4 f6 4f 18 c0 c4 7b 54 d6 7d 60 ....2..O...{T.}` 0460 3e ca 14 71 0d 17 f6 e7 4e 94 ad 0c 70 cd 2d cc >..q....N...p.-. 0470 ef 8e e7 1a 22 e6 f5 04 17 ca 75 5a b3 09 f6 0c ....".....uZ.... 0480 61 a2 5c 6f bd 71 c0 fb fb c3 fb c7 0b 71 32 f6 a.\o.q.......q2. 0490 4d 21 f6 1c 45 c0 35 a8 43 0e 6c 67 91 79 68 f6 M!..E.5.C.lg.yh. 04a0 e4 60 ec 0a 11 7c 6a f6 23 57 1d 4e 40 3f 07 cc .`...|j.#W.N@?.. 04b0 a0 2a 4f 3a a2 3d 06 d9 7f 6e e0 07 5c ef 45 bb .*O:.=...n..\.E. 04c0 7d 52 9e 21 7f 48 da cc d4 7d 0a f4 15 e1 09 76 }R.!.H...}.....v 04d0 5b e3 60 df a0 8c 3b 4d ae 2b 8b fb 4f f8 31 07 [.`...;M.+..O.1. 04e0 fc 55 8e 3a 4b 89 6b c0 f2 bd fd 87 66 af 0d c4 .U.:K.k.....f... 04f0 ae c8 0a 1c bf 8a df 25 b9 b6 e9 0f fd e2 b5 2f .......%......./ 0500 d0 06 81 e7 61 9e 81 73 4c 88 92 6f a5 0f f3 bf ....a..sL..o.... 0510 8d 2b 42 31 42 21 42 01 42 3e 42 ee b7 c7 2e f3 .+B1B!B.B>B..... 0520 a7 86 97 8f 25 c3 0b fa da aa af 8f ff d3 e8 f4 ....%........... 0530 d6 8f 19 5e 4e a1 9f ff 4f 8a 87 8f 4b f7 4f 79 ...^N...O...K.Oy 0540 7f e0 5b c9 7b f7 f5 ff 25 0f ad 1a 6b ea 77 41 ..[.{...%...k.wA 0550 c6 e1 04 fd 73 f0 9e ed 28 80 f8 34 fa 39 09 43 ....s...(..4.9.C 0560 2f 83 bf 4c f0 4c 28 a9 4b 81 43 b3 b3 82 4f 4a /..L.L(.K.C...OJ 0570 3d 92 6b d1 c1 3f 24 4c b3 57 ae 91 bc 0d 9b 65 =.k..?$L.W.....e 0580 a2 5d fc eb 7f f0 ac a1 d8 00 bf 5d 71 3d 7d 31 .].........]q=}1 0590 ec 98 d1 1f 1b e0 b7 af 45 b8 77 74 f2 d1 fc c3 ........E.wt.... 05a0 89 4b d0 1e d8 0e 44 f0 f8 6c ae cb b3 1d cc 47 .K....D..l.....G 05b0 9e 42 f0 e1 0f fe 5c ae d7 5c 4d ba ba 0d e4 a8 .B....\..\M..... 05c0 fd 03 49 7e fa c9 8f d2 6b ae 9d 1b c1 df 27 48 ..I~....k.....'H 05d0 c7 e1 c7 69 77 68 3b 57 64 05 9f ba 8a 36 6c be ...iwh;Wd....6l. 05e0 1e 37 e8 35 e8 01 13 34 d3 b5 .7.5...4.. No. Time Source Destination Protocol Info 93 211.708429 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=16953 Win=40880 Len=0 Frame 93 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778743000 [Time delta from previous captured frame: 0.000006000 seconds] [Time delta from previous displayed frame: 0.000006000 seconds] [Time since reference or first frame: 211.708429000 seconds] Frame Number: 93 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17aa (6058) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f14 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 16953, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 16953 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 40880 (scaled) Checksum: 0xa548 [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 aa 40 00 40 06 0f 14 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 41 27 50 10 ..s..*...5^.A'P. 0030 27 ec a5 48 00 00 00 00 00 00 00 00 '..H........ No. Time Source Destination Protocol Info 94 211.708442 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=18413 Win=43800 Len=0 Frame 94 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778756000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 211.708442000 seconds] Frame Number: 94 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17ab (6059) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f13 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 18413, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 18413 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 43800 (scaled) Checksum: 0x9cba [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 ab 40 00 40 06 0f 13 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 46 db 50 10 ..s..*...5^.F.P. 0030 2a c6 9c ba 00 00 00 00 00 00 00 00 *........... No. Time Source Destination Protocol Info 95 211.708448 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 95 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778762000 [Time delta from previous captured frame: 0.000006000 seconds] [Time delta from previous displayed frame: 0.000006000 seconds] [Time since reference or first frame: 211.708448000 seconds] Frame Number: 95 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x0179 (377) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdf98 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 25713, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 25713 (relative sequence number) [Next sequence number: 27173 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x93c0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 93] [The RTT to ACK the segment was: 0.000019000 seconds] [Number of bytes in flight: 8760] FTP Data [truncated] FTP Data: \023>\v\242\\220}\205\311\367<5\352\271\373\335\0235\177l\227G0f\250\301\270fx\201\327\226\3438\363\001\3300\237\275r\022\355\327'\344Yk\016\226kM\274\317Tx\032\301n\333\341\303\v{\237\025R\264\337\343\032\212X3\200\3 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 79 40 00 80 06 df 98 0a 00 00 05 0a 00 ...y@........... 0020 00 06 04 2a 73 c3 5e 9e 63 5f 04 ad b2 35 50 10 ...*s.^.c_...5P. 0030 fc 00 93 c0 00 00 13 3e 0b a2 5c 90 7d 85 c9 f7 .......>..\.}... 0040 3c 35 ea b9 fb dd 13 35 7f 6c 97 47 30 66 a8 c1 <5.....5.l.G0f.. 0050 b8 66 78 81 d7 96 e3 38 f3 01 d8 30 9f bd 72 12 .fx....8...0..r. 0060 ed d7 27 e4 59 6b 0e 96 6b 4d bc cf 54 78 1a c1 ..'.Yk..kM..Tx.. 0070 6e db e1 c3 0b 7b 9f 15 52 b4 df e3 1a 8a 58 33 n....{..R.....X3 0080 80 fe e0 fc 4a bd fe 8f 3e f7 7c 0f 30 e5 3a 05 ....J...>.|.0.:. 0090 df c5 f1 6b 8e 3c b7 e9 50 62 5c 50 ad 3f 3d f3 ...k.<..Pb\P.?=. 00a0 9f c3 a7 9e e6 fe 1a c4 2b b9 5e 26 d6 0e fc 9e ........+.^&.... 00b0 7b 40 f4 1e 04 6f 28 36 21 8e f8 bf d3 4f 87 7e {@...o(6!....O.~ 00c0 d6 0e de 96 ff 07 d7 d3 d5 1e 8b c7 b8 c7 e2 41 ...............A 00d0 8f cd 3d 19 01 b3 57 ef 97 b8 85 b6 e8 5c d8 22 ..=...W......\." 00e0 0f f1 fb 01 68 04 f0 dc 6b 76 5b a3 e4 02 fe 59 ....h...kv[....Y 00f0 0f 69 73 28 9b d0 f3 af a5 2b 7f ee 87 e0 5f 78 .is(.....+...._x 0100 45 6c 66 10 e3 36 37 d6 7c 0e 8c 67 66 05 bd b3 Elf..67.|..gf... 0110 88 21 d3 a9 93 59 41 9f cd f4 60 a8 53 62 e9 81 .!...YA...`.Sb.. 0120 6d 44 dd e6 7d 0d f5 53 36 7c c5 c0 63 e0 d5 8b mD..}..S6|..c... 0130 eb 6e e2 67 76 db e3 c4 ca f8 7d c3 c3 97 72 9c .n.gv.....}...r. 0140 ea 0f f6 58 46 e0 f9 c4 02 a4 ef 94 f8 3e 8f 31 ...XF........>.1 0150 d1 32 fb d3 6a 8f d4 4e ea f4 b9 c0 e4 c7 25 4f .2..j..N......%O 0160 0f 0c cf 79 7a e0 1f e7 3f 3d 70 4d f0 e9 01 d6 ...yz...?=pM.... 0170 e1 0b a0 4b be 3c a8 af d4 95 40 52 57 72 43 18 ...K.<....@RWrC. 0180 e3 f4 43 5f 82 78 de ff f4 c8 73 77 be 46 f2 18 ..C_.x....sw.F.. 0190 3c 24 cf 1e ec 06 2d 9e fb 57 ef e8 2f ea 3e 55 <$....-..W../.>U 01a0 d6 31 59 7f ea 8d 6c 8b 5a 77 f8 ec 92 14 9d bc .1Y...l.Zw...... 01b0 05 34 9b c1 f3 17 71 dd c0 f3 74 71 bd 1b 57 f0 .4....q...tq..W. 01c0 7a b2 11 57 b9 87 0b d7 4d b8 ae c7 75 33 ae 55 z..W....M...u3.U 01d0 b8 72 1f 56 be e4 e5 73 03 41 b4 5f a3 8f be 66 .r.V...s.A._...f 01e0 d4 9a 2a c6 88 39 52 96 81 6e 2b 17 ed 2c 00 7d ..*..9R..n+..,.} 01f0 e3 5e 26 4f 65 b7 e5 0d 6c b7 c6 99 1b 2c 94 b1 .^&Oe...l....,.. 0200 8b 31 c6 d9 77 5a ef 09 e2 99 58 72 9f 47 d3 c0 .1..wZ....Xr.G.. 0210 27 e5 7e c1 26 9e 8d 98 c3 b9 f0 4f 4e 3b eb 78 '.~.&......ON;.x 0220 2b b9 07 c4 16 7d 31 ef 8f f1 2c a0 f7 2e 64 70 +....}1...,...dp 0230 0d 01 ef 19 a4 8e 69 dd c7 58 eb a1 f5 b4 11 28 ......i..X.....( 0240 7f f4 b4 da 43 c5 f1 aa 93 0e 1a 03 ab 90 87 f5 ....C........... 0250 1f 27 6e 8a 33 fe 3b c8 38 17 32 0e 48 1b f1 32 .'n.3.;.8.2.H..2 0260 d7 19 e3 27 1d 9a e6 56 db e9 4b a9 e3 83 3a af ...'...V..K...:. 0270 07 f9 28 5b ae b5 70 9c 30 07 61 3e c7 0b d7 4d ..([..p.0.a>...M 0280 7f 7d 15 d7 75 2a d5 18 93 32 f7 62 fc c0 73 e4 .}..u*...2.b..s. 0290 8b 42 87 e4 d8 1e 32 37 ee 23 6f fd 7b 12 5c df .B....27.#o.{.\. 02a0 e5 18 91 63 45 8e bd 73 b8 27 34 fc a0 5c 63 e4 ...cE..s.'4..\c. 02b0 fa c4 2b dc bf 12 be 37 e1 a7 5d da a1 c6 53 ce ..+....7..]...S. 02c0 ba 0a b0 8f 7b 50 bf 7c d0 e6 7c ed 6f 4f ab fd ....{P.|..|.oO.. 02d0 4f dc 03 e7 87 7d 5d 22 c4 77 8a aa b8 d6 b3 2f O....}]".w...../ 02e0 91 05 fe cd 87 0f 6f bb 04 73 07 61 3e 94 d8 d1 ......o..s.a>... 02f0 c1 3d 21 dd d6 8e aa dd af f9 c2 0f 24 58 27 67 .=!.........$X'g 0300 0f 66 36 f8 a0 9d 20 0f cf ca b1 eb 4d 3c 0b 77 .f6... .....M<.w 0310 e7 20 c7 6b a1 87 12 46 25 c6 60 62 75 7c 47 55 . .k...F%.`bu|GU 0320 d7 6b 1e 79 b6 74 2c fe cf d9 18 57 20 8d f5 58 .k.y.t,....W ..X 0330 e4 17 a7 7c 21 e8 00 68 fa 44 57 62 14 cd b0 a2 ...|!..h.DWb.... 0340 7b 0c 74 2b c0 af 9f 6d 1e 73 30 d2 c8 d7 b6 d7 {.t+...m.s0..... 0350 08 ed b0 2f f4 b4 0e 9c 8f 77 46 62 87 31 67 e4 .../.....wFb.1g. 0360 1a dd 43 f2 5c 39 ee f1 cd 95 7a 12 8b 77 4d 88 ..C.\9....z..wM. 0370 c5 17 e3 5d dc 7f bc 75 02 e6 6a e6 7a 0b 45 12 ...]...u..j.z.E. 0380 5b a5 2d 95 7b 8f 06 86 ff c8 f1 fa f6 c4 93 c3 [.-.{........... 0390 72 0d 7d e0 42 99 9f 67 a9 ed 3d 21 cc 9d a0 b9 r.}.B..g..=!.... 03a0 f5 c4 29 da 41 f0 f2 87 2c 71 ea e8 5d 86 78 02 ..).A...,q..].x. 03b0 e1 34 c2 31 fe 2d 95 7c b7 35 f0 30 f2 10 7b a1 .4.1.-.|.5.0..{. 03c0 c7 8e ef 22 1e e6 b8 32 a8 f6 1e 67 62 6c cc b9 ..."...2...gbl.. 03d0 04 c7 6c e3 31 36 f6 e1 ea 47 a0 5c d8 3e f2 83 ..l.16...G.\.>.. 03e0 aa bf 2b e0 de 3f e8 ec 39 e2 fb 18 37 3f 7a 82 ..+..?..9...7?z. 03f0 57 11 fa 52 82 f7 c4 4e 84 7a 12 c5 c0 21 8c f1 W..R...N.z...!.. 0400 a7 15 d2 73 43 d4 b9 48 8f ed e3 c3 c9 b9 e4 78 ...sC..H.......x 0410 e2 09 de c6 e3 fd 5b e8 03 0c e5 2c 96 5b a8 ca ......[....,.[.. 0420 d1 be b2 6c b1 2e fb 0b 57 59 ea 1a cb b3 ec 1d ...l....WY...... 0430 f4 f1 c5 b2 1d c0 5e ef d9 62 1d 5f e1 7c a9 6c ......^..b._.|.l 0440 fa eb 6b f9 77 16 1c fb c7 d4 1c 75 18 f3 36 f2 ..k.w......u..6. 0450 c3 b1 ff f8 10 db ef 11 39 0f 10 4d 07 13 a4 c7 ........9..M.... 0460 38 c7 d8 ec 17 f8 5e d1 d4 95 c8 fe 40 ed 29 71 8.....^.....@.)q 0470 78 26 fd 65 9a e7 b7 ba 94 5e cf 83 bc 38 5f 2c x&.e.....^...8_, 0480 01 e6 25 7a 8d 32 e8 5a a3 2c c2 33 ae 4f 16 06 ..%z.2.Z.,.3.O.. 0490 e9 13 48 ad 53 72 fe ce 75 cb fc 31 d6 2a df 8a ..H.Sr..u..1.*.. 04a0 ff e2 69 ae bd 0e cf cf b5 8b 0b 81 49 09 f4 67 ..i.........I..g 04b0 7e 67 7c b8 d8 83 76 dd 19 2f c6 bd 08 76 24 0c ~g|...v../...v$. 04c0 ee 89 0b 30 9f 61 4f d2 f9 0c 57 be 49 f3 f9 6d ...0.aO...W.I..m 04d0 a4 07 73 cc 0f cf 83 7e 22 91 fb 11 79 72 91 27 ..s....~"...yr.' 04e0 f0 51 79 04 bf 25 f4 8c ac a3 e6 a7 ac a1 96 fe .Qy..%.......... 04f0 56 ad a1 ca b3 d5 83 bb 67 8b a6 dd 89 7e b4 f9 V.......g....~.. 0500 7e ee 15 45 7f e0 ab dc 9d 78 02 7a f6 04 c7 4a ~..E.....x.z...J 0510 b1 dd 89 dc f6 ad b6 f0 1e c0 b8 66 eb 6c cc 57 ...........f.l.W 0520 e2 3f e4 7e 4b 8c a7 f2 2b a1 9f 31 e8 69 3b f4 .?.~K...+..1.i;. 0530 b5 af 37 f1 eb 0c 71 e9 b5 3f eb 85 6c 63 03 fd ..7...q..?..lc.. 0540 26 bf 21 ed 1e ec 47 de e1 62 af ed 01 af 53 f2 &.!...G..b....S. 0550 c1 6f f1 d6 f8 70 01 e6 5d e6 d6 f8 14 dc 73 9f .o...p..].....s. 0560 66 c8 cc 4d f8 fa 7b 6c 8c 21 6e f5 9b 97 5a 99 f..M..{l.!n...Z. 0570 a6 c7 7a e6 28 de 6d 4e b6 5e bb 9a b6 a6 53 7e ..z.(.mN.^....S~ 0580 4f e4 77 b1 5b f7 74 da 1b aa 62 f1 ad 07 ee b5 O.w.[.t...b..... 0590 73 cc 8b ad 2d 07 ef b5 1f ec bb d7 ce 42 99 1c s...-........B.. 05a0 e4 3f 0e bb f1 ba 2e c3 31 12 bf cf dd da d5 69 .?......1......i 05b0 6f bc 0b 65 ba bb ed 4c f3 12 6b 4b 4f b7 fd 60 o..e...L..kKO..` 05c0 7b b7 9d 8d 32 cf a1 8e 99 28 77 42 97 21 4e fc {...2....(wB.!N. 05d0 2e 7a eb 91 4e bb fe 7e 94 79 64 27 68 4f b3 b6 .z..N..~.yd'hO.. 05e0 3c ba d3 7e 30 b6 d3 f6 a3 cc <..~0..... No. Time Source Destination Protocol Info 96 211.708452 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=19873 Win=46720 Len=0 Frame 96 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778766000 [Time delta from previous captured frame: 0.000004000 seconds] [Time delta from previous displayed frame: 0.000004000 seconds] [Time since reference or first frame: 211.708452000 seconds] Frame Number: 96 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17ac (6060) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f12 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 19873, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 19873 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 46720 (scaled) Checksum: 0x942c [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 ac 40 00 40 06 0f 12 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 4c 8f 50 10 ..s..*...5^.L.P. 0030 2d a0 94 2c 00 00 00 00 00 00 00 00 -..,........ No. Time Source Destination Protocol Info 97 211.708473 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 97 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778787000 [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 211.708473000 seconds] Frame Number: 97 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x017a (378) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdf97 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 27173, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 27173 (relative sequence number) [Next sequence number: 28633 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x5547 [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 96] [The RTT to ACK the segment was: 0.000021000 seconds] [Number of bytes in flight: 8760] FTP Data [truncated] FTP Data: \v\300)\veN\3522\3167\262[k:\355:\330\306\255u\333A\273\310\332\022\331n?X\271\035|z\254\227\300W6\312\274\352\342-\213eZ;\355;\036F\231\315;l\326}\313=;\354\a\321\307\022\003\326\377e\353P\302\301 \357,0\260\320O\020 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 7a 40 00 80 06 df 97 0a 00 00 05 0a 00 ...z@........... 0020 00 06 04 2a 73 c3 5e 9e 69 13 04 ad b2 35 50 10 ...*s.^.i....5P. 0030 fc 00 55 47 00 00 0b c0 29 0b 65 4e ea 32 ce 37 ..UG....).eN.2.7 0040 b2 5b 6b 3a ed 3a d8 c6 ad 75 db 41 bb c8 da 12 .[k:.:...u.A.... 0050 d9 6e 3f 58 b9 1d 7c 7a ac 97 c0 57 36 ca bc ea .n?X..|z...W6... 0060 e2 2d 8b 65 5a 3b ed 3b 1e 46 99 cd 3b 6c d6 7d .-.eZ;.;.F..;l.} 0070 cb 3d 3b ec 07 d1 c7 12 03 d6 ff 65 eb 50 c2 c1 .=;........e.P.. 0080 20 ef 2c 30 b0 d0 4f 10 07 07 03 df 59 60 30 18 .,0..O.....Y`0. 0090 1e 8d 41 c6 59 60 e0 ae ff 09 f3 90 3c 87 fb a3 ..A.Y`......<... 00a0 30 60 fd 87 50 9f 57 5d f5 39 1b 0c 9c fa bf a5 0`..P.W].9...... 00b0 df 73 36 7a 70 da 4a ea 41 de 59 60 e0 ae ff bb .s6zp.J.A.Y`.... 00c0 fa 3d 67 83 c1 fb 78 cf 49 d7 7b ce 06 03 a7 fe .=g...x.I.{..... 00d0 62 92 7a cf d9 60 e0 8b 9f a9 07 27 f0 6e 07 07 b.z..`.....'.n.. 00e0 23 78 99 e5 60 c1 ef bc c4 83 bc b9 31 c9 3b 3a #x..`.......1.;: 00f0 45 ea c5 a9 1f 24 db d4 71 ce d9 71 a5 5c 1c 7c E....$..q..q.\.| 0100 44 70 b2 e5 60 24 69 01 27 81 f7 3b 58 3d 7e b4 Dp..`$i.'..;X=~. 0110 57 ea 0b e9 9d 48 a1 e7 c6 ec 2d f4 cf 0e 6e e4 W....H....-...n. 0120 3f 37 30 69 04 3f 2f ee 89 e1 31 d0 ca 92 b4 26 ?70i.?/...1....& 0130 49 7d 3a 75 51 b2 1d 12 cb 97 c1 9f 83 e7 69 d2 I}:uQ.........i. 0140 03 a6 8f 83 57 0f 3a 02 e2 4a 7c 89 ad 17 71 07 ....W.:..J|...q. 0150 df bc a3 a6 c4 f8 d4 39 c9 f6 e9 60 4c d9 12 63 .......9...`L..c 0160 62 7d 0c f4 7c fd c5 23 58 7b 70 4f fc 88 b7 f7 b}..|..#X{pO.... 0170 68 b1 d4 bb 53 3f 4b b6 57 b6 45 e2 fe 3e 68 64 h...S?K.W.E..>hd 0180 58 33 ac 28 b0 f7 98 33 ac 8b 0f 2c 91 32 38 6a X3.(...3...,.28j 0190 f5 26 56 1c 5a 62 5f d4 b7 c4 7e 14 76 ef d1 20 .&V.Zb_...~.v.. 01a0 db d5 25 12 7b 23 0d f6 7e 2d c3 28 70 a7 2e 5c ..%.{#..~-.(p..\ 01b0 dc bd 58 e2 9f 17 2a b4 56 f4 2e b6 2f 6a 5f 6c ..X...*.V.../j_l 01c0 7b 70 4f fc 1e d1 98 8b a3 85 0a f3 e5 c9 f6 4d {pO............M 01d0 cc a3 c0 7c 88 f5 01 ce 17 3f b2 54 e2 ef 0d 4f ...|.....?.T...O 01e0 b5 56 fc c3 52 fb a2 d8 52 3b 0f f7 c4 8a 58 e7 .V..R...R;....X. 01f0 1e 9d aa b0 5e 97 6c ef 6c c3 6f 59 f2 3b be 15 ....^.l.l.oY.;.. 0200 05 de 17 d7 95 db 79 d0 83 c7 f1 9c d8 3f 82 b4 ......y......?.. 0210 15 0d e5 f6 45 95 e5 e8 67 a6 58 d4 d1 6c ad 03 ....E...g.X..l.. 0220 af a6 d4 6b 08 65 d8 fe 88 79 14 98 5f bc f9 3a ...k.e...y.._..: 0230 49 eb 18 9e 13 f7 15 9f bf ce be a8 e9 3a 49 87 I............:I. 0240 78 1f 41 dd a4 8e 83 d6 6b 29 b4 88 37 f9 a2 dc x.A.....k)..7... 0250 88 b7 83 b5 27 38 c3 72 b0 36 40 87 38 c7 40 87 ....'8.r.6@.8.@. 0260 58 67 8c 81 35 79 a2 ec 88 b7 83 b5 a4 03 ac 8f Xg..5y.......... 0270 20 8d 78 f3 1b 20 f1 3e f8 11 3a 4e 7e d8 26 88 .x.. .>..:N~.&. 0280 bb 83 37 eb 48 bc 63 a4 05 cc 73 b9 96 03 cc 0f ..7.H.c...s..... 0290 8c e8 f8 14 85 bb 8b 16 f9 a1 cc 52 71 7f 44 e3 ...........Rq.D. 02a0 7e 70 0c dc f7 80 66 3a ec b3 b4 5d 61 1b 71 b0 ~p....f:...]a.q. 02b0 27 e6 92 37 e0 7e 80 bc 01 7b 9f c6 9e b8 f7 69 '..7.~...{.....i 02c0 5a e9 b0 ef 41 1a 71 f7 81 e6 31 94 75 f0 97 f4 Z...A.q...1.u... 02d0 80 ff 1e d2 83 0c 32 b4 0c c6 b2 33 8f 6b 3b 73 ......2....3.k;s 02e0 c4 4a e2 6f 80 86 d4 77 94 a5 0c fa b4 0c 88 7f .J.o...w........ 02f0 f7 87 e0 4f 3d a2 0c 88 b3 83 3f 6d 96 92 c1 14 ...O=.....?m.... 0300 29 83 1e 2d 03 e2 df f5 21 f8 3b b8 1f 04 4d 62 )..-....!.;...Mb 0310 4f cc bb 83 ca 56 8d e0 2e 6d d5 a5 56 3b e8 64 O....V...m..V;.d 0320 4b db 30 49 e1 ee b2 55 c4 fd 11 8d f9 01 d2 d2 K.0I...U........ 0330 b8 77 81 56 1e 6c d3 88 ce 4b 3b e5 d8 18 53 61 .w.V.l...K;...Sa 0340 ee b2 53 c4 9c 78 ef 71 61 dd ae ed 94 a3 ef 79 ..S..x.qa......y 0350 b8 77 b0 a6 9d 7a dd 65 a7 c8 03 6d 55 9f b6 51 .w...z.e...mU..Q 0360 c4 9c 36 8a 98 6f 86 4d 72 f4 7e 33 68 3a 36 86 ..6..o.Mr.~3h:6. 0370 78 67 6a 1b 95 4e d7 ef 81 5d 23 ce 94 5d 8f 99 xgj..N...]#..].. 0380 b4 2f d2 4e 69 fb 42 3b 45 ac 5b 35 d6 b4 53 63 ./.Ni.B;E.[5..Sc 0390 61 1d c3 bb bb ad 24 de d2 4e 69 ac 69 a7 1c 1d a.....$..Ni.i... 03a0 6f 02 2d e2 4c 7b e5 b6 55 c4 fa a0 c6 fa 48 50 o.-.L{..U.....HP 03b0 d9 94 3c 73 8a d5 65 51 2f b6 83 af c9 a8 b7 17 ..yG'K.PN. 04b0 8c 2a 47 64 74 59 5a 19 75 6b 19 b5 8f 21 a3 b5 .*GdtYZ.uk...!.. 04c0 c4 14 72 5a 73 54 ed 05 cc c0 3b 28 2b 85 e9 65 ..rZsT....;(+..e 04d0 69 e5 44 19 75 69 19 51 26 94 93 01 5c 1d 39 51 i.D.ui.Q&...\.9Q 04e0 46 94 cf 2a 69 7f 27 4b 39 91 9e 0f f4 d2 c9 88 F..*i.'K9....... 04f0 f2 69 d7 f2 a9 b3 b8 57 5e c9 88 f2 09 83 06 e5 .i.....W^....... 0500 43 3a 94 95 23 a7 35 5a 4e ac 77 aa 8c 28 13 ca C:..#.5ZN.w..(.. 0510 89 32 a2 4c 96 b1 1f 06 ad 1a ca c8 25 17 da c2 .2.L........%... 0520 55 a0 43 f9 50 36 79 88 d3 06 a6 b6 21 ca 82 f2 U.C.P6y.....!... 0530 69 d5 f2 71 e4 51 29 e7 58 c9 36 43 7b 18 26 3d i..q.Q).X.6C{.&= 0540 c8 85 32 31 10 5f 2c e5 6d a6 95 4d 93 96 0d e5 ..21._,.m..M.... 0550 b2 16 73 2f ca 86 32 59 06 ba b4 85 94 11 65 43 ..s/..2Y......eC 0560 b9 08 c4 29 97 32 ad ef 06 ec e3 58 b2 69 35 93 ...).2.....X.i5. 0570 ed 27 c3 a4 9e 77 c7 17 e3 5d 94 0f 65 e3 eb 57 .'...w...]..e..W 0580 ed 67 be 49 bb af 64 e3 8c f5 43 52 66 c5 16 e9 .g.I..d...CRf... 0590 3a f2 69 02 6f 91 80 6a 47 94 d1 1a cc f9 28 13 :.i.o..jG.....(. 05a0 c3 34 a5 9c ca 48 1b 32 a1 3c 72 45 b2 5d 95 8c .4...H.2. fpo-fns [ACK] Seq=1 Ack=21333 Win=49640 Len=0 Frame 98 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778793000 [Time delta from previous captured frame: 0.000006000 seconds] [Time delta from previous displayed frame: 0.000006000 seconds] [Time since reference or first frame: 211.708479000 seconds] Frame Number: 98 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x17ad (6061) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x0f11 [correct] [Good: True] [Bad : False] Source: 10.0.0.6 (10.0.0.6) Destination: 10.0.0.5 (10.0.0.5) Transmission Control Protocol, Src Port: 29635 (29635), Dst Port: fpo-fns (1066), Seq: 1, Ack: 21333, Len: 0 Source port: 29635 (29635) Destination port: fpo-fns (1066) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 21333 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 49640 (scaled) Checksum: 0x8b9e [validation disabled] [Good Checksum: False] [Bad Checksum: False] 0000 00 1b 24 4f c3 04 00 23 f8 2c 0d 36 08 00 45 08 ..$O...#.,.6..E. 0010 00 28 17 ad 40 00 40 06 0f 11 0a 00 00 06 0a 00 .(..@.@......... 0020 00 05 73 c3 04 2a 04 ad b2 35 5e 9e 52 43 50 10 ..s..*...5^.RCP. 0030 30 7a 8b 9e 00 00 00 00 00 00 00 00 0z.......... No. Time Source Destination Protocol Info 99 211.708499 10.0.0.5 10.0.0.6 FTP-DATA FTP Data: 1460 bytes Frame 99 (1514 bytes on wire, 1514 bytes captured) Arrival Time: May 16, 2010 16:22:24.778813000 [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 211.708499000 seconds] Frame Number: 99 Frame Length: 1514 bytes Capture Length: 1514 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ftp-data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04), Dst: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Destination: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.0.0.5 (10.0.0.5), Dst: 10.0.0.6 (10.0.0.6) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1500 Identification: 0x017b (379) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0xdf96 [correct] [Good: True] [Bad : False] Source: 10.0.0.5 (10.0.0.5) Destination: 10.0.0.6 (10.0.0.6) Transmission Control Protocol, Src Port: fpo-fns (1066), Dst Port: 29635 (29635), Seq: 28633, Ack: 1, Len: 1460 Source port: fpo-fns (1066) Destination port: 29635 (29635) [Stream index: 3] Sequence number: 28633 (relative sequence number) [Next sequence number: 30093 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgement: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 516096 (scaled) Checksum: 0x974a [validation disabled] [Good Checksum: False] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 98] [The RTT to ACK the segment was: 0.000020000 seconds] [Number of bytes in flight: 8760] FTP Data [truncated] FTP Data: \264]\256\003\335JK\356\347\221}\372\262\200\352\357%]\310\216\362"]\307\306\251\366\005\272\220]0\250\332\026i\272e\305\365\207\265\232W\312iq@\365\373\222&\344Gy\221\246c\343\224\035\004M\310\217\177\233@\031\026i^\ 0000 00 23 f8 2c 0d 36 00 1b 24 4f c3 04 08 00 45 00 .#.,.6..$O....E. 0010 05 dc 01 7b 40 00 80 06 df 96 0a 00 00 05 0a 00 ...{@........... 0020 00 06 04 2a 73 c3 5e 9e 6e c7 04 ad b2 35 50 18 ...*s.^.n....5P. 0030 fc 00 97 4a 00 00 b4 5d ae 03 dd 4a 4b ee e7 91 ...J...]...JK... 0040 7d fa b2 80 ea ef 25 5d c8 8e f2 22 5d c7 c6 a9 }.....%]..."]... 0050 f6 05 ba 90 5d 30 a8 da 16 69 ba 65 c5 f5 87 b5 ....]0...i.e.... 0060 9a 57 ca 69 71 40 f5 fb 92 26 e4 47 79 91 a6 63 .W.iq@...&.Gy..c 0070 e3 94 1d 04 4d c8 8f 7f 9b 40 19 16 69 5e d3 b5 ....M....@..i^.. 0080 a7 42 da 7b c8 8a 6b 18 94 17 e5 43 79 f9 40 9f .B.{..k....Cy.@. 0090 f2 a2 ac f2 40 9f f2 72 64 95 01 5a 7c 47 ba fe ....@..rd..Z|G.. 00a0 9f ba b9 c6 54 72 0a 51 f6 9b d4 18 c0 13 34 ad ....Tr.Q......4. 00b0 22 4b c9 26 57 4c b1 28 1f 67 0c 90 37 c6 18 60 "K.&WL.(.g..7..` 00c0 15 e8 3c 8b 71 c0 7a cc e9 4a b4 9d e3 5a 02 fb ..<.q.z..J...Z.. 00d0 d9 27 31 b7 7b 11 f3 3a 2f ee 9d 71 40 ae d3 f7 .'1.{..:/..q@... 00e0 b8 e6 2b 6b f0 ce b0 1e 77 3d 8b fe 7f 3d e6 74 ..+k....w=...=.t 00f0 1c ef 06 2d 65 e3 9e c4 bc 2e 2f 34 c5 7a 11 f3 ...-e...../4.z.. 0100 ba e4 18 e0 cc 3e 87 bc 2c b3 14 f6 cf 62 1c b0 .....>..,....b.. 0110 1e 73 3a 8e ff 8a 75 fb 79 12 73 3a 0f e9 60 5e .s:...u.y.s:..`^ 0120 c7 31 80 99 3a 06 70 d9 6f e2 1e 06 ad c5 ac 1f .1..:.p.o....... 0130 c6 02 eb 31 9f ab eb 50 e3 f0 27 31 9f 7b 11 73 ...1...P..'1.{.s 0140 b9 0c d7 38 37 37 65 8c 4b 3e ca 4c a5 13 c4 fc ...877e.K>.L.... 0150 59 8c 01 58 96 f8 ae d7 f3 3a 8e 01 9f c4 9c ce Y..X.....:...... 0160 c4 b3 17 b9 86 01 ac 9f d1 73 8c 74 e3 5c f2 12 .........s.t.\.. 0170 d2 73 3b 07 73 d6 8f 6b 5e c4 dd c1 db a3 c7 b8 .s;.s..k^....... 0180 c7 f5 3c c3 37 c6 3c 83 7a 54 c2 fa 69 cc 9d 79 ..<.7.<.zT..i..y 0190 06 f1 7e 86 3c 01 6f 43 cf 33 88 f9 73 7a fc 9d ..~.<.oC.3..sz.. 01a0 ce 4e 85 40 87 f2 72 70 77 e6 19 c4 fc 38 69 01 .N.@..rpw....8i. 01b0 73 a1 e7 19 c4 fc 05 4d 2b 9d be bf 84 34 62 4e s......M+....4bN 01c0 de 8a 89 97 c6 5e d2 03 f6 cf 91 1e f0 cf fd 88 .....^.......... 01d0 f9 5d d0 54 73 3b e2 4b fc 89 7b 06 68 b8 b1 7f .].Ts;.K..{.h... 01e0 c1 85 fd cb 1f 82 3d 31 a7 1e 51 7e 0e f6 ce fc ......=1..Q~.... 01f0 82 b8 bf 44 3a c0 de a7 b1 b7 34 f6 e9 e6 18 c4 ...D:.....4..... 0200 be d0 85 fb 33 ba 2f e7 bc dd 03 7b 48 fc 89 3d ....3./....{H..= 0210 c7 9b c4 7e 70 64 8e 31 f5 0c ec 8b f4 1c e3 b8 ...~pd.1........ 0220 0b 7b c3 99 63 84 a7 48 fc ad a0 c2 9f d8 9f d0 .{..c..H........ 0230 3a ef 75 e6 d6 2e 5a 85 7a 5e fd 9c 4b e7 05 f4 :.u...Z.z^..K... 0240 41 ea 3d 69 01 fb c1 a0 c2 9e b8 0f 8d cc 33 a6 A.=i..........3. 0250 a6 1d 57 11 f3 17 5c fa 7e 42 cf 57 88 3b fb 66 ..W...\.~B.W.;.f 0260 07 f7 b7 34 ee 23 7d f5 ef 46 7f 3f e2 ba 36 31 ...4.#}..F.?..61 0270 7f 09 7c 39 b8 0f c9 f5 39 53 62 cf b9 0a b1 27 ..|9....9Sb....' 0280 ee b4 a1 ce 77 45 f7 58 dc b1 2d 2f c3 f6 39 ba ....wE.X..-/..9. 0290 fe 56 40 cd 57 88 37 fb 63 c7 be b0 2f 76 be b3 .V@.W.7.c.../v.. 02a0 a5 ea 39 31 e6 5a fc 33 72 bd 77 b2 f5 3e 78 77 ..91.Z.3r.w..>xw 02b0 f4 9d 58 13 e7 02 f4 c3 16 6c 60 6e ff e4 11 7d ..X......l`n...} 02c0 67 1f 9c 4e d7 8f 0b 85 f5 60 20 a9 e7 82 b6 13 g..N.....` ..... 02d0 58 1b b8 3a 58 8b c7 7a 47 be cb 72 bc 4d 1a b4 X..:X..zG..r.M.. 02e0 57 3e 17 d6 c4 99 fb 14 b9 cf 80 18 73 6f e1 8b W>..........so.. 02f0 f2 6f 48 b7 aa fd cc 66 8f 95 5b a9 c6 b8 39 81 .oH....f..[...9. 0300 76 cb 2f b6 5b 7e c4 b3 fb b7 5b b9 a2 37 c1 3d v./.[~....[..7.= 0310 40 4f 20 5f 6e 3b 6c 71 3f bf 95 1f 4a f4 f7 73 @O _n;lq?...J..s 0320 cd b0 37 f1 43 b9 1e b9 36 ce b3 68 4e 63 9e e5 ..7.C...6..hNc.. 0330 a9 8c c5 df 0d f7 26 7c 0b f9 37 18 bd 89 7c ee ......&|..7...|. 0340 81 08 76 24 7c be 8e d7 73 db 3b 12 81 be 0e fa ..v$|...s.;..... 0350 3f 9c 57 fa db 33 f7 28 f2 0c 9f 82 50 1f f7 24 ?.W..3.(....P..$ 0360 8e ec 51 cc e7 1a 87 6b 8f e2 c4 31 f6 28 9a a2 ..Q....k...1.(.. 0370 dd ae 7a 63 f8 54 7e 60 6f a2 c3 88 c5 87 e7 0b ..zc.T~`o....... 0380 db d4 eb 0b 1d 57 ab f5 05 ee 5d e4 1a 03 f7 2f .....W....]..../ 0390 9a f3 3b e3 85 c1 ae 84 e9 da bf 98 df bf cd 16 ..;............. 03a0 e1 83 27 1e fd 69 2c be eb c9 9e b8 5c 37 19 74 ..'..i,.....\7.t 03b0 ad 9b 0c e5 d9 79 7a dd 84 7b 1b 7f f5 de 99 7b .....yz..{.....{ 03c0 1b bf fc de f0 c9 6b 86 ce dc db 58 70 96 7b 1b ......k....Xp.{. 03d0 cd 94 bd 8d c5 6f 8c de db f8 9d f7 fe f4 bd 8d .....o.......... 03e0 a6 de db f8 a9 37 e8 0f 30 b9 b7 b1 20 cd de c6 .....7..0... ... 03f0 02 bd b7 d1 4c d9 db 98 f3 46 72 6f 63 c1 18 7b ....L....Froc..{ 0400 1b 1f 78 6f f4 de 46 33 cd de c6 9d 1a b3 4a bd ..xo..F3......J. 0410 b7 f1 f4 10 78 d2 7b 1b cd 94 bd 8d 5f a4 bf bd ....x.{....._... 0420 34 7b 1b 0b f4 de 46 13 72 1b 1c 3a bb bd 8d 45 4{....F.r..:...E 0430 ef 7d f8 de 46 ff 1b 7f fa de c6 e5 1f 63 6f e3 .}..F........co. 0440 e2 f7 fe f4 bd 8d ef bc fb e1 7b 1b 2f 73 ed 6d ..........{./s.m 0450 6c d2 78 78 ad 98 3a 97 80 fe 07 2b f9 f7 bb fb l.xx..:....+.... 0460 d8 5e 07 7c 62 bb ed e1 ba 1f eb 68 f6 c9 b3 09 .^.|b......h.... 0470 b8 d7 00 b8 a8 73 47 a0 1f 8b 85 3c 73 24 9e 1b .....sG....+.9^..v..... 05c0 3a 8b a4 59 da 41 e8 de ce db 52 f2 f2 7c 43 e0 :..Y.A....R..|C. 05d0 7c 8a fa eb d1 b6 93 65 32 03 ea 9d 1e bc bb d2 |......e2....... 05e0 50 fb 18 32 a4 ef c8 98 7c ef P..2....|. No. Time Source Destination Protocol Info 100 211.708501 10.0.0.6 10.0.0.5 TCP 29635 > fpo-fns [ACK] Seq=1 Ack=22793 Win=52560 Len=0 Frame 100 (60 bytes on wire, 60 bytes captured) Arrival Time: May 16, 2010 16:22:24.778815000 [Time delta from previous captured frame: 0.000002000 seconds] [Time delta from previous displayed frame: 0.000002000 seconds] [Time since reference or first frame: 211.708501000 seconds] Frame Number: 100 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36), Dst: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Destination: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) Address: QuantaCo_4f:c3:04 (00:1b:24:4f:c3:04) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) Address: ZyxelCom_2c:0d:36 (00:23:f8:2c:0d:36) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.0.0.6 (10.0.0.6), Dst: 10.0.0.5 (10.0.0.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00) 0000 10.. = Differentiated Services Codepoint: Unknown (0x02) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40