Frame Number: 2
- geninfo General information
- num Number
- len Frame Length
- caplen Captured Length
- timestamp Captured Time
- frame Frame 2: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface 0
- frame.interface_id Interface id: 0 (unknown)
- frame.encap_type Encapsulation type: Ethernet (1)
- frame.time Arrival Time: Nov 14, 2013 14:05:45.617270000 Eastern Standard Time
- frame.offset_shift Time shift for this packet: 0.000000000 seconds
- frame.time_epoch Epoch Time: 1384455945.617270000 seconds
- frame.time_delta Time delta from previous captured frame: 0.000269000 seconds
- frame.time_delta_displayed Time delta from previous displayed frame: 0.000269000 seconds
- frame.time_relative Time since reference or first frame: 0.000269000 seconds
- frame.number Frame Number: 2
- frame.len Frame Length: 78 bytes (624 bits)
- frame.cap_len Capture Length: 78 bytes (624 bits)
- frame.marked Frame is marked: False
- frame.ignored Frame is ignored: False
- frame.protocols Protocols in frame: eth:ethertype:ip:tcp
- eth Ethernet II, Src: CadmusCo_b8:06:b8 (08:00:27:b8:06:b8), Dst: CadmusCo_ff:7e:e8 (08:00:27:ff:7e:e8)
- eth.dst Destination: CadmusCo_ff:7e:e8 (08:00:27:ff:7e:e8)
- eth.dst_resolved Destination (resolved): CadmusCo_ff:7e:e8
- eth.addr Address: CadmusCo_ff:7e:e8 (08:00:27:ff:7e:e8)
- eth.addr_resolved Address (resolved): CadmusCo_ff:7e:e8
- eth.lg .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- eth.ig .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- eth.src Source: CadmusCo_b8:06:b8 (08:00:27:b8:06:b8)
- eth.src_resolved Source (resolved): CadmusCo_b8:06:b8
- eth.addr Address: CadmusCo_b8:06:b8 (08:00:27:b8:06:b8)
- eth.addr_resolved Address (resolved): CadmusCo_b8:06:b8
- eth.lg .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- eth.ig .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- eth.type Type: IP (0x0800)
- ip Internet Protocol Version 4, Src: 192.168.1.201 (192.168.1.201), Dst: 192.168.1.73 (192.168.1.73)
- ip.version Version: 4
- ip.hdr_len Header Length: 20 bytes
- ip.dsfield Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
- ip.dsfield.dscp 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
- ip.dsfield.ecn .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
- ip.len Total Length: 64
- ip.id Identification: 0x6ca0 (27808)
- ip.flags Flags: 0x02 (Don't Fragment)
- ip.flags.rb 0... .... = Reserved bit: Not set
- ip.flags.df .1.. .... = Don't fragment: Set
- ip.flags.mf ..0. .... = More fragments: Not set
- ip.frag_offset Fragment offset: 0
- ip.ttl Time to live: 255
- ip.proto Protocol: TCP (6)
- ip.checksum Header checksum: 0x89f4 [validation disabled]
- ip.checksum_good Good: False
- ip.checksum_bad Bad: False
- ip.src Source: 192.168.1.201 (192.168.1.201)
- ip.addr Source or Destination Address: 192.168.1.201 (192.168.1.201)
- ip.src_host Source Host: 192.168.1.201
- ip.host Source or Destination Host: 192.168.1.201
- ip.dst Destination: 192.168.1.73 (192.168.1.73)
- ip.addr Source or Destination Address: 192.168.1.73 (192.168.1.73)
- ip.dst_host Destination Host: 192.168.1.73
- ip.host Source or Destination Host: 192.168.1.73
- Source GeoIP: Unknown
- Destination GeoIP: Unknown
- tcp Transmission Control Protocol, Src Port: 179 (179), Dst Port: 31180 (31180), Seq: 0, Ack: 1, Len: 0
- tcp.srcport Source Port: 179 (179)
- tcp.dstport Destination Port: 31180 (31180)
- tcp.port Source or Destination Port: 179
- tcp.port Source or Destination Port: 31180
- tcp.stream Stream index: 0
- tcp.len TCP Segment Len: 0
- tcp.seq Sequence number: 0 (relative sequence number)
- tcp.ack Acknowledgment number: 1 (relative ack number)
- tcp.hdr_len Header Length: 44 bytes
- tcp.flags .... 0000 0001 0010 = Flags: 0x012 (SYN, ACK)
- tcp.flags.res 000. .... .... = Reserved: Not set
- tcp.flags.ns ...0 .... .... = Nonce: Not set
- tcp.flags.cwr .... 0... .... = Congestion Window Reduced (CWR): Not set
- tcp.flags.ecn .... .0.. .... = ECN-Echo: Not set
- tcp.flags.urg .... ..0. .... = Urgent: Not set
- tcp.flags.ack .... ...1 .... = Acknowledgment: Set
- tcp.flags.push .... .... 0... = Push: Not set
- tcp.flags.reset .... .... .0.. = Reset: Not set
- tcp.flags.syn .... .... ..1. = Syn: Set
- _ws.expert Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 179
- tcp.connection.sack Connection establish acknowledge (SYN+ACK): server port 179
- _ws.expert.message Message: Connection establish acknowledge (SYN+ACK): server port 179
- _ws.expert.severity Severity level: Chat
- _ws.expert.group Group: Sequence
- tcp.flags.fin .... .... ...0 = Fin: Not set
- tcp.window_size_value Window size value: 16384
- tcp.window_size Calculated window size: 16384
- tcp.checksum Checksum: 0x41ce [validation disabled]
- tcp.checksum_good Good Checksum: False
- tcp.checksum_bad Bad Checksum: False
- tcp.urgent_pointer Urgent pointer: 0
- tcp.options Options: (24 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), Timestamps, SACK permitted, End of Option List (EOL)
- tcp.options.mss Maximum segment size: 1460 bytes
- tcp.option_kind Kind: Maximum Segment Size (2)
- tcp.option_len Length: 4
- tcp.options.mss_val MSS Value: 1460
- tcp.options No-Operation (NOP)
- tcp.options.type Type: 1
- tcp.options.type.copy 0... .... = Copy on fragmentation: No
- tcp.options.type.class .00. .... = Class: Control (0)
- tcp.options.type.number ...0 0001 = Number: No-Operation (NOP) (1)
- tcp Window scale: 0 (multiply by 1)
- tcp.option_kind Kind: Window Scale (3)
- tcp.option_len Length: 3
- tcp.options.wscale.shift Shift count: 0
- tcp.options.wscale.multiplier Multiplier: 1
- tcp.options No-Operation (NOP)
- tcp.options.type Type: 1
- tcp.options.type.copy 0... .... = Copy on fragmentation: No
- tcp.options.type.class .00. .... = Class: Control (0)
- tcp.options.type.number ...0 0001 = Number: No-Operation (NOP) (1)
- tcp.options No-Operation (NOP)
- tcp.options.type Type: 1
- tcp.options.type.copy 0... .... = Copy on fragmentation: No
- tcp.options.type.class .00. .... = Class: Control (0)
- tcp.options.type.number ...0 0001 = Number: No-Operation (NOP) (1)
- tcp Timestamps: TSval 5248540, TSecr 4036198372
- tcp.option_kind Kind: Time Stamp Option (8)
- tcp.option_len Length: 10
- tcp.options.timestamp.tsval Timestamp value: 5248540
- tcp.options.timestamp.tsecr Timestamp echo reply: 4036198372
- tcp.options.sack_perm TCP SACK Permitted Option: True
- tcp.option_kind Kind: SACK Permitted (4)
- tcp.option_len Length: 2
- tcp.options End of Option List (EOL)
- tcp.options.type Type: 0
- tcp.options.type.copy 0... .... = Copy on fragmentation: No
- tcp.options.type.class .00. .... = Class: Control (0)
- tcp.options.type.number ...0 0000 = Number: End of Option List (EOL) (0)
- tcp.analysis SEQ/ACK analysis
- tcp.analysis.acks_frame This is an ACK to the segment in frame: 1
- tcp.analysis.ack_rtt The RTT to ACK the segment was: 0.000269000 seconds