Frame Number: 31

expand all collapse all

• geninfo General information
  • num Number
  • len Frame Length
  • caplen Captured Length
  • timestamp Captured Time
• frame Frame 31: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) on interface 0
  • frame.interface_id Interface id: 0 (unknown)
  • frame.encap_type Encapsulation type: Ethernet (1)
  • frame.time Arrival Time: Nov 14, 2013 14:07:47.181916000 Eastern Standard Time
  • frame.offset_shift Time shift for this packet: 0.000000000 seconds
  • frame.time_epoch Epoch Time: 1384456067.181916000 seconds
  • frame.time_delta Time delta from previous captured frame: 13.581510000 seconds
  • frame.time_delta_displayed Time delta from previous displayed frame: 13.581510000 seconds
  • frame.time_relative Time since reference or first frame: 121.564915000 seconds
  • frame.number Frame Number: 31
  • frame.len Frame Length: 114 bytes (912 bits)
  • frame.cap_len Capture Length: 114 bytes (912 bits)
  • frame.marked Frame is marked: False
  • frame.ignored Frame is ignored: False
  • frame.protocols Protocols in frame: eth:ethertype:ip:tcp:bgp
• eth Ethernet II, Src: CadmusCo_ff:7e:e8 (08:00:27:ff:7e:e8), Dst: CadmusCo_b8:06:b8 (08:00:27:b8:06:b8)
  • eth.dst Destination: CadmusCo_b8:06:b8 (08:00:27:b8:06:b8)
    • eth.dst_resolved Destination (resolved): CadmusCo_b8:06:b8
    • eth.addr Address: CadmusCo_b8:06:b8 (08:00:27:b8:06:b8)
    • eth.addr_resolved Address (resolved): CadmusCo_b8:06:b8
    • eth.lg .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    • eth.ig .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  • eth.src Source: CadmusCo_ff:7e:e8 (08:00:27:ff:7e:e8)
    • eth.src_resolved Source (resolved): CadmusCo_ff:7e:e8
    • eth.addr Address: CadmusCo_ff:7e:e8 (08:00:27:ff:7e:e8)
    • eth.addr_resolved Address (resolved): CadmusCo_ff:7e:e8
    • eth.lg .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    • eth.ig .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  • eth.type Type: IP (0x0800)
• ip Internet Protocol Version 4, Src: 192.168.1.73 (192.168.1.73), Dst: 192.168.1.201 (192.168.1.201)
  • ip.version Version: 4
  • ip.hdr_len Header Length: 20 bytes
  • ip.dsfield Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
    • ip.dsfield.dscp 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
    • ip.dsfield.ecn .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
  • ip.len Total Length: 100
  • ip.id Identification: 0xea89 (60041)
  • ip.flags Flags: 0x02 (Don't Fragment)
    • ip.flags.rb 0... .... = Reserved bit: Not set
    • ip.flags.df .1.. .... = Don't fragment: Set
    • ip.flags.mf ..0. .... = More fragments: Not set
  • ip.frag_offset Fragment offset: 0
  • ip.ttl Time to live: 64
  • ip.proto Protocol: TCP (6)
  • ip.checksum Header checksum: 0xcae7 [validation disabled]
    • ip.checksum_good Good: False
    • ip.checksum_bad Bad: False
  • ip.src Source: 192.168.1.73 (192.168.1.73)
  • ip.addr Source or Destination Address: 192.168.1.73 (192.168.1.73)
  • ip.src_host Source Host: 192.168.1.73
  • ip.host Source or Destination Host: 192.168.1.73
  • ip.dst Destination: 192.168.1.201 (192.168.1.201)
  • ip.addr Source or Destination Address: 192.168.1.201 (192.168.1.201)
  • ip.dst_host Destination Host: 192.168.1.201
  • ip.host Source or Destination Host: 192.168.1.201
  • Source GeoIP: Unknown
  • Destination GeoIP: Unknown
• tcp Transmission Control Protocol, Src Port: 31180 (31180), Dst Port: 179 (179), Seq: 336, Ack: 245, Len: 48
  • tcp.srcport Source Port: 31180 (31180)
  • tcp.dstport Destination Port: 179 (179)
  • tcp.port Source or Destination Port: 31180
  • tcp.port Source or Destination Port: 179
  • tcp.stream Stream index: 0
  • tcp.len TCP Segment Len: 48
  • tcp.seq Sequence number: 336 (relative sequence number)
  • tcp.nxtseq Next sequence number: 384 (relative sequence number)
  • tcp.ack Acknowledgment number: 245 (relative ack number)
  • tcp.hdr_len Header Length: 32 bytes
  • tcp.flags .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
    • tcp.flags.res 000. .... .... = Reserved: Not set
    • tcp.flags.ns ...0 .... .... = Nonce: Not set
    • tcp.flags.cwr .... 0... .... = Congestion Window Reduced (CWR): Not set
    • tcp.flags.ecn .... .0.. .... = ECN-Echo: Not set
    • tcp.flags.urg .... ..0. .... = Urgent: Not set
    • tcp.flags.ack .... ...1 .... = Acknowledgment: Set
    • tcp.flags.push .... .... 1... = Push: Set
    • tcp.flags.reset .... .... .0.. = Reset: Not set
    • tcp.flags.syn .... .... ..0. = Syn: Not set
    • tcp.flags.fin .... .... ...0 = Fin: Not set
  • tcp.window_size_value Window size value: 2048
  • tcp.window_size Calculated window size: 16384
  • tcp.window_size_scalefactor Window size scaling factor: 8
  • tcp.checksum Checksum: 0x8cc8 [validation disabled]
    • tcp.checksum_good Good Checksum: False
    • tcp.checksum_bad Bad Checksum: False
  • tcp.urgent_pointer Urgent pointer: 0
  • tcp.options Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
    • tcp.options No-Operation (NOP)
      • tcp.options.type Type: 1
        • tcp.options.type.copy 0... .... = Copy on fragmentation: No
        • tcp.options.type.class .00. .... = Class: Control (0)
        • tcp.options.type.number ...0 0001 = Number: No-Operation (NOP) (1)
    • tcp.options No-Operation (NOP)
      • tcp.options.type Type: 1
        • tcp.options.type.copy 0... .... = Copy on fragmentation: No
        • tcp.options.type.class .00. .... = Class: Control (0)
        • tcp.options.type.number ...0 0001 = Number: No-Operation (NOP) (1)
    • tcp Timestamps: TSval 4036198616, TSecr 5356883
      • tcp.option_kind Kind: Time Stamp Option (8)
      • tcp.option_len Length: 10
      • tcp.options.timestamp.tsval Timestamp value: 4036198616
      • tcp.options.timestamp.tsecr Timestamp echo reply: 5356883
  • tcp.analysis SEQ/ACK analysis
    • tcp.analysis.initial_rtt iRTT: 0.000348000 seconds
    • tcp.analysis.bytes_in_flight Bytes in flight: 48
• bgp Border Gateway Protocol - UPDATE Message
  • bgp.marker Marker: ffffffffffffffffffffffffffffffff
  • bgp.length Length: 48
  • bgp.type Type: UPDATE Message (2)
  • bgp.update.withdrawn_routes.length Withdrawn Routes Length: 0
  • bgp.update.path_attributes.length Total Path Attribute Length: 21
  • bgp.update.path_attributes Path attributes
    • bgp.update.path_attribute Path Attribut - ORIGIN: IGP
      • bgp.update.path_attribute.flags Flags: 0x40: Well-known, Transitive, Complete
        • bgp.update.path_attribute.flags.optional 0... .... = Optional: Well-known
        • bgp.update.path_attribute.flags.transitive .1.. .... = Transitive: Transitive
        • bgp.update.path_attribute.flags.partial ..0. .... = Partial: Complete
        • bgp.update.path_attribute.flags.extended_length ...0 .... = Length: Regular length
      • bgp.update.path_attribute.type_code Type Code: ORIGIN (1)
      • bgp.update.path_attribute.length Length: 1
      • bgp.update.path_attribute.origin Origin: IGP (0)
    • bgp.update.path_attribute Path Attribut - AS_PATH: empty
      • bgp.update.path_attribute.flags Flags: 0x40: Well-known, Transitive, Complete
        • bgp.update.path_attribute.flags.optional 0... .... = Optional: Well-known
        • bgp.update.path_attribute.flags.transitive .1.. .... = Transitive: Transitive
        • bgp.update.path_attribute.flags.partial ..0. .... = Partial: Complete
        • bgp.update.path_attribute.flags.extended_length ...0 .... = Length: Regular length
      • bgp.update.path_attribute.type_code Type Code: AS_PATH (2)
      • bgp.update.path_attribute.length Length: 0
    • bgp.update.path_attribute Path Attribut - NEXT_HOP: 192.168.1.73
      • bgp.update.path_attribute.flags Flags: 0x40: Well-known, Transitive, Complete
        • bgp.update.path_attribute.flags.optional 0... .... = Optional: Well-known
        • bgp.update.path_attribute.flags.transitive .1.. .... = Transitive: Transitive
        • bgp.update.path_attribute.flags.partial ..0. .... = Partial: Complete
        • bgp.update.path_attribute.flags.extended_length ...0 .... = Length: Regular length
      • bgp.update.path_attribute.type_code Type Code: NEXT_HOP (3)
      • bgp.update.path_attribute.length Length: 4
      • bgp.update.path_attribute.next_hop Next hop: 192.168.1.73 (192.168.1.73)
    • bgp.update.path_attribute Path Attribut - LOCAL_PREF: 100
      • bgp.update.path_attribute.flags Flags: 0x40: Well-known, Transitive, Complete
        • bgp.update.path_attribute.flags.optional 0... .... = Optional: Well-known
        • bgp.update.path_attribute.flags.transitive .1.. .... = Transitive: Transitive
        • bgp.update.path_attribute.flags.partial ..0. .... = Partial: Complete
        • bgp.update.path_attribute.flags.extended_length ...0 .... = Length: Regular length
      • bgp.update.path_attribute.type_code Type Code: LOCAL_PREF (5)
      • bgp.update.path_attribute.length Length: 4
      • bgp.update.path_attribute.local_pref Local preference: 100
  • bgp.update.nlri Network Layer Reachability Information (NLRI)
    • 10.20.0.0/24
      • bgp NLRI prefix length: 24
      • bgp.nlri_prefix NLRI prefix: 10.20.0.0 (10.20.0.0)