\r\n
\t
Register a SA Forums Account here!\r\n
\t
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!\r\n
\r\n
\t\r\n
\t\r\n
\t
\r\n
\t\r\n
\r\n
\t
\r\n
\t
\r\n
\r\n
\r\n
\r\n
\r\n
\r\n
\r\n
\r\n
\r\n
\r\n
{debug_msgs}
\r\n
\r\n
\r\n
\r\n
\r\n
\r\n
No. Time Source Destination Protocol Info
52 10.328125 192.168.1.102 216.86.148.111 TCP 38639 > www [ACK] Seq=410 Ack=28818 Win=63872 Len=0 TSV=520470 TSER=84628753
Frame 52 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:19.578806000
[Time delta from previous packet: 0.000010000 seconds]
[Time since reference or first frame: 10.328125000 seconds]
Frame Number: 52
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.111 (216.86.148.111)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xfff2 (65522)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0bfd [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.111 (216.86.148.111)
Transmission Control Protocol, Src Port: 38639 (38639), Dst Port: www (80), Seq: 410, Ack: 28818, Len: 0
Source port: 38639 (38639)
Destination port: www (80)
Sequence number: 410 (relative sequence number)
Acknowledgement number: 28818 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 63872 (scaled)
Checksum: 0x0379 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 520470, TSecr 84628753
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 51]
[The RTT to ACK the segment was: 0.000010000 seconds]
No. Time Source Destination Protocol Info
53 13.116130 192.168.1.102 216.86.148.10 TCP 48003 > www [SYN] Seq=0 Len=0 MSS=1460 TSV=521168 TSER=0 WS=7
Frame 53 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:22.366811000
[Time delta from previous packet: 2.788005000 seconds]
[Time since reference or first frame: 13.116130000 seconds]
Frame Number: 53
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.10 (216.86.148.10)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0xc047 (49223)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x4c05 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.10 (216.86.148.10)
Transmission Control Protocol, Src Port: 48003 (48003), Dst Port: www (80), Seq: 0, Len: 0
Source port: 48003 (48003)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0xdc64 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Timestamps: TSval 521168, TSecr 0
NOP
Window scale: 7 (multiply by 128)
No. Time Source Destination Protocol Info
54 19.116136 192.168.1.102 216.86.148.10 TCP 48003 > www [SYN] Seq=0 Len=0 MSS=1460 TSV=522668 TSER=0 WS=7
Frame 54 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:28.366817000
[Time delta from previous packet: 6.000006000 seconds]
[Time since reference or first frame: 19.116136000 seconds]
Frame Number: 54
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.10 (216.86.148.10)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0xc048 (49224)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x4c04 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.10 (216.86.148.10)
Transmission Control Protocol, Src Port: 48003 (48003), Dst Port: www (80), Seq: 0, Len: 0
Source port: 48003 (48003)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0xd688 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Timestamps: TSval 522668, TSecr 0
NOP
Window scale: 7 (multiply by 128)
No. Time Source Destination Protocol Info
55 22.140242 192.168.1.102 212.204.214.114 IRC Request
Frame 55 (82 bytes on wire, 82 bytes captured)
Arrival Time: May 20, 2007 22:08:31.390923000
[Time delta from previous packet: 3.024106000 seconds]
[Time since reference or first frame: 22.140242000 seconds]
Frame Number: 55
Packet Length: 82 bytes
Capture Length: 82 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 68
Identification: 0xa185 (41349)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be1 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 0, Ack: 44, Len: 16
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 0 (relative sequence number)
[Next sequence number: 16 (relative sequence number)]
Acknowledgement number: 44 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x8f46 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523424, TSecr 219445465
Internet Relay Chat
Request: WHO #archlinux
No. Time Source Destination Protocol Info
56 22.386343 212.204.214.114 192.168.1.102 TCP 6667 > 51195 [ACK] Seq=44 Ack=16 Win=57584 Len=0 TSV=219447704 TSER=523424
Frame 56 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:31.637024000
[Time delta from previous packet: 0.246101000 seconds]
[Time since reference or first frame: 22.386343000 seconds]
Frame Number: 56
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: EFF7B9BC
Frame check sequence: 0xdd549af7 [incorrect, should be 0x02c0650b]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x9497 (38039)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x48df [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 44, Ack: 16, Len: 0
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 44 (relative sequence number)
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57584
Checksum: 0x381e [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447704, TSecr 523424
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 55]
[The RTT to ACK the segment was: 0.246101000 seconds]
No. Time Source Destination Protocol Info
57 22.436927 212.204.214.114 192.168.1.102 IRC Response
Frame 57 (1098 bytes on wire, 1098 bytes captured)
Arrival Time: May 20, 2007 22:08:31.687608000
[Time delta from previous packet: 0.050584000 seconds]
[Time since reference or first frame: 22.436927000 seconds]
Frame Number: 57
Packet Length: 1098 bytes
Capture Length: 1098 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 903AD8C5
Frame check sequence: 0x7d138d75 [incorrect, should be 0x37bcab28]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1076
Identification: 0x949f (38047)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x44d7 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 44, Ack: 16, Len: 1024
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 44 (relative sequence number)
[Next sequence number: 1068 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xb163 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447708, TSecr 523424
Internet Relay Chat
Response: :sterling.freenode.net 352 snollox #archlinux n=mort azureus/mort irc.freenode.net mort H :0 Lars Linz
Response: :sterling.freenode.net 352 snollox #archlinux n=kcbanner 216.232.247.159 irc.freenode.net kcbanner H :0 Casey Banner
Response: :sterling.freenode.net 352 snollox #archlinux n=mauri 190.48.29.147 irc.freenode.net mauripia H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=josh ool-182c8d1f.dyn.optonline.net irc.freenode.net tidalwav1 H :0 Joshua Dick
Response: :sterling.freenode.net 352 snollox #archlinux n=fallen mail.stabat.com irc.freenode.net LeFallen H :0 Le Fallen
Response: :sterling.freenode.net 352 snollox #archlinux n=codemac archlinux/developer/codemac irc.freenode.net codemac H :0 codemac
Response: :sterling.freenode.net 352 snollox #archlinux n=todd 68-184-36-137.dhcp.oxfr.ma.charter.com irc.freenode.net toddma H :0 purple
Response: :sterling.freenode.net 352 snollox #archlinux n=snollux adsl-68-90-247-133.dsl.hstntx.swbell.net irc.freenode.net snollox H :0 snollux
Response: :sterling.freenode.net 352 snollox #archlinux n=ahioros 201.218.
No. Time Source Destination Protocol Info
58 22.436943 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=1068 Win=501 Len=0 TSV=523498 TSER=219447708
Frame 58 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:31.687624000
[Time delta from previous packet: 0.000016000 seconds]
[Time since reference or first frame: 22.436943000 seconds]
Frame Number: 58
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa186 (41350)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bf0 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 1068, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 1068 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x12cc [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523498, TSecr 219447708
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 57]
[The RTT to ACK the segment was: 0.000016000 seconds]
No. Time Source Destination Protocol Info
59 22.445201 212.204.214.114 192.168.1.102 IRC Response
Frame 59 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:31.695882000
[Time delta from previous packet: 0.008258000 seconds]
[Time since reference or first frame: 22.445201000 seconds]
Frame Number: 59
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 7A6E7990
Frame check sequence: 0x66718849 [incorrect, should be 0x73938ce9]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x94a0 (38048)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x4336 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 1068, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 1068 (relative sequence number)
[Next sequence number: 2508 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x7aa9 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447708, TSecr 523424
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 58]
[The RTT to ACK the segment was: 0.008258000 seconds]
Internet Relay Chat
Response: 103.9 irc.freenode.net |AhIoRoS| H :0 Guillermo Garcia Ledezma
Response: :sterling.freenode.net 352 snollox #archlinux n=me c-67-188-52-187.hsd1.ca.comcast.net irc.freenode.net Theoden H :0 nobody
Response: :sterling.freenode.net 352 snollox #archlinux n=kevin adsl-bri-3-3.ozonline.com.au irc.freenode.net bones_ H :0 kevin
Response: :sterling.freenode.net 352 snollox #archlinux n=struppi p549875F1.dip.t-dialin.net irc.freenode.net struppi G :0 Stefan Rupp
Response: :sterling.freenode.net 352 snollox #archlinux n=dmcgee 66.254.244.159 irc.freenode.net toofishes H :0 Dan
Response: :sterling.freenode.net 352 snollox #archlinux n=bruenig ppp-70-242-99-3.dsl.rcsntx.swbell.net irc.freenode.net bruenig H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=janitux 17-160-28.dial.terra.cl irc.freenode.net janitux H :0 Patricio P\303\251rez
Response: :sterling.freenode.net 352 snollox #archlinux n=hector 189.160.49.243 irc.freenode.net hacosta_ H :0 hacosta
Response: :sterling.freenode.net 352 snollox #archlinux n=max i59F5595C.versanet.de irc.freenode.net max` H :0 max
Response: :sterling.freenode.net 352 snollox #archlinux n=iamsthit c-67-191-161-71.hsd1.ga.comcast.net irc.freenode.net iamsthitha H :0 iamsthitha
Response: :sterling.freenode.net 352 snollox #archlinux n=blue unaffiliated/unixinfidel/x-8383745 irc.freenode.net unix_infidel H :0 blue
Response: :sterling.freenode.net 352 snollox #archlinux n=emmy cpe-24-26-155-137.columbus.res.rr.com irc.freenode.net emmybear H :0 Emma
Response: :sterling.freenode.net 352 s
No. Time Source Destination Protocol Info
60 22.445213 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=2508 Win=501 Len=0 TSV=523500 TSER=219447708
Frame 60 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:31.695894000
[Time delta from previous packet: 0.000012000 seconds]
[Time since reference or first frame: 22.445213000 seconds]
Frame Number: 60
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa187 (41351)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bef [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 2508, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 2508 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x0d2a [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523500, TSecr 219447708
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 59]
[The RTT to ACK the segment was: 0.000012000 seconds]
No. Time Source Destination Protocol Info
61 22.596999 212.204.214.114 192.168.1.102 IRC Response
Frame 61 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:31.847680000
[Time delta from previous packet: 0.151786000 seconds]
[Time since reference or first frame: 22.596999000 seconds]
Frame Number: 61
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: A894F8F9
Frame check sequence: 0x3d7dface [incorrect, should be 0x0dd01906]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x94b2 (38066)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x4324 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 2508, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 2508 (relative sequence number)
[Next sequence number: 3948 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x85ec [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447723, TSecr 523498
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 60]
[The RTT to ACK the segment was: 0.151786000 seconds]
Internet Relay Chat
Response: nollox #archlinux n=shadowri h82-143-161-179-static.e-wro.net.pl irc.freenode.net shadowriver_ H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=quad3d cpe-24-28-31-210.austin.res.rr.com irc.freenode.net quad3d H :0 terii
Response: :sterling.freenode.net 352 snollox #archlinux n=manveru pp101.opt2.point.ne.jp irc.freenode.net manveru H :0 Michael
Response: :sterling.freenode.net 352 snollox #archlinux n=simon WLL-27-pppoe087.t-net.net.ve irc.freenode.net scast H :0 simon
Response: :sterling.freenode.net 352 snollox #archlinux i=supergea c-24-9-153-168.hsd1.co.comcast.net irc.freenode.net supergear H :0 supergear
Response: :sterling.freenode.net 352 snollox #archlinux n=mauro r190-64-48-188.dialup.adsl.anteldata.net.uy irc.freenode.net soulrider H :0 Mauro de Carvalho
Response: :sterling.freenode.net 352 snollox #archlinux i=torin nekromanta.pl irc.freenode.net Torin_ H :0 Jakub \243.
Response: :sterling.freenode.net 352 snollox #archlinux n=e 13.241.33.65.cfl.res.rr.com irc.freenode.net gnubien H :0 e
Response: :sterling.freenode.net 352 snollox #archlinux n=nyoro 24-179-151-109.dhcp.stpt.wi.charter.com irc.freenode.net plus_M H :0 nyoro
Response: :sterling.freenode.net 352 snollox #archlinux n=martin adsl-153-30-27.gsp.bellsouth.net irc.freenode.net bknitram H :0 Martin
Response: :sterling.freenode.net 352 snollox #archlinux n=lauri tuomi.oulu.fi irc.freenode.net Aperculum G :0 Lauri Hakko
Response: :sterling.freenode.net 352 snollox #archlinux n=rphillip gentoo/developer/rphillips irc.freenode.
No. Time Source Destination Protocol Info
62 22.597024 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=3948 Win=501 Len=0 TSV=523538 TSER=219447723
Frame 62 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:31.847705000
[Time delta from previous packet: 0.000025000 seconds]
[Time since reference or first frame: 22.597024000 seconds]
Frame Number: 62
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa188 (41352)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bee [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 3948, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 3948 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x0755 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523538, TSecr 219447723
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 61]
[The RTT to ACK the segment was: 0.000025000 seconds]
No. Time Source Destination Protocol Info
63 22.604879 212.204.214.114 192.168.1.102 IRC Response
Frame 63 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:31.855560000
[Time delta from previous packet: 0.007855000 seconds]
[Time since reference or first frame: 22.604879000 seconds]
Frame Number: 63
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 908F2B65
Frame check sequence: 0xc187ad90 [incorrect, should be 0xf3cb5082]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x94b3 (38067)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x4323 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 3948, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 3948 (relative sequence number)
[Next sequence number: 5388 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x4389 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447723, TSecr 523498
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 62]
[The RTT to ACK the segment was: 0.007855000 seconds]
Internet Relay Chat
Response: net rphillips H :0 rphillips
Response: :sterling.freenode.net 352 snollox #archlinux i=mgoose gateway/tor/x-6688980c6318d8d7 irc.freenode.net mgoose H :0 Keyser Soze
Response: :sterling.freenode.net 352 snollox #archlinux n=fubar 83.101.2.116 irc.freenode.net Fubarovic G :0 fubar
Response: :sterling.freenode.net 352 snollox #archlinux n=moparx adsl-065-006-185-138.sip.bct.bellsouth.net irc.freenode.net moparx H :0 Christopher W.
Response: :sterling.freenode.net 352 snollox #archlinux n=kyral ubuntu/member/kyral irc.freenode.net Kyral H :0 Chris Peterman
Response: :sterling.freenode.net 352 snollox #archlinux n=Administ p5488E09F.dip.t-dialin.net irc.freenode.net Bastian H :0 Administrator
Response: :sterling.freenode.net 352 snollox #archlinux n=meff unaffiliated/meff irc.freenode.net meffs H :0 meff
Response: :sterling.freenode.net 352 snollox #archlinux n=ideal c58-107-18-60.belrs2.nsw.optusnet.com.au irc.freenode.net idealm H :0 Mark
Response: :sterling.freenode.net 352 snollox #archlinux n=Damnshoc 166.Red-83-58-21.dynamicIP.rima-tde.net irc.freenode.net Damnshock H :0 Damnshock
Response: :sterling.freenode.net 352 snollox #archlinux n=pharaonp ARennes-252-1-9-169.w83-195.abo.wanadoo.fr irc.freenode.net Pharaonpso_ H :0 Pharaonpso
Response: :sterling.freenode.net 352 snollox #archlinux n=japetto pool-70-22-228-206.bos.east.verizon.net irc.freenode.net japetto2 H :0 japetto
Response: :sterling.freenode.net 352 snollox #archlinux n=dan d90-144-36-123.cust.tele2.fr irc.freenode.net alleyoopster G :0 Daniel Philli
No. Time Source Destination Protocol Info
64 22.604901 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=5388 Win=501 Len=0 TSV=523540 TSER=219447723
Frame 64 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:31.855582000
[Time delta from previous packet: 0.000022000 seconds]
[Time since reference or first frame: 22.604901000 seconds]
Frame Number: 64
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa189 (41353)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bed [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 5388, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 5388 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x01b3 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523540, TSecr 219447723
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 63]
[The RTT to ACK the segment was: 0.000022000 seconds]
No. Time Source Destination Protocol Info
65 22.614765 212.204.214.114 192.168.1.102 IRC Response
Frame 65 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:31.865446000
[Time delta from previous packet: 0.009864000 seconds]
[Time since reference or first frame: 22.614765000 seconds]
Frame Number: 65
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 3EA81233
Frame check sequence: 0x1ca9f0b0 [incorrect, should be 0xb91c94af]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x94b6 (38070)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x4320 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 5388, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 5388 (relative sequence number)
[Next sequence number: 6828 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xca46 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447724, TSecr 523500
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 64]
[The RTT to ACK the segment was: 0.009864000 seconds]
Internet Relay Chat
Response: ps
Response: :sterling.freenode.net 352 snollox #archlinux n=benplaut unaffiliated/benplaut irc.freenode.net benplaut H :0 Scary Person
Response: :sterling.freenode.net 352 snollox #archlinux n=Tonho unaffiliated/tonho irc.freenode.net Tonho- H :0 Gabriel S. Ames
Response: :sterling.freenode.net 352 snollox #archlinux n=hussam 194.146.154.70 irc.freenode.net hussam H :0 Hussam Al-Tayeb
Response: :sterling.freenode.net 352 snollox #archlinux n=hacosta 189.160.49.243 irc.freenode.net hacosta H :0 Hector Acosta
Response: :sterling.freenode.net 352 snollox #archlinux n=olegfink 87.228.51.111 irc.freenode.net olegfink H :0 Oleg Finkelshteyn
Response: :sterling.freenode.net 352 snollox #archlinux n=stu p549a7303.dip.t-dialin.net irc.freenode.net hotfuzz H :0 Stuart Moss
Response: :sterling.freenode.net 352 snollox #archlinux n=zeus 87.228.51.111 irc.freenode.net |zeus| H :0 Zhukov Pavel
Response: :sterling.freenode.net 352 snollox #archlinux n=leandro adsl-83-64.37-151.net24.it irc.freenode.net leandro_ G :0 leandro
Response: :sterling.freenode.net 352 snollox #archlinux n=andyrtr archlinux/developer/andyrtr irc.freenode.net andyrtr H :0 Andreas Radke
Response: :sterling.freenode.net 352 snollox #archlinux n=xehp 77.49.168.202.static.comindico.com.au irc.freenode.net xehp H :0 xehp
Response: :sterling.freenode.net 352 snollox #archlinux n=fish dhcp-18-65.cable.infonet.ee irc.freenode.net kuratkull H :0 fish
Response: :sterling.freenode.net 352 snollox #archlinux n=lolman cpc3-leds2-0-0-cust55.leed.cable.ntl.com irc.freenode.net
No. Time Source Destination Protocol Info
66 22.614779 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=6828 Win=501 Len=0 TSV=523542 TSER=219447724
Frame 66 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:31.865460000
[Time delta from previous packet: 0.000014000 seconds]
[Time since reference or first frame: 22.614779000 seconds]
Frame Number: 66
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa18a (41354)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bec [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 6828, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 6828 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xfc0f [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523542, TSecr 219447724
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 65]
[The RTT to ACK the segment was: 0.000014000 seconds]
No. Time Source Destination Protocol Info
67 22.622660 212.204.214.114 192.168.1.102 IRC Response
Frame 67 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:31.873341000
[Time delta from previous packet: 0.007881000 seconds]
[Time since reference or first frame: 22.622660000 seconds]
Frame Number: 67
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 09439628
Frame check sequence: 0x8c286565 [incorrect, should be 0xd36813b3]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x94b7 (38071)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x431f [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 6828, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 6828 (relative sequence number)
[Next sequence number: 8268 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xf738 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447724, TSecr 523500
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 66]
[The RTT to ACK the segment was: 0.007881000 seconds]
Internet Relay Chat
Response: lolman H :0 John Brennand
Response: :sterling.freenode.net 352 snollox #archlinux n=snowman gw.aszf-szhely.sulinet.hu irc.freenode.net yettenet H :0 bigfoot
Response: :sterling.freenode.net 352 snollox #archlinux n=nlight 89.25.48.181 irc.freenode.net nlight H :0 nlight@rivalrybg.com
Response: :sterling.freenode.net 352 snollox #archlinux n=elasticd 74-132-197-113.dhcp.insightbb.com irc.freenode.net elasticdog H :0 Aaron Schaefer
Response: :sterling.freenode.net 352 snollox #archlinux i=greece freenode/staff/about.linux.philkc irc.freenode.net PhilKC H :0 Philip King-Cherne
Response: :sterling.freenode.net 352 snollox #archlinux n=Yaroze 90-230-101-170-no136.tbcn.telia.com irc.freenode.net Yaroze G :0 Yaroze
Response: :sterling.freenode.net 352 snollox #archlinux n=atlas 84.5.38.63 irc.freenode.net atlas95 H :0 Cyril LEVIS
Response: :sterling.freenode.net 352 snollox #archlinux n=yumigato 65-78-121-227.c3-0.eas-ubr1.atw-eas.pa.cable.rcn.com irc.freenode.net yumigator G :0 Jonathan Yu
Response: :sterling.freenode.net 352 snollox #archlinux n=sputnik adsl-76-223-206-140.dsl.emhril.sbcglobal.net irc.freenode.net sputnik66 H :0 LJP
Response: :sterling.freenode.net 352 snollox #archlinux n=grizzly dslb-088-072-235-105.pools.arcor-ip.net irc.freenode.net Grizzly` H :0 Christian Bendele
Response: :sterling.freenode.net 352 snollox #archlinux n=WillySil archlinux/trusteduser/WillySilly irc.freenode.net WillySilly H :0 William Rea
Response: :sterling.freenode.net 352 snollox #archlinux n=griff 216-80-38-63.fld-bsr1.chi-fld
No. Time Source Destination Protocol Info
68 22.622677 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=8268 Win=501 Len=0 TSV=523544 TSER=219447724
Frame 68 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:31.873358000
[Time delta from previous packet: 0.000017000 seconds]
[Time since reference or first frame: 22.622677000 seconds]
Frame Number: 68
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa18b (41355)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2beb [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 8268, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 8268 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xf66d [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523544, TSecr 219447724
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 67]
[The RTT to ACK the segment was: 0.000017000 seconds]
No. Time Source Destination Protocol Info
69 22.756645 212.204.214.114 192.168.1.102 IRC Response
Frame 69 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.007326000
[Time delta from previous packet: 0.133968000 seconds]
[Time since reference or first frame: 22.756645000 seconds]
Frame Number: 69
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 40E1DD5F
Frame check sequence: 0xe58e7400 [incorrect, should be 0xc8d38e88]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x94fe (38142)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42d8 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 8268, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 8268 (relative sequence number)
[Next sequence number: 9708 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x306c [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447739, TSecr 523538
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 68]
[The RTT to ACK the segment was: 0.133968000 seconds]
Internet Relay Chat
Response: .il.cable.rcn.com irc.freenode.net phrakture H :0 Aaron Griffin
Response: :sterling.freenode.net 352 snollox #archlinux i=oktane shell.node.fi irc.freenode.net Oktane H :0 Henri Violin
Response: :sterling.freenode.net 352 snollox #archlinux n=piie-fn HSI-KBW-082-212-056-251.hsi.kabelbw.de irc.freenode.net piie G :0 piie-fn
Response: :sterling.freenode.net 352 snollox #archlinux i=freenode vill.du.vara.min.snuttefilt.org irc.freenode.net aakerlind G :0 *
Response: :sterling.freenode.net 352 snollox #archlinux n=torsten local.torstenvdb.nl irc.freenode.net torsten H :0 torsten
Response: :sterling.freenode.net 352 snollox #archlinux n=nik62591 c-71-57-63-227.hsd1.il.comcast.net irc.freenode.net nik62591 H :0 Niko
Response: :sterling.freenode.net 352 snollox #archlinux n=truck cube.lomal.la irc.freenode.net lastebil H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=martibs m026h.studby.ntnu.no irc.freenode.net martibs H :0 Martin Bruset Solberg
Response: :sterling.freenode.net 352 snollox #archlinux n=dieter 83.217.70.225 irc.freenode.net Dieter H :0 Dieter Verhelst
Response: :sterling.freenode.net 352 snollox #archlinux i=virus84 heizenberg.ds.karen.hj.se irc.freenode.net virus84| G :0 virus84
Response: :sterling.freenode.net 352 snollox #archlinux n=trigger h201n7c1o1043.bredband.skanova.com irc.freenode.net trigger_ H :0 trigger
Response: :sterling.freenode.net 352 snollox #archlinux n=admin 60-240-81-28-nsw-pppoe.tpgi.com.au irc.freenode.net markc_ G :0 Mark Constable
Response: :sterling.freenode.net 3
No. Time Source Destination Protocol Info
70 22.756671 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=9708 Win=501 Len=0 TSV=523578 TSER=219447739
Frame 70 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.007352000
[Time delta from previous packet: 0.000026000 seconds]
[Time since reference or first frame: 22.756671000 seconds]
Frame Number: 70
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa18c (41356)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bea [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 9708, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 9708 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xf09c [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523578, TSecr 219447739
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 69]
[The RTT to ACK the segment was: 0.000026000 seconds]
No. Time Source Destination Protocol Info
71 22.764561 212.204.214.114 192.168.1.102 IRC Response
Frame 71 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.015242000
[Time delta from previous packet: 0.007890000 seconds]
[Time since reference or first frame: 22.764561000 seconds]
Frame Number: 71
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 7D8B288F
Frame check sequence: 0xbaa1654e [incorrect, should be 0xfde5ac26]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x94ff (38143)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42d7 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 9708, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 9708 (relative sequence number)
[Next sequence number: 11148 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xefe1 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447739, TSecr 523538
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 70]
[The RTT to ACK the segment was: 0.007890000 seconds]
Internet Relay Chat
Response: 52 snollox #archlinux n=AqD 220-134-43-38.HINET-IP.hinet.net irc.freenode.net AqD H :0 AqD
Response: :sterling.freenode.net 352 snollox #archlinux n=jz modemcable163.130-37-24.mc.videotron.ca irc.freenode.net johnzorn H :0 j z
Response: :sterling.freenode.net 352 snollox #archlinux n=bob 89.96-84-212.ippool.ndo.com irc.freenode.net cotton4 H :0 bob
Response: :sterling.freenode.net 352 snollox #archlinux n=jwf c-24-23-187-112.hsd1.mn.comcast.net irc.freenode.net wide-eye H :0 wide
Response: :sterling.freenode.net 352 snollox #archlinux n=Caleb unaffiliated/caleb/x-000007 irc.freenode.net Caleb H :0 Caleb Jacobs
Response: :sterling.freenode.net 352 snollox #archlinux n=jani ppp52-53.lns1.cbr1.internode.on.net irc.freenode.net finn H :0 Jani Talikka
Response: :sterling.freenode.net 352 snollox #archlinux n=Desu 70.255.39.17 irc.freenode.net BadWolf H :0 Dick
Response: :sterling.freenode.net 352 snollox #archlinux n=shao 84.129.188.129 irc.freenode.net kelnoky H :0 shao
Response: :sterling.freenode.net 352 snollox #archlinux n=_pi ool-43577af4.dyn.optonline.net irc.freenode.net _pi H :0 Paul Ignatenko
Response: :sterling.freenode.net 352 snollox #archlinux n=AppleFar 5571fda5.ftth.concepts.nl irc.freenode.net deadfart H :0 FartTard
Response: :sterling.freenode.net 352 snollox #archlinux n=rob 213.143.93.185 irc.freenode.net AntiLaVista H :0 Rob Blandford
Response: :sterling.freenode.net 352 snollox #archlinux n=vegai 217.112.249.62 irc.freenode.net vegai H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=en
No. Time Source Destination Protocol Info
72 22.764580 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=11148 Win=501 Len=0 TSV=523580 TSER=219447739
Frame 72 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.015261000
[Time delta from previous packet: 0.000019000 seconds]
[Time since reference or first frame: 22.764580000 seconds]
Frame Number: 72
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa18d (41357)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be9 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 11148, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 11148 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xeafa [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523580, TSecr 219447739
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 71]
[The RTT to ACK the segment was: 0.000019000 seconds]
No. Time Source Destination Protocol Info
73 22.774361 212.204.214.114 192.168.1.102 IRC Response
Frame 73 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.025042000
[Time delta from previous packet: 0.009781000 seconds]
[Time since reference or first frame: 22.774361000 seconds]
Frame Number: 73
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 46AD7B65
Frame check sequence: 0xa9f2fce1 [incorrect, should be 0xccbb719f]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9500 (38144)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42d6 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 11148, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 11148 (relative sequence number)
[Next sequence number: 12588 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x99d1 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447740, TSecr 523540
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 72]
[The RTT to ACK the segment was: 0.009781000 seconds]
Internet Relay Chat
Response: dymion thetys-retz.net irc.freenode.net Selection37 G :0 Vincent-Xavier JUMEL
Response: :sterling.freenode.net 352 snollox #archlinux n=rehto k33.ip5.netikka.fi irc.freenode.net Rehto G :0 Pasi Rehtonen
Response: :sterling.freenode.net 352 snollox #archlinux n=nsloan unaffiliated/iamethos irc.freenode.net IamEthos H :0 Nicholas Sloan
Response: :sterling.freenode.net 352 snollox #archlinux n=jofa hstad-220-175-209-82.3.cust.bredband2.com irc.freenode.net jofa H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=vardyr ip24-255-151-241.ks.ks.cox.net irc.freenode.net Vardyr H :0 Vardyr
Response: :sterling.freenode.net 352 snollox #archlinux n=joe c-68-61-240-49.hsd1.mi.comcast.net irc.freenode.net Deformative H :0 joe
Response: :sterling.freenode.net 352 snollox #archlinux n=qmaster 76.20.244.249 irc.freenode.net Quest-Master H :0 qm
Response: :sterling.freenode.net 352 snollox #archlinux n=lilltige 82.145.152.207 irc.freenode.net lilltiger H :0 Lilltiger
Response: :sterling.freenode.net 352 snollox #archlinux n=wolf4914 pool-71-162-233-78.phlapa.fios.verizon.net irc.freenode.net Volkodav H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=aep unaffiliated/aep irc.freenode.net aep G :0 Arvid Picciani
Response: :sterling.freenode.net 352 snollox #archlinux n=opqdonut ip217-64-180-12.customer.academica.fi irc.freenode.net opqdonut_ H :0 Joel Kaasinen
Response: :sterling.freenode.net 352 snollox #archlinux n=omp gentoo/developer/omp irc.freenode.net omp H :0 David Shakaryan
Response: :sterlin
No. Time Source Destination Protocol Info
74 22.774378 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=12588 Win=501 Len=0 TSV=523582 TSER=219447740
Frame 74 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.025059000
[Time delta from previous packet: 0.000017000 seconds]
[Time since reference or first frame: 22.774378000 seconds]
Frame Number: 74
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa18e (41358)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be8 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 12588, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 12588 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xe557 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523582, TSecr 219447740
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 73]
[The RTT to ACK the segment was: 0.000017000 seconds]
No. Time Source Destination Protocol Info
75 22.782274 212.204.214.114 192.168.1.102 IRC Response
Frame 75 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.032955000
[Time delta from previous packet: 0.007896000 seconds]
[Time since reference or first frame: 22.782274000 seconds]
Frame Number: 75
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 40A894D8
Frame check sequence: 0xb12d6adc [incorrect, should be 0xf27aa9aa]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9501 (38145)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42d5 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 12588, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 12588 (relative sequence number)
[Next sequence number: 14028 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x48a2 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447740, TSecr 523540
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 74]
[The RTT to ACK the segment was: 0.007896000 seconds]
Internet Relay Chat
Response: g.freenode.net 352 snollox #archlinux n=f unaffiliated/f irc.freenode.net F H :0 Manny Calavera
Response: :sterling.freenode.net 352 snollox #archlinux n=jani matolaatikko.yok.utu.fi irc.freenode.net alfauros H :0 alfauros
Response: :sterling.freenode.net 352 snollox #archlinux n=benom 0x5550a893.adsl.cybercity.dk irc.freenode.net mini_benom H :0 Benny Jensen
Response: :sterling.freenode.net 352 snollox #archlinux n=riwa c-c216e455.016-163-6c756e10.cust.bredbandsbolaget.se irc.freenode.net riwa H :0 Richard JR Wallnerstr?m
Response: :sterling.freenode.net 352 snollox #archlinux n=Stijn sd51117b0.adsl.wanadoo.nl irc.freenode.net Stijn H :0 Stijn '_eLMo_' Spijker
Response: :sterling.freenode.net 352 snollox #archlinux n=ten13 unaffiliated/tenthirteen irc.freenode.net tenthirteen H :0 tenthirteen
Response: :sterling.freenode.net 352 snollox #archlinux n=slubman AGrenoble-257-1-53-150.w86-206.abo.wanadoo.fr irc.freenode.net slubman H :0 John Doe
Response: :sterling.freenode.net 352 snollox #archlinux n=stonecre archlinux/user/pdpc.student.stonecrest irc.freenode.net stonecrest H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=home r190-64-112-23.dialup.adsl.anteldata.net.uy irc.freenode.net sebazzz H :0 home
Response: :sterling.freenode.net 352 snollox #archlinux n=kingsley h-68-167-68-84.nycmny83.dynamic.covad.net irc.freenode.net kingsleyk H :0 Richard Kingsley Kishore
Response: :sterling.freenode.net 352 snollox #archlinux i=bjorn archlinux.no irc.freenode.net bjornh H :0 Bj\370rn
Response: :sterl
No. Time Source Destination Protocol Info
76 22.782286 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=16 Ack=14028 Win=501 Len=0 TSV=523584 TSER=219447740
Frame 76 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.032967000
[Time delta from previous packet: 0.000012000 seconds]
[Time since reference or first frame: 22.782286000 seconds]
Frame Number: 76
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa18f (41359)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be7 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 14028, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
Acknowledgement number: 14028 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xdfb5 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523584, TSecr 219447740
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 75]
[The RTT to ACK the segment was: 0.000012000 seconds]
No. Time Source Destination Protocol Info
77 22.784187 192.168.1.102 212.204.214.114 IRC Request
Frame 77 (86 bytes on wire, 86 bytes captured)
Arrival Time: May 20, 2007 22:08:32.034868000
[Time delta from previous packet: 0.001901000 seconds]
[Time since reference or first frame: 22.784187000 seconds]
Frame Number: 77
Packet Length: 86 bytes
Capture Length: 86 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 72
Identification: 0xa190 (41360)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bd2 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 16, Ack: 14028, Len: 20
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 16 (relative sequence number)
[Next sequence number: 36 (relative sequence number)]
Acknowledgement number: 14028 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xd65b [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523585, TSecr 219447740
Internet Relay Chat
Request: PING LAG2604580844
No. Time Source Destination Protocol Info
78 22.792162 212.204.214.114 192.168.1.102 IRC Response
Frame 78 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.042843000
[Time delta from previous packet: 0.007975000 seconds]
[Time since reference or first frame: 22.792162000 seconds]
Frame Number: 78
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 3B5B766C
Frame check sequence: 0x083a1016 [incorrect, should be 0xe58d8267]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9503 (38147)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42d3 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 14028, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 14028 (relative sequence number)
[Next sequence number: 15468 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xa93e [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447741, TSecr 523542
Internet Relay Chat
Response: ing.freenode.net 352 snollox #archlinux n=lanjelot host.104.92.68.195.rev.coltfrance.com irc.freenode.net lanjelot H :0 lanjelot
Response: :sterling.freenode.net 352 snollox #archlinux n=rdesh unaffiliated/rdesh irc.freenode.net rdesh H :0 rdesh
Response: :sterling.freenode.net 352 snollox #archlinux n=solstice d83-179-160-198.cust.tele2.fr irc.freenode.net solsTiCe H :0 solstice
Response: :sterling.freenode.net 352 snollox #archlinux i=husiatyn oceanic.wsisiz.edu.pl irc.freenode.net Husio H :0 server
Response: :sterling.freenode.net 352 snollox #archlinux n=dexterr ua-83-227-175-53.cust.bredbandsbolaget.se irc.freenode.net dexterr H :0 dexterr
Response: :sterling.freenode.net 352 snollox #archlinux n=Cif 88-149-213-143.f5.ngi.it irc.freenode.net Cif_ H :0 Cif
Response: :sterling.freenode.net 352 snollox #archlinux n=stillunk 212-182-130-7.dsl.ip.tiscali.nl irc.freenode.net stillunknown H :0 stillunknown
Response: :sterling.freenode.net 352 snollox #archlinux n=valcom ip-213-49-83-66.dsl.scarlet.be irc.freenode.net valcom H :0 valcom - GNUnation.org
Response: :sterling.freenode.net 352 snollox #archlinux i=mifo cray.x86.sk irc.freenode.net mifo H :0 Michal Fojtik
Response: :sterling.freenode.net 352 snollox #archlinux n=avatar S01060016b619b87e.lb.shawcable.net irc.freenode.net TheOmnip0tentWan H :0 Greg Tees
Response: :sterling.freenode.net 352 snollox #archlinux i=enderst gateway/tor/x-afc037d3b7fe9cc7 irc.freenode.net enderst H :0 enderst
Response: :sterling.freenode.net 352 snollox #archlinux n=denis dslb-084-
No. Time Source Destination Protocol Info
79 22.800099 212.204.214.114 192.168.1.102 IRC Response
Frame 79 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.050780000
[Time delta from previous packet: 0.007937000 seconds]
[Time since reference or first frame: 22.800099000 seconds]
Frame Number: 79
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: A1BFB53B
Frame check sequence: 0x9adbb164 [incorrect, should be 0x6c6b106b]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9504 (38148)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42d2 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 15468, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 15468 (relative sequence number)
[Next sequence number: 16908 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xcf96 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447741, TSecr 523542
Internet Relay Chat
Response: 058-243-065.pools.arcor-ip.net irc.freenode.net DenisG H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=wtfoo p508ec86a.dip.t-dialin.net irc.freenode.net amon_ G :0 Amon Shi
Response: :sterling.freenode.net 352 snollox #archlinux n=xav unaffiliated/shining irc.freenode.net shining H :0 xav
Response: :sterling.freenode.net 352 snollox #archlinux i=alexis gateway/tor/x-a0b269423fb2fb5b irc.freenode.net uriahheep H :0 alexis
Response: :sterling.freenode.net 352 snollox #archlinux n=WiseMonk is.da-bom.com irc.freenode.net MonkeyINAbaG H :0 Smell No Evil
Response: :sterling.freenode.net 352 snollox #archlinux n=jasser adsl-75-50-6-190.dsl.bcvloh.sbcglobal.net irc.freenode.net redphoenix1 H :0 jasser
Response: :sterling.freenode.net 352 snollox #archlinux i=lamperi shell.paivola.fi irc.freenode.net Lamperi_ G :0 Toni Lamberg
Response: :sterling.freenode.net 352 snollox #archlinux n=nerd 60.229.183.9 irc.freenode.net p[j]aN G :0 whut
Response: :sterling.freenode.net 352 snollox #archlinux n=rewt ip68-12-173-115.ok.ok.cox.net irc.freenode.net skarface G :0 antix
Response: :sterling.freenode.net 352 snollox #archlinux n=zybl0re S010600112f8c4e0a.gv.shawcable.net irc.freenode.net zybl0re H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=chris-fn acez-denied.org irc.freenode.net acez H :0 chris-fn
Response: :sterling.freenode.net 352 snollox #archlinux n=queueRAM 66-188-107-25.dhcp.mdsn.wi.charter.com irc.freenode.net queueRAM H :0 queueRAM
Response: :sterling.freenode.net 352 snollox #archl
No. Time Source Destination Protocol Info
80 22.800119 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=16908 Win=501 Len=0 TSV=523589 TSER=219447741
Frame 80 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.050800000
[Time delta from previous packet: 0.000020000 seconds]
[Time since reference or first frame: 22.800119000 seconds]
Frame Number: 80
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa191 (41361)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be5 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 16908, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 16908 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xd45b [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523589, TSecr 219447741
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 79]
[The RTT to ACK the segment was: 0.000020000 seconds]
No. Time Source Destination Protocol Info
81 22.809989 212.204.214.114 192.168.1.102 IRC Response
Frame 81 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.060670000
[Time delta from previous packet: 0.009870000 seconds]
[Time since reference or first frame: 22.809989000 seconds]
Frame Number: 81
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: D51789FA
Frame check sequence: 0x4f075453 [incorrect, should be 0x5a14840a]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9505 (38149)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42d1 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 16908, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 16908 (relative sequence number)
[Next sequence number: 18348 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xa8c2 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447742, TSecr 523544
Internet Relay Chat
Response: inux n=linux sou.benvinguts.al.xat.de.irc-catalunya.org irc.freenode.net PRAEDO H :0 :-)
Response: :sterling.freenode.net 352 snollox #archlinux n=pilt c-b4a5e255.039-64-73766c1.cust.bredbandsbolaget.se irc.freenode.net pilt G :0 Simon
Response: :sterling.freenode.net 352 snollox #archlinux n=huma 89.19.167.191 irc.freenode.net huma H :0 huma
Response: :sterling.freenode.net 352 snollox #archlinux i=n3il creep.bur.st irc.freenode.net nbags_ H :0 nbags
Response: :sterling.freenode.net 352 snollox #archlinux n=wingot 202-89-185-199.static.dsl.amnet.net.au irc.freenode.net wingot H :0 wingot
Response: :sterling.freenode.net 352 snollox #archlinux n=ead rrcs-24-199-147-14.midsouth.biz.rr.com irc.freenode.net ead G :0 Erik Daughtrey
Response: :sterling.freenode.net 352 snollox #archlinux n=danalien unaffiliated/danalien irc.freenode.net danalien H :0 danalien
Response: :sterling.freenode.net 352 snollox #archlinux n=ircubic ti231210a340-3247.bb.online.no irc.freenode.net irCuBiC H :0 irCuBiC
Response: :sterling.freenode.net 352 snollox #archlinux n=mxd unaffiliated/mindlessxd irc.freenode.net MindlessXD H :0 MindlessXD, the ArchLinux user
Response: :sterling.freenode.net 352 snollox #archlinux i=never C239-209.surffi.net irc.freenode.net Neverther H :0 Crack in childs toy
Response: :sterling.freenode.net 352 snollox #archlinux n=Xilon udsl-4-146.WA.dft.com.au irc.freenode.net Xilon H :0 Xilon
Response: :sterling.freenode.net 352 snollox #archlinux n=symtab 193.230.207.150 irc.freenode.net symtab H :0 Adrian Teodor
Response: :st
No. Time Source Destination Protocol Info
82 22.817773 212.204.214.114 192.168.1.102 IRC Response
Frame 82 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.068454000
[Time delta from previous packet: 0.007784000 seconds]
[Time since reference or first frame: 22.817773000 seconds]
Frame Number: 82
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 35575695
Frame check sequence: 0xef6d2548 [incorrect, should be 0x94557f33]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9506 (38150)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42d0 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 18348, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 18348 (relative sequence number)
[Next sequence number: 19788 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xc485 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447742, TSecr 523544
Internet Relay Chat
Response: erling.freenode.net 352 snollox #archlinux i=ariel gateway/tor/x-a80d76ac45116cbd irc.freenode.net saratoga1 H :0 mIRC
Response: :sterling.freenode.net 352 snollox #archlinux i=chii freenode/bot/chii irc.freenode.net chii H :0 Chii (Hideki is the hentai in all of us)
Response: :sterling.freenode.net 352 snollox #archlinux n=cmauch 0018f85fd9ce.click-network.com irc.freenode.net xterminus G :0 Charles Mauch
Response: :sterling.freenode.net 352 snollox #archlinux n=crouse 67.15.6.98 irc.freenode.net crouse H :0 crouse
Response: :sterling.freenode.net 352 snollox #archlinux i=nauski nauski.nbl.fi irc.freenode.net nauski G :0 Juha Kesti
Response: :sterling.freenode.net 352 snollox #archlinux i=vexocide snail.stack.nl irc.freenode.net VeXocide H :0 VeXocide
Response: :sterling.freenode.net 352 snollox #archlinux i=julankin jumi.lut.fi irc.freenode.net lanxu H :0 Jukka Lankinen
Response: :sterling.freenode.net 352 snollox #archlinux n=essy freenode/staff/sportchick irc.freenode.net SportChick G :0 SC
Response: :sterling.freenode.net 352 snollox #archlinux n=CruX soueza.utc.sk irc.freenode.net CruX| G :0 CruX
Response: :sterling.freenode.net 352 snollox #archlinux n=rmbl h868189.serverkompetenz.net irc.freenode.net rmbl`off H :0 rmbl on freenode
Response: :sterling.freenode.net 352 snollox #archlinux n=pumperni about/essy/bacon/PuMpErNiCkLe irc.freenode.net Pumpernickel H :0 Pumpernickel
Response: :sterling.freenode.net 352 snollox #archlinux n=Christ 69.62.232.46 irc.freenode.net aarcane H :0 Christ Schlacta
Response: :sterling.
No. Time Source Destination Protocol Info
83 22.817787 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=19788 Win=501 Len=0 TSV=523593 TSER=219447742
Frame 83 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.068468000
[Time delta from previous packet: 0.000014000 seconds]
[Time since reference or first frame: 22.817787000 seconds]
Frame Number: 83
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa192 (41362)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be4 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 19788, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 19788 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xc916 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523593, TSecr 219447742
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 82]
[The RTT to ACK the segment was: 0.000014000 seconds]
No. Time Source Destination Protocol Info
84 22.916331 212.204.214.114 192.168.1.102 IRC Response
Frame 84 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.167012000
[Time delta from previous packet: 0.098544000 seconds]
[Time since reference or first frame: 22.916331000 seconds]
Frame Number: 84
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: C6528DDE
Frame check sequence: 0x2c110598 [incorrect, should be 0x2f08bbbd]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9517 (38167)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42bf [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 19788, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 19788 (relative sequence number)
[Next sequence number: 21228 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x392a [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447755, TSecr 523578
Internet Relay Chat
Response: freenode.net 352 snollox #archlinux n=damjan 217.16.68.253 irc.freenode.net _damjan_ G :0 Damjan Georgievski
Response: :sterling.freenode.net 352 snollox #archlinux n=jason^ unaffiliated/jason/x-0000002 irc.freenode.net jason^ H :0 jinglebellrock
Response: :sterling.freenode.net 352 snollox #archlinux n=jk a83-245-177-79.elisa-laajakaista.fi irc.freenode.net tabasko H :0 Joni Kurunsaari
Response: :sterling.freenode.net 352 snollox #archlinux i=tuukka re.corded.org irc.freenode.net ragdi H :0 O_O
Response: :sterling.freenode.net 352 snollox #archlinux n=lunix 125.168.64.14 irc.freenode.net _lunix_ H :0 Mick
Response: :sterling.freenode.net 352 snollox #archlinux n=bug unaffiliated/bug2000 irc.freenode.net Bug2000 H :0 bug
Response: :sterling.freenode.net 352 snollox #archlinux n=xtc pc-126-11-214-201.cm.vtr.net irc.freenode.net xtc H :0 xtc
Response: :sterling.freenode.net 352 snollox #archlinux n=johnfree netblock-68-183-120-6.dslextreme.com irc.freenode.net johnfreez H :0 johnfreez
Response: :sterling.freenode.net 352 snollox #archlinux n=tapi chupachups.syskall.net irc.freenode.net tapi G :0 Knowledge is Power
Response: :sterling.freenode.net 352 snollox #archlinux n=none 66.184.168.194 irc.freenode.net ncognito H :0 Richard Moreland
Response: :sterling.freenode.net 352 snollox #archlinux n=kastor 190.48.41.179 irc.freenode.net kastor H :0 kastor
Response: :sterling.freenode.net 352 snollox #archlinux n=ianweb dsl-220-235-22-192.wa.westnet.com.au irc.freenode.net LSD` H :0 Ian Weber
Response: :sterling.freenode.net 352 s
No. Time Source Destination Protocol Info
85 22.924163 212.204.214.114 192.168.1.102 IRC Response
Frame 85 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.174844000
[Time delta from previous packet: 0.007832000 seconds]
[Time since reference or first frame: 22.924163000 seconds]
Frame Number: 85
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: F2B468FE
Frame check sequence: 0xbab5b31d [incorrect, should be 0x0e79d33a]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9518 (38168)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42be [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 21228, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 21228 (relative sequence number)
[Next sequence number: 22668 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x63d1 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447755, TSecr 523578
Internet Relay Chat
Response: nollox #archlinux n=SrRaven xion.phxhost.net irc.freenode.net SrRaven H :0 SrRaven
Response: :sterling.freenode.net 352 snollox #archlinux n=L0cutus 88-149-232-25.f5.ngi.it irc.freenode.net L0cutus G :0 Stefano
Response: :sterling.freenode.net 352 snollox #archlinux n=et feynman.fachschaft.physik.tu-darmstadt.de irc.freenode.net et H :0 Stefan Walk
Response: :sterling.freenode.net 352 snollox #archlinux n=dennis 143.106.167.132 irc.freenode.net darkmug[work] G :0 Dennis E. Bachmann
Response: :sterling.freenode.net 352 snollox #archlinux n=quad3d 12.110.209.75 irc.freenode.net gangsterlicious H :0 terii
Response: :sterling.freenode.net 352 snollox #archlinux n=aaron nj-67-77-244-215.dyn.embarqhsd.net irc.freenode.net aaronf0 G :0 aaron
Response: :sterling.freenode.net 352 snollox #archlinux n=leo lvps87-230-12-211.dedicated.hosteurope.de irc.freenode.net LeoD H :0 leo
Response: :sterling.freenode.net 352 snollox #archlinux n=peh 199.14.88.81.esplanaden.res.dyn.perspektivbredband.net irc.freenode.net peh H :0 Per Hedetun
Response: :sterling.freenode.net 352 snollox #archlinux n=solapus 66.90.121.129 irc.freenode.net sabakas1 H :0 It's Me
Response: :sterling.freenode.net 352 snollox #archlinux n=nothlit fluxbuntu/developer/nothlit irc.freenode.net nothlit H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=caust1c a207.wh-wieland.uni-ulm.de irc.freenode.net GNU\caust1c H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=gret archlinux/developer/dorphell irc.freenode.net dorphell
No. Time Source Destination Protocol Info
86 22.924178 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=22668 Win=501 Len=0 TSV=523620 TSER=219447755
Frame 86 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.174859000
[Time delta from previous packet: 0.000015000 seconds]
[Time since reference or first frame: 22.924178000 seconds]
Frame Number: 86
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa193 (41363)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be3 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 22668, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 22668 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xbdae [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523620, TSecr 219447755
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 85]
[The RTT to ACK the segment was: 0.000015000 seconds]
No. Time Source Destination Protocol Info
87 22.934024 212.204.214.114 192.168.1.102 IRC Response
Frame 87 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.184705000
[Time delta from previous packet: 0.009846000 seconds]
[Time since reference or first frame: 22.934024000 seconds]
Frame Number: 87
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 9AAC2056
Frame check sequence: 0xb7b8fb5c [incorrect, should be 0xc1be6790]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x952d (38189)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42a9 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 22668, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 22668 (relative sequence number)
[Next sequence number: 24108 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x55a3 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447756, TSecr 523580
Internet Relay Chat
Response: H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux i=kekimmo kapsi.fi irc.freenode.net kekimmo G :0 Kimmo Kenttala
Response: :sterling.freenode.net 352 snollox #archlinux n=pfleidi roothausen.de irc.freenode.net pfleidi85 H :0 blubb
Response: :sterling.freenode.net 352 snollox #archlinux i=mozz dsl-tkubras1-ff2cc300-88.dhcp.inet.fi irc.freenode.net Mozz H :0 Tatu Sepp\303\244-Lassila
Response: :sterling.freenode.net 352 snollox #archlinux i=darkz ragnarok.exclusionzone.org irc.freenode.net Darkz G :0 Kai Jumpponen
Response: :sterling.freenode.net 352 snollox #archlinux i=meckafet c-b5c872d5.036-13-73746f36.cust.bredbandsbolaget.se irc.freenode.net Meckafett G :0 Mecka
Response: :sterling.freenode.net 352 snollox #archlinux i=loosec nl101-219-80.student.uu.se irc.freenode.net loosec H :0 loosec
Response: :sterling.freenode.net 352 snollox #archlinux i=michiel SAP.hating.biz irc.freenode.net Michiel` G :0 Michiel
Response: :sterling.freenode.net 352 snollox #archlinux n=buckfunk static-ip-62-75-149-52.inaddr.intergenia.de irc.freenode.net digital_ H :0 buckfunk
Response: :sterling.freenode.net 352 snollox #archlinux n=tyler S010600105aa54812.vf.shawcable.net irc.freenode.net tsp H :0 User Tyler
Response: :sterling.freenode.net 352 snollox #archlinux n=popcorn 60-242-2-112.static.tpgi.com.au irc.freenode.net Tatey H :0 Popcorn
Response: :sterling.freenode.net 352 snollox #archlinux n=jprice cpe-66-67-98-123.rochester.res.rr.com irc.freenode.net Teshadael H :0 gaim
Response: :sterling.freenode.net 352 snollox #arch
No. Time Source Destination Protocol Info
88 22.941924 212.204.214.114 192.168.1.102 IRC Response
Frame 88 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.192605000
[Time delta from previous packet: 0.007900000 seconds]
[Time since reference or first frame: 22.941924000 seconds]
Frame Number: 88
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: EA2AC6A5
Frame check sequence: 0x67988c05 [incorrect, should be 0xef7a86b9]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x952e (38190)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x42a8 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 24108, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 24108 (relative sequence number)
[Next sequence number: 25548 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xd3ed [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447756, TSecr 523580
Internet Relay Chat
Response: linux n=brebbesv ti400720a080-16052.bb.online.no irc.freenode.net Mellar H :0 Ben-Richard Ebbesvik
Response: :sterling.freenode.net 352 snollox #archlinux n=svinkels pir44-3-88-165-20-85.fbx.proxad.net irc.freenode.net svinkels H :0 svinkels
Response: :sterling.freenode.net 352 snollox #archlinux n=rayde das11.das.psu.edu irc.freenode.net rayde H :0 rayde
Response: :sterling.freenode.net 352 snollox #archlinux n=vaxaren adsl-36-5.regionline.fi irc.freenode.net Vaxu H :0 Daniel K
Response: :sterling.freenode.net 352 snollox #archlinux n=imachine 2002:8110:8acb:0:0:0:0:1 irc.freenode.net imachine H :0 Mateusz J\304\231drasik
Response: :sterling.freenode.net 352 snollox #archlinux n=mulander nat-4.interq.pl irc.freenode.net mulander H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=weechat archlinux/developer/cerebra1 irc.freenode.net cerebra1 H :0 Travis
Response: :sterling.freenode.net 352 snollox #archlinux n=iaguis 38.Red-83-37-167.dynamicIP.rima-tde.net irc.freenode.net ArTo H :0 iaguis
Response: :sterling.freenode.net 352 snollox #archlinux n=purch a88-113-119-229.elisa-laajakaista.fi irc.freenode.net Purch H :0 purch
Response: :sterling.freenode.net 352 snollox #archlinux n=sabooky ip72-205-49-164.dc.dc.cox.net irc.freenode.net sabooky H :0 User Sabooky
Response: :sterling.freenode.net 352 snollox #archlinux n=dag unaffiliated/rixxon irc.freenode.net rixxon H :0 Dag Odenhall
Response: :sterling.freenode.net 352 snollox #archlinux n=LMX c-11b0e655.912-12-64736c14.cust.bredbandsbolaget.se irc.free
No. Time Source Destination Protocol Info
89 22.941935 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=25548 Win=501 Len=0 TSV=523624 TSER=219447756
Frame 89 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.192616000
[Time delta from previous packet: 0.000011000 seconds]
[Time since reference or first frame: 22.941935000 seconds]
Frame Number: 89
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa194 (41364)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be2 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 25548, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 25548 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xb269 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523624, TSecr 219447756
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 88]
[The RTT to ACK the segment was: 0.000011000 seconds]
No. Time Source Destination Protocol Info
90 22.949922 212.204.214.114 192.168.1.102 IRC Response
Frame 90 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.200603000
[Time delta from previous packet: 0.007987000 seconds]
[Time since reference or first frame: 22.949922000 seconds]
Frame Number: 90
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 01F35C18
Frame check sequence: 0x9ac8265a [incorrect, should be 0xe1f8d188]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9541 (38209)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x4295 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 25548, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 25548 (relative sequence number)
[Next sequence number: 26988 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x4676 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447757, TSecr 523582
Internet Relay Chat
Response: node.net caas H :0 LMX
Response: :sterling.freenode.net 352 snollox #archlinux n=revellio h-243-92.A182.cust.bahnhof.se irc.freenode.net Revellion G :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux i=39905 klodrik.uio.no irc.freenode.net idjut H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=tb c-431772d5.09-42-73746f22.cust.bredbandsbolaget.se irc.freenode.net TBCOOL H :0 tb
Response: :sterling.freenode.net 352 snollox #archlinux n=noidentd shadow.splashground.de irc.freenode.net buggs H :0 Andreas Hauser
Response: :sterling.freenode.net 352 snollox #archlinux n=omp smtp.gentoo.org irc.freenode.net ompty H :0 David Shakaryan
Response: :sterling.freenode.net 352 snollox #archlinux n=m 62.121.80.82 irc.freenode.net _m H :0 m
Response: :sterling.freenode.net 352 snollox #archlinux i=rehto kapsi.fi irc.freenode.net Rehto- G :0 Pasi Rehtonen
Response: :sterling.freenode.net 352 snollox #archlinux n=ellion 85.88.17.198 irc.freenode.net ellion G :0 Daniel
Response: :sterling.freenode.net 352 snollox #archlinux i=sander robbasten.eu irc.freenode.net snader G :0 Sander Zwier
Response: :sterling.freenode.net 352 snollox #archlinux i=rockj sinope.tihlde.org irc.freenode.net Rockj H :0 Rockj
Response: :sterling.freenode.net 352 snollox #archlinux n=pxi 213.141.99.195 irc.freenode.net pxi_ H :0 Pekka Heino
Response: :sterling.freenode.net 352 snollox #archlinux n=navik nazgul.lysator.liu.se irc.freenode.net navik G :0 DISCOTAJM
Response: :sterling.freenode.net 352 snollox #archlinux i=bylkki tohveli.org
No. Time Source Destination Protocol Info
91 22.959626 212.204.214.114 192.168.1.102 IRC Response
Frame 91 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.210307000
[Time delta from previous packet: 0.009704000 seconds]
[Time since reference or first frame: 22.959626000 seconds]
Frame Number: 91
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: BEB0A8A4
Frame check sequence: 0x90aee3df [incorrect, should be 0xd2cb43a7]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9542 (38210)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x4294 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 26988, Ack: 16, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 26988 (relative sequence number)
[Next sequence number: 28428 (relative sequence number)]
Acknowledgement number: 16 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xef28 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447758, TSecr 523584
Internet Relay Chat
Response: irc.freenode.net Bylkki G :0 Joel Pitkanen
Response: :sterling.freenode.net 352 snollox #archlinux n=rxvt unaffiliated/rxvt irc.freenode.net rxvt G :0 rxvt
Response: :sterling.freenode.net 352 snollox #archlinux n=varland jessika.bsnet.se irc.freenode.net varland H :0 Viktor Varland
Response: :sterling.freenode.net 352 snollox #archlinux i=pinnen japaner.leker.med.bajs.nu irc.freenode.net Pinnen H :0 pinnen
Response: :sterling.freenode.net 352 snollox #archlinux i=linked kapsi.fi irc.freenode.net Linked G :0 Jalmari
Response: :sterling.freenode.net 352 snollox #archlinux n=tburdick macserve.cs.uic.edu irc.freenode.net BrigadierFrog H :0 Tom Burdick
Response: :sterling.freenode.net 352 snollox #archlinux n=lartza IP-62-216-116-153.telemail.fi irc.freenode.net lartza H :0 Lauri J\303\244ntti
Response: :sterling.freenode.net 352 snollox #archlinux i=therion coruscant.ninth-art.de irc.freenode.net megaTherion H :0 therion
Response: :sterling.freenode.net 352 snollox #archlinux i=jpaalija irc.asuka.fi irc.freenode.net usv H :0 Mr. Janne Paalijarvi - http://iki.fi/jpaalija/
Response: :sterling.freenode.net 352 snollox #archlinux n=mosez nopaste.info irc.freenode.net mosez H :0 Thomas 'mosez' Boerger
Response: :sterling.freenode.net 352 snollox #archlinux n=tobias h5113.serverkompetenz.net irc.freenode.net neri H :0 Tobias Kieslich
Response: :sterling.freenode.net 352 snollox #archlinux n=stephen cpe-76-185-98-186.tx.res.rr.com irc.freenode.net stephelton H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux i=lkula orio
No. Time Source Destination Protocol Info
92 22.959638 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=28428 Win=501 Len=0 TSV=523628 TSER=219447757
Frame 92 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.210319000
[Time delta from previous packet: 0.000012000 seconds]
[Time since reference or first frame: 22.959638000 seconds]
Frame Number: 92
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa195 (41365)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be1 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 28428, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 28428 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0xa724 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523628, TSecr 219447757
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 91]
[The RTT to ACK the segment was: 0.000012000 seconds]
No. Time Source Destination Protocol Info
93 22.967552 212.204.214.114 192.168.1.102 IRC Response
Frame 93 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.218233000
[Time delta from previous packet: 0.007914000 seconds]
[Time since reference or first frame: 22.967552000 seconds]
Frame Number: 93
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: F84BE2DF
Frame check sequence: 0xd3a7b9b8 [incorrect, should be 0x3dea0fe4]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9546 (38214)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x4290 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 28428, Ack: 36, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 28428 (relative sequence number)
[Next sequence number: 29868 (relative sequence number)]
Acknowledgement number: 36 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xf590 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447760, TSecr 523585
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 77]
[The RTT to ACK the segment was: 0.183365000 seconds]
Internet Relay Chat
Response: n.histeria.pl irc.freenode.net c00lfon H :0 \243ukasz 'c00lfon' Kula
Response: :sterling.freenode.net 352 snollox #archlinux i=jpa 212.226.140.97 irc.freenode.net jpa- G :0 Petteri Aimonen
Response: :sterling.freenode.net 352 snollox #archlinux n=highland 193.10.185.247 irc.freenode.net High|ander H :0 Johan
Response: :sterling.freenode.net 352 snollox #archlinux n=unknown 250.80-202-105.nextgentel.com irc.freenode.net Bjoern-Erik H :0 Bj\303\270rn Erik
Response: :sterling.freenode.net 352 snollox #archlinux n=simo archlinux/developer/neotuli irc.freenode.net neotuli G :0 simo
Response: :sterling.freenode.net 352 snollox #archlinux n=aimka riq34-1-82-240-245-20.fbx.proxad.net irc.freenode.net aimka G :0 aimka
Response: :sterling.freenode.net 352 snollox #archlinux i=hifi pdpc/supporter/student/hifi irc.freenode.net hifi H :0 Toni Spets
Response: :sterling.freenode.net 352 snollox #archlinux i=sisu 84.248.222.179 irc.freenode.net Sisu H :0 Mikko Sysikaski
Response: :sterling.freenode.net 352 snollox #archlinux i=huijar jolt.modeemi.cs.tut.fi irc.freenode.net Huijari G :0 Jari Huilla
Response: :sterling.freenode.net 352 snollox #archlinux i=nalle gigabit.nu irc.freenode.net _nalle H :0 nalle
Response: :sterling.freenode.net 352 snollox #archlinux n=blokkie unaffiliated/blokkie irc.freenode.net blokkie H :0 blokkie
Response: :sterling.freenode.net 352 snollox #archlinux n=acura derby.johanneberg.com irc.freenode.net acura G :0 Rickard Gustafsson
Response: :sterling.freenode.net 352 snollox #archlinux n=txdv lan-84-240-60-47.vln.skynet
No. Time Source Destination Protocol Info
94 22.977419 212.204.214.114 192.168.1.102 IRC Response
Frame 94 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.228100000
[Time delta from previous packet: 0.009867000 seconds]
[Time since reference or first frame: 22.977419000 seconds]
Frame Number: 94
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 012E6D3F
Frame check sequence: 0xa65b772e [incorrect, should be 0xb565b353]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9547 (38215)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x428f [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 29868, Ack: 36, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 29868 (relative sequence number)
[Next sequence number: 31308 (relative sequence number)]
Acknowledgement number: 36 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x102a [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447760, TSecr 523585
Internet Relay Chat
Response: .lt irc.freenode.net ToXedVirus H :0 andrius
Response: :sterling.freenode.net 352 snollox #archlinux i=anders unaffiliated/anders1 irc.freenode.net Anders H :0 Anders Bergh
Response: :sterling.freenode.net 352 snollox #archlinux n=fgrano vipunen.hut.fi irc.freenode.net bassM H :0 Filip Grano
Response: :sterling.freenode.net 352 snollox #archlinux i=pat is.a.r0xor.net irc.freenode.net pat^ H :0 pat
Response: :sterling.freenode.net 352 snollox #archlinux i=coques boo.sk irc.freenode.net Coques H :0 dharmaux
Response: :sterling.freenode.net 352 snollox #archlinux n=krib a91-154-131-107.elisa-laajakaista.fi irc.freenode.net krib_ H :0 half mad, half insane
Response: :sterling.freenode.net 352 snollox #archlinux n=Melter dyn007.morrill-116.ndsu.NoDak.edu irc.freenode.net melter H :0 Melter
Response: :sterling.freenode.net 352 snollox #archlinux n=Strog unaffiliated/strog irc.freenode.net Strog H :0 strog
Response: :sterling.freenode.net 352 snollox #archlinux n=pierluig adsl-ull-245-55.42-151.net24.it irc.freenode.net pierluigi H :0 pierluigi
Response: :sterling.freenode.net 352 snollox #archlinux i=biio gigabit.nu irc.freenode.net biio G :0 biio
Response: :sterling.freenode.net 352 snollox #archlinux n=lbz c-24-9-8-200.hsd1.co.comcast.net irc.freenode.net ikss H :0 What If ?
Response: :sterling.freenode.net 352 snollox #archlinux n=Slash cpe-76-180-175-120.buffalo.res.rr.com irc.freenode.net Slashbunny H :0 SlashBunny
Response: :sterling.freenode.net 352 snollox #archlinux n=mincer unaffiliated/mincer irc.freenode.net MinceR G
No. Time Source Destination Protocol Info
95 22.977431 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=31308 Win=501 Len=0 TSV=523633 TSER=219447760
Frame 95 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.228112000
[Time delta from previous packet: 0.000012000 seconds]
[Time since reference or first frame: 22.977431000 seconds]
Frame Number: 95
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa196 (41366)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2be0 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 31308, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 31308 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x9bdc [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523633, TSecr 219447760
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 94]
[The RTT to ACK the segment was: 0.000012000 seconds]
No. Time Source Destination Protocol Info
96 22.985255 212.204.214.114 192.168.1.102 IRC Response
Frame 96 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:32.235936000
[Time delta from previous packet: 0.007824000 seconds]
[Time since reference or first frame: 22.985255000 seconds]
Frame Number: 96
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: CBACC983
Frame check sequence: 0x8d660ef9 [incorrect, should be 0xfa5aa635]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x9549 (38217)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x428d [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 31308, Ack: 36, Len: 1440
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 31308 (relative sequence number)
[Next sequence number: 32748 (relative sequence number)]
Acknowledgement number: 36 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x7e36 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447762, TSecr 523593
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 95]
[The RTT to ACK the segment was: 0.007824000 seconds]
Internet Relay Chat
Response: :0 .: Mincer Lightbringer :.
Response: :sterling.freenode.net 352 snollox #archlinux n=bud nl101-219-80.student.uu.se irc.freenode.net bud^ H :0 budsson
Response: :sterling.freenode.net 352 snollox #archlinux n=archbot archlinux/bot/phrik irc.freenode.net phrik H :0 phrik
Response: :sterling.freenode.net 352 snollox #archlinux n=glenn shared1.r14-1.lcp.opengate.be irc.freenode.net RedShiftLCP H :0 glenn
Response: :sterling.freenode.net 352 snollox #archlinux i=klette groovemovement.net irc.freenode.net klette H :0 Kristian Klette
Response: :sterling.freenode.net 352 snollox #archlinux i=cromo klej.net irc.freenode.net cromo H :0 cromo
Response: :sterling.freenode.net 352 snollox #archlinux n=kano c-68-61-37-24.hsd1.mi.comcast.net irc.freenode.net gt H :0 Greg Helton
Response: :sterling.freenode.net 352 snollox #archlinux n=bfinch c-68-35-80-5.hsd1.nm.comcast.net irc.freenode.net bfinch G :0 bfinch
Response: :sterling.freenode.net 352 snollox #archlinux n=mos adsl-230-94-167.mco.bellsouth.net irc.freenode.net mos__ H :0 mos
Response: :sterling.freenode.net 352 snollox #archlinux n=sdf adsl-69-149-35-252.dsl.rcsntx.swbell.net irc.freenode.net bongwater G :0 sdf
Response: :sterling.freenode.net 352 snollox #archlinux n=chpst3r bugged.keamera-labs.net irc.freenode.net k`sOSe H :0 keamera
Response: :sterling.freenode.net 352 snollox #archlinux n=luna thor.hrz.uni-oldenburg.de irc.freenode.net sirenia H :0 Corinne Schrickel
Response: :sterling.freenode.net 352 snollox #archlinux n=oggb4mp3 amarok/livecd/oggb4mp3 irc.freenode.ne
No. Time Source Destination Protocol Info
97 23.024133 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=32748 Win=501 Len=0 TSV=523645 TSER=219447762
Frame 97 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.274814000
[Time delta from previous packet: 0.038878000 seconds]
[Time since reference or first frame: 23.024133000 seconds]
Frame Number: 97
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa197 (41367)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bdf [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 32748, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 32748 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x962e [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523645, TSecr 219447762
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 96]
[The RTT to ACK the segment was: 0.038878000 seconds]
No. Time Source Destination Protocol Info
98 23.179798 212.204.214.114 192.168.1.102 IRC Response
Frame 98 (875 bytes on wire, 875 bytes captured)
Arrival Time: May 20, 2007 22:08:32.430479000
[Time delta from previous packet: 0.155665000 seconds]
[Time since reference or first frame: 23.179798000 seconds]
Frame Number: 98
Packet Length: 875 bytes
Capture Length: 875 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 7C461FB4
Frame check sequence: 0x0e73db3c [incorrect, should be 0xc42574b0]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 853
Identification: 0x9595 (38293)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x44c0 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 32748, Ack: 36, Len: 801
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 32748 (relative sequence number)
[Next sequence number: 33549 (relative sequence number)]
Acknowledgement number: 36 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x224f [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219447782, TSecr 523645
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 97]
[The RTT to ACK the segment was: 0.155665000 seconds]
Internet Relay Chat
Response: t oggb4mp3 H :0 oggb4mp3
Response: :sterling.freenode.net 352 snollox #archlinux n=jvinet S01060014bf328077.gv.shawcable.net irc.freenode.net apeiro H :0 Unknown
Response: :sterling.freenode.net 352 snollox #archlinux n=oldi fresno121.webperoni.de irc.freenode.net OldKid H :0 Matthias Sch\366nhals-E\337mann
Response: :sterling.freenode.net 352 snollox #archlinux n=disi_fn www.disi.info irc.freenode.net Disi H :0 disi_fn
Response: :sterling.freenode.net 352 snollox #archlinux n=Joentjuh 82-171-90-58.dsl.ip.tiscali.nl irc.freenode.net Joentjuh H :0 JoentjuhRomix
Response: :sterling.freenode.net 352 snollox #archlinux n=amelia ua-83-227-128-14.cust.bredbandsbolaget.se irc.freenode.net dhakela H :0 Amelia Nilsson
Response: :sterling.freenode.net 315 snollox #archlinux :End of /WHO list.
Response: :sterling.freenode.net PONG sterling.freenode.net :LAG2604580844
No. Time Source Destination Protocol Info
99 23.179835 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=33549 Win=501 Len=0 TSV=523683 TSER=219447782
Frame 99 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:32.430516000
[Time delta from previous packet: 0.000037000 seconds]
[Time since reference or first frame: 23.179835000 seconds]
Frame Number: 99
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa198 (41368)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bde [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 33549, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 33549 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x92d3 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 523683, TSecr 219447782
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 98]
[The RTT to ACK the segment was: 0.000037000 seconds]
No. Time Source Destination Protocol Info
100 26.808155 192.168.1.102 216.86.148.111 HTTP GET /favicon.ico HTTP/1.1
Frame 100 (484 bytes on wire, 484 bytes captured)
Arrival Time: May 20, 2007 22:08:36.058836000
[Time delta from previous packet: 3.628320000 seconds]
[Time since reference or first frame: 26.808155000 seconds]
Frame Number: 100
Packet Length: 484 bytes
Capture Length: 484 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:http]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.111 (216.86.148.111)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 470
Identification: 0xfff3 (65523)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0a5a [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.111 (216.86.148.111)
Transmission Control Protocol, Src Port: 38639 (38639), Dst Port: www (80), Seq: 410, Ack: 28818, Len: 418
Source port: 38639 (38639)
Destination port: www (80)
Sequence number: 410 (relative sequence number)
[Next sequence number: 828 (relative sequence number)]
Acknowledgement number: 28818 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 63872 (scaled)
Checksum: 0x08e7 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 524591, TSecr 84628753
Hypertext Transfer Protocol
GET /favicon.ico HTTP/1.1\r\n
Request Method: GET
Request URI: /favicon.ico
Request Version: HTTP/1.1
Host: forums.somethingawful.com\r\n
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.3) Gecko/20070324 BonEcho/2.0.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Cookie: sessionhash=64b4f6e0ee869447a461129b34a486a3; bblastvisit=1179716940\r\n
\r\n
No. Time Source Destination Protocol Info
101 26.866356 216.86.148.111 192.168.1.102 TCP www > 38639 [ACK] Seq=28818 Ack=828 Win=7936 Len=0 TSV=84645348 TSER=524591
Frame 101 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:36.117037000
[Time delta from previous packet: 0.058201000 seconds]
[Time since reference or first frame: 26.866356000 seconds]
Frame Number: 101
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 0E69134D
Frame check sequence: 0xbfbd8c0e [incorrect, should be 0xd493a93e]
Internet Protocol, Src: 216.86.148.111 (216.86.148.111), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x25a2 (9634)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 55
Protocol: TCP (0x06)
Header checksum: 0xef4d [correct]
[Good: True]
[Bad : False]
Source: 216.86.148.111 (216.86.148.111)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: www (80), Dst Port: 38639 (38639), Seq: 28818, Ack: 828, Len: 0
Source port: www (80)
Destination port: 38639 (38639)
Sequence number: 28818 (relative sequence number)
Acknowledgement number: 828 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7936 (scaled)
Checksum: 0xab1d [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 84645348, TSecr 524591
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 100]
[The RTT to ACK the segment was: 0.058201000 seconds]
No. Time Source Destination Protocol Info
102 26.877996 216.86.148.111 192.168.1.102 TCP [TCP segment of a reassembled PDU]
Frame 102 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: May 20, 2007 22:08:36.128677000
[Time delta from previous packet: 0.011640000 seconds]
[Time since reference or first frame: 26.877996000 seconds]
Frame Number: 102
Packet Length: 1514 bytes
Capture Length: 1514 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:http]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: CD3E1B1A
Frame check sequence: 0xa3266c06 [incorrect, should be 0x8e0979f8]
Internet Protocol, Src: 216.86.148.111 (216.86.148.111), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1492
Identification: 0x25a4 (9636)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 55
Protocol: TCP (0x06)
Header checksum: 0xe9ab [correct]
[Good: True]
[Bad : False]
Source: 216.86.148.111 (216.86.148.111)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: www (80), Dst Port: 38639 (38639), Seq: 28818, Ack: 828, Len: 1440
Source port: www (80)
Destination port: 38639 (38639)
Sequence number: 28818 (relative sequence number)
[Next sequence number: 30258 (relative sequence number)]
Acknowledgement number: 828 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7936 (scaled)
Checksum: 0xba23 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 84645348, TSecr 524591
TCP segment data (1440 bytes)
No. Time Source Destination Protocol Info
103 26.878023 192.168.1.102 216.86.148.111 TCP 38639 > www [ACK] Seq=828 Ack=30258 Win=64128 Len=0 TSV=524608 TSER=84645348
Frame 103 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:36.128704000
[Time delta from previous packet: 0.000027000 seconds]
[Time since reference or first frame: 26.878023000 seconds]
Frame Number: 103
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.111 (216.86.148.111)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xfff4 (65524)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0bfb [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.111 (216.86.148.111)
Transmission Control Protocol, Src Port: 38639 (38639), Dst Port: www (80), Seq: 828, Ack: 30258, Len: 0
Source port: 38639 (38639)
Destination port: www (80)
Sequence number: 828 (relative sequence number)
Acknowledgement number: 30258 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 64128 (scaled)
Checksum: 0xab37 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 524608, TSecr 84645348
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 102]
[The RTT to ACK the segment was: 0.000027000 seconds]
No. Time Source Destination Protocol Info
104 26.878845 216.86.148.111 192.168.1.102 HTTP HTTP/1.1 200 OK (text/plain)
Frame 104 (331 bytes on wire, 331 bytes captured)
Arrival Time: May 20, 2007 22:08:36.129526000
[Time delta from previous packet: 0.000822000 seconds]
[Time since reference or first frame: 26.878845000 seconds]
Frame Number: 104
Packet Length: 331 bytes
Capture Length: 331 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:http:data-text-lines]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 9AB7BE37
Frame check sequence: 0x5b66c0b2 [incorrect, should be 0xacda5983]
Internet Protocol, Src: 216.86.148.111 (216.86.148.111), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 309
Identification: 0x25a6 (9638)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 55
Protocol: TCP (0x06)
Header checksum: 0xee48 [correct]
[Good: True]
[Bad : False]
Source: 216.86.148.111 (216.86.148.111)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: www (80), Dst Port: 38639 (38639), Seq: 30258, Ack: 828, Len: 257
Source port: www (80)
Destination port: 38639 (38639)
Sequence number: 30258 (relative sequence number)
[Next sequence number: 30515 (relative sequence number)]
Acknowledgement number: 828 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7936 (scaled)
Checksum: 0x6938 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 84645348, TSecr 524591
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 103]
[The RTT to ACK the segment was: 0.000822000 seconds]
TCP segment data (257 bytes)
[Reassembled TCP Segments (1697 bytes): #102(1440), #104(257)]
[Frame: 102, payload: 0-1439 (1440 bytes)]
[Frame: 104, payload: 1440-1696 (257 bytes)]
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Date: Mon, 21 May 2007 03:09:17 GMT\r\n
Server: Apache/2.0.52 (CentOS)\r\n
Last-Modified: Thu, 14 Dec 2000 00:39:30 GMT\r\n
ETag: "65c02e-57e-5941b480"\r\n
Accept-Ranges: bytes\r\n
Content-Length: 1406
Keep-Alive: timeout=20, max=1999\r\n
Connection: Keep-Alive\r\n
Content-Type: text/plain\r\n
\r\n
Line-based text data: text/plain
\000\000\001\000\001\000\020\020\000\000\000\000\000\000h\005\000\000\026\000\000\000(\000\000\000\020\000\000\000 \000\000\000\001\000\b\000\000\000\000\000@\001\000\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\
\000\000\300\t\000\000\300\t\000\000\340\031\000\000\360\023\000\000\370g\000\000\370\a\000\000\360\017\000\000\340?\000\000
No. Time Source Destination Protocol Info
105 26.878855 192.168.1.102 216.86.148.111 TCP 38639 > www [ACK] Seq=828 Ack=30515 Win=64128 Len=0 TSV=524608 TSER=84645348
Frame 105 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:36.129536000
[Time delta from previous packet: 0.000010000 seconds]
[Time since reference or first frame: 26.878855000 seconds]
Frame Number: 105
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.111 (216.86.148.111)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xfff5 (65525)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0bfa [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.111 (216.86.148.111)
Transmission Control Protocol, Src Port: 38639 (38639), Dst Port: www (80), Seq: 828, Ack: 30515, Len: 0
Source port: 38639 (38639)
Destination port: www (80)
Sequence number: 828 (relative sequence number)
Acknowledgement number: 30515 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 64128 (scaled)
Checksum: 0xaa36 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 524608, TSecr 84645348
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 104]
[The RTT to ACK the segment was: 0.000010000 seconds]
No. Time Source Destination Protocol Info
106 28.757902 192.168.1.102 172.16.0.1 DNS Standard query AAAA somethingawful.com
Frame 106 (78 bytes on wire, 78 bytes captured)
Arrival Time: May 20, 2007 22:08:38.008583000
[Time delta from previous packet: 1.879047000 seconds]
[Time since reference or first frame: 28.757902000 seconds]
Frame Number: 106
Packet Length: 78 bytes
Capture Length: 78 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 172.16.0.1 (172.16.0.1)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 64
Identification: 0x0316 (790)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xc977 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 172.16.0.1 (172.16.0.1)
User Datagram Protocol, Src Port: 32772 (32772), Dst Port: domain (53)
Source port: 32772 (32772)
Destination port: domain (53)
Length: 44
Checksum: 0xeee3 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (query)
[Response In: 109]
Transaction ID: 0x62b5
Flags: 0x0100 (Standard query)
0... .... .... .... = Response: Message is a query
.000 0... .... .... = Opcode: Standard query (0)
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... .0.. .... = Z: reserved (0)
.... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
somethingawful.com: type AAAA, class IN
Name: somethingawful.com
Type: AAAA (IPv6 address)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
107 28.873307 172.16.0.1 192.168.1.102 DNS Standard query response
Frame 107 (137 bytes on wire, 137 bytes captured)
Arrival Time: May 20, 2007 22:08:38.123988000
[Time delta from previous packet: 0.115405000 seconds]
[Time since reference or first frame: 28.873307000 seconds]
Frame Number: 107
Packet Length: 137 bytes
Capture Length: 137 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 0A3BB7C8
Frame check sequence: 0x8752f468 [incorrect, should be 0x18a78b85]
Internet Protocol, Src: 172.16.0.1 (172.16.0.1), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 115
Identification: 0x04f9 (1273)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 254
Protocol: UDP (0x11)
Header checksum: 0x0961 [correct]
[Good: True]
[Bad : False]
Source: 172.16.0.1 (172.16.0.1)
Destination: 192.168.1.102 (192.168.1.102)
User Datagram Protocol, Src Port: domain (53), Dst Port: 32772 (32772)
Source port: domain (53)
Destination port: 32772 (32772)
Length: 95
Checksum: 0x4121 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (response)
[Request In: 108]
[Time: -0.000058000 seconds]
Transaction ID: 0x62b5
Flags: 0x8100 (Standard query response, No error)
1... .... .... .... = Response: Message is a response
.000 0... .... .... = Opcode: Standard query (0)
.... .0.. .... .... = Authoritative: Server is not an authority for domain
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... 0... .... = Recursion available: Server can't do recursive queries
.... .... .0.. .... = Z: reserved (0)
.... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
.... .... .... 0000 = Reply code: No error (0)
Questions: 1
Answer RRs: 0
Authority RRs: 1
Additional RRs: 0
Queries
somethingawful.com: type AAAA, class IN
Name: somethingawful.com
Type: AAAA (IPv6 address)
Class: IN (0x0001)
Authoritative nameservers
somethingawful.com: type SOA, class IN, mname ns3.somethingawful.com
Name: somethingawful.com
Type: SOA (Start of zone of authority)
Class: IN (0x0001)
Time to live: 15 minutes
Data length: 39
Primary name server: ns3.somethingawful.com
Responsible authority's mailbox: hostmaster.somethingawful.com
Serial number: 2007052001
Refresh interval: 15 minutes
Retry interval: 10 minutes
Expiration limit: 1 day
Minimum TTL: 1 hour
No. Time Source Destination Protocol Info
108 28.873365 192.168.1.102 172.16.0.1 DNS Standard query AAAA somethingawful.com
Frame 108 (78 bytes on wire, 78 bytes captured)
Arrival Time: May 20, 2007 22:08:38.124046000
[Time delta from previous packet: 0.000058000 seconds]
[Time since reference or first frame: 28.873365000 seconds]
Frame Number: 108
Packet Length: 78 bytes
Capture Length: 78 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 172.16.0.1 (172.16.0.1)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 64
Identification: 0x0333 (819)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xc95a [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 172.16.0.1 (172.16.0.1)
User Datagram Protocol, Src Port: 32772 (32772), Dst Port: domain (53)
Source port: 32772 (32772)
Destination port: domain (53)
Length: 44
Checksum: 0xeee3 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (query)
[Response In: 109]
Transaction ID: 0x62b5
Flags: 0x0100 (Standard query)
0... .... .... .... = Response: Message is a query
.000 0... .... .... = Opcode: Standard query (0)
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... .0.. .... = Z: reserved (0)
.... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
somethingawful.com: type AAAA, class IN
Name: somethingawful.com
Type: AAAA (IPv6 address)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
109 28.900900 172.16.0.1 192.168.1.102 DNS Standard query response
Frame 109 (137 bytes on wire, 137 bytes captured)
Arrival Time: May 20, 2007 22:08:38.151581000
[Time delta from previous packet: 0.027535000 seconds]
[Time since reference or first frame: 28.900900000 seconds]
Frame Number: 109
Packet Length: 137 bytes
Capture Length: 137 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 91738F0A
Frame check sequence: 0x81d3dfbd [incorrect, should be 0xa2bff5b7]
Internet Protocol, Src: 172.16.0.1 (172.16.0.1), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 115
Identification: 0x04fa (1274)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 254
Protocol: UDP (0x11)
Header checksum: 0x0960 [correct]
[Good: True]
[Bad : False]
Source: 172.16.0.1 (172.16.0.1)
Destination: 192.168.1.102 (192.168.1.102)
User Datagram Protocol, Src Port: domain (53), Dst Port: 32772 (32772)
Source port: domain (53)
Destination port: 32772 (32772)
Length: 95
Checksum: 0x4121 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (response)
[Request In: 108]
[Time: 0.027535000 seconds]
Transaction ID: 0x62b5
Flags: 0x8100 (Standard query response, No error)
1... .... .... .... = Response: Message is a response
.000 0... .... .... = Opcode: Standard query (0)
.... .0.. .... .... = Authoritative: Server is not an authority for domain
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... 0... .... = Recursion available: Server can't do recursive queries
.... .... .0.. .... = Z: reserved (0)
.... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
.... .... .... 0000 = Reply code: No error (0)
Questions: 1
Answer RRs: 0
Authority RRs: 1
Additional RRs: 0
Queries
somethingawful.com: type AAAA, class IN
Name: somethingawful.com
Type: AAAA (IPv6 address)
Class: IN (0x0001)
Authoritative nameservers
somethingawful.com: type SOA, class IN, mname ns3.somethingawful.com
Name: somethingawful.com
Type: SOA (Start of zone of authority)
Class: IN (0x0001)
Time to live: 15 minutes
Data length: 39
Primary name server: ns3.somethingawful.com
Responsible authority's mailbox: hostmaster.somethingawful.com
Serial number: 2007052001
Refresh interval: 15 minutes
Retry interval: 10 minutes
Expiration limit: 1 day
Minimum TTL: 1 hour
No. Time Source Destination Protocol Info
110 28.900944 192.168.1.102 172.16.0.1 DNS Standard query AAAA somethingawful.com.gateway.2wire.net
Frame 110 (96 bytes on wire, 96 bytes captured)
Arrival Time: May 20, 2007 22:08:38.151625000
[Time delta from previous packet: 0.000044000 seconds]
[Time since reference or first frame: 28.900944000 seconds]
Frame Number: 110
Packet Length: 96 bytes
Capture Length: 96 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 172.16.0.1 (172.16.0.1)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 82
Identification: 0x033a (826)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xc941 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 172.16.0.1 (172.16.0.1)
User Datagram Protocol, Src Port: 32772 (32772), Dst Port: domain (53)
Source port: 32772 (32772)
Destination port: domain (53)
Length: 62
Checksum: 0x1d31 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (query)
[Response In: 113]
Transaction ID: 0x84bc
Flags: 0x0100 (Standard query)
0... .... .... .... = Response: Message is a query
.000 0... .... .... = Opcode: Standard query (0)
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... .0.. .... = Z: reserved (0)
.... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
somethingawful.com.gateway.2wire.net: type AAAA, class IN
Name: somethingawful.com.gateway.2wire.net
Type: AAAA (IPv6 address)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
111 28.910604 172.16.0.1 192.168.1.102 DNS Standard query response, Refused
Frame 111 (562 bytes on wire, 562 bytes captured)
Arrival Time: May 20, 2007 22:08:38.161285000
[Time delta from previous packet: 0.009660000 seconds]
[Time since reference or first frame: 28.910604000 seconds]
Frame Number: 111
Packet Length: 562 bytes
Capture Length: 562 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 5F5236BB
Frame check sequence: 0x94c79e1d [incorrect, should be 0x8cf05e56]
Internet Protocol, Src: 172.16.0.1 (172.16.0.1), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 540
Identification: 0x04fb (1275)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 254
Protocol: UDP (0x11)
Header checksum: 0x07b6 [correct]
[Good: True]
[Bad : False]
Source: 172.16.0.1 (172.16.0.1)
Destination: 192.168.1.102 (192.168.1.102)
User Datagram Protocol, Src Port: domain (53), Dst Port: 32772 (32772)
Source port: domain (53)
Destination port: 32772 (32772)
Length: 520
Checksum: 0x62a9 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (response)
[Request In: 112]
[Time: -0.000035000 seconds]
Transaction ID: 0x84bc
Flags: 0x8505 (Standard query response, Refused)
1... .... .... .... = Response: Message is a response
.000 0... .... .... = Opcode: Standard query (0)
.... .1.. .... .... = Authoritative: Server is an authority for domain
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... 0... .... = Recursion available: Server can't do recursive queries
.... .... .0.. .... = Z: reserved (0)
.... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
.... .... .... 0101 = Reply code: Refused (5)
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
somethingawful.com.gateway.2wire.net: type AAAA, class IN
Name: somethingawful.com.gateway.2wire.net
Type: AAAA (IPv6 address)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
112 28.910639 192.168.1.102 172.16.0.1 DNS Standard query AAAA somethingawful.com.gateway.2wire.net
Frame 112 (96 bytes on wire, 96 bytes captured)
Arrival Time: May 20, 2007 22:08:38.161320000
[Time delta from previous packet: 0.000035000 seconds]
[Time since reference or first frame: 28.910639000 seconds]
Frame Number: 112
Packet Length: 96 bytes
Capture Length: 96 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 172.16.0.1 (172.16.0.1)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 82
Identification: 0x033c (828)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xc93f [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 172.16.0.1 (172.16.0.1)
User Datagram Protocol, Src Port: 32772 (32772), Dst Port: domain (53)
Source port: 32772 (32772)
Destination port: domain (53)
Length: 62
Checksum: 0x1d31 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (query)
[Response In: 113]
Transaction ID: 0x84bc
Flags: 0x0100 (Standard query)
0... .... .... .... = Response: Message is a query
.000 0... .... .... = Opcode: Standard query (0)
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... .0.. .... = Z: reserved (0)
.... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
somethingawful.com.gateway.2wire.net: type AAAA, class IN
Name: somethingawful.com.gateway.2wire.net
Type: AAAA (IPv6 address)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
113 28.914949 172.16.0.1 192.168.1.102 DNS Standard query response, Refused
Frame 113 (562 bytes on wire, 562 bytes captured)
Arrival Time: May 20, 2007 22:08:38.165630000
[Time delta from previous packet: 0.004310000 seconds]
[Time since reference or first frame: 28.914949000 seconds]
Frame Number: 113
Packet Length: 562 bytes
Capture Length: 562 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 5C2BED1D
Frame check sequence: 0xfba37725 [incorrect, should be 0xb644e633]
Internet Protocol, Src: 172.16.0.1 (172.16.0.1), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 540
Identification: 0x04fc (1276)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 254
Protocol: UDP (0x11)
Header checksum: 0x07b5 [correct]
[Good: True]
[Bad : False]
Source: 172.16.0.1 (172.16.0.1)
Destination: 192.168.1.102 (192.168.1.102)
User Datagram Protocol, Src Port: domain (53), Dst Port: 32772 (32772)
Source port: domain (53)
Destination port: 32772 (32772)
Length: 520
Checksum: 0x62a9 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (response)
[Request In: 112]
[Time: 0.004310000 seconds]
Transaction ID: 0x84bc
Flags: 0x8505 (Standard query response, Refused)
1... .... .... .... = Response: Message is a response
.000 0... .... .... = Opcode: Standard query (0)
.... .1.. .... .... = Authoritative: Server is an authority for domain
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... 0... .... = Recursion available: Server can't do recursive queries
.... .... .0.. .... = Z: reserved (0)
.... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
.... .... .... 0101 = Reply code: Refused (5)
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
somethingawful.com.gateway.2wire.net: type AAAA, class IN
Name: somethingawful.com.gateway.2wire.net
Type: AAAA (IPv6 address)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
114 28.914977 192.168.1.102 172.16.0.1 DNS Standard query A somethingawful.com
Frame 114 (78 bytes on wire, 78 bytes captured)
Arrival Time: May 20, 2007 22:08:38.165658000
[Time delta from previous packet: 0.000028000 seconds]
[Time since reference or first frame: 28.914977000 seconds]
Frame Number: 114
Packet Length: 78 bytes
Capture Length: 78 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 172.16.0.1 (172.16.0.1)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 64
Identification: 0x033d (829)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xc950 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 172.16.0.1 (172.16.0.1)
User Datagram Protocol, Src Port: 32772 (32772), Dst Port: domain (53)
Source port: 32772 (32772)
Destination port: domain (53)
Length: 44
Checksum: 0xa2db [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (query)
[Response In: 115]
Transaction ID: 0xaed8
Flags: 0x0100 (Standard query)
0... .... .... .... = Response: Message is a query
.000 0... .... .... = Opcode: Standard query (0)
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... .0.. .... = Z: reserved (0)
.... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
somethingawful.com: type A, class IN
Name: somethingawful.com
Type: A (Host address)
Class: IN (0x0001)
No. Time Source Destination Protocol Info
115 28.971834 172.16.0.1 192.168.1.102 DNS Standard query response A 216.86.148.10
Frame 115 (138 bytes on wire, 138 bytes captured)
Arrival Time: May 20, 2007 22:08:38.222515000
[Time delta from previous packet: 0.056857000 seconds]
[Time since reference or first frame: 28.971834000 seconds]
Frame Number: 115
Packet Length: 138 bytes
Capture Length: 138 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 6939191B
Frame check sequence: 0x964aab6e [incorrect, should be 0xcc8d1999]
Internet Protocol, Src: 172.16.0.1 (172.16.0.1), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 116
Identification: 0x04fd (1277)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 254
Protocol: UDP (0x11)
Header checksum: 0x095c [correct]
[Good: True]
[Bad : False]
Source: 172.16.0.1 (172.16.0.1)
Destination: 192.168.1.102 (192.168.1.102)
User Datagram Protocol, Src Port: domain (53), Dst Port: 32772 (32772)
Source port: domain (53)
Destination port: 32772 (32772)
Length: 96
Checksum: 0xfde6 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Domain Name System (response)
[Request In: 114]
[Time: 0.056857000 seconds]
Transaction ID: 0xaed8
Flags: 0x8100 (Standard query response, No error)
1... .... .... .... = Response: Message is a response
.000 0... .... .... = Opcode: Standard query (0)
.... .0.. .... .... = Authoritative: Server is not an authority for domain
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... 0... .... = Recursion available: Server can't do recursive queries
.... .... .0.. .... = Z: reserved (0)
.... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
.... .... .... 0000 = Reply code: No error (0)
Questions: 1
Answer RRs: 1
Authority RRs: 2
Additional RRs: 0
Queries
somethingawful.com: type A, class IN
Name: somethingawful.com
Type: A (Host address)
Class: IN (0x0001)
Answers
somethingawful.com: type A, class IN, addr 216.86.148.10
Name: somethingawful.com
Type: A (Host address)
Class: IN (0x0001)
Time to live: 15 minutes
Data length: 4
Addr: 216.86.148.10
Authoritative nameservers
somethingawful.com: type NS, class IN, ns ns4.somethingawful.com
Name: somethingawful.com
Type: NS (Authoritative name server)
Class: IN (0x0001)
Time to live: 15 minutes
Data length: 6
Name server: ns4.somethingawful.com
somethingawful.com: type NS, class IN, ns ns3.somethingawful.com
Name: somethingawful.com
Type: NS (Authoritative name server)
Class: IN (0x0001)
Time to live: 15 minutes
Data length: 6
Name server: ns3.somethingawful.com
No. Time Source Destination Protocol Info
116 28.971924 192.168.1.102 216.86.148.10 TCP 48004 > www [SYN] Seq=0 Len=0 MSS=1460 TSV=525131 TSER=0 WS=7
Frame 116 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:38.222605000
[Time delta from previous packet: 0.000090000 seconds]
[Time since reference or first frame: 28.971924000 seconds]
Frame Number: 116
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.10 (216.86.148.10)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x8945 (35141)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x8307 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.10 (216.86.148.10)
Transmission Control Protocol, Src Port: 48004 (48004), Dst Port: www (80), Seq: 0, Len: 0
Source port: 48004 (48004)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x722b [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Timestamps: TSval 525131, TSecr 0
NOP
Window scale: 7 (multiply by 128)
No. Time Source Destination Protocol Info
117 31.968226 192.168.1.102 216.86.148.10 TCP 48004 > www [SYN] Seq=0 Len=0 MSS=1460 TSV=525881 TSER=0 WS=7
Frame 117 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:41.218907000
[Time delta from previous packet: 2.996302000 seconds]
[Time since reference or first frame: 31.968226000 seconds]
Frame Number: 117
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.10 (216.86.148.10)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x8946 (35142)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x8306 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.10 (216.86.148.10)
Transmission Control Protocol, Src Port: 48004 (48004), Dst Port: www (80), Seq: 0, Len: 0
Source port: 48004 (48004)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x6f3d [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Timestamps: TSval 525881, TSecr 0
NOP
Window scale: 7 (multiply by 128)
No. Time Source Destination Protocol Info
118 32.416996 192.168.1.101 192.168.1.255 BROWSER Local Master Announcement RENE, Workstation, Server, NT Workstation, Potential Browser, Master Browser
Frame 118 (251 bytes on wire, 251 bytes captured)
Arrival Time: May 20, 2007 22:08:41.667677000
[Time delta from previous packet: 0.448770000 seconds]
[Time since reference or first frame: 32.416996000 seconds]
Frame Number: 118
Packet Length: 251 bytes
Capture Length: 251 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:nbdgm:smb:browser]
[Coloring Rule Name: SMB]
[Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios]
Ethernet II, Src: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Destination: Broadcast (ff:ff:ff:ff:ff:ff)
Address: Broadcast (ff:ff:ff:ff:ff:ff)
.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
Source: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff)
Address: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 170FADB3
Frame check sequence: 0xb80cb9b0 [incorrect, should be 0xce13c181]
Internet Protocol, Src: 192.168.1.101 (192.168.1.101), Dst: 192.168.1.255 (192.168.1.255)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 229
Identification: 0x1b6c (7020)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x99e7 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.101 (192.168.1.101)
Destination: 192.168.1.255 (192.168.1.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
Source port: netbios-dgm (138)
Destination port: netbios-dgm (138)
Length: 209
Checksum: 0xf08f [correct]
[Good Checksum: True]
[Bad Checksum: False]
NetBIOS Datagram Service
Message Type: Direct_group datagram (17)
More fragments follow: No
This is first fragment: Yes
Node Type: M node (2)
Datagram ID: 0x8215
Source IP: 192.168.1.101 (192.168.1.101)
Source Port: 138
Datagram length: 187 bytes
Packet offset: 0 bytes
Source name: RENE<20> (Server service)
Destination name: MSHOME<1e> (Browser Election Service)
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
SMB Command: Trans (0x25)
Error Class: Success (0x00)
Reserved: 00
Error Code: No Error
Flags: 0x00
0... .... = Request/Response: Message is a request to the server
.0.. .... = Notify: Notify client only on open
..0. .... = Oplocks: OpLock not requested/granted
...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized
.... 0... = Case Sensitivity: Path names are case sensitive
.... ..0. = Receive Buffer Posted: Receive buffer has not been posted
.... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported
Flags2: 0x0000
0... .... .... .... = Unicode Strings: Strings are ASCII
.0.. .... .... .... = Error Code Type: Error codes are DOS error codes
..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only
...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs
.... 0... .... .... = Extended Security Negotiation: Extended security negotiation is not supported
.... .... .0.. .... = Long Names Used: Path names in request are not long file names
.... .... .... .0.. = Security Signatures: Security signatures are not supported
.... .... .... ..0. = Extended Attributes: Extended attributes are not supported
.... .... .... ...0 = Long Names Allowed: Long file names are not allowed in the response
Process ID High: 0
Signature: 0000000000000000
Reserved: 0000
Tree ID: 0
Process ID: 0
User ID: 0
Multiplex ID: 0
Trans Request (0x25)
Word Count (WCT): 17
Total Parameter Count: 0
Total Data Count: 33
Max Parameter Count: 0
Max Data Count: 0
Max Setup Count: 0
Reserved: 00
Flags: 0x0000
.... .... .... ..0. = One Way Transaction: Two way transaction
.... .... .... ...0 = Disconnect TID: Do NOT disconnect TID
Timeout: 1 second
Reserved: 0000
Parameter Count: 0
Parameter Offset: 0
Data Count: 33
Data Offset: 86
Setup Count: 3
Reserved: 00
Byte Count (BCC): 50
Transaction Name: \MAILSLOT\BROWSE
SMB MailSlot Protocol
Opcode: Write Mail Slot (1)
Priority: 0
Class: Unreliable & Broadcast (2)
Size: 50
Mailslot Name: \MAILSLOT\BROWSE
Microsoft Windows Browser Protocol
Command: Local Master Announcement (0x0f)
Update Count: 0
Update Periodicity: 12 minutes
Host Name: RENE
OS Major Version: 5
OS Minor Version: 1
Server Type: 0x00051003
.... .... .... .... .... .... .... ...1 = Workstation: This is a Workstation
.... .... .... .... .... .... .... ..1. = Server: This is a Server
.... .... .... .... .... .... .... .0.. = SQL: This is NOT an SQL server
.... .... .... .... .... .... .... 0... = Domain Controller: This is NOT a Domain Controller
.... .... .... .... .... .... ...0 .... = Backup Controller: This is NOT a Backup Controller
.... .... .... .... .... .... ..0. .... = Time Source: This is NOT a Time Source
.... .... .... .... .... .... .0.. .... = Apple: This is NOT an Apple host
.... .... .... .... .... .... 0... .... = Novell: This is NOT a Novell server
.... .... .... .... .... ...0 .... .... = Member: This is NOT a Domain Member server
.... .... .... .... .... ..0. .... .... = Print: This is NOT a Print Queue server
.... .... .... .... .... .0.. .... .... = Dialin: This is NOT a Dialin server
.... .... .... .... .... 0... .... .... = Xenix: This is NOT a Xenix server
.... .... .... .... ...1 .... .... .... = NT Workstation: This is an NT Workstation
.... .... .... .... ..0. .... .... .... = WfW: This is NOT a WfW host
.... .... .... .... 0... .... .... .... = NT Server: This is NOT an NT Server
.... .... .... ...1 .... .... .... .... = Potential Browser: This is a Potential Browser
.... .... .... ..0. .... .... .... .... = Backup Browser: This is NOT a Backup Browser
.... .... .... .1.. .... .... .... .... = Master Browser: This is a Master Browser
.... .... .... 0... .... .... .... .... = Domain Master Browser: This is NOT a Domain Master Browser
.... .... ...0 .... .... .... .... .... = OSF: This is NOT an OSF host
.... .... ..0. .... .... .... .... .... = VMS: This is NOT a VMS host
.... .... .0.. .... .... .... .... .... = Windows 95+: This is NOT a Windows 95 or above host
.0.. .... .... .... .... .... .... .... = Local: This is NOT a local list only request
0... .... .... .... .... .... .... .... = Domain Enum: This is NOT a Domain Enum request
Browser Protocol Major Version: 15
Browser Protocol Minor Version: 1
Signature: 0xaa55
Host Comment:
No. Time Source Destination Protocol Info
119 35.655467 212.204.214.114 192.168.1.102 IRC Response
Frame 119 (141 bytes on wire, 141 bytes captured)
Arrival Time: May 20, 2007 22:08:44.906148000
[Time delta from previous packet: 3.238471000 seconds]
[Time since reference or first frame: 35.655467000 seconds]
Frame Number: 119
Packet Length: 141 bytes
Capture Length: 141 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 0A054514
Frame check sequence: 0xb46da439 [incorrect, should be 0xec7203bb]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 119
Identification: 0xa59f (42399)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x3794 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 33549, Ack: 36, Len: 67
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 33549 (relative sequence number)
[Next sequence number: 33616 (relative sequence number)]
Acknowledgement number: 36 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x41b7 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219449030, TSecr 523683
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 99]
[The RTT to ACK the segment was: 12.475632000 seconds]
Internet Relay Chat
Response: :_bastian_!n=Administ@p5488F5DC.dip.t-dialin.net JOIN :#archlinux
No. Time Source Destination Protocol Info
120 35.655497 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=36 Ack=33616 Win=501 Len=0 TSV=526802 TSER=219449030
Frame 120 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:44.906178000
[Time delta from previous packet: 0.000030000 seconds]
[Time since reference or first frame: 35.655497000 seconds]
Frame Number: 120
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa199 (41369)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bdd [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 33616, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
Acknowledgement number: 33616 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x8181 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 526802, TSecr 219449030
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 119]
[The RTT to ACK the segment was: 0.000030000 seconds]
No. Time Source Destination Protocol Info
121 37.968167 192.168.1.102 216.86.148.10 TCP 48004 > www [SYN] Seq=0 Len=0 MSS=1460 TSV=527381 TSER=0 WS=7
Frame 121 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:47.218848000
[Time delta from previous packet: 2.312670000 seconds]
[Time since reference or first frame: 37.968167000 seconds]
Frame Number: 121
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.10 (216.86.148.10)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x8947 (35143)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x8305 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.10 (216.86.148.10)
Transmission Control Protocol, Src Port: 48004 (48004), Dst Port: www (80), Seq: 0, Len: 0
Source port: 48004 (48004)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x6961 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Timestamps: TSval 527381, TSecr 0
NOP
Window scale: 7 (multiply by 128)
No. Time Source Destination Protocol Info
122 38.456822 IntelCor_b7:9b:ff Broadcast ARP Who has 192.168.1.1? Tell 192.168.1.101
Frame 122 (50 bytes on wire, 50 bytes captured)
Arrival Time: May 20, 2007 22:08:47.707503000
[Time delta from previous packet: 0.488655000 seconds]
[Time since reference or first frame: 38.456822000 seconds]
Frame Number: 122
Packet Length: 50 bytes
Capture Length: 50 bytes
[Frame is marked: False]
[Protocols in frame: eth:arp]
[Coloring Rule Name: ARP]
[Coloring Rule String: arp]
Ethernet II, Src: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Destination: Broadcast (ff:ff:ff:ff:ff:ff)
Address: Broadcast (ff:ff:ff:ff:ff:ff)
.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
Source: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff)
Address: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Trailer: 461BB7DFB6905FE3
Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
Sender MAC address: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff)
Sender IP address: 192.168.1.101 (192.168.1.101)
Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
Target IP address: 192.168.1.1 (192.168.1.1)
No. Time Source Destination Protocol Info
123 46.868410 216.86.148.111 192.168.1.102 TCP www > 38639 [FIN, ACK] Seq=30515 Ack=828 Win=7936 Len=0 TSV=84665349 TSER=524608
Frame 123 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:56.119091000
[Time delta from previous packet: 8.411588000 seconds]
[Time since reference or first frame: 46.868410000 seconds]
Frame Number: 123
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 2732B574
Frame check sequence: 0x5d14a5ba [incorrect, should be 0x7d927205]
Internet Protocol, Src: 216.86.148.111 (216.86.148.111), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x25a8 (9640)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 55
Protocol: TCP (0x06)
Header checksum: 0xef47 [correct]
[Good: True]
[Bad : False]
Source: 216.86.148.111 (216.86.148.111)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: www (80), Dst Port: 38639 (38639), Seq: 30515, Ack: 828, Len: 0
Source port: www (80)
Destination port: 38639 (38639)
Sequence number: 30515 (relative sequence number)
Acknowledgement number: 828 (relative ack number)
Header length: 32 bytes
Flags: 0x11 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 7936 (scaled)
Checksum: 0x5649 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 84665349, TSecr 524608
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 105]
[The RTT to ACK the segment was: 19.989555000 seconds]
No. Time Source Destination Protocol Info
124 46.908174 192.168.1.102 216.86.148.111 TCP 38639 > www [ACK] Seq=828 Ack=30516 Win=64128 Len=0 TSV=529616 TSER=84665349
Frame 124 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:56.158855000
[Time delta from previous packet: 0.039764000 seconds]
[Time since reference or first frame: 46.908174000 seconds]
Frame Number: 124
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.111 (216.86.148.111)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xfff6 (65526)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0bf9 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.111 (216.86.148.111)
Transmission Control Protocol, Src Port: 38639 (38639), Dst Port: www (80), Seq: 828, Ack: 30516, Len: 0
Source port: 38639 (38639)
Destination port: www (80)
Sequence number: 828 (relative sequence number)
Acknowledgement number: 30516 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 64128 (scaled)
Checksum: 0x4884 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 529616, TSecr 84665349
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 123]
[The RTT to ACK the segment was: 0.039764000 seconds]
No. Time Source Destination Protocol Info
125 49.968297 192.168.1.102 216.86.148.10 TCP 48004 > www [SYN] Seq=0 Len=0 MSS=1460 TSV=530381 TSER=0 WS=7
Frame 125 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:08:59.218978000
[Time delta from previous packet: 3.060123000 seconds]
[Time since reference or first frame: 49.968297000 seconds]
Frame Number: 125
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.10 (216.86.148.10)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x8948 (35144)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x8304 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.10 (216.86.148.10)
Transmission Control Protocol, Src Port: 48004 (48004), Dst Port: www (80), Seq: 0, Len: 0
Source port: 48004 (48004)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x5da9 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Timestamps: TSval 530381, TSecr 0
NOP
Window scale: 7 (multiply by 128)
No. Time Source Destination Protocol Info
126 50.740446 192.168.1.102 216.86.148.111 TCP 38639 > www [FIN, ACK] Seq=828 Ack=30516 Win=64128 Len=0 TSV=530574 TSER=84665349
Frame 126 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:08:59.991127000
[Time delta from previous packet: 0.772149000 seconds]
[Time since reference or first frame: 50.740446000 seconds]
Frame Number: 126
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.111 (216.86.148.111)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xfff7 (65527)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0bf8 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.111 (216.86.148.111)
Transmission Control Protocol, Src Port: 38639 (38639), Dst Port: www (80), Seq: 828, Ack: 30516, Len: 0
Source port: 38639 (38639)
Destination port: www (80)
Sequence number: 828 (relative sequence number)
Acknowledgement number: 30516 (relative ack number)
Header length: 32 bytes
Flags: 0x11 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 64128 (scaled)
Checksum: 0x44c5 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 530574, TSecr 84665349
No. Time Source Destination Protocol Info
127 50.790263 216.86.148.111 192.168.1.102 TCP www > 38639 [ACK] Seq=30516 Ack=829 Win=7936 Len=0 TSV=84669271 TSER=530574
Frame 127 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:09:00.040944000
[Time delta from previous packet: 0.049817000 seconds]
[Time since reference or first frame: 50.790263000 seconds]
Frame Number: 127
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 57F4E29D
Frame check sequence: 0x384ec0bb [incorrect, should be 0xa353b98e]
Internet Protocol, Src: 216.86.148.111 (216.86.148.111), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0x0000 (0)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 55
Protocol: TCP (0x06)
Header checksum: 0x14f0 [correct]
[Good: True]
[Bad : False]
Source: 216.86.148.111 (216.86.148.111)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: www (80), Dst Port: 38639 (38639), Seq: 30516, Ack: 829, Len: 0
Source port: www (80)
Destination port: 38639 (38639)
Sequence number: 30516 (relative sequence number)
Acknowledgement number: 829 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7936 (scaled)
Checksum: 0x2fa8 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 84669271, TSecr 530574
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 126]
[The RTT to ACK the segment was: 0.049817000 seconds]
No. Time Source Destination Protocol Info
128 51.866646 LinksysG_ea:fc:98 CameoCom_fd:c3:88 ARP Who has 192.168.1.102? Tell 192.168.1.1
Frame 128 (50 bytes on wire, 50 bytes captured)
Arrival Time: May 20, 2007 22:09:01.117327000
[Time delta from previous packet: 1.076383000 seconds]
[Time since reference or first frame: 51.866646000 seconds]
Frame Number: 128
Packet Length: 50 bytes
Capture Length: 50 bytes
[Frame is marked: False]
[Protocols in frame: eth:arp]
[Coloring Rule Name: ARP]
[Coloring Rule String: arp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Trailer: 51E620BD732E363A
Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
Sender MAC address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Sender IP address: 192.168.1.1 (192.168.1.1)
Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
Target IP address: 192.168.1.102 (192.168.1.102)
No. Time Source Destination Protocol Info
129 51.866667 CameoCom_fd:c3:88 LinksysG_ea:fc:98 ARP 192.168.1.102 is at 00:40:f4:fd:c3:88
Frame 129 (42 bytes on wire, 42 bytes captured)
Arrival Time: May 20, 2007 22:09:01.117348000
[Time delta from previous packet: 0.000021000 seconds]
[Time since reference or first frame: 51.866667000 seconds]
Frame Number: 129
Packet Length: 42 bytes
Capture Length: 42 bytes
[Frame is marked: False]
[Protocols in frame: eth:arp]
[Coloring Rule Name: ARP]
[Coloring Rule String: arp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Address Resolution Protocol (reply)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: reply (0x0002)
Sender MAC address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Sender IP address: 192.168.1.102 (192.168.1.102)
Target MAC address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Target IP address: 192.168.1.1 (192.168.1.1)
No. Time Source Destination Protocol Info
130 52.800281 192.168.1.102 212.204.214.114 IRC Request
Frame 130 (86 bytes on wire, 86 bytes captured)
Arrival Time: May 20, 2007 22:09:02.050962000
[Time delta from previous packet: 0.933614000 seconds]
[Time since reference or first frame: 52.800281000 seconds]
Frame Number: 130
Packet Length: 86 bytes
Capture Length: 86 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 72
Identification: 0xa19a (41370)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bc8 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 36, Ack: 33616, Len: 20
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 36 (relative sequence number)
[Next sequence number: 56 (relative sequence number)]
Acknowledgement number: 33616 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x6166 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 531089, TSecr 219449030
Internet Relay Chat
Request: PING LAG2634596915
No. Time Source Destination Protocol Info
131 53.043150 212.204.214.114 192.168.1.102 TCP 6667 > 51195 [ACK] Seq=33616 Ack=56 Win=57580 Len=0 TSV=219450770 TSER=531089
Frame 131 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:09:02.293831000
[Time delta from previous packet: 0.242869000 seconds]
[Time since reference or first frame: 53.043150000 seconds]
Frame Number: 131
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 9800510A
Frame check sequence: 0xb0976a11 [incorrect, should be 0x81705aaa]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xba13 (47635)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x2363 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 33616, Ack: 56, Len: 0
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 33616 (relative sequence number)
Acknowledgement number: 56 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57580
Checksum: 0x8aea [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219450770, TSecr 531089
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 130]
[The RTT to ACK the segment was: 0.242869000 seconds]
No. Time Source Destination Protocol Info
132 53.139843 212.204.214.114 192.168.1.102 IRC Response
Frame 132 (140 bytes on wire, 140 bytes captured)
Arrival Time: May 20, 2007 22:09:02.390524000
[Time delta from previous packet: 0.096693000 seconds]
[Time since reference or first frame: 53.139843000 seconds]
Frame Number: 132
Packet Length: 140 bytes
Capture Length: 140 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 1E7BD145
Frame check sequence: 0x0ccc5fa4 [incorrect, should be 0x4d75732a]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 118
Identification: 0xba36 (47670)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x22fe [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 33616, Ack: 56, Len: 66
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 33616 (relative sequence number)
[Next sequence number: 33682 (relative sequence number)]
Acknowledgement number: 56 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0xb399 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219450779, TSecr 531089
Internet Relay Chat
Response: :sterling.freenode.net PONG sterling.freenode.net :LAG2634596915
No. Time Source Destination Protocol Info
133 53.139861 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=56 Ack=33682 Win=501 Len=0 TSV=531173 TSER=219450779
Frame 133 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:09:02.390542000
[Time delta from previous packet: 0.000018000 seconds]
[Time since reference or first frame: 53.139861000 seconds]
Frame Number: 133
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa19b (41371)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bdb [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 56, Ack: 33682, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 56 (relative sequence number)
Acknowledgement number: 33682 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x6943 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 531173, TSecr 219450779
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 132]
[The RTT to ACK the segment was: 0.000018000 seconds]
No. Time Source Destination Protocol Info
134 57.868210 212.204.214.114 192.168.1.102 IRC Response
Frame 134 (139 bytes on wire, 139 bytes captured)
Arrival Time: May 20, 2007 22:09:07.118891000
[Time delta from previous packet: 4.728349000 seconds]
[Time since reference or first frame: 57.868210000 seconds]
Frame Number: 134
Packet Length: 139 bytes
Capture Length: 139 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:irc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: F91A9CC4
Frame check sequence: 0x74e68fc1 [incorrect, should be 0xb170117f]
Internet Protocol, Src: 212.204.214.114 (212.204.214.114), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 117
Identification: 0xbf5d (48989)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 48
Protocol: TCP (0x06)
Header checksum: 0x1dd8 [correct]
[Good: True]
[Bad : False]
Source: 212.204.214.114 (212.204.214.114)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: 6667 (6667), Dst Port: 51195 (51195), Seq: 33682, Ack: 56, Len: 65
Source port: 6667 (6667)
Destination port: 51195 (51195)
Sequence number: 33682 (relative sequence number)
[Next sequence number: 33747 (relative sequence number)]
Acknowledgement number: 56 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 57600
Checksum: 0x2acf [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 219451252, TSecr 531173
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 133]
[The RTT to ACK the segment was: 4.728349000 seconds]
Internet Relay Chat
Response: :fivre!n=Five@slip-12-66-43-111.mis.prserv.net JOIN :#archlinux
No. Time Source Destination Protocol Info
135 57.868244 192.168.1.102 212.204.214.114 TCP 51195 > 6667 [ACK] Seq=56 Ack=33747 Win=501 Len=0 TSV=532356 TSER=219451252
Frame 135 (66 bytes on wire, 66 bytes captured)
Arrival Time: May 20, 2007 22:09:07.118925000
[Time delta from previous packet: 0.000034000 seconds]
[Time since reference or first frame: 57.868244000 seconds]
Frame Number: 135
Packet Length: 66 bytes
Capture Length: 66 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 212.204.214.114 (212.204.214.114)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xa19c (41372)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bda [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 212.204.214.114 (212.204.214.114)
Transmission Control Protocol, Src Port: 51195 (51195), Dst Port: 6667 (6667), Seq: 56, Ack: 33747, Len: 0
Source port: 51195 (51195)
Destination port: 6667 (6667)
Sequence number: 56 (relative sequence number)
Acknowledgement number: 33747 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 501
Checksum: 0x628a [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (12 bytes)
NOP
NOP
Timestamps: TSval 532356, TSecr 219451252
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 134]
[The RTT to ACK the segment was: 0.000034000 seconds]
No. Time Source Destination Protocol Info
136 63.442221 IntelCor_b7:9b:ff Broadcast ARP Who has 192.168.1.1? Tell 192.168.1.101
Frame 136 (50 bytes on wire, 50 bytes captured)
Arrival Time: May 20, 2007 22:09:12.692902000
[Time delta from previous packet: 5.573977000 seconds]
[Time since reference or first frame: 63.442221000 seconds]
Frame Number: 136
Packet Length: 50 bytes
Capture Length: 50 bytes
[Frame is marked: False]
[Protocols in frame: eth:arp]
[Coloring Rule Name: ARP]
[Coloring Rule String: arp]
Ethernet II, Src: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Destination: Broadcast (ff:ff:ff:ff:ff:ff)
Address: Broadcast (ff:ff:ff:ff:ff:ff)
.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
Source: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff)
Address: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Trailer: 461BB7DFB6905FE3
Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
Sender MAC address: IntelCor_b7:9b:ff (00:12:f0:b7:9b:ff)
Sender IP address: 192.168.1.101 (192.168.1.101)
Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
Target IP address: 192.168.1.1 (192.168.1.1)
No. Time Source Destination Protocol Info
137 68.186618 216.86.148.111 192.168.1.102 TCP www > 38639 [RST, ACK] Seq=30516 Ack=829 Win=0 Len=0
Frame 137 (62 bytes on wire, 62 bytes captured)
Arrival Time: May 20, 2007 22:09:17.437299000
[Time delta from previous packet: 4.744397000 seconds]
[Time since reference or first frame: 68.186618000 seconds]
Frame Number: 137
Packet Length: 62 bytes
Capture Length: 62 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP RST]
[Coloring Rule String: tcp.flags.reset eq 1]
Ethernet II, Src: LinksysG_ea:fc:98 (00:06:25:ea:fc:98), Dst: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Destination: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: FFD566A2EAC99271
Internet Protocol, Src: 216.86.148.111 (216.86.148.111), Dst: 192.168.1.102 (192.168.1.102)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x04ff (1279)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 254
Protocol: TCP (0x06)
Header checksum: 0x48fc [correct]
[Good: True]
[Bad : False]
Source: 216.86.148.111 (216.86.148.111)
Destination: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: www (80), Dst Port: 38639 (38639), Seq: 30516, Ack: 829, Len: 0
Source port: www (80)
Destination port: 38639 (38639)
Sequence number: 30516 (relative sequence number)
Acknowledgement number: 829 (relative ack number)
Header length: 20 bytes
Flags: 0x14 (RST, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .1.. = Reset: Set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 0
Checksum: 0x8174 [correct]
[Good Checksum: True]
[Bad Checksum: False]
No. Time Source Destination Protocol Info
138 73.968397 192.168.1.102 216.86.148.10 TCP 48004 > www [SYN] Seq=0 Len=0 MSS=1460 TSV=536381 TSER=0 WS=7
Frame 138 (74 bytes on wire, 74 bytes captured)
Arrival Time: May 20, 2007 22:09:23.219078000
[Time delta from previous packet: 5.781779000 seconds]
[Time since reference or first frame: 73.968397000 seconds]
Frame Number: 138
Packet Length: 74 bytes
Capture Length: 74 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88), Dst: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Destination: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
Address: LinksysG_ea:fc:98 (00:06:25:ea:fc:98)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
Address: CameoCom_fd:c3:88 (00:40:f4:fd:c3:88)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 216.86.148.10 (216.86.148.10)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x8949 (35145)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x8303 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.102 (192.168.1.102)
Destination: 216.86.148.10 (216.86.148.10)
Transmission Control Protocol, Src Port: 48004 (48004), Dst Port: www (80), Seq: 0, Len: 0
Source port: 48004 (48004)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x4639 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Timestamps: TSval 536381, TSecr 0
NOP
Window scale: 7 (multiply by 128)
No. Time Source Destination Protocol Info
139 74.501279 Gvc_d4:30:31 Broadcast ARP Who has 192.168.1.1? Tell 192.168.1.106
Frame 139 (50 bytes on wire, 50 bytes captured)
Arrival Time: May 20, 2007 22:09:23.751960000
[Time delta from previous packet: 0.532882000 seconds]
[Time since reference or first frame: 74.501279000 seconds]
Frame Number: 139
Packet Length: 50 bytes
Capture Length: 50 bytes
[Frame is marked: False]
[Protocols in frame: eth:arp]
[Coloring Rule Name: ARP]
[Coloring Rule String: arp]
Ethernet II, Src: Gvc_d4:30:31 (00:c0:a8:d4:30:31), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Destination: Broadcast (ff:ff:ff:ff:ff:ff)
Address: Broadcast (ff:ff:ff:ff:ff:ff)
.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
Source: Gvc_d4:30:31 (00:c0:a8:d4:30:31)
Address: Gvc_d4:30:31 (00:c0:a8:d4:30:31)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Trailer: 5602C31AF209B278
Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
Sender MAC address: Gvc_d4:30:31 (00:c0:a8:d4:30:31)
Sender IP address: 192.168.1.106 (192.168.1.106)
Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
Target IP address: 192.168.1.1 (192.168.1.1)