C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n No. Time Source Destination Protocol Length Info 1048 8.170148 192.168.1.2 192.168.1.100 TCP 66 54369 → 5000 [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 Frame 1048: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0 Interface id: 0 (\Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F}) Interface name: \Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F} Interface description: Encapsulation type: Ethernet (1) Arrival Time: Sep 26, 2019 14:29:55.883164000 Eastern Daylight Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1569522595.883164000 seconds [Time delta from previous captured frame: 0.014157000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 8.170148000 seconds] Frame Number: 1048 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth::ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Dell_57:4a:27 (18:db:f2:57:4a:27), Dst: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) Destination: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Destination (resolved): Microchi_f6:7f:92] Address: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Address (resolved): Microchi_f6:7f:92] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Source: Dell_57:4a:27 (18:db:f2:57:4a:27) [Source (resolved): Dell_57:4a:27] Address: Dell_57:4a:27 (18:db:f2:57:4a:27) [Address (resolved): Dell_57:4a:27] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 192.168.1.100 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) ...... 00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x1fe0 (8160) Flags: 0x4000, Don't fragment 0...... = Reserved bit: Not set .1...... = Don't fragment: Set ..0...... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Source or Destination Address: 192.168.1.2 [Source Host: 192.168.1.2] [Source or Destination Host: 192.168.1.2] Destination: 192.168.1.100 Source or Destination Address: 192.168.1.100 [Destination Host: 192.168.1.100] [Source or Destination Host: 192.168.1.100] Transmission Control Protocol, Src Port: 54369, Dst Port: 5000, Seq: 0, Len: 0 Source Port: 54369 Destination Port: 5000 Source or Destination Port: 54369 Source or Destination Port: 5000 [Stream index: 1] [TCP Segment Len: 0] Sequence number: 0 (relative sequence number) [Next sequence number: 0 (relative sequence number)] Acknowledgment number: 0 1000 .... = Header Length: 32 bytes (8) Flags: 0x002 (SYN) 000...... = Reserved: Not set ...0 ...... = Nonce: Not set .... 0...... = Congestion Window Reduced (CWR): Not set .... .0...... = ECN-Echo: Not set ...... 0. .... = Urgent: Not set ...... 0 .... = Acknowledgment: Not set ...... 0... = Push: Not set C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n ...... 0.. = Reset: Not set ...... 1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 5000] [Connection establish request (SYN): server port 5000] Message: Connection establish request (SYN): server port 5000 [Severity level: Chat] [Group: Sequence] ...... 0 = Fin: Not set [TCP Flags: ··········S·] Window size value: 8192 [Calculated window size: 8192] Checksum: 0x83dd [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), SACK permitted TCP Option - Maximum segment size: 1460 bytes Kind: Maximum Segment Size (2) Length: 4 MSS Value: 1460 TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Window scale: 8 (multiply by 256) Kind: Window Scale (3) Length: 3 Shift count: 8 [Multiplier: 256] TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - SACK permitted Kind: SACK Permitted (4) Length: 2 [Timestamps] [Time since first frame in this TCP stream: 0.000000000 seconds] [Time since previous frame in this TCP stream: 0.000000000 seconds] TRANSUM RTE Data [RTE Status: OK] [Req First Seg: 1048] [Req Last Seg: 1048] [Rsp First Seg: 1049] [Rsp Last Seg: 1049] [APDU Rsp Time: 0.000179000 seconds] [Service Time: 0.000179000 seconds] [Req Spread: 0.000000000 seconds] [Rsp Spread: 0.000000000 seconds] [Trace clip filter: tcp.stream==1 && frame.number>=1048 && frame.number<=1049] [Calculation: SYN and SYN/ACK] No. Time Source Destination Protocol Length Info 1049 8.170327 192.168.1.100 192.168.1.2 TCP 60 5000 → 54369 [SYN, ACK] Seq=0 Ack=1 Win=2048 Len=0 MSS=1460 Frame 1049: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0 Interface id: 0 (\Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F}) Interface name: \Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F} Interface description: Ethernet Encapsulation type: Ethernet (1) Arrival Time: Sep 26, 2019 14:29:55.883343000 Eastern Daylight Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1569522595.883343000 seconds [Time delta from previous captured frame: 0.000179000 seconds] [Time delta from previous displayed frame: 0.000179000 seconds] [Time since reference or first frame: 8.170327000 seconds] Frame Number: 1049 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Microchi_f6:7f:92 (54:10:ec:f6:7f:92), Dst: Dell_57:4a:27 (18:db:f2:57:4a:27) Destination: Dell_57:4a:27 (18:db:f2:57:4a:27) [Destination (resolved): Dell_57:4a:27] Address: Dell_57:4a:27 (18:db:f2:57:4a:27) [Address (resolved): Dell_57:4a:27] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Source: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Source (resolved): Microchi_f6:7f:92] Address: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n [Address (resolved): Microchi_f6:7f:92] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Padding: 00 00 Internet Protocol Version 4, Src: 192.168.1.100, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) ...... 00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 44 Identification: 0x0aeb (2795) Flags: 0x4000, Don't fragment 0...... = Reserved bit: Not set .1...... = Don't fragment: Set ..0...... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x6c2a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.100 Source or Destination Address: 192.168.1.100 [Source Host: 192.168.1.100] [Source or Destination Host: 192.168.1.100] Destination: 192.168.1.2 Source or Destination Address: 192.168.1.2 [Destination Host: 192.168.1.2] [Source or Destination Host: 192.168.1.2] Transmission Control Protocol, Src Port: 5000, Dst Port: 54369, Seq: 0, Ack: 1, Len: 0 Source Port: 5000 Destination Port: 54369 Source or Destination Port: 5000 Source or Destination Port: 54369 [Stream index: 1] [TCP Segment Len: 0] Sequence number: 0 (relative sequence number) [Next sequence number: 0 (relative sequence number)] Acknowledgment number: 1 (relative ack number) 0110 .... = Header Length: 24 bytes (6) Flags: 0x012 (SYN, ACK) 000...... = Reserved: Not set ...0 ...... = Nonce: Not set .... 0...... = Congestion Window Reduced (CWR): Not set .... .0...... = ECN-Echo: Not set ...... 0. .... = Urgent: Not set ...... 1 .... = Acknowledgment: Set ...... 0... = Push: Not set ...... 0.. = Reset: Not set ...... 1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 5000] [Connection establish acknowledge (SYN+ACK): server port 5000] Message: Connection establish acknowledge (SYN+ACK): server port 5000 [Severity level: Chat] [Group: Sequence] ...... 0 = Fin: Not set [TCP Flags: ·······A··S·] Window size value: 2048 [Calculated window size: 2048] Checksum: 0x6953 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (4 bytes), Maximum segment size TCP Option - Maximum segment size: 1460 bytes Kind: Maximum Segment Size (2) Length: 4 MSS Value: 1460 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1048] [The RTT to ACK the segment was: 0.000179000 seconds] [iRTT: 0.000311000 seconds] [Timestamps] [Time since first frame in this TCP stream: 0.000179000 seconds] [Time since previous frame in this TCP stream: 0.000179000 seconds] No. Time Source Destination Protocol Length Info 1050 8.170459 192.168.1.2 192.168.1.100 TCP 54 54369 → 5000 [ACK] Seq=1 Ack=1 Win=64240 Len=0 Frame 1050: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0 Interface id: 0 (\Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F}) Interface name: \Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F} C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n Interface description: Ethernet Encapsulation type: Ethernet (1) Arrival Time: Sep 26, 2019 14:29:55.883475000 Eastern Daylight Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1569522595.883475000 seconds [Time delta from previous captured frame: 0.000132000 seconds] [Time delta from previous displayed frame: 0.000132000 seconds] [Time since reference or first frame: 8.170459000 seconds] Frame Number: 1050 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_57:4a:27 (18:db:f2:57:4a:27), Dst: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) Destination: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Destination (resolved): Microchi_f6:7f:92] Address: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Address (resolved): Microchi_f6:7f:92] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Source: Dell_57:4a:27 (18:db:f2:57:4a:27) [Source (resolved): Dell_57:4a:27] Address: Dell_57:4a:27 (18:db:f2:57:4a:27) [Address (resolved): Dell_57:4a:27] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 192.168.1.100 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) ...... 00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x1fe1 (8161) Flags: 0x4000, Don't fragment 0...... = Reserved bit: Not set .1...... = Don't fragment: Set ..0...... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Source or Destination Address: 192.168.1.2 [Source Host: 192.168.1.2] [Source or Destination Host: 192.168.1.2] Destination: 192.168.1.100 Source or Destination Address: 192.168.1.100 [Destination Host: 192.168.1.100] [Source or Destination Host: 192.168.1.100] Transmission Control Protocol, Src Port: 54369, Dst Port: 5000, Seq: 1, Ack: 1, Len: 0 Source Port: 54369 Destination Port: 5000 Source or Destination Port: 54369 Source or Destination Port: 5000 [Stream index: 1] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) [Next sequence number: 1 (relative sequence number)] Acknowledgment number: 1 (relative ack number) 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000...... = Reserved: Not set ...0 ...... = Nonce: Not set .... 0...... = Congestion Window Reduced (CWR): Not set .... .0...... = ECN-Echo: Not set ...... 0. .... = Urgent: Not set ...... 1 .... = Acknowledgment: Set ...... 0... = Push: Not set ...... 0.. = Reset: Not set ...... 0. = Syn: Not set ...... 0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 64240 [Calculated window size: 64240] C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x83d1 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1049] [The RTT to ACK the segment was: 0.000132000 seconds] [iRTT: 0.000311000 seconds] [Timestamps] [Time since first frame in this TCP stream: 0.000311000 seconds] [Time since previous frame in this TCP stream: 0.000132000 seconds] No. Time Source Destination Protocol Length Info 1604 12.601859 192.168.1.2 192.168.1.100 TCP 66 54369 → 5000 [PSH, ACK] Seq=1 Ack=1 Win=64240 Len=12 Frame 1604: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0 Interface id: 0 (\Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F}) Interface name: \Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F} Interface description: Ethernet Encapsulation type: Ethernet (1) Arrival Time: Sep 26, 2019 14:30:00.314875000 Eastern Daylight Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1569522600.314875000 seconds [Time delta from previous captured frame: 0.031024000 seconds] [Time delta from previous displayed frame: 4.431400000 seconds] [Time since reference or first frame: 12.601859000 seconds] Frame Number: 1604 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_57:4a:27 (18:db:f2:57:4a:27), Dst: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) Destination: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Destination (resolved): Microchi_f6:7f:92] Address: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Address (resolved): Microchi_f6:7f:92] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Source: Dell_57:4a:27 (18:db:f2:57:4a:27) [Source (resolved): Dell_57:4a:27] Address: Dell_57:4a:27 (18:db:f2:57:4a:27) [Address (resolved): Dell_57:4a:27] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 192.168.1.100 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) ...... 00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x20fb (8443) Flags: 0x4000, Don't fragment 0...... = Reserved bit: Not set .1...... = Don't fragment: Set ..0...... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Source or Destination Address: 192.168.1.2 [Source Host: 192.168.1.2] [Source or Destination Host: 192.168.1.2] Destination: 192.168.1.100 Source or Destination Address: 192.168.1.100 [Destination Host: 192.168.1.100] [Source or Destination Host: 192.168.1.100] Transmission Control Protocol, Src Port: 54369, Dst Port: 5000, Seq: 1, Ack: 1, Len: 12 Source Port: 54369 Destination Port: 5000 Source or Destination Port: 54369 Source or Destination Port: 5000 [Stream index: 1] [TCP Segment Len: 12] Sequence number: 1 (relative sequence number) [Next sequence number: 13 (relative sequence number)] C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n Acknowledgment number: 1 (relative ack number) 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000...... = Reserved: Not set ...0 ...... = Nonce: Not set .... 0...... = Congestion Window Reduced (CWR): Not set .... .0...... = ECN-Echo: Not set ...... 0. .... = Urgent: Not set ...... 1 .... = Acknowledgment: Set ...... 1... = Push: Set ...... 0.. = Reset: Not set ...... 0. = Syn: Not set ...... 0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x83dd [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.000311000 seconds] [Bytes in flight: 12] [Bytes sent since last PSH flag: 12] [Timestamps] [Time since first frame in this TCP stream: 4.431711000 seconds] [Time since previous frame in this TCP stream: 4.431400000 seconds] TCP payload (12 bytes) Data (12 bytes) 0000 40 30 31 3a 53 41 43 3d 34 30 0d 0a @01:SAC=40.. Data: 40 30 31 3a 53 41 43 3d 34 30 0d 0a [Length: 12] No. Time Source Destination Protocol Length Info 1605 12.604668 192.168.1.100 192.168.1.2 TCP 66 5000 → 54369 [PSH, ACK] Seq=1 Ack=13 Win=2048 Len=12 Frame 1605: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0 Interface id: 0 (\Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F}) Interface name: \Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F} Interface description: Ethernet Encapsulation type: Ethernet (1) Arrival Time: Sep 26, 2019 14:30:00.317684000 Eastern Daylight Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1569522600.317684000 seconds [Time delta from previous captured frame: 0.002809000 seconds] [Time delta from previous displayed frame: 0.002809000 seconds] [Time since reference or first frame: 12.604668000 seconds] Frame Number: 1605 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:data] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Microchi_f6:7f:92 (54:10:ec:f6:7f:92), Dst: Dell_57:4a:27 (18:db:f2:57:4a:27) Destination: Dell_57:4a:27 (18:db:f2:57:4a:27) [Destination (resolved): Dell_57:4a:27] Address: Dell_57:4a:27 (18:db:f2:57:4a:27) [Address (resolved): Dell_57:4a:27] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Source: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Source (resolved): Microchi_f6:7f:92] Address: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Address (resolved): Microchi_f6:7f:92] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.100, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) ...... 00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0aec (2796) Flags: 0x4000, Don't fragment 0...... = Reserved bit: Not set .1...... = Don't fragment: Set ..0...... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n Time to live: 128 Protocol: TCP (6) Header checksum: 0x6c21 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.100 Source or Destination Address: 192.168.1.100 [Source Host: 192.168.1.100] [Source or Destination Host: 192.168.1.100] Destination: 192.168.1.2 Source or Destination Address: 192.168.1.2 [Destination Host: 192.168.1.2] [Source or Destination Host: 192.168.1.2] Transmission Control Protocol, Src Port: 5000, Dst Port: 54369, Seq: 1, Ack: 13, Len: 12 Source Port: 5000 Destination Port: 54369 Source or Destination Port: 5000 Source or Destination Port: 54369 [Stream index: 1] [TCP Segment Len: 12] Sequence number: 1 (relative sequence number) [Next sequence number: 13 (relative sequence number)] Acknowledgment number: 13 (relative ack number) 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000...... = Reserved: Not set ...0 ...... = Nonce: Not set .... 0...... = Congestion Window Reduced (CWR): Not set .... .0...... = ECN-Echo: Not set ...... 0. .... = Urgent: Not set ...... 1 .... = Acknowledgment: Set ...... 1... = Push: Set ...... 0.. = Reset: Not set ...... 0. = Syn: Not set ...... 0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 2048 [Calculated window size: 2048] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x54cd [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1604] [The RTT to ACK the segment was: 0.002809000 seconds] [iRTT: 0.000311000 seconds] [Bytes in flight: 12] [Bytes sent since last PSH flag: 12] [Timestamps] [Time since first frame in this TCP stream: 4.434520000 seconds] [Time since previous frame in this TCP stream: 0.002809000 seconds] TCP payload (12 bytes) Data (12 bytes) 0000 23 30 31 3a 53 41 43 3d 34 30 0d 0a #01:SAC=40.. Data: 23 30 31 3a 53 41 43 3d 34 30 0d 0a [Length: 12] No. Time Source Destination Protocol Length Info 1615 12.655197 192.168.1.2 192.168.1.100 TCP 54 54369 → 5000 [ACK] Seq=13 Ack=13 Win=64228 Len=0 Frame 1615: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0 Interface id: 0 (\Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F}) Interface name: \Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F} Interface description: Ethernet Encapsulation type: Ethernet (1) Arrival Time: Sep 26, 2019 14:30:00.368213000 Eastern Daylight Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1569522600.368213000 seconds [Time delta from previous captured frame: 0.002078000 seconds] [Time delta from previous displayed frame: 0.050529000 seconds] [Time since reference or first frame: 12.655197000 seconds] Frame Number: 1615 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Dell_57:4a:27 (18:db:f2:57:4a:27), Dst: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) Destination: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Destination (resolved): Microchi_f6:7f:92] Address: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n [Address (resolved): Microchi_f6:7f:92] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Source: Dell_57:4a:27 (18:db:f2:57:4a:27) [Source (resolved): Dell_57:4a:27] Address: Dell_57:4a:27 (18:db:f2:57:4a:27) [Address (resolved): Dell_57:4a:27] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 192.168.1.100 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) ...... 00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x2101 (8449) Flags: 0x4000, Don't fragment 0...... = Reserved bit: Not set .1...... = Don't fragment: Set ..0...... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Source or Destination Address: 192.168.1.2 [Source Host: 192.168.1.2] [Source or Destination Host: 192.168.1.2] Destination: 192.168.1.100 Source or Destination Address: 192.168.1.100 [Destination Host: 192.168.1.100] [Source or Destination Host: 192.168.1.100] Transmission Control Protocol, Src Port: 54369, Dst Port: 5000, Seq: 13, Ack: 13, Len: 0 Source Port: 54369 Destination Port: 5000 Source or Destination Port: 54369 Source or Destination Port: 5000 [Stream index: 1] [TCP Segment Len: 0] Sequence number: 13 (relative sequence number) [Next sequence number: 13 (relative sequence number)] Acknowledgment number: 13 (relative ack number) 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000...... = Reserved: Not set ...0 ...... = Nonce: Not set .... 0...... = Congestion Window Reduced (CWR): Not set .... .0...... = ECN-Echo: Not set ...... 0. .... = Urgent: Not set ...... 1 .... = Acknowledgment: Set ...... 0... = Push: Not set ...... 0.. = Reset: Not set ...... 0. = Syn: Not set ...... 0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 64228 [Calculated window size: 64228] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x83d1 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1605] [The RTT to ACK the segment was: 0.050529000 seconds] [iRTT: 0.000311000 seconds] [Timestamps] [Time since first frame in this TCP stream: 4.485049000 seconds] [Time since previous frame in this TCP stream: 0.050529000 seconds] No. Time Source Destination Protocol Length Info 2116 16.411986 192.168.1.2 192.168.1.100 TCP 54 54369 → 5000 [RST, ACK] Seq=13 Ack=13 Win=0 Len=0 Frame 2116: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0 Interface id: 0 (\Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F}) Interface name: \Device\NPF_{0DE2162E-7B89-46D7-B32C-384B6AC0C00F} Interface description: Ethernet Encapsulation type: Ethernet (1) Arrival Time: Sep 26, 2019 14:30:04.125002000 Eastern Daylight Time [Time shift for this packet: 0.000000000 seconds] C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n Epoch Time: 1569522604.125002000 seconds [Time delta from previous captured frame: 0.003800000 seconds] [Time delta from previous displayed frame: 3.756789000 seconds] [Time since reference or first frame: 16.411986000 seconds] Frame Number: 2116 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: Dell_57:4a:27 (18:db:f2:57:4a:27), Dst: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) Destination: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Destination (resolved): Microchi_f6:7f:92] Address: Microchi_f6:7f:92 (54:10:ec:f6:7f:92) [Address (resolved): Microchi_f6:7f:92] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Source: Dell_57:4a:27 (18:db:f2:57:4a:27) [Source (resolved): Dell_57:4a:27] Address: Dell_57:4a:27 (18:db:f2:57:4a:27) [Address (resolved): Dell_57:4a:27] ...... 0...... = LG bit: Globally unique address (factory default) ...... 0 ...... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 192.168.1.100 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) ...... 00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x21ff (8703) Flags: 0x4000, Don't fragment 0...... = Reserved bit: Not set .1...... = Don't fragment: Set ..0...... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Source or Destination Address: 192.168.1.2 [Source Host: 192.168.1.2] [Source or Destination Host: 192.168.1.2] Destination: 192.168.1.100 Source or Destination Address: 192.168.1.100 [Destination Host: 192.168.1.100] [Source or Destination Host: 192.168.1.100] Transmission Control Protocol, Src Port: 54369, Dst Port: 5000, Seq: 13, Ack: 13, Len: 0 Source Port: 54369 Destination Port: 5000 Source or Destination Port: 54369 Source or Destination Port: 5000 [Stream index: 1] [TCP Segment Len: 0] Sequence number: 13 (relative sequence number) [Next sequence number: 13 (relative sequence number)] Acknowledgment number: 13 (relative ack number) 0101 .... = Header Length: 20 bytes (5) Flags: 0x014 (RST, ACK) 000...... = Reserved: Not set ...0 ...... = Nonce: Not set .... 0...... = Congestion Window Reduced (CWR): Not set .... .0...... = ECN-Echo: Not set ...... 0. .... = Urgent: Not set ...... 1 .... = Acknowledgment: Set ...... 0... = Push: Not set ...... 1.. = Reset: Set [Expert Info (Warning/Sequence): Connection reset (RST)] [Connection reset (RST)] Message: Connection reset (RST) [Severity level: Warning] [Group: Sequence] ...... 0. = Syn: Not set ...... 0 = Fin: Not set [TCP Flags: ·······A·R··] Window size value: 0 C :\Users\hgoodrich\Desktop\LC E\Titan\SentF romLabv iew .pcapng 6881 total packets, 7 show n [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x83d1 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 8.241838000 seconds] [Time since previous frame in this TCP stream: 3.756789000 seconds]