Frame 1 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 5, 2008 18:08:29.301155000
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 62 bytes
Capture Length: 62 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: Vmware_81:51:a3 (00:0c:29:81:51:a3), Dst: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Destination: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.63 (192.168.1.63), Dst: 192.168.1.5 (192.168.1.5)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0x11ac (4524)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x6587 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.63 (192.168.1.63)
Destination: 192.168.1.5 (192.168.1.5)
Transmission Control Protocol, Src Port: d-cinema-rrp (1173), Dst Port: ndl-aas (3128), Seq: 0, Len: 0
Source port: d-cinema-rrp (1173)
Destination port: ndl-aas (3128)
Sequence number: 0 (relative sequence number)
Header length: 28 bytes
Flags: 0x02 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 64240
Checksum: 0xe5ec [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted

Frame 2 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 5, 2008 18:08:29.301165000
[Time delta from previous captured frame: 0.000010000 seconds]
[Time delta from previous displayed frame: 0.000010000 seconds]
[Time since reference or first frame: 0.000010000 seconds]
Frame Number: 2
Frame Length: 62 bytes
Capture Length: 62 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: Ibm_47:3a:22 (00:09:6b:47:3a:22), Dst: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Destination: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.5 (192.168.1.5), Dst: 192.168.1.63 (192.168.1.63)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0x0000 (0)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xb733 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.5 (192.168.1.5)
Destination: 192.168.1.63 (192.168.1.63)
Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: d-cinema-rrp (1173), Seq: 0, Ack: 1, Len: 0
Source port: ndl-aas (3128)
Destination port: d-cinema-rrp (1173)
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 28 bytes
Flags: 0x12 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x094a [correct]
[Good Checksum: True]
[Bad Checksum: False]
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 1]
[The RTT to ACK the segment was: 0.000010000 seconds]

Frame 3 (54 bytes on wire, 54 bytes captured)
Arrival Time: Nov 5, 2008 18:08:29.301436000
[Time delta from previous captured frame: 0.000271000 seconds]
[Time delta from previous displayed frame: 0.000271000 seconds]
[Time since reference or first frame: 0.000281000 seconds]
Frame Number: 3
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: Vmware_81:51:a3 (00:0c:29:81:51:a3), Dst: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Destination: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.63 (192.168.1.63), Dst: 192.168.1.5 (192.168.1.5)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x11ad (4525)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x658e [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.63 (192.168.1.63)
Destination: 192.168.1.5 (192.168.1.5)
Transmission Control Protocol, Src Port: d-cinema-rrp (1173), Dst Port: ndl-aas (3128), Seq: 1, Ack: 1, Len: 0
Source port: d-cinema-rrp (1173)
Destination port: ndl-aas (3128)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 64240
Checksum: 0x51ed [correct]
[Good Checksum: True]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 2]
[The RTT to ACK the segment was: 0.000271000 seconds]

Frame 4 (247 bytes on wire, 247 bytes captured)
Arrival Time: Nov 5, 2008 18:08:29.305288000
[Time delta from previous captured frame: 0.003852000 seconds]
[Time delta from previous displayed frame: 0.003852000 seconds]
[Time since reference or first frame: 0.004133000 seconds]
Frame Number: 4
Frame Length: 247 bytes
Capture Length: 247 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:http]
Ethernet II, Src: Vmware_81:51:a3 (00:0c:29:81:51:a3), Dst: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Destination: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.63 (192.168.1.63), Dst: 192.168.1.5 (192.168.1.5)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 233
Identification: 0x11af (4527)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x64cb [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.63 (192.168.1.63)
Destination: 192.168.1.5 (192.168.1.5)
Transmission Control Protocol, Src Port: d-cinema-rrp (1173), Dst Port: ndl-aas (3128), Seq: 1, Ack: 1, Len: 193
Source port: d-cinema-rrp (1173)
Destination port: ndl-aas (3128)
Sequence number: 1 (relative sequence number)
[Next sequence number: 194 (relative sequence number)]
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 64240
Checksum: 0x7d13 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Hypertext Transfer Protocol
GET ftp://coincoin:supermotdepasse@ftp.microsoft.com/ HTTP/1.0\r\n
Request Method: GET
Request URI: ftp://coincoin:supermotdepasse@ftp.microsoft.com/
Request Version: HTTP/1.0
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)\r\n
Host: ftp.microsoft.com:21\r\n
Proxy-Connection: Keep-Alive\r\n
\r\n

Frame 5 (54 bytes on wire, 54 bytes captured)
Arrival Time: Nov 5, 2008 18:08:29.305362000
[Time delta from previous captured frame: 0.000074000 seconds]
[Time delta from previous displayed frame: 0.000074000 seconds]
[Time since reference or first frame: 0.004207000 seconds]
Frame Number: 5
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: Ibm_47:3a:22 (00:09:6b:47:3a:22), Dst: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Destination: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.5 (192.168.1.5), Dst: 192.168.1.63 (192.168.1.63)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xcc56 (52310)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xeae4 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.5 (192.168.1.5)
Destination: 192.168.1.63 (192.168.1.63)
Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: d-cinema-rrp (1173), Seq: 1, Ack: 194, Len: 0
Source port: ndl-aas (3128)
Destination port: d-cinema-rrp (1173)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 194 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x32fd [correct]
[Good Checksum: True]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 4]
[The RTT to ACK the segment was: 0.000074000 seconds]

Frame 6 (354 bytes on wire, 354 bytes captured)
Arrival Time: Nov 5, 2008 18:08:30.238026000
[Time delta from previous captured frame: 0.932664000 seconds]
[Time delta from previous displayed frame: 0.932664000 seconds]
[Time since reference or first frame: 0.936871000 seconds]
Frame Number: 6
Frame Length: 354 bytes
Capture Length: 354 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:http]
Ethernet II, Src: Ibm_47:3a:22 (00:09:6b:47:3a:22), Dst: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Destination: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.5 (192.168.1.5), Dst: 192.168.1.63 (192.168.1.63)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 340
Identification: 0xcc57 (52311)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xe9b7 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.5 (192.168.1.5)
Destination: 192.168.1.63 (192.168.1.63)
Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: d-cinema-rrp (1173), Seq: 1, Ack: 194, Len: 300
Source port: ndl-aas (3128)
Destination port: d-cinema-rrp (1173)
Sequence number: 1 (relative sequence number)
[Next sequence number: 301 (relative sequence number)]
Acknowledgement number: 194 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x8e43 [correct]
[Good Checksum: True]
[Bad Checksum: False]
TCP segment data (300 bytes)

Frame 7 (1203 bytes on wire, 1203 bytes captured)
Arrival Time: Nov 5, 2008 18:08:30.238136000
[Time delta from previous captured frame: 0.000110000 seconds]
[Time delta from previous displayed frame: 0.000110000 seconds]
[Time since reference or first frame: 0.936981000 seconds]
Frame Number: 7
Frame Length: 1203 bytes
Capture Length: 1203 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:http:data-text-lines]
Ethernet II, Src: Ibm_47:3a:22 (00:09:6b:47:3a:22), Dst: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Destination: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.5 (192.168.1.5), Dst: 192.168.1.63 (192.168.1.63)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1189
Identification: 0xcc58 (52312)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xe665 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.5 (192.168.1.5)
Destination: 192.168.1.63 (192.168.1.63)
Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: d-cinema-rrp (1173), Seq: 301, Ack: 194, Len: 1149
Source port: ndl-aas (3128)
Destination port: d-cinema-rrp (1173)
Sequence number: 301 (relative sequence number)
[Next sequence number: 1450 (relative sequence number)]
Acknowledgement number: 194 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xfc25 [correct]
[Good Checksum: True]
[Bad Checksum: False]
TCP segment data (1149 bytes)
[Reassembled TCP Segments (1449 bytes): #6(300), #7(1149)]
[Frame: 6, payload: 0-299 (300 bytes)]
[Frame: 7, payload: 300-1448 (1149 bytes)]
Hypertext Transfer Protocol
HTTP/1.0 403 Forbidden\r\n
Request Version: HTTP/1.0
Response Code: 403
Server: squid/2.7.STABLE3\r\n
Date: Wed, 05 Nov 2008 17:08:29 GMT\r\n
Content-Type: text/html\r\n
Content-Length: 1149
Expires: Wed, 05 Nov 2008 17:08:29 GMT\r\n
X-Squid-Error: ERR_FTP_FORBIDDEN 0\r\n
X-Cache: MISS from neptune\r\n
X-Cache-Lookup: MISS from neptune:3128\r\n
Connection: close\r\n
\r\n
Line-based text data: text/html
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">\n
<HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">\n
<TITLE>ERROR: The requested URL could not be retrieved</TITLE>\n
<STYLE type="text/css"><!--BODY{background-color:#ffffff;font-family:verdana,sans-serif}PRE{font-family:sans-serif}--></STYLE>\n
</HEAD><BODY>\n
<H1>ERROR</H1>\n
<H2>The requested URL could not be retrieved</H2>\n
<HR noshade size="1px">\n
<P>\n
An FTP authentication failure occurred\n
while trying to retrieve the URL:\n
<A HREF="ftp://coincoin@ftp.microsoft.com/">ftp://coincoin@ftp.microsoft.com/</A>\n
<P>\n
Squid sent the following FTP command:\n
<blockquote><strong><pre>PASS &lt;yourpassword&gt;</pre></strong></blockquote>\n
and then received this reply\n
<blockquote><strong><pre>User coincoin cannot log in.</pre></strong></blockquote>\n
<blockquote><strong><pre></pre></strong></blockquote>\n
<P>Your cache administrator is <A HREF="mailto:webmaster">webmaster</A>. \n
\n
<BR clear="all">\n
<HR noshade size="1px">\n
<ADDRESS>\n
Generated Wed, 05 Nov 2008 17:08:29 GMT by neptune (squid/2.7.STABLE3)\n
</ADDRESS>\n
</BODY></HTML>\n

Frame 8 (54 bytes on wire, 54 bytes captured)
Arrival Time: Nov 5, 2008 18:08:30.238367000
[Time delta from previous captured frame: 0.000231000 seconds]
[Time delta from previous displayed frame: 0.000231000 seconds]
[Time since reference or first frame: 0.937212000 seconds]
Frame Number: 8
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: Ibm_47:3a:22 (00:09:6b:47:3a:22), Dst: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Destination: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.5 (192.168.1.5), Dst: 192.168.1.63 (192.168.1.63)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xcc59 (52313)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xeae1 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.5 (192.168.1.5)
Destination: 192.168.1.63 (192.168.1.63)
Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: d-cinema-rrp (1173), Seq: 1450, Ack: 194, Len: 0
Source port: ndl-aas (3128)
Destination port: d-cinema-rrp (1173)
Sequence number: 1450 (relative sequence number)
Acknowledgement number: 194 (relative ack number)
Header length: 20 bytes
Flags: 0x11 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 6432
Checksum: 0x2d53 [correct]
[Good Checksum: True]
[Bad Checksum: False]

Frame 9 (54 bytes on wire, 54 bytes captured)
Arrival Time: Nov 5, 2008 18:08:30.238877000
[Time delta from previous captured frame: 0.000510000 seconds]
[Time delta from previous displayed frame: 0.000510000 seconds]
[Time since reference or first frame: 0.937722000 seconds]
Frame Number: 9
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: Vmware_81:51:a3 (00:0c:29:81:51:a3), Dst: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Destination: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.63 (192.168.1.63), Dst: 192.168.1.5 (192.168.1.5)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x11b1 (4529)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x658a [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.63 (192.168.1.63)
Destination: 192.168.1.5 (192.168.1.5)
Transmission Control Protocol, Src Port: d-cinema-rrp (1173), Dst Port: ndl-aas (3128), Seq: 194, Ack: 1451, Len: 0
Source port: d-cinema-rrp (1173)
Destination port: ndl-aas (3128)
Sequence number: 194 (relative sequence number)
Acknowledgement number: 1451 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 62791
Checksum: 0x512b [correct]
[Good Checksum: True]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 8]
[The RTT to ACK the segment was: 0.000510000 seconds]

Frame 10 (54 bytes on wire, 54 bytes captured)
Arrival Time: Nov 5, 2008 18:08:30.240268000
[Time delta from previous captured frame: 0.001391000 seconds]
[Time delta from previous displayed frame: 0.001391000 seconds]
[Time since reference or first frame: 0.939113000 seconds]
Frame Number: 10
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: Vmware_81:51:a3 (00:0c:29:81:51:a3), Dst: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Destination: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.63 (192.168.1.63), Dst: 192.168.1.5 (192.168.1.5)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x11b2 (4530)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x6589 [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.63 (192.168.1.63)
Destination: 192.168.1.5 (192.168.1.5)
Transmission Control Protocol, Src Port: d-cinema-rrp (1173), Dst Port: ndl-aas (3128), Seq: 194, Ack: 1451, Len: 0
Source port: d-cinema-rrp (1173)
Destination port: ndl-aas (3128)
Sequence number: 194 (relative sequence number)
Acknowledgement number: 1451 (relative ack number)
Header length: 20 bytes
Flags: 0x11 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 62791
Checksum: 0x512a [correct]
[Good Checksum: True]
[Bad Checksum: False]

Frame 11 (54 bytes on wire, 54 bytes captured)
Arrival Time: Nov 5, 2008 18:08:30.240321000
[Time delta from previous captured frame: 0.000053000 seconds]
[Time delta from previous displayed frame: 0.000053000 seconds]
[Time since reference or first frame: 0.939166000 seconds]
Frame Number: 11
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: Ibm_47:3a:22 (00:09:6b:47:3a:22), Dst: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Destination: Vmware_81:51:a3 (00:0c:29:81:51:a3)
Address: Vmware_81:51:a3 (00:0c:29:81:51:a3)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Ibm_47:3a:22 (00:09:6b:47:3a:22)
Address: Ibm_47:3a:22 (00:09:6b:47:3a:22)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.5 (192.168.1.5), Dst: 192.168.1.63 (192.168.1.63)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x0000 (0)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xb73b [correct]
[Good: True]
[Bad : False]
Source: 192.168.1.5 (192.168.1.5)
Destination: 192.168.1.63 (192.168.1.63)
Transmission Control Protocol, Src Port: ndl-aas (3128), Dst Port: d-cinema-rrp (1173), Seq: 1451, Ack: 195, Len: 0
Source port: ndl-aas (3128)
Destination port: d-cinema-rrp (1173)
Sequence number: 1451 (relative sequence number)
Acknowledgement number: 195 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x2d52 [correct]
[Good Checksum: True]
[Bad Checksum: False]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 10]
[The RTT to ACK the segment was: 0.000053000 seconds]