* corruption of ICMP payload while forwarding
@ 2004-07-06 12:29 Harald Welte
[not found] ` <1089124948.1040.2.camel@jzny.localdomain>
0 siblings, 1 reply; 2+ messages in thread
From: Harald Welte @ 2004-07-06 12:29 UTC (permalink / raw)
To: netdev
[-- Attachment #1.1: Type: text/plain, Size: 1362 bytes --]
Hi!
I'm observing a quite strange phenomenon on one of the larger linux
firewall deployments (Xeon 3.06GHz, ServerWorks Chipset, 16 Intel E100
chips (82559ER)):
The corruption of the data payload of ICMP packets being forwarded!
This corruption happens to about 1% of all traffic, and only happens
when there's some PF_PACKET socket open (like tcpdump, nacctd, ...).
If you run tcpdump on the outbound interface of the firewall, the packet
payload is still intact.
This (production) system is running a custom 2.4.21 based kernel with
lots of current netfilter patch-o-matic patches. However, the observed
corruption is present in all packets, even those who are not NAT'ed,
mangled or altered in any way.
However, the reproducible connection to PF_PACKET sockets leads my focus
a bit away from netfilter towards the core network stack.
Attached is a lsmod and lspci of that machine, as well as packet
captures taken via mirror port on the cisco switches on the inbound and
outbound interface for that packet.
Any clues, hints, ideas? Has anyone ever observed something similar?
--
- Harald Welte <laforge@gnumonks.org> http://www.gnumonks.org/
============================================================================
Programming is like sex: One mistake and you have to support it your lifetime
[-- Attachment #1.2: lspci --]
[-- Type: text/plain, Size: 10914 bytes --]
PCI devices found:
Bus 0, device 0, function 0:
Host bridge: ServerWorks CNB20-HE Host Bridge (rev 51).
Bus 0, device 0, function 1:
Host bridge: ServerWorks CNB20-HE Host Bridge (#2) (rev 0).
Bus 0, device 0, function 2:
Host bridge: ServerWorks CNB20-HE Host Bridge (#3) (rev 0).
Bus 0, device 3, function 0:
VGA compatible controller: ATI Technologies Inc Rage XL (rev 39).
Master Capable. Latency=64. Min Gnt=8.
Non-prefetchable 32 bit memory at 0xf6000000 [0xf6ffffff].
I/O at 0x2400 [0x24ff].
Non-prefetchable 32 bit memory at 0xf5ff0000 [0xf5ff0fff].
Bus 0, device 4, function 0:
System peripheral: PCI device 0e11:b203 (Compaq Computer Corporation) (rev 1).
IRQ 5.
I/O at 0x1800 [0x18ff].
Non-prefetchable 32 bit memory at 0xf5fe0000 [0xf5fe01ff].
Bus 0, device 4, function 2:
System peripheral: PCI device 0e11:b204 (Compaq Computer Corporation) (rev 1).
IRQ 10.
Master Capable. Latency=64.
I/O at 0x2800 [0x28ff].
Non-prefetchable 32 bit memory at 0xf5fd0000 [0xf5fd07ff].
Non-prefetchable 32 bit memory at 0xf5fc0000 [0xf5fc1fff].
Non-prefetchable 32 bit memory at 0xf5f00000 [0xf5f7ffff].
Bus 0, device 15, function 0:
ISA bridge: ServerWorks CSB5 South Bridge (rev 147).
Master Capable. Latency=32.
Bus 0, device 15, function 1:
IDE interface: ServerWorks CSB5 IDE Controller (rev 147).
Master Capable. Latency=64.
I/O at 0x2000 [0x200f].
Bus 0, device 15, function 2:
USB Controller: ServerWorks OSB4/CSB5 OHCI USB Controller (rev 5).
IRQ 11.
Master Capable. Latency=64. Max Lat=80.
Non-prefetchable 32 bit memory at 0xf5ef0000 [0xf5ef0fff].
Bus 0, device 15, function 3:
Host bridge: ServerWorks GCLE Host Bridge (rev 0).
Bus 0, device 16, function 0:
Host bridge: PCI device 1166:0101 (ServerWorks) (rev 5).
Master Capable. Latency=64.
Bus 0, device 16, function 2:
Host bridge: PCI device 1166:0101 (ServerWorks) (rev 5).
Master Capable. Latency=64.
Bus 0, device 17, function 0:
Host bridge: PCI device 1166:0101 (ServerWorks) (rev 5).
Master Capable. Latency=64.
Bus 0, device 17, function 2:
Host bridge: PCI device 1166:0101 (ServerWorks) (rev 5).
Master Capable. Latency=64.
Bus 1, device 3, function 0:
SCSI storage controller: Adaptec AHA-3960D / AIC-7899A U160/m (rev 1).
IRQ 15.
Master Capable. Latency=64. Min Gnt=40.Max Lat=25.
I/O at 0x3000 [0x30ff].
Non-prefetchable 64 bit memory at 0xf78f0000 [0xf78f0fff].
Bus 1, device 3, function 1:
SCSI storage controller: Adaptec AHA-3960D / AIC-7899A U160/m (#2) (rev 1).
IRQ 15.
Master Capable. Latency=64. Min Gnt=40.Max Lat=25.
I/O at 0x3400 [0x34ff].
Non-prefetchable 64 bit memory at 0xf78e0000 [0xf78e0fff].
Bus 1, device 4, function 0:
Ethernet controller: Broadcom Corporation NetXtreme BCM5703X Gigabit Ethernet (rev 2).
IRQ 11.
Master Capable. Latency=64. Min Gnt=64.
Non-prefetchable 64 bit memory at 0xf78d0000 [0xf78dffff].
Bus 2, device 1, function 0:
PCI bridge: Intel Corp. 21152 PCI-to-PCI Bridge (rev 0).
Master Capable. Latency=64. Min Gnt=7.
Bus 2, device 2, function 0:
PCI bridge: Intel Corp. 21152 PCI-to-PCI Bridge (#2) (rev 0).
Master Capable. Latency=64. Min Gnt=7.
Bus 6, device 1, function 0:
PCI bridge: Intel Corp. 21152 PCI-to-PCI Bridge (#3) (rev 0).
Master Capable. Latency=64. Min Gnt=7.
Bus 10, device 1, function 0:
PCI bridge: Intel Corp. 21152 PCI-to-PCI Bridge (#4) (rev 0).
Master Capable. Latency=64. Min Gnt=7.
Bus 10, device 2, function 0:
PCI bridge: Intel Corp. 21152 PCI-to-PCI Bridge (#5) (rev 0).
Master Capable. Latency=64. Min Gnt=7.
Bus 3, device 0, function 0:
Ethernet controller: Intel Corp. 82559ER (rev 9).
IRQ 10.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf79f0000 [0xf79f0fff].
I/O at 0x4000 [0x403f].
Non-prefetchable 32 bit memory at 0xf79c0000 [0xf79dffff].
Bus 3, device 1, function 0:
Ethernet controller: Intel Corp. 82559ER (#2) (rev 9).
IRQ 5.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf79b0000 [0xf79b0fff].
I/O at 0x4040 [0x407f].
Non-prefetchable 32 bit memory at 0xf7980000 [0xf799ffff].
Bus 3, device 2, function 0:
Ethernet controller: Intel Corp. 82559ER (#3) (rev 9).
IRQ 10.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7970000 [0xf7970fff].
I/O at 0x4080 [0x40bf].
Non-prefetchable 32 bit memory at 0xf7940000 [0xf795ffff].
Bus 4, device 0, function 0:
Ethernet controller: Intel Corp. 82559ER (#4) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7af0000 [0xf7af0fff].
I/O at 0x5000 [0x503f].
Non-prefetchable 32 bit memory at 0xf7ac0000 [0xf7adffff].
Bus 4, device 1, function 0:
Ethernet controller: Intel Corp. 82559ER (#5) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7ab0000 [0xf7ab0fff].
I/O at 0x5040 [0x507f].
Non-prefetchable 32 bit memory at 0xf7a80000 [0xf7a9ffff].
Bus 4, device 2, function 0:
Ethernet controller: Intel Corp. 82559ER (#6) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7a70000 [0xf7a70fff].
I/O at 0x5080 [0x50bf].
Non-prefetchable 32 bit memory at 0xf7a40000 [0xf7a5ffff].
Bus 7, device 0, function 0:
Ethernet controller: Intel Corp. 82559ER (#7) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7df0000 [0xf7df0fff].
I/O at 0x7000 [0x703f].
Non-prefetchable 32 bit memory at 0xf7dc0000 [0xf7ddffff].
Bus 7, device 1, function 0:
Ethernet controller: Intel Corp. 82559ER (#8) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7db0000 [0xf7db0fff].
I/O at 0x7040 [0x707f].
Non-prefetchable 32 bit memory at 0xf7d80000 [0xf7d9ffff].
Bus 7, device 2, function 0:
Ethernet controller: Intel Corp. 82559ER (#9) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7d70000 [0xf7d70fff].
I/O at 0x7080 [0x70bf].
Non-prefetchable 32 bit memory at 0xf7d40000 [0xf7d5ffff].
Bus 11, device 0, function 0:
Ethernet controller: Intel Corp. 82559ER (#10) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7ef0000 [0xf7ef0fff].
I/O at 0x8000 [0x803f].
Non-prefetchable 32 bit memory at 0xf7ec0000 [0xf7edffff].
Bus 11, device 1, function 0:
Ethernet controller: Intel Corp. 82559ER (#11) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7eb0000 [0xf7eb0fff].
I/O at 0x8040 [0x807f].
Non-prefetchable 32 bit memory at 0xf7e80000 [0xf7e9ffff].
Bus 11, device 2, function 0:
Ethernet controller: Intel Corp. 82559ER (#12) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7e70000 [0xf7e70fff].
I/O at 0x8080 [0x80bf].
Non-prefetchable 32 bit memory at 0xf7e40000 [0xf7e5ffff].
Bus 12, device 0, function 0:
Ethernet controller: Intel Corp. 82559ER (#13) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7ff0000 [0xf7ff0fff].
I/O at 0x9000 [0x903f].
Non-prefetchable 32 bit memory at 0xf7fc0000 [0xf7fdffff].
Bus 12, device 1, function 0:
Ethernet controller: Intel Corp. 82559ER (#14) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7fb0000 [0xf7fb0fff].
I/O at 0x9040 [0x907f].
Non-prefetchable 32 bit memory at 0xf7f80000 [0xf7f9ffff].
Bus 12, device 2, function 0:
Ethernet controller: Intel Corp. 82559ER (#15) (rev 9).
IRQ 11.
Master Capable. Latency=64. Min Gnt=8.Max Lat=56.
Non-prefetchable 32 bit memory at 0xf7f70000 [0xf7f70fff].
I/O at 0x9080 [0x90bf].
Non-prefetchable 32 bit memory at 0xf7f40000 [0xf7f5ffff].
Bus 3, device 3, function 0:
Parallel controller: Oxford Semiconductor Ltd VScom 011H-EP1 1 port parallel adaptor (rev 0).
IRQ 5.
I/O at 0x40c0 [0x40c7].
I/O at 0x40c8 [0x40cb].
I/O at 0x40e0 [0x40ff].
Non-prefetchable 32 bit memory at 0xf7930000 [0xf7930fff].
Bus 4, device 3, function 0:
Parallel controller: Oxford Semiconductor Ltd VScom 011H-EP1 1 port parallel adaptor (#2) (rev 0).
IRQ 11.
I/O at 0x50c0 [0x50c7].
I/O at 0x50c8 [0x50cb].
I/O at 0x50e0 [0x50ff].
Non-prefetchable 32 bit memory at 0xf7a30000 [0xf7a30fff].
Bus 7, device 3, function 0:
Parallel controller: Oxford Semiconductor Ltd VScom 011H-EP1 1 port parallel adaptor (#3) (rev 0).
IRQ 11.
I/O at 0x70c0 [0x70c7].
I/O at 0x70c8 [0x70cb].
I/O at 0x70e0 [0x70ff].
Non-prefetchable 32 bit memory at 0xf7d30000 [0xf7d30fff].
Bus 11, device 3, function 0:
Parallel controller: Oxford Semiconductor Ltd VScom 011H-EP1 1 port parallel adaptor (#4) (rev 0).
IRQ 11.
I/O at 0x80c0 [0x80c7].
I/O at 0x80c8 [0x80cb].
I/O at 0x80e0 [0x80ff].
Non-prefetchable 32 bit memory at 0xf7e30000 [0xf7e30fff].
Bus 12, device 3, function 0:
Parallel controller: Oxford Semiconductor Ltd VScom 011H-EP1 1 port parallel adaptor (#5) (rev 0).
IRQ 11.
I/O at 0x90c0 [0x90c7].
I/O at 0x90c8 [0x90cb].
I/O at 0x90e0 [0x90ff].
Non-prefetchable 32 bit memory at 0xf7f30000 [0xf7f30fff].
Bus 6, device 2, function 0:
RAID bus controller: Compaq Computer Corporation Smart Array 5i/532 (rev 1).
IRQ 15.
Master Capable. Latency=71.
Non-prefetchable 64 bit memory at 0xf7cc0000 [0xf7cfffff].
I/O at 0x6000 [0x60ff].
Prefetchable 64 bit memory at 0xf7bf0000 [0xf7bf3fff].
[-- Attachment #1.3: lsmod --]
[-- Type: text/plain, Size: 2189 bytes --]
Module Size Used by Not tainted
ipt_CLASSIFY 792 2 (autoclean)
ipt_tos 472 1 (autoclean)
ipt_length 472 2 (autoclean)
ipt_MASQUERADE 1336 9 (autoclean)
ipt_dstlimit 7304 2 (autoclean)
ip_nat_mms 3056 0 (unused)
ip_nat_proto_gre 1316 0 (unused)
ip_nat_pptp 2348 0 (unused)
ip_nat_h323 2540 0 (unused)
ip_nat_irc 2288 0 (unused)
ip_nat_ftp 2864 0 (unused)
iptable_nat 16888 7 [ipt_MASQUERADE ip_nat_mms ip_nat_proto_gre ip_nat_pptp ip_nat_h323 ip_nat_irc ip_nat_ftp]
iptable_mangle 2072 1
ip_conntrack_mms 3344 1
ip_conntrack_pptp 2936 1
ip_conntrack_proto_gre 2720 0 [ip_nat_pptp ip_conntrack_pptp]
ip_conntrack_h323 2680 1
ip_conntrack_irc 3792 1
ip_conntrack_ftp 4592 1
nfnetlink_conntrack 8376 0 (unused)
nfnetlink 2540 1 [nfnetlink_conntrack]
ipt_owner 1272 23
ipt_REJECT 3224 1
ipt_LOG 3904 9
ipt_unclean 6808 0 (unused)
pcmcia_core 42336 0
ipt_state 600 3 (autoclean)
ipt_NOTRACK 696 2 (autoclean)
iptable_raw 1200 1 (autoclean)
af_packet 12360 0
ip_conntrack 25132 8 [ipt_MASQUERADE ip_nat_mms ip_nat_pptp ip_nat_h323 ip_nat_irc ip_nat_ftp iptable_nat ip_conntrack_mms ip_conntrack_pptp ip_conntrack_proto_gre ip_conntrack_h323 ip_conntrack_irc ip_conntrack_ftp nfnetlink_conntrack ipt_state ipt_NOTRACK]
iptable_filter 1644 1 (autoclean)
ip_tables 11936 17 [ipt_CLASSIFY ipt_tos ipt_length ipt_MASQUERADE ipt_dstlimit iptable_nat iptable_mangle ipt_owner ipt_REJECT ipt_LOG ipt_unclean ipt_state ipt_NOTRACK iptable_raw iptable_filter]
e100 45156 7
bcm5700 76168 1
cciss 27428 8
aic7xxx 160112 0
sd_mod 12256 0 (unused)
scsi_mod 95084 2 [aic7xxx sd_mod]
[-- Attachment #1.4: Output_01_fw_in.txt --]
[-- Type: text/plain, Size: 16400 bytes --]
- - - - - - - - - - - - - - - - - - - - Frame 647 - - - - - - - - - - - - - - - - - - - -
Frame Status Source Destination Bytes Rel Time
Delta Time Abs time Summary
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
647 [172.18.64.1] [172.18.1.59] 414 0:00:00.975
0.000.828 05.04.2004 12:05:04 ICMP: Echo
DLC: ----- DLC Header -----
DLC:
DLC: Frame 647 arrived at 11:05:04.9495; frame size is 414 (019E hex) bytes.
DLC: Destination = Station 000E7F2E9C96
DLC: Source = Station Cisco 82B084
DLC: Ethertype = 0800 (IP)
DLC:
IP: ----- IP Header -----
IP:
IP: Version = 4, header length = 20 bytes
IP: Type of service = 00
IP: 000. .... = routine
IP: ...0 .... = normal delay
IP: .... 0... = normal throughput
IP: .... .0.. = normal reliability
IP: .... ..0. = ECT bit - transport protocol will ignore the CE bit
IP: .... ...0 = CE bit - no congestion
IP: Total length = 400 bytes
IP: Identification = 31828
IP: Flags = 0X
IP: .0.. .... = may fragment
IP: ..0. .... = last fragment
IP: Fragment offset = 0 bytes
IP: Time to live = 255 seconds/hops
IP: Protocol = 1 (ICMP)
IP: Header checksum = A4B7 (correct)
IP: Source address = [172.18.64.1]
IP: Destination address = [172.18.1.59]
IP: No options
IP:
ICMP: ----- ICMP header -----
ICMP:
ICMP: Type = 8 (Echo)
ICMP: Code = 0
ICMP: Checksum = E262 (correct)
ICMP: Identifier = 3494
ICMP: Sequence number = 1511
ICMP: [372 bytes of data]
ICMP:
ICMP: [Normal end of "ICMP header".]
ICMP:
ADDR HEX ASCII
0000: 00 0e 7f 2e 9c 96 00 b0 8e 82 b0 84 08 00 45 00 | ..\x7f.œ–.°Ž‚°„..E.
0010: 01 90 7c 54 00 00 ff 01 a4 b7 ac 12 40 01 ac 12 | .|T..ÿ.¤·¬.@.¬.
0020: 01 3b 08 00 e2 62 0d a6 05 e7 00 00 00 00 24 cf | .;..âb.¦.ç....$Ï
0030: b9 08 ab cd ab cd ab cd ab cd ab cd ab cd ab cd | ¹.«Í«Í«Í«Í«Í«Í«Í
0040: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0050: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0060: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0070: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0080: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0090: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00a0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00b0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00c0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00d0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00e0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00f0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0100: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0110: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0120: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0130: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0140: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0150: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0160: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0170: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0180: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0190: ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í
- - - - - - - - - - - - - - - - - - - - Frame 648 - - - - - - - - - - - - - - - - - - - -
Frame Status Source Destination Bytes Rel Time
Delta Time Abs time Summary
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
648 [172.18.1.59] [172.18.64.1] 414 0:00:00.978
0.002.597 05.04.2004 12:05:04 ICMP: Echo reply
DLC: ----- DLC Header -----
DLC:
DLC: Frame 648 arrived at 11:05:04.9521; frame size is 414 (019E hex) bytes.
DLC: Destination = Station Cisco 82B084
DLC: Source = Station 000E7F2E9C96
DLC: Ethertype = 0800 (IP)
DLC:
IP: ----- IP Header -----
IP:
IP: Version = 4, header length = 20 bytes
IP: Type of service = 00
IP: 000. .... = routine
IP: ...0 .... = normal delay
IP: .... 0... = normal throughput
IP: .... .0.. = normal reliability
IP: .... ..0. = ECT bit - transport protocol will ignore the CE bit
IP: .... ...0 = CE bit - no congestion
IP: Total length = 400 bytes
IP: Identification = 31828
IP: Flags = 0X
IP: .0.. .... = may fragment
IP: ..0. .... = last fragment
IP: Fragment offset = 0 bytes
IP: Time to live = 254 seconds/hops
IP: Protocol = 1 (ICMP)
IP: Header checksum = A5B7 (correct)
IP: Source address = [172.18.1.59]
IP: Destination address = [172.18.64.1]
IP: No options
IP:
ICMP: ----- ICMP header -----
ICMP:
ICMP: Type = 0 (Echo reply)
ICMP: Code = 0
ICMP: Checksum = EA62 (correct)
ICMP: Identifier = 3494
ICMP: Sequence number = 1511
ICMP: [372 bytes of data]
ICMP:
ICMP: [Normal end of "ICMP header".]
ICMP:
ADDR HEX ASCII
0000: 00 b0 8e 82 b0 84 00 0e 7f 2e 9c 96 08 00 45 00 | .°Ž‚°„..\x7f.œ–..E.
0010: 01 90 7c 54 00 00 fe 01 a5 b7 ac 12 01 3b ac 12 | .|T..þ.¥·¬..;¬.
0020: 40 01 00 00 ea 62 0d a6 05 e7 00 00 00 00 24 cf | @...êb.¦.ç....$Ï
0030: b9 08 ab cd ab cd ab cd ab cd ab cd ab cd ab cd | ¹.«Í«Í«Í«Í«Í«Í«Í
0040: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0050: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0060: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0070: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0080: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0090: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00a0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00b0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00c0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00d0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00e0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00f0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0100: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0110: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0120: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0130: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0140: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0150: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0160: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0170: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0180: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0190: ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í
- - - - - - - - - - - - - - - - - - - - Frame 649 - - - - - - - - - - - - - - - - - - - -
Frame Status Source Destination Bytes Rel Time
Delta Time Abs time Summary
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
649 [172.18.64.1] [172.18.1.59] 414 0:00:00.979
0.000.894 05.04.2004 12:05:04 ICMP: Echo
DLC: ----- DLC Header -----
DLC:
DLC: Frame 649 arrived at 11:05:04.9530; frame size is 414 (019E hex) bytes.
DLC: Destination = Station 000E7F2E9C96
DLC: Source = Station Cisco 82B084
DLC: Ethertype = 0800 (IP)
DLC:
IP: ----- IP Header -----
IP:
IP: Version = 4, header length = 20 bytes
IP: Type of service = 00
IP: 000. .... = routine
IP: ...0 .... = normal delay
IP: .... 0... = normal throughput
IP: .... .0.. = normal reliability
IP: .... ..0. = ECT bit - transport protocol will ignore the CE bit
IP: .... ...0 = CE bit - no congestion
IP: Total length = 400 bytes
IP: Identification = 31829
IP: Flags = 0X
IP: .0.. .... = may fragment
IP: ..0. .... = last fragment
IP: Fragment offset = 0 bytes
IP: Time to live = 255 seconds/hops
IP: Protocol = 1 (ICMP)
IP: Header checksum = A4B6 (correct)
IP: Source address = [172.18.64.1]
IP: Destination address = [172.18.1.59]
IP: No options
IP:
ICMP: ----- ICMP header -----
ICMP:
ICMP: Type = 8 (Echo)
ICMP: Code = 0
ICMP: Checksum = E25D (correct)
ICMP: Identifier = 3495
ICMP: Sequence number = 1511
ICMP: [372 bytes of data]
ICMP:
ICMP: [Normal end of "ICMP header".]
ICMP:
ADDR HEX ASCII
0000: 00 0e 7f 2e 9c 96 00 b0 8e 82 b0 84 08 00 45 00 | ..\x7f.œ–.°Ž‚°„..E.
0010: 01 90 7c 55 00 00 ff 01 a4 b6 ac 12 40 01 ac 12 | .|U..ÿ.¤¶¬.@.¬.
0020: 01 3b 08 00 e2 5d 0d a7 05 e7 00 00 00 00 24 cf | .;..â].§.ç....$Ï
0030: b9 0c ab cd ab cd ab cd ab cd ab cd ab cd ab cd | ¹.«Í«Í«Í«Í«Í«Í«Í
0040: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0050: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0060: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0070: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0080: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0090: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00a0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00b0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00c0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00d0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00e0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00f0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0100: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0110: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0120: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0130: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0140: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0150: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0160: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0170: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0180: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0190: ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í
- - - - - - - - - - - - - - - - - - - - Frame 650 - - - - - - - - - - - - - - - - - - - -
Frame Status Source Destination Bytes Rel Time
Delta Time Abs time Summary
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
650 [172.18.64.1] [172.18.1.59] 414 0:00:02.977
1.998.516 05.04.2004 12:05:06 ICMP: Echo
DLC: ----- DLC Header -----
DLC:
DLC: Frame 650 arrived at 11:05:06.9515; frame size is 414 (019E hex) bytes.
DLC: Destination = Station 000E7F2E9C96
DLC: Source = Station Cisco 82B084
DLC: Ethertype = 0800 (IP)
DLC:
IP: ----- IP Header -----
IP:
IP: Version = 4, header length = 20 bytes
IP: Type of service = 00
IP: 000. .... = routine
IP: ...0 .... = normal delay
IP: .... 0... = normal throughput
IP: .... .0.. = normal reliability
IP: .... ..0. = ECT bit - transport protocol will ignore the CE bit
IP: .... ...0 = CE bit - no congestion
IP: Total length = 400 bytes
IP: Identification = 31830
IP: Flags = 0X
IP: .0.. .... = may fragment
IP: ..0. .... = last fragment
IP: Fragment offset = 0 bytes
IP: Time to live = 255 seconds/hops
IP: Protocol = 1 (ICMP)
IP: Header checksum = A4B5 (correct)
IP: Source address = [172.18.64.1]
IP: Destination address = [172.18.1.59]
IP: No options
IP:
ICMP: ----- ICMP header -----
ICMP:
ICMP: Type = 8 (Echo)
ICMP: Code = 0
ICMP: Checksum = DA8C (correct)
ICMP: Identifier = 3496
ICMP: Sequence number = 1511
ICMP: [372 bytes of data]
ICMP:
ICMP: [Normal end of "ICMP header".]
ICMP:
ADDR HEX ASCII
0000: 00 0e 7f 2e 9c 96 00 b0 8e 82 b0 84 08 00 45 00 | ..\x7f.œ–.°Ž‚°„..E.
0010: 01 90 7c 56 00 00 ff 01 a4 b5 ac 12 40 01 ac 12 | .|V..ÿ.¤µ¬.@.¬.
0020: 01 3b 08 00 da 8c 0d a8 05 e7 00 00 00 00 24 cf | .;..ÚŒ.¨.ç....$Ï
0030: c0 dc ab cd ab cd ab cd ab cd ab cd ab cd ab cd | ÀÜ«Í«Í«Í«Í«Í«Í«Í
0040: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0050: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0060: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0070: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0080: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0090: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00a0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00b0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00c0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00d0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00e0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00f0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0100: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0110: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0120: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0130: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0140: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0150: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0160: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0170: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0180: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0190: ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í
[-- Attachment #1.5: Output_01_fw_out.txt --]
[-- Type: text/plain, Size: 16107 bytes --]
- - - - - - - - - - - - - - - - - - - - Frame 647 - - - - - - - - - - - - - - - - - - - -
Frame Status Source Destination Bytes Rel Time
Delta Time Abs time Summary
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
647 [172.18.64.1] [172.18.1.59] 414 0:00:00.975
0.001.070 05.04.2004 12:05:03 ICMP: Echo
DLC: ----- DLC Header -----
DLC:
DLC: Frame 647 arrived at 11:05:03.1245; frame size is 414 (019E hex) bytes.
DLC: Destination = Station Cisco 36CA88
DLC: Source = Station IEEE 20E55D
DLC: Ethertype = 0800 (IP)
DLC:
IP: ----- IP Header -----
IP:
IP: Version = 4, header length = 20 bytes
IP: Type of service = 00
IP: 000. .... = routine
IP: ...0 .... = normal delay
IP: .... 0... = normal throughput
IP: .... .0.. = normal reliability
IP: .... ..0. = ECT bit - transport protocol will ignore the CE bit
IP: .... ...0 = CE bit - no congestion
IP: Total length = 400 bytes
IP: Identification = 31828
IP: Flags = 0X
IP: .0.. .... = may fragment
IP: ..0. .... = last fragment
IP: Fragment offset = 0 bytes
IP: Time to live = 254 seconds/hops
IP: Protocol = 1 (ICMP)
IP: Header checksum = A5B7 (correct)
IP: Source address = [172.18.64.1]
IP: Destination address = [172.18.1.59]
IP: No options
IP:
ICMP: ----- ICMP header -----
ICMP:
ICMP: Type = 8 (Echo)
ICMP: Code = 0
ICMP: Checksum = E262 (correct)
ICMP: Identifier = 3494
ICMP: Sequence number = 1511
ICMP: [372 bytes of data]
ICMP:
ICMP: [Normal end of "ICMP header".]
ICMP:
ADDR HEX ASCII
0000: 00 00 0c 36 ca 88 00 50 c2 20 e5 5d 08 00 45 00 | ...6ʈ.P å]..E.
0010: 01 90 7c 54 00 00 fe 01 a5 b7 ac 12 40 01 ac 12 | .|T..þ.¥·¬.@.¬.
0020: 01 3b 08 00 e2 62 0d a6 05 e7 00 00 00 00 24 cf | .;..âb.¦.ç....$Ï
0030: b9 08 ab cd ab cd ab cd ab cd ab cd ab cd ab cd | ¹.«Í«Í«Í«Í«Í«Í«Í
0040: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0050: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0060: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0070: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0080: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0090: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00a0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00b0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00c0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00d0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00e0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00f0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0100: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0110: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0120: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0130: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0140: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0150: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0160: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0170: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0180: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0190: ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í
- - - - - - - - - - - - - - - - - - - - Frame 648 - - - - - - - - - - - - - - - - - - - -
Frame Status Source Destination Bytes Rel Time
Delta Time Abs time Summary
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
648 [172.18.1.59] [172.18.64.1] 414 0:00:00.976
0.001.178 05.04.2004 12:05:03 ICMP: Echo reply
DLC: ----- DLC Header -----
DLC:
DLC: Frame 648 arrived at 11:05:03.1257; frame size is 414 (019E hex) bytes.
DLC: Destination = Station IEEE 20E55D
DLC: Source = Station Cisco 36CA88
DLC: Ethertype = 0800 (IP)
DLC:
IP: ----- IP Header -----
IP:
IP: Version = 4, header length = 20 bytes
IP: Type of service = 00
IP: 000. .... = routine
IP: ...0 .... = normal delay
IP: .... 0... = normal throughput
IP: .... .0.. = normal reliability
IP: .... ..0. = ECT bit - transport protocol will ignore the CE bit
IP: .... ...0 = CE bit - no congestion
IP: Total length = 400 bytes
IP: Identification = 31828
IP: Flags = 0X
IP: .0.. .... = may fragment
IP: ..0. .... = last fragment
IP: Fragment offset = 0 bytes
IP: Time to live = 255 seconds/hops
IP: Protocol = 1 (ICMP)
IP: Header checksum = A4B7 (correct)
IP: Source address = [172.18.1.59]
IP: Destination address = [172.18.64.1]
IP: No options
IP:
ICMP: ----- ICMP header -----
ICMP:
ICMP: Type = 0 (Echo reply)
ICMP: Code = 0
ICMP: Checksum = EA62 (correct)
ICMP: Identifier = 3494
ICMP: Sequence number = 1511
ICMP: [372 bytes of data]
ICMP:
ICMP: [Normal end of "ICMP header".]
ICMP:
ADDR HEX ASCII
0000: 00 50 c2 20 e5 5d 00 00 0c 36 ca 88 08 00 45 00 | .P å]...6ʈ..E.
0010: 01 90 7c 54 00 00 ff 01 a4 b7 ac 12 01 3b ac 12 | .|T..ÿ.¤·¬..;¬.
0020: 40 01 00 00 ea 62 0d a6 05 e7 00 00 00 00 24 cf | @...êb.¦.ç....$Ï
0030: b9 08 ab cd ab cd ab cd ab cd ab cd ab cd ab cd | ¹.«Í«Í«Í«Í«Í«Í«Í
0040: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0050: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0060: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0070: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0080: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0090: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00a0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00b0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00c0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00d0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00e0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00f0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0100: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0110: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0120: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0130: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0140: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0150: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0160: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0170: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0180: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0190: ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í
- - - - - - - - - - - - - - - - - - - - Frame 649 - - - - - - - - - - - - - - - - - - - -
Frame Status Source Destination Bytes Rel Time
Delta Time Abs time Summary
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
649 [172.18.64.1] [172.18.1.59] 414 0:00:00.979
0.002.309 05.04.2004 12:05:03 ICMP: Echo
DLC: ----- DLC Header -----
DLC:
DLC: Frame 649 arrived at 11:05:03.1280; frame size is 414 (019E hex) bytes.
DLC: Destination = Station Cisco 36CA88
DLC: Source = Station IEEE 20E55D
DLC: Ethertype = 0800 (IP)
DLC:
IP: ----- IP Header -----
IP:
IP: Version = 4, header length = 20 bytes
IP: Type of service = 00
IP: 000. .... = routine
IP: ...0 .... = normal delay
IP: .... 0... = normal throughput
IP: .... .0.. = normal reliability
IP: .... ..0. = ECT bit - transport protocol will ignore the CE bit
IP: .... ...0 = CE bit - no congestion
IP: Total length = 400 bytes
IP: Identification = 31829
IP: Flags = 0X
IP: .0.. .... = may fragment
IP: ..0. .... = last fragment
IP: Fragment offset = 0 bytes
IP: Time to live = 254 seconds/hops
IP: Protocol = 1 (ICMP)
IP: Header checksum = A5B6 (correct)
IP: Source address = [172.18.64.1]
IP: Destination address = [172.18.1.59]
IP: No options
IP:
ICMP: ----- ICMP header -----
ICMP:
ICMP: Type = 8 (Echo)
ICMP: Code = 0
ICMP: Checksum = E25D (should be FD10)
ICMP: Identifier = 3495
ICMP: Sequence number = 1511
ICMP: [372 bytes of data]
ICMP:
ICMP: [Normal end of "ICMP header".]
ICMP:
ADDR HEX ASCII
0000: 00 00 0c 36 ca 88 00 50 c2 20 e5 5d 08 00 45 00 | ...6ʈ.P å]..E.
0010: 01 90 7c 55 00 00 fe 01 a5 b6 ac 12 40 01 ac 12 | .|U..þ.¥¶¬.@.¬.
0020: 01 3b 08 00 e2 5d 0d a7 05 e7 00 00 00 00 24 cf | .;..â].§.ç....$Ï
0030: b9 0c ab cd ab cd ab cd ab cd ab cd ab cd ab cd | ¹.«Í«Í«Í«Í«Í«Í«Í
0040: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0050: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0060: ab cd ab cd ab cd ab cd ab cd ab cd ab cd 2b 06 | «Í«Í«Í«Í«Í«Í«Í+.
0070: 01 02 01 02 02 01 07 32 05 00 36 12 f2 9b 00 54 | .......2..6.ò›.T
0080: 00 48 00 54 00 02 00 26 00 07 40 59 00 00 5c 00 | .H.T...&..@Y..\.
0090: 50 00 49 00 50 00 45 00 5c 00 00 00 00 00 05 00 | P.I.P.E.\.......
00a0: 0b 00 10 00 00 00 48 00 00 00 04 00 00 00 30 16 | ......H.......0.
00b0: 30 16 00 00 00 00 01 00 00 00 00 00 01 00 78 57 | 0.............xW
00c0: 34 12 34 12 cd ab ef 00 01 23 45 67 89 ab 00 00 | 4.4.Í«ï..#Eg‰«..
00d0: 00 00 04 5d 88 8a eb 1c c9 11 9f e8 08 00 2b 10 | ...]ˆŠë.É.Ÿè..+.
00e0: 48 60 02 00 00 00 74 61 62 6c 65 20 77 69 ab cd | H`....table wi«Í
00f0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0100: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0110: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0120: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0130: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0140: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0150: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0160: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0170: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0180: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0190: ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í
- - - - - - - - - - - - - - - - - - - - Frame 650 - - - - - - - - - - - - - - - - - - - -
Frame Status Source Destination Bytes Rel Time
Delta Time Abs time Summary
---------------------------------------------------------------------------------------------------------------------------------------------------------------------
650 [172.18.64.1] [172.18.1.59] 414 0:00:02.977
1.998.555 05.04.2004 12:05:05 ICMP: Echo
DLC: ----- DLC Header -----
DLC:
DLC: Frame 650 arrived at 11:05:05.1266; frame size is 414 (019E hex) bytes.
DLC: Destination = Station Cisco 36CA88
DLC: Source = Station IEEE 20E55D
DLC: Ethertype = 0800 (IP)
DLC:
IP: ----- IP Header -----
IP:
IP: Version = 4, header length = 20 bytes
IP: Type of service = 00
IP: 000. .... = routine
IP: ...0 .... = normal delay
IP: .... 0... = normal throughput
IP: .... .0.. = normal reliability
IP: .... ..0. = ECT bit - transport protocol will ignore the CE bit
IP: .... ...0 = CE bit - no congestion
IP: Total length = 400 bytes
IP: Identification = 31830
IP: Flags = 0X
IP: .0.. .... = may fragment
IP: ..0. .... = last fragment
IP: Fragment offset = 0 bytes
IP: Time to live = 254 seconds/hops
IP: Protocol = 1 (ICMP)
IP: Header checksum = A5B5 (correct)
IP: Source address = [172.18.64.1]
IP: Destination address = [172.18.1.59]
IP: No options
IP:
ICMP: ----- ICMP header -----
ICMP:
ICMP: Type = 8 (Echo)
ICMP: Code = 0
ICMP: Checksum = DA8C (correct)
ICMP: Identifier = 3496
ICMP: Sequence number = 1511
ICMP: [372 bytes of data]
ICMP:
ICMP: [Normal end of "ICMP header".]
ICMP:
ADDR HEX ASCII
0000: 00 00 0c 36 ca 88 00 50 c2 20 e5 5d 08 00 45 00 | ...6ʈ.P å]..E.
0010: 01 90 7c 56 00 00 fe 01 a5 b5 ac 12 40 01 ac 12 | .|V..þ.¥µ¬.@.¬.
0020: 01 3b 08 00 da 8c 0d a8 05 e7 00 00 00 00 24 cf | .;..ÚŒ.¨.ç....$Ï
0030: c0 dc ab cd ab cd ab cd ab cd ab cd ab cd ab cd | ÀÜ«Í«Í«Í«Í«Í«Í«Í
0040: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0050: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0060: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0070: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0080: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0090: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00a0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00b0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00c0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00d0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00e0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
00f0: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0100: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0110: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0120: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0130: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0140: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0150: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0160: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0170: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0180: ab cd ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í«Í
0190: ab cd ab cd ab cd ab cd ab cd ab cd ab cd | «Í«Í«Í«Í«Í«Í«Í
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-07-06 15:33 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-07-06 12:29 corruption of ICMP payload while forwarding Harald Welte
[not found] ` <1089124948.1040.2.camel@jzny.localdomain>
2004-07-06 15:33 ` Harald Welte
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).