No. Time Source Destination Protocol Info 1 0.000000 Õ.Õ.Õ.242 Õ.Õ.Õ.247 NBNS Name query NB MYDOMAIN<1b> Frame 1 (92 bytes on wire, 92 bytes captured) Arrival Time: Oct 23, 2008 21:01:20.063278000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 92 bytes Capture Length: 92 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:nbns] [Coloring Rule Name: SMB] [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 78 Identification: 0x009b (155) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x20bc [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 2 0.635160 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 2 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:20.698438000 [Time delta from previous captured frame: 0.635160000 seconds] [Time delta from previous displayed frame: 0.635160000 seconds] [Time since reference or first frame: 0.635160000 seconds] Frame Number: 2 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 3 2.643659 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 3 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:22.706937000 [Time delta from previous captured frame: 2.008499000 seconds] [Time delta from previous displayed frame: 2.008499000 seconds] [Time since reference or first frame: 2.643659000 seconds] Frame Number: 3 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 4 4.644046 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 4 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:24.707324000 [Time delta from previous captured frame: 2.000387000 seconds] [Time delta from previous displayed frame: 2.000387000 seconds] [Time since reference or first frame: 4.644046000 seconds] Frame Number: 4 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 5 5.409932 Õ.Õ.Õ.241 224.0.0.1 IGMP V2 Membership Query, general Frame 5 (60 bytes on wire, 60 bytes captured) Arrival Time: Oct 23, 2008 21:01:25.473210000 [Time delta from previous captured frame: 0.765886000 seconds] [Time delta from previous displayed frame: 0.765886000 seconds] [Time since reference or first frame: 5.409932000 seconds] Frame Number: 5 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:igmp] [Coloring Rule Name: Routing] [Coloring Rule String: hsrp || eigrp || ospf || bgp || cdp || vrrp || gvrp || igmp || ismp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: IPv4mcast_00:00:01 (01:00:5e:00:00:01) Destination: IPv4mcast_00:00:01 (01:00:5e:00:00:01) Address: IPv4mcast_00:00:01 (01:00:5e:00:00:01) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000000000000000000000000000 Internet Protocol, Src: Õ.Õ.Õ.241 (Õ.Õ.Õ.241), Dst: 224.0.0.1 (224.0.0.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 28 Identification: 0x1fe4 (8164) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 1 Protocol: IGMP (0x02) Header checksum: 0xad5a [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Destination: 224.0.0.1 (224.0.0.1) Internet Group Management Protocol IGMP Version: 2 Type: Membership Query (0x11) Max Response Time: 10,0 sec (0x64) Header checksum: 0xee9b [correct] Multicast Address: 0.0.0.0 (0.0.0.0) No. Time Source Destination Protocol Info 6 5.410096 Õ.Õ.Õ.241 224.0.0.12 IGMP V2 Membership Report / Join group 224.0.0.12 Frame 6 (60 bytes on wire, 60 bytes captured) Arrival Time: Oct 23, 2008 21:01:25.473374000 [Time delta from previous captured frame: 0.000164000 seconds] [Time delta from previous displayed frame: 0.000164000 seconds] [Time since reference or first frame: 5.410096000 seconds] Frame Number: 6 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:igmp] [Coloring Rule Name: Routing] [Coloring Rule String: hsrp || eigrp || ospf || bgp || cdp || vrrp || gvrp || igmp || ismp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: IPv4mcast_00:00:0c (01:00:5e:00:00:0c) Destination: IPv4mcast_00:00:0c (01:00:5e:00:00:0c) Address: IPv4mcast_00:00:0c (01:00:5e:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000000000000000000000000000 Internet Protocol, Src: Õ.Õ.Õ.241 (Õ.Õ.Õ.241), Dst: 224.0.0.12 (224.0.0.12) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 28 Identification: 0x1fe5 (8165) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 1 Protocol: IGMP (0x02) Header checksum: 0xad4e [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Destination: 224.0.0.12 (224.0.0.12) Internet Group Management Protocol IGMP Version: 2 Type: Membership Report (0x16) Max Response Time: 0,0 sec (0x00) Header checksum: 0x09f3 [correct] Multicast Address: 224.0.0.12 (224.0.0.12) No. Time Source Destination Protocol Info 7 5.413413 z.z.z.z Õ.Õ.Õ.242 ICMP Echo (ping) request Frame 7 (78 bytes on wire, 78 bytes captured) Arrival Time: Oct 23, 2008 21:01:25.476691000 [Time delta from previous captured frame: 0.003317000 seconds] [Time delta from previous displayed frame: 0.003317000 seconds] [Time since reference or first frame: 5.413413000 seconds] Frame Number: 7 Frame Length: 78 bytes Capture Length: 78 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Destination: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: z.z.z.z (z.z.z.z), Dst: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0x0bfd (3069) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 46 Protocol: ICMP (0x01) Header checksum: 0x8a08 [correct] [Good: True] [Bad : False] Source: z.z.z.z (z.z.z.z) Destination: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Internet Control Message Protocol No. Time Source Destination Protocol Info 8 5.413426 Õ.Õ.Õ.242 z.z.z.z ICMP Echo (ping) reply Frame 8 (78 bytes on wire, 78 bytes captured) Arrival Time: Oct 23, 2008 21:01:25.476704000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 5.413426000 seconds] Frame Number: 8 Frame Length: 78 bytes Capture Length: 78 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: z.z.z.z (z.z.z.z) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0x009c (156) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ICMP (0x01) Header checksum: 0x4369 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: z.z.z.z (z.z.z.z) Internet Control Message Protocol No. Time Source Destination Protocol Info 9 5.576032 z.z.z.z Õ.Õ.Õ.242 ICMP Echo (ping) request Frame 9 (78 bytes on wire, 78 bytes captured) Arrival Time: Oct 23, 2008 21:01:25.639310000 [Time delta from previous captured frame: 0.162606000 seconds] [Time delta from previous displayed frame: 0.162606000 seconds] [Time since reference or first frame: 5.576032000 seconds] Frame Number: 9 Frame Length: 78 bytes Capture Length: 78 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Destination: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: z.z.z.z (z.z.z.z), Dst: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0x0bfe (3070) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 46 Protocol: ICMP (0x01) Header checksum: 0x8a07 [correct] [Good: True] [Bad : False] Source: z.z.z.z (z.z.z.z) Destination: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Internet Control Message Protocol No. Time Source Destination Protocol Info 10 5.576041 Õ.Õ.Õ.242 z.z.z.z ICMP Echo (ping) reply Frame 10 (78 bytes on wire, 78 bytes captured) Arrival Time: Oct 23, 2008 21:01:25.639319000 [Time delta from previous captured frame: 0.000009000 seconds] [Time delta from previous displayed frame: 0.000009000 seconds] [Time since reference or first frame: 5.576041000 seconds] Frame Number: 10 Frame Length: 78 bytes Capture Length: 78 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: z.z.z.z (z.z.z.z) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0x009d (157) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ICMP (0x01) Header checksum: 0x4368 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: z.z.z.z (z.z.z.z) Internet Control Message Protocol No. Time Source Destination Protocol Info 11 5.738645 z.z.z.z Õ.Õ.Õ.242 ICMP Echo (ping) request Frame 11 (78 bytes on wire, 78 bytes captured) Arrival Time: Oct 23, 2008 21:01:25.801923000 [Time delta from previous captured frame: 0.162604000 seconds] [Time delta from previous displayed frame: 0.162604000 seconds] [Time since reference or first frame: 5.738645000 seconds] Frame Number: 11 Frame Length: 78 bytes Capture Length: 78 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Destination: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: z.z.z.z (z.z.z.z), Dst: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0x0bff (3071) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 46 Protocol: ICMP (0x01) Header checksum: 0x8a06 [correct] [Good: True] [Bad : False] Source: z.z.z.z (z.z.z.z) Destination: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Internet Control Message Protocol No. Time Source Destination Protocol Info 12 5.738653 Õ.Õ.Õ.242 z.z.z.z ICMP Echo (ping) reply Frame 12 (78 bytes on wire, 78 bytes captured) Arrival Time: Oct 23, 2008 21:01:25.801931000 [Time delta from previous captured frame: 0.000008000 seconds] [Time delta from previous displayed frame: 0.000008000 seconds] [Time since reference or first frame: 5.738653000 seconds] Frame Number: 12 Frame Length: 78 bytes Capture Length: 78 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: z.z.z.z (z.z.z.z) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0x009e (158) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ICMP (0x01) Header checksum: 0x4367 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: z.z.z.z (z.z.z.z) Internet Control Message Protocol No. Time Source Destination Protocol Info 13 6.644461 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 13 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:26.707739000 [Time delta from previous captured frame: 0.905808000 seconds] [Time delta from previous displayed frame: 0.905808000 seconds] [Time since reference or first frame: 6.644461000 seconds] Frame Number: 13 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 14 6.922022 Õ.Õ.Õ.242 239.255.255.250 IGMP V2 Membership Report / Join group 239.255.255.250 Frame 14 (46 bytes on wire, 46 bytes captured) Arrival Time: Oct 23, 2008 21:01:26.985300000 [Time delta from previous captured frame: 0.277561000 seconds] [Time delta from previous displayed frame: 0.277561000 seconds] [Time since reference or first frame: 6.922022000 seconds] Frame Number: 14 Frame Length: 46 bytes Capture Length: 46 bytes [Frame is marked: False] [Protocols in frame: eth:ip:igmp] [Coloring Rule Name: Routing] [Coloring Rule String: hsrp || eigrp || ospf || bgp || cdp || vrrp || gvrp || igmp || ismp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Destination: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) Address: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: 239.255.255.250 (239.255.255.250) Version: 4 Header length: 24 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 32 Identification: 0x009f (159) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 1 Protocol: IGMP (0x02) Header checksum: 0x279d [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: 239.255.255.250 (239.255.255.250) Options: (4 bytes) Internet Group Management Protocol IGMP Version: 2 Type: Membership Report (0x16) Max Response Time: 0,0 sec (0x00) Header checksum: 0xfa04 [correct] Multicast Address: 239.255.255.250 (239.255.255.250) No. Time Source Destination Protocol Info 15 8.644320 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 15 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:28.707598000 [Time delta from previous captured frame: 1.722298000 seconds] [Time delta from previous displayed frame: 1.722298000 seconds] [Time since reference or first frame: 8.644320000 seconds] Frame Number: 15 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 16 9.078347 Õ.Õ.Õ.242 Õ.Õ.Õ.247 BROWSER Local Master Announcement AMCWS12, Workstation, Server, NT Workstation, Potential Browser, Master Browser Frame 16 (243 bytes on wire, 243 bytes captured) Arrival Time: Oct 23, 2008 21:01:29.141625000 [Time delta from previous captured frame: 0.434027000 seconds] [Time delta from previous displayed frame: 0.434027000 seconds] [Time since reference or first frame: 9.078347000 seconds] Frame Number: 16 Frame Length: 243 bytes Capture Length: 243 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:nbdgm:smb:browser] [Coloring Rule Name: SMB] [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 229 Identification: 0x00a0 (160) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x2020 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 17 10.644216 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 17 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:30.707494000 [Time delta from previous captured frame: 1.565869000 seconds] [Time delta from previous displayed frame: 1.565869000 seconds] [Time since reference or first frame: 10.644216000 seconds] Frame Number: 17 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 18 12.644918 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 18 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:32.708196000 [Time delta from previous captured frame: 2.000702000 seconds] [Time delta from previous displayed frame: 2.000702000 seconds] [Time since reference or first frame: 12.644918000 seconds] Frame Number: 18 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 19 14.644485 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 19 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:34.707763000 [Time delta from previous captured frame: 1.999567000 seconds] [Time delta from previous displayed frame: 1.999567000 seconds] [Time since reference or first frame: 14.644485000 seconds] Frame Number: 19 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 20 16.644634 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 20 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:36.707912000 [Time delta from previous captured frame: 2.000149000 seconds] [Time delta from previous displayed frame: 2.000149000 seconds] [Time since reference or first frame: 16.644634000 seconds] Frame Number: 20 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 21 18.644524 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 21 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:38.707802000 [Time delta from previous captured frame: 1.999890000 seconds] [Time delta from previous displayed frame: 1.999890000 seconds] [Time since reference or first frame: 18.644524000 seconds] Frame Number: 21 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 22 20.644652 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 22 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:40.707930000 [Time delta from previous captured frame: 2.000128000 seconds] [Time delta from previous displayed frame: 2.000128000 seconds] [Time since reference or first frame: 20.644652000 seconds] Frame Number: 22 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 23 22.644792 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 23 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:42.708070000 [Time delta from previous captured frame: 2.000140000 seconds] [Time delta from previous displayed frame: 2.000140000 seconds] [Time since reference or first frame: 22.644792000 seconds] Frame Number: 23 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 24 24.650609 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 24 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:44.713887000 [Time delta from previous captured frame: 2.005817000 seconds] [Time delta from previous displayed frame: 2.005817000 seconds] [Time since reference or first frame: 24.650609000 seconds] Frame Number: 24 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 25 26.652724 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 25 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:46.716002000 [Time delta from previous captured frame: 2.002115000 seconds] [Time delta from previous displayed frame: 2.002115000 seconds] [Time since reference or first frame: 26.652724000 seconds] Frame Number: 25 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 26 28.652073 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 26 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:48.715351000 [Time delta from previous captured frame: 1.999349000 seconds] [Time delta from previous displayed frame: 1.999349000 seconds] [Time since reference or first frame: 28.652073000 seconds] Frame Number: 26 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 27 30.652005 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 27 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:50.715283000 [Time delta from previous captured frame: 1.999932000 seconds] [Time delta from previous displayed frame: 1.999932000 seconds] [Time since reference or first frame: 30.652005000 seconds] Frame Number: 27 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 28 32.651905 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 28 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:52.715183000 [Time delta from previous captured frame: 1.999900000 seconds] [Time delta from previous displayed frame: 1.999900000 seconds] [Time since reference or first frame: 32.651905000 seconds] Frame Number: 28 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 29 34.652033 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 29 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:54.715311000 [Time delta from previous captured frame: 2.000128000 seconds] [Time delta from previous displayed frame: 2.000128000 seconds] [Time since reference or first frame: 34.652033000 seconds] Frame Number: 29 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 30 36.652516 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 30 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:56.715794000 [Time delta from previous captured frame: 2.000483000 seconds] [Time delta from previous displayed frame: 2.000483000 seconds] [Time since reference or first frame: 36.652516000 seconds] Frame Number: 30 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 31 38.652074 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 31 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:01:58.715352000 [Time delta from previous captured frame: 1.999558000 seconds] [Time delta from previous displayed frame: 1.999558000 seconds] [Time since reference or first frame: 38.652074000 seconds] Frame Number: 31 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 32 40.426048 Õ.Õ.Õ.242 Õ.Õ.Õ.247 NBNS Name query NB MYDOMAIN<1c> Frame 32 (92 bytes on wire, 92 bytes captured) Arrival Time: Oct 23, 2008 21:02:00.489326000 [Time delta from previous captured frame: 1.773974000 seconds] [Time delta from previous displayed frame: 1.773974000 seconds] [Time since reference or first frame: 40.426048000 seconds] Frame Number: 32 Frame Length: 92 bytes Capture Length: 92 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:nbns] [Coloring Rule Name: SMB] [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 78 Identification: 0x00a1 (161) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x20b6 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 33 40.652213 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 33 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:02:00.715491000 [Time delta from previous captured frame: 0.226165000 seconds] [Time delta from previous displayed frame: 0.226165000 seconds] [Time since reference or first frame: 40.652213000 seconds] Frame Number: 33 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 34 40.753952 Õ.Õ.Õ.242 Õ.Õ.Õ.241 ICMP Echo (ping) request Frame 34 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:00.817230000 [Time delta from previous captured frame: 0.101739000 seconds] [Time delta from previous displayed frame: 0.101739000 seconds] [Time since reference or first frame: 40.753952000 seconds] Frame Number: 34 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x00a2 (162) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ICMP (0x01) Header checksum: 0x20dd [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Internet Control Message Protocol No. Time Source Destination Protocol Info 35 40.754652 Õ.Õ.Õ.241 Õ.Õ.Õ.242 ICMP Echo (ping) reply Frame 35 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:00.817930000 [Time delta from previous captured frame: 0.000700000 seconds] [Time delta from previous displayed frame: 0.000700000 seconds] [Time since reference or first frame: 40.754652000 seconds] Frame Number: 35 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Destination: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.241 (Õ.Õ.Õ.241), Dst: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x1fec (8172) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ICMP (0x01) Header checksum: 0x8392 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Destination: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Internet Control Message Protocol No. Time Source Destination Protocol Info 36 41.172747 Õ.Õ.Õ.242 Õ.Õ.Õ.247 NBNS Name query NB MYDOMAIN<1c> Frame 36 (92 bytes on wire, 92 bytes captured) Arrival Time: Oct 23, 2008 21:02:01.236025000 [Time delta from previous captured frame: 0.418095000 seconds] [Time delta from previous displayed frame: 0.418095000 seconds] [Time since reference or first frame: 41.172747000 seconds] Frame Number: 36 Frame Length: 92 bytes Capture Length: 92 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:nbns] [Coloring Rule Name: SMB] [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 78 Identification: 0x00a3 (163) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x20b4 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 37 41.750904 Õ.Õ.Õ.242 Õ.Õ.Õ.241 ICMP Echo (ping) request Frame 37 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:01.814182000 [Time delta from previous captured frame: 0.578157000 seconds] [Time delta from previous displayed frame: 0.578157000 seconds] [Time since reference or first frame: 41.750904000 seconds] Frame Number: 37 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x00a4 (164) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ICMP (0x01) Header checksum: 0x20db [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Internet Control Message Protocol No. Time Source Destination Protocol Info 38 41.751689 Õ.Õ.Õ.241 Õ.Õ.Õ.242 ICMP Echo (ping) reply Frame 38 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:01.814967000 [Time delta from previous captured frame: 0.000785000 seconds] [Time delta from previous displayed frame: 0.000785000 seconds] [Time since reference or first frame: 41.751689000 seconds] Frame Number: 38 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Destination: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.241 (Õ.Õ.Õ.241), Dst: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x1fed (8173) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ICMP (0x01) Header checksum: 0x8391 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Destination: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Internet Control Message Protocol No. Time Source Destination Protocol Info 39 41.922761 Õ.Õ.Õ.242 Õ.Õ.Õ.247 NBNS Name query NB MYDOMAIN<1c> Frame 39 (92 bytes on wire, 92 bytes captured) Arrival Time: Oct 23, 2008 21:02:01.986039000 [Time delta from previous captured frame: 0.171072000 seconds] [Time delta from previous displayed frame: 0.171072000 seconds] [Time since reference or first frame: 41.922761000 seconds] Frame Number: 39 Frame Length: 92 bytes Capture Length: 92 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:nbns] [Coloring Rule Name: SMB] [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 78 Identification: 0x00a5 (165) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0x20b2 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.247 (Õ.Õ.Õ.247) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 40 42.423256 Õ.Õ.Õ.242 192.168.0.7 TCP proofd > 13000 [SYN] Seq=0 Win=32768 Len=0 MSS=1460 Frame 40 (62 bytes on wire, 62 bytes captured) Arrival Time: Oct 23, 2008 21:02:02.486534000 [Time delta from previous captured frame: 0.500495000 seconds] [Time delta from previous displayed frame: 0.500495000 seconds] [Time since reference or first frame: 42.423256000 seconds] Frame Number: 40 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: 192.168.0.7 (192.168.0.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x00a6 (166) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x3d5b [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: 192.168.0.7 (192.168.0.7) Transmission Control Protocol, Src Port: proofd (1093), Dst Port: 13000 (13000), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 41 42.652346 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 41 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:02:02.715624000 [Time delta from previous captured frame: 0.229090000 seconds] [Time delta from previous displayed frame: 0.229090000 seconds] [Time since reference or first frame: 42.652346000 seconds] Frame Number: 41 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 42 42.750920 Õ.Õ.Õ.242 Õ.Õ.Õ.241 ICMP Echo (ping) request Frame 42 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:02.814198000 [Time delta from previous captured frame: 0.098574000 seconds] [Time delta from previous displayed frame: 0.098574000 seconds] [Time since reference or first frame: 42.750920000 seconds] Frame Number: 42 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x00a7 (167) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ICMP (0x01) Header checksum: 0x20d8 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Internet Control Message Protocol No. Time Source Destination Protocol Info 43 42.751773 Õ.Õ.Õ.241 Õ.Õ.Õ.242 ICMP Echo (ping) reply Frame 43 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:02.815051000 [Time delta from previous captured frame: 0.000853000 seconds] [Time delta from previous displayed frame: 0.000853000 seconds] [Time since reference or first frame: 42.751773000 seconds] Frame Number: 43 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Destination: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.241 (Õ.Õ.Õ.241), Dst: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x1fef (8175) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ICMP (0x01) Header checksum: 0x838f [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Destination: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Internet Control Message Protocol No. Time Source Destination Protocol Info 44 43.750945 Õ.Õ.Õ.242 Õ.Õ.Õ.241 ICMP Echo (ping) request Frame 44 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:03.814223000 [Time delta from previous captured frame: 0.999172000 seconds] [Time delta from previous displayed frame: 0.999172000 seconds] [Time since reference or first frame: 43.750945000 seconds] Frame Number: 44 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x00a8 (168) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ICMP (0x01) Header checksum: 0x20d7 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Internet Control Message Protocol No. Time Source Destination Protocol Info 45 43.751803 Õ.Õ.Õ.241 Õ.Õ.Õ.242 ICMP Echo (ping) reply Frame 45 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:03.815081000 [Time delta from previous captured frame: 0.000858000 seconds] [Time delta from previous displayed frame: 0.000858000 seconds] [Time since reference or first frame: 43.751803000 seconds] Frame Number: 45 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Destination: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.241 (Õ.Õ.Õ.241), Dst: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x1ff0 (8176) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ICMP (0x01) Header checksum: 0x838e [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Destination: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Internet Control Message Protocol No. Time Source Destination Protocol Info 46 44.652248 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 46 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:02:04.715526000 [Time delta from previous captured frame: 0.900445000 seconds] [Time delta from previous displayed frame: 0.900445000 seconds] [Time since reference or first frame: 44.652248000 seconds] Frame Number: 46 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 47 45.469717 Õ.Õ.Õ.242 192.168.0.7 TCP proofd > 13000 [SYN] Seq=0 Win=32768 Len=0 MSS=1460 Frame 47 (62 bytes on wire, 62 bytes captured) Arrival Time: Oct 23, 2008 21:02:05.532995000 [Time delta from previous captured frame: 0.817469000 seconds] [Time delta from previous displayed frame: 0.817469000 seconds] [Time since reference or first frame: 45.469717000 seconds] Frame Number: 47 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: 192.168.0.7 (192.168.0.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x00a9 (169) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x3d58 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: 192.168.0.7 (192.168.0.7) Transmission Control Protocol, Src Port: proofd (1093), Dst Port: 13000 (13000), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 48 46.511118 Õ.Õ.Õ.242 Õ.Õ.Õ.241 ICMP Echo (ping) request Frame 48 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:06.574396000 [Time delta from previous captured frame: 1.041401000 seconds] [Time delta from previous displayed frame: 1.041401000 seconds] [Time since reference or first frame: 46.511118000 seconds] Frame Number: 48 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8), Dst: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Destination: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.242 (Õ.Õ.Õ.242), Dst: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x00aa (170) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ICMP (0x01) Header checksum: 0x20d5 [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Destination: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Internet Control Message Protocol No. Time Source Destination Protocol Info 49 46.511851 Õ.Õ.Õ.241 Õ.Õ.Õ.242 ICMP Echo (ping) reply Frame 49 (74 bytes on wire, 74 bytes captured) Arrival Time: Oct 23, 2008 21:02:06.575129000 [Time delta from previous captured frame: 0.000733000 seconds] [Time delta from previous displayed frame: 0.000733000 seconds] [Time since reference or first frame: 46.511851000 seconds] Frame Number: 49 Frame Length: 74 bytes Capture Length: 74 bytes [Frame is marked: False] [Protocols in frame: eth:ip:icmp:data] [Coloring Rule Name: ICMP] [Coloring Rule String: icmp] Ethernet II, Src: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd), Dst: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Destination: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) Address: Micro-St_6b:d3:e8 (00:1d:92:6b:d3:e8) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) Address: ZygateCo_7c:b8:dd (00:02:cf:7c:b8:dd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: Õ.Õ.Õ.241 (Õ.Õ.Õ.241), Dst: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x1ff1 (8177) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ICMP (0x01) Header checksum: 0x838d [correct] [Good: True] [Bad : False] Source: Õ.Õ.Õ.241 (Õ.Õ.Õ.241) Destination: Õ.Õ.Õ.242 (Õ.Õ.Õ.242) Internet Control Message Protocol No. Time Source Destination Protocol Info 50 46.652376 Cisco_1a:14:82 PVST+ STP Conf. Root = 35296/00:12:43:1a:14:80 Cost = 0 Port = 0x8002 Frame 50 (64 bytes on wire, 64 bytes captured) Arrival Time: Oct 23, 2008 21:02:06.715654000 [Time delta from previous captured frame: 0.140525000 seconds] [Time delta from previous displayed frame: 0.140525000 seconds] [Time since reference or first frame: 46.652376000 seconds] Frame Number: 50 Frame Length: 64 bytes Capture Length: 64 bytes [Frame is marked: False] [Protocols in frame: eth:llc:stp] [Coloring Rule Name: Broadcast] [Coloring Rule String: eth[0] & 1] IEEE 802.3 Ethernet Destination: PVST+ (01:00:0c:cc:cc:cd) Address: PVST+ (01:00:0c:cc:cc:cd) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco_1a:14:82 (00:12:43:1a:14:82) Address: Cisco_1a:14:82 (00:12:43:1a:14:82) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Length: 50 Logical-Link Control DSAP: SNAP (0xaa) IG Bit: Individual SSAP: SNAP (0xaa) CR Bit: Command Control field: U, func=UI (0x03) 000. 00.. = Command: Unnumbered Information (0x00) .... ..11 = Frame type: Unnumbered frame (0x03) Organization Code: Cisco (0x00000c) PID: PVSTP+ (0x010b) Spanning Tree Protocol Protocol Identifier: Spanning Tree Protocol (0x0000) Protocol Version Identifier: Spanning Tree (0) BPDU Type: Configuration (0x00) BPDU flags: 0x00 Root Identifier: 35296 / 00:12:43:1a:14:80 Root Path Cost: 0 Bridge Identifier: 35296 / 00:12:43:1a:14:80 Port identifier: 0x8002 Message Age: 0 Max Age: 20 Hello Time: 2 Forward Delay: 15 No. Time Source Destination Protocol Info 51 47.501028 Õ.Õ.Õ.242 Õ.Õ.Õ.241 ICMP Echo (ping) request