No. Time Source Destination Protocol Info 1 0.000000 10.11.51.1 10.16.130.245 TCP 2533 > https [SYN] Seq=0 Len=0 MSS=1460 Frame 1 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:36.723531000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x03aa (938) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2d0d [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2533 (2533), Dst Port: https (443), Seq: 0, Len: 0 Source port: 2533 (2533) Destination port: https (443) Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x05c2 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted No. Time Source Destination Protocol Info 2 0.235215 10.16.130.245 10.11.51.1 TCP https > 2533 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1372 Frame 2 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:36.958746000 [Time delta from previous captured frame: 0.235215000 seconds] [Time delta from previous displayed frame: 0.235215000 seconds] [Time since reference or first frame: 0.235215000 seconds] Frame Number: 2 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0x75b7 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2533 (2533), Seq: 0, Ack: 1, Len: 0 Source port: https (443) Destination port: 2533 (2533) Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x5436 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1372 bytes NOP NOP SACK permitted [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1] [The RTT to ACK the segment was: 0.235215000 seconds] No. Time Source Destination Protocol Info 3 0.235259 10.11.51.1 10.16.130.245 TCP 2533 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 3 (54 bytes on wire, 54 bytes captured) Arrival Time: Aug 28, 2008 15:47:36.958790000 [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.235259000 seconds] Frame Number: 3 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x03b3 (947) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2d0c [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2533 (2533), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 Source port: 2533 (2533) Destination port: https (443) Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x9772 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 2] [The RTT to ACK the segment was: 0.000044000 seconds] No. Time Source Destination Protocol Info 4 0.236801 10.11.51.1 10.16.130.245 SSLv2 Client Hello Frame 4 (135 bytes on wire, 135 bytes captured) Arrival Time: Aug 28, 2008 15:47:36.960332000 [Time delta from previous captured frame: 0.001542000 seconds] [Time delta from previous displayed frame: 0.001542000 seconds] [Time since reference or first frame: 0.236801000 seconds] Frame Number: 4 Frame Length: 135 bytes Capture Length: 135 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 121 Identification: 0x03b4 (948) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2cba [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2533 (2533), Dst Port: https (443), Seq: 1, Ack: 1, Len: 81 Source port: 2533 (2533) Destination port: https (443) Sequence number: 1 (relative sequence number) [Next sequence number: 82 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x959f [correct] [Good Checksum: True] [Bad Checksum: False] Secure Socket Layer SSLv2 Record Layer: Client Hello [Version: SSL 2.0 (0x0002)] Length: 79 Handshake Message Type: Client Hello (1) Version: TLS 1.0 (0x0301) Cipher Spec Length: 54 Session ID Length: 0 Challenge Length: 16 Cipher Specs (18 specs) Cipher Spec: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (0x000088) Cipher Spec: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA (0x000087) Cipher Spec: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x000039) Cipher Spec: TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x000038) Cipher Spec: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (0x000084) Cipher Spec: TLS_RSA_WITH_AES_256_CBC_SHA (0x000035) Cipher Spec: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (0x000045) Cipher Spec: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA (0x000044) Cipher Spec: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x000033) Cipher Spec: TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x000032) Cipher Spec: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (0x000041) Cipher Spec: TLS_RSA_WITH_RC4_128_MD5 (0x000004) Cipher Spec: TLS_RSA_WITH_RC4_128_SHA (0x000005) Cipher Spec: TLS_RSA_WITH_AES_128_CBC_SHA (0x00002f) Cipher Spec: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x000016) Cipher Spec: TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x000013) Cipher Spec: SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA (0x00feff) Cipher Spec: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x00000a) Challenge No. Time Source Destination Protocol Info 5 0.472167 10.16.130.245 10.11.51.1 TCP https > 2533 [ACK] Seq=1 Ack=82 Win=5840 Len=0 Frame 5 (60 bytes on wire, 60 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.195698000 [Time delta from previous captured frame: 0.235366000 seconds] [Time delta from previous displayed frame: 0.235366000 seconds] [Time since reference or first frame: 0.472167000 seconds] Frame Number: 5 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xa4f5 (42229) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0xd0c9 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2533 (2533), Seq: 1, Ack: 82, Len: 0 Source port: https (443) Destination port: 2533 (2533) Sequence number: 1 (relative sequence number) Acknowledgement number: 82 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x8051 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 4] [The RTT to ACK the segment was: 0.235366000 seconds] No. Time Source Destination Protocol Info 6 0.473194 10.16.130.245 10.11.51.1 TLSv1 Alert (Level: Fatal, Description: Internal Error) Frame 6 (61 bytes on wire, 61 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.196725000 [Time delta from previous captured frame: 0.001027000 seconds] [Time delta from previous displayed frame: 0.001027000 seconds] [Time since reference or first frame: 0.473194000 seconds] Frame Number: 6 Frame Length: 61 bytes Capture Length: 61 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 47 Identification: 0xa4f6 (42230) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0xd0c1 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2533 (2533), Seq: 1, Ack: 82, Len: 7 Source port: https (443) Destination port: 2533 (2533) Sequence number: 1 (relative sequence number) [Next sequence number: 8 (relative sequence number)] Acknowledgement number: 82 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x183d [correct] [Good Checksum: True] [Bad Checksum: False] Secure Socket Layer TLSv1 Record Layer: Alert (Level: Fatal, Description: Internal Error) Content Type: Alert (21) Version: TLS 1.0 (0x0301) Length: 2 Alert Message Level: Fatal (2) Description: Internal Error (80) No. Time Source Destination Protocol Info 7 0.473415 10.11.51.1 10.16.130.245 TCP 2533 > https [RST, ACK] Seq=82 Ack=8 Win=0 Len=0 Frame 7 (54 bytes on wire, 54 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.196946000 [Time delta from previous captured frame: 0.000221000 seconds] [Time delta from previous displayed frame: 0.000221000 seconds] [Time since reference or first frame: 0.473415000 seconds] Frame Number: 7 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x03c5 (965) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2cfa [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2533 (2533), Dst Port: https (443), Seq: 82, Ack: 8, Len: 0 Source port: 2533 (2533) Destination port: https (443) Sequence number: 82 (relative sequence number) Acknowledgement number: 8 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .1.. = Reset: Set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0x9716 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 6] [The RTT to ACK the segment was: 0.000221000 seconds] No. Time Source Destination Protocol Info 8 0.473892 10.11.51.1 10.16.130.245 TCP 2534 > https [SYN] Seq=0 Len=0 MSS=1460 Frame 8 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.197423000 [Time delta from previous captured frame: 0.000477000 seconds] [Time delta from previous displayed frame: 0.000477000 seconds] [Time since reference or first frame: 0.473892000 seconds] Frame Number: 8 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x03cc (972) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2ceb [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2534 (2534), Dst Port: https (443), Seq: 0, Len: 0 Source port: 2534 (2534) Destination port: https (443) Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x49fa [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted No. Time Source Destination Protocol Info 9 0.709241 10.16.130.245 10.11.51.1 TCP https > 2534 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1372 Frame 9 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.432772000 [Time delta from previous captured frame: 0.235349000 seconds] [Time delta from previous displayed frame: 0.235349000 seconds] [Time since reference or first frame: 0.709241000 seconds] Frame Number: 9 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0x75b7 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2534 (2534), Seq: 0, Ack: 1, Len: 0 Source port: https (443) Destination port: 2534 (2534) Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xf107 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1372 bytes NOP NOP SACK permitted [SEQ/ACK analysis] [This is an ACK to the segment in frame: 8] [The RTT to ACK the segment was: 0.235349000 seconds] No. Time Source Destination Protocol Info 10 0.709284 10.11.51.1 10.16.130.245 TCP 2534 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 10 (54 bytes on wire, 54 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.432815000 [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.709284000 seconds] Frame Number: 10 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x03d0 (976) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2cef [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2534 (2534), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 Source port: 2534 (2534) Destination port: https (443) Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x3444 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 9] [The RTT to ACK the segment was: 0.000043000 seconds] No. Time Source Destination Protocol Info 11 0.709895 10.11.51.1 10.16.130.245 SSLv2 Client Hello Frame 11 (135 bytes on wire, 135 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.433426000 [Time delta from previous captured frame: 0.000611000 seconds] [Time delta from previous displayed frame: 0.000611000 seconds] [Time since reference or first frame: 0.709895000 seconds] Frame Number: 11 Frame Length: 135 bytes Capture Length: 135 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 121 Identification: 0x03d1 (977) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2c9d [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2534 (2534), Dst Port: https (443), Seq: 1, Ack: 1, Len: 81 Source port: 2534 (2534) Destination port: https (443) Sequence number: 1 (relative sequence number) [Next sequence number: 82 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x25c4 [correct] [Good Checksum: True] [Bad Checksum: False] Secure Socket Layer SSLv2 Record Layer: Client Hello [Version: SSL 2.0 (0x0002)] Length: 79 Handshake Message Type: Client Hello (1) Version: SSL 3.0 (0x0300) Cipher Spec Length: 54 Session ID Length: 0 Challenge Length: 16 Cipher Specs (18 specs) Cipher Spec: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (0x000088) Cipher Spec: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA (0x000087) Cipher Spec: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x000039) Cipher Spec: TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x000038) Cipher Spec: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (0x000084) Cipher Spec: TLS_RSA_WITH_AES_256_CBC_SHA (0x000035) Cipher Spec: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (0x000045) Cipher Spec: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA (0x000044) Cipher Spec: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x000033) Cipher Spec: TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x000032) Cipher Spec: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (0x000041) Cipher Spec: TLS_RSA_WITH_RC4_128_MD5 (0x000004) Cipher Spec: TLS_RSA_WITH_RC4_128_SHA (0x000005) Cipher Spec: TLS_RSA_WITH_AES_128_CBC_SHA (0x00002f) Cipher Spec: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x000016) Cipher Spec: TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x000013) Cipher Spec: SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA (0x00feff) Cipher Spec: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x00000a) Challenge No. Time Source Destination Protocol Info 12 0.944902 10.16.130.245 10.11.51.1 TCP https > 2534 [ACK] Seq=1 Ack=82 Win=5840 Len=0 Frame 12 (60 bytes on wire, 60 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.668433000 [Time delta from previous captured frame: 0.235007000 seconds] [Time delta from previous displayed frame: 0.235007000 seconds] [Time since reference or first frame: 0.944902000 seconds] Frame Number: 12 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x4fa7 (20391) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0x2618 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2534 (2534), Seq: 1, Ack: 82, Len: 0 Source port: https (443) Destination port: 2534 (2534) Sequence number: 1 (relative sequence number) Acknowledgement number: 82 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x1d23 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 11] [The RTT to ACK the segment was: 0.235007000 seconds] No. Time Source Destination Protocol Info 13 0.945373 10.16.130.245 10.11.51.1 TLSv1 Alert (Level: Fatal, Description: Internal Error) Frame 13 (61 bytes on wire, 61 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.668904000 [Time delta from previous captured frame: 0.000471000 seconds] [Time delta from previous displayed frame: 0.000471000 seconds] [Time since reference or first frame: 0.945373000 seconds] Frame Number: 13 Frame Length: 61 bytes Capture Length: 61 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 47 Identification: 0x4fa8 (20392) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0x2610 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2534 (2534), Seq: 1, Ack: 82, Len: 7 Source port: https (443) Destination port: 2534 (2534) Sequence number: 1 (relative sequence number) [Next sequence number: 8 (relative sequence number)] Acknowledgement number: 82 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xb50e [correct] [Good Checksum: True] [Bad Checksum: False] Secure Socket Layer TLSv1 Record Layer: Alert (Level: Fatal, Description: Internal Error) Content Type: Alert (21) Version: TLS 1.0 (0x0301) Length: 2 Alert Message Level: Fatal (2) Description: Internal Error (80) No. Time Source Destination Protocol Info 14 0.945810 10.11.51.1 10.16.130.245 TCP 2534 > https [RST, ACK] Seq=82 Ack=8 Win=0 Len=0 Frame 14 (54 bytes on wire, 54 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.669341000 [Time delta from previous captured frame: 0.000437000 seconds] [Time delta from previous displayed frame: 0.000437000 seconds] [Time since reference or first frame: 0.945810000 seconds] Frame Number: 14 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x03da (986) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2ce5 [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2534 (2534), Dst Port: https (443), Seq: 82, Ack: 8, Len: 0 Source port: 2534 (2534) Destination port: https (443) Sequence number: 82 (relative sequence number) Acknowledgement number: 8 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .1.. = Reset: Set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0x33e8 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 13] [The RTT to ACK the segment was: 0.000437000 seconds] No. Time Source Destination Protocol Info 15 0.953886 10.11.51.1 10.16.130.245 TCP 2535 > https [SYN] Seq=0 Len=0 MSS=1460 Frame 15 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.677417000 [Time delta from previous captured frame: 0.008076000 seconds] [Time delta from previous displayed frame: 0.008076000 seconds] [Time since reference or first frame: 0.953886000 seconds] Frame Number: 15 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x03e1 (993) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2cd6 [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2535 (2535), Dst Port: https (443), Seq: 0, Len: 0 Source port: 2535 (2535) Destination port: https (443) Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x4e91 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted No. Time Source Destination Protocol Info 16 1.189318 10.16.130.245 10.11.51.1 TCP https > 2535 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1372 Frame 16 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:37.912849000 [Time delta from previous captured frame: 0.235432000 seconds] [Time delta from previous displayed frame: 0.235432000 seconds] [Time since reference or first frame: 1.189318000 seconds] Frame Number: 16 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0x75b7 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2535 (2535), Seq: 0, Ack: 1, Len: 0 Source port: https (443) Destination port: 2535 (2535) Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xd954 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1372 bytes NOP NOP SACK permitted [SEQ/ACK analysis] [This is an ACK to the segment in frame: 15] [The RTT to ACK the segment was: 0.235432000 seconds] No. Time Source Destination Protocol Info 17 3.978016 10.11.51.1 10.16.130.245 TCP 2536 > https [SYN] Seq=0 Len=0 MSS=1460 Frame 17 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:40.701547000 [Time delta from previous captured frame: 2.788698000 seconds] [Time delta from previous displayed frame: 2.788698000 seconds] [Time since reference or first frame: 3.978016000 seconds] Frame Number: 17 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x08ae (2222) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2809 [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2536 (2536), Dst Port: https (443), Seq: 0, Len: 0 Source port: 2536 (2536) Destination port: https (443) Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x8ef0 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted No. Time Source Destination Protocol Info 18 4.212546 10.16.130.245 10.11.51.1 TCP https > 2536 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1372 Frame 18 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:40.936077000 [Time delta from previous captured frame: 0.234530000 seconds] [Time delta from previous displayed frame: 0.234530000 seconds] [Time since reference or first frame: 4.212546000 seconds] Frame Number: 18 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0x75b7 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2536 (2536), Seq: 0, Ack: 1, Len: 0 Source port: https (443) Destination port: 2536 (2536) Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xf006 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1372 bytes NOP NOP SACK permitted [SEQ/ACK analysis] [This is an ACK to the segment in frame: 17] [The RTT to ACK the segment was: 0.234530000 seconds] No. Time Source Destination Protocol Info 19 4.212603 10.11.51.1 10.16.130.245 TCP 2536 > https [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 19 (54 bytes on wire, 54 bytes captured) Arrival Time: Aug 28, 2008 15:47:40.936134000 [Time delta from previous captured frame: 0.000057000 seconds] [Time delta from previous displayed frame: 0.000057000 seconds] [Time since reference or first frame: 4.212603000 seconds] Frame Number: 19 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x08b4 (2228) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x280b [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2536 (2536), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 Source port: 2536 (2536) Destination port: https (443) Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x3343 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 18] [The RTT to ACK the segment was: 0.000057000 seconds] No. Time Source Destination Protocol Info 20 4.212957 10.11.51.1 10.16.130.245 SSLv2 Client Hello Frame 20 (135 bytes on wire, 135 bytes captured) Arrival Time: Aug 28, 2008 15:47:40.936488000 [Time delta from previous captured frame: 0.000354000 seconds] [Time delta from previous displayed frame: 0.000354000 seconds] [Time since reference or first frame: 4.212957000 seconds] Frame Number: 20 Frame Length: 135 bytes Capture Length: 135 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 121 Identification: 0x08b5 (2229) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x27b9 [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2536 (2536), Dst Port: https (443), Seq: 1, Ack: 1, Len: 81 Source port: 2536 (2536) Destination port: https (443) Sequence number: 1 (relative sequence number) [Next sequence number: 82 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x806f [correct] [Good Checksum: True] [Bad Checksum: False] Secure Socket Layer SSLv2 Record Layer: Client Hello [Version: SSL 2.0 (0x0002)] Length: 79 Handshake Message Type: Client Hello (1) Version: SSL 3.0 (0x0300) Cipher Spec Length: 54 Session ID Length: 0 Challenge Length: 16 Cipher Specs (18 specs) Cipher Spec: TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (0x000088) Cipher Spec: TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA (0x000087) Cipher Spec: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x000039) Cipher Spec: TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x000038) Cipher Spec: TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (0x000084) Cipher Spec: TLS_RSA_WITH_AES_256_CBC_SHA (0x000035) Cipher Spec: TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (0x000045) Cipher Spec: TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA (0x000044) Cipher Spec: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x000033) Cipher Spec: TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x000032) Cipher Spec: TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (0x000041) Cipher Spec: TLS_RSA_WITH_RC4_128_MD5 (0x000004) Cipher Spec: TLS_RSA_WITH_RC4_128_SHA (0x000005) Cipher Spec: TLS_RSA_WITH_AES_128_CBC_SHA (0x00002f) Cipher Spec: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x000016) Cipher Spec: TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x000013) Cipher Spec: SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA (0x00feff) Cipher Spec: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x00000a) Challenge No. Time Source Destination Protocol Info 21 4.449158 10.16.130.245 10.11.51.1 TCP https > 2536 [ACK] Seq=1 Ack=82 Win=5840 Len=0 Frame 21 (60 bytes on wire, 60 bytes captured) Arrival Time: Aug 28, 2008 15:47:41.172689000 [Time delta from previous captured frame: 0.236201000 seconds] [Time delta from previous displayed frame: 0.236201000 seconds] [Time since reference or first frame: 4.449158000 seconds] Frame Number: 21 Frame Length: 60 bytes Capture Length: 60 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Trailer: 000000000000 Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x8366 (33638) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0xf258 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2536 (2536), Seq: 1, Ack: 82, Len: 0 Source port: https (443) Destination port: 2536 (2536) Sequence number: 1 (relative sequence number) Acknowledgement number: 82 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0x1c22 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 20] [The RTT to ACK the segment was: 0.236201000 seconds] No. Time Source Destination Protocol Info 22 4.449189 10.16.130.245 10.11.51.1 TLSv1 Alert (Level: Fatal, Description: Internal Error) Frame 22 (61 bytes on wire, 61 bytes captured) Arrival Time: Aug 28, 2008 15:47:41.172720000 [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 4.449189000 seconds] Frame Number: 22 Frame Length: 61 bytes Capture Length: 61 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 47 Identification: 0x8367 (33639) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0xf250 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2536 (2536), Seq: 1, Ack: 82, Len: 7 Source port: https (443) Destination port: 2536 (2536) Sequence number: 1 (relative sequence number) [Next sequence number: 8 (relative sequence number)] Acknowledgement number: 82 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xb40d [correct] [Good Checksum: True] [Bad Checksum: False] Secure Socket Layer TLSv1 Record Layer: Alert (Level: Fatal, Description: Internal Error) Content Type: Alert (21) Version: TLS 1.0 (0x0301) Length: 2 Alert Message Level: Fatal (2) Description: Internal Error (80) No. Time Source Destination Protocol Info 23 4.449642 10.11.51.1 10.16.130.245 TCP 2536 > https [RST, ACK] Seq=82 Ack=8 Win=0 Len=0 Frame 23 (54 bytes on wire, 54 bytes captured) Arrival Time: Aug 28, 2008 15:47:41.173173000 [Time delta from previous captured frame: 0.000453000 seconds] [Time delta from previous displayed frame: 0.000453000 seconds] [Time since reference or first frame: 4.449642000 seconds] Frame Number: 23 Frame Length: 54 bytes Capture Length: 54 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP RST] [Coloring Rule String: tcp.flags.reset eq 1] Ethernet II, Src: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55), Dst: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Destination: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.11.51.1 (10.11.51.1), Dst: 10.16.130.245 (10.16.130.245) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0927 (2343) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2798 [correct] [Good: True] [Bad : False] Source: 10.11.51.1 (10.11.51.1) Destination: 10.16.130.245 (10.16.130.245) Transmission Control Protocol, Src Port: 2536 (2536), Dst Port: https (443), Seq: 82, Ack: 8, Len: 0 Source port: 2536 (2536) Destination port: https (443) Sequence number: 82 (relative sequence number) Acknowledgement number: 8 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .1.. = Reset: Set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0x32e7 [correct] [Good Checksum: True] [Bad Checksum: False] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 22] [The RTT to ACK the segment was: 0.000453000 seconds] No. Time Source Destination Protocol Info 24 5.388270 10.16.130.245 10.11.51.1 TCP https > 2535 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1372 Frame 24 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 28, 2008 15:47:42.111801000 [Time delta from previous captured frame: 0.938628000 seconds] [Time delta from previous displayed frame: 0.938628000 seconds] [Time since reference or first frame: 5.388270000 seconds] Frame Number: 24 Frame Length: 62 bytes Capture Length: 62 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Force10N_4b:34:cd (00:01:e8:4b:34:cd), Dst: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Destination: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) Address: Toshiba_2b:2f:55 (00:15:b7:2b:2f:55) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Force10N_4b:34:cd (00:01:e8:4b:34:cd) Address: Force10N_4b:34:cd (00:01:e8:4b:34:cd) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.16.130.245 (10.16.130.245), Dst: 10.11.51.1 (10.11.51.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: TCP (0x06) Header checksum: 0x75b7 [correct] [Good: True] [Bad : False] Source: 10.16.130.245 (10.16.130.245) Destination: 10.11.51.1 (10.11.51.1) Transmission Control Protocol, Src Port: https (443), Dst Port: 2535 (2535), Seq: 0, Ack: 1, Len: 0 Source port: https (443) Destination port: 2535 (2535) Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5840 Checksum: 0xd954 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (8 bytes) Maximum segment size: 1372 bytes NOP NOP SACK permitted