Child Item

Site Totals

61487 Questions Answered 271 Categories

MiFi4510L sporatically hangs on Web sites w/ IE Win6&7 (THIS URL!); TCP Segment Lost

MtheK

I had to use Dial-Up just to get this far!!!

Sometimes it works fine; other times it hangs FOREVER (TCP Segment Lost)! Must manually STOP..

I've let it hang for over 10 minutes; nothing ever happens after the last trace entry. No re-xmits.

The last time it hung, I collected dumps&traces, then Stop & Refresh in IE and it worked fine.

During the hang, I successfully TELNET'ed to the DNS (same IPAddr), so it's NOT apparently a connection issue.

Certainly YOUR OWN URL should NOT be having constant problems!

I powered off&on your device. Still occasionally hangs.

WHAT IS GOING ON? The only solution seems to be to use Dial-Up!!! I have NEVER had this problem in all the many years

using Dial-Up.

Here are NETMON traces from a recent hang

669 {DNS:131, UDP:130, IPv4:4} 4:01:19 PM 8/4/2011 127    DNS 0x1    192.168.1.2 8.8.8.8 DNS:QueryId = 0xCAB, QUERY (Standard query), Query for www.goes.noaa.gov of type Host Addr on class Internet
670 {DNS:131, UDP:130, IPv4:4} 4:01:19 PM 8/4/2011 247    DNS 0x2    8.8.8.8 192.168.1.2 DNS:QueryId = 0xCAB, QUERY (Standard query), Response - Success, 129.15.96.23, 140.90.33.23 ...
671 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 116 iexplore.exe 0x12d4  TCP 0x1 Half Connected Disregarded  192.168.1.2 129.15.96.23 TCP:Flags=......S., SrcPort=49248, DstPort=HTTP(80), PayloadLen=0, Seq=3442312612, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192
672 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 116 iexplore.exe 0x12d4  TCP 0x2 Connected Good  129.15.96.23 192.168.1.2 TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=49248, PayloadLen=0, Seq=3625396553, Ack=3442312613, Win=5840 ( Negotiated scale factor 0x9 ) = 2990080
673 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 104 iexplore.exe 0x12d4  TCP 0x1 Connected Disregarded  192.168.1.2 129.15.96.23 TCP:Flags=...A...., SrcPort=49248, DstPort=HTTP(80), PayloadLen=0, Seq=3442312613, Ack=3625396554, Win=4380 (scale factor 0x2) = 17520
674 {HTTP:133, TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 497 iexplore.exe 0x12d4 Request, GET /GIFS/ECIR.JPG HTTP 0x1 Connected Disregarded  192.168.1.2 129.15.96.23 HTTP:Request, GET /GIFS/ECIR.JPG
675 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 104 iexplore.exe 0x12d4  TCP 0x2 Connected Good  129.15.96.23 192.168.1.2 TCP:Flags=...A...., SrcPort=HTTP(80), DstPort=49248, PayloadLen=0, Seq=3625396554, Ack=3442313006, Win=14 (scale factor 0x9) = 7168

676 {HTTP:133, TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 1286 iexplore.exe 0x12d4 HTTP Payload, URL: /GIFS/ECIR.JPG IPHTTPS 0x2 Connected Good 0x1 129.15.96.23 192.168.1.2 IPHTTPS

Frame: Number = 676, Captured Frame Length = 1286, MediaType = WiFi
- WiFi: [Unencrypted Data] F.....P, (I) RSSI = -49 dBm, Rate = 67.5 Mbps
- MetaData: RSSI = -49 dBm, Rate = 67.5 Mbps
     Version: 2 (0x2)
     Length: 32 (0x20)
   - OpMode: Extensible Station Mode
      StationMode:           (...............................0) Not Station Mode
      APMode:                (..............................0.) Not AP Mode
      ExtensibleStationMode: (.............................1..) Extensible Station Mode
      Unused:                (.0000000000000000000000000000...)
      MonitorMode:           (0...............................) Not Monitor Mode
     Flags: 0 (0x0)
     PhyType: 802.11g
     Channel: 1, Center Frequency: 2412 MHz
     lRSSI: -49 dBm
     Rate: 67.5 Mbps
     TimeStamp: 08/04/2011, 22:01:19.606165 UTC
- FrameControl: Version 0,Data, Data, F.....P(0x4208)
     Version:        (..............00) 0
     Type:           (............10..) Data
     SubType:        (........0000....) Data
     DS:             (......10........) DS to STA via AP
     MoreFrag:       (.....0..........) No
     Retry:          (....0...........) No
     PowerMgt:       (...0............) Active Mode
     MoreData:       (..0.............) No
     ProtectedFrame: (.1..............) Yes
     Order:          (0...............) Unordered
    Duration: 48 (0x30)
    DA: 1C659D CA2550
    BSSID: Novatel Wireless, Inc. 04C0AF
    SA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 889
     FragmentNumber: (............0000) 0
     SequenceNumber: (001101111001....) 889
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     IG:      (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     CR:      (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
     MMM: (000.....) 0
     PF:   (...0....) Poll Bit - No Response Solicited
     MM:   (....00..)
     Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
    OrganizationCode: XEROX CORPORATION, 0(0x0000)
    EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=129.15.96.23, Dest = 192.168.1.2, Next Protocol = TCP, Packet ID = 44701, Total IP Length = 1222
- Versions: IPv4, Internet Protocol; Header Length = 20
     Version:      (0100....) IPv4, Internet Protocol
     HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
     DSCP: (000000..) Differentiated services codepoint 0
     ECT: (......0.) ECN-Capable Transport not set
     CE:   (.......0) ECN-CE not set
    TotalLength: 1222 (0x4C6)
    Identification: 44701 (0xAE9D)
- FragmentFlags: 16384 (0x4000)
     Reserved: (0...............)
     DF:       (.1..............) Do not fragment
     MF:       (..0.............) This is the last fragment
     Offset:   (...0000000000000) 0
    TimeToLive: 46 (0x2E)
    NextProtocol: TCP, 6(0x6)
    Checksum: 63171 (0xF6C3)
    SourceAddress: 129.15.96.23
    DestinationAddress: 192.168.1.2

- Tcp: [Segment Lost]Flags=...AP..., SrcPort=HTTP(80), DstPort=49248, PayloadLen=1182, Seq=3625399474 - 3625400656, Ack=3442313006, Win=14 (scale factor 0x9) = 7168

ALL HANGS GET "SEGMENT LOST"

    SrcPort: HTTP(80)
    DstPort: 49248
    SequenceNumber: 3625399474 (0xD81734B2)
    AcknowledgementNumber: 3442313006 (0xCD2D872E)
- DataOffset: 80 (0x50)
     DataOffset: (0101....) 20 bytes
     Reserved:   (....000.)
     NS:         (.......0) Nonce Sum not significant
- Flags: ...AP...
     CWR:    (0.......) CWR not significant
     ECE:    (.0......) ECN-Echo not significant
     Urgent: (..0.....) Not Urgent Data
     Ack:    (...1....) Acknowledgement field significant
     Push:   (....1...) Push Function
     Reset: (.....0..) No Reset
     Syn:    (......0.) Not Synchronize sequence numbers
     Fin:    (.......0) Not End of data
    Window: 14 (scale factor 0x9) = 7168
    Checksum: 0xF6BE, Good
    UrgentPointer: 0 (0x0)
    TCPPayload: SourcePort = 80, DestinationPort = 49248
- Http: HTTP Payload, URL: /GIFS/ECIR.JPG
    payload: HttpContentType = NetmonNull
IPHTTPS:

677 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 116 iexplore.exe 0x12d4 TCP 0x1 Connected Disregarded 192.168.1.2 129.15.96.23 TCP:Flags=...A...., SrcPort=49248, DstPort=HTTP(80), PayloadLen=0, Seq=3442313006, Ack=3625396554, Win=4380 (scale factor 0x2) = 17520

Comments?

Comments

ChristinaB_VZW

Hi MtheK,

My understanding is that you have the 4G Mifi and it is losing connection, correct? Are you using Dial-Up to connect, or are you using the Mifi to connect?

Please provide some additional details, as well as any error messages you are receiving. We want to make sure your service is working.

Thank you!

MtheK

It's not that the connection is lost, just the specific URL hangs. I can TELNET via a
DOS prompt to the same IP address just fine while this FOREVER hang is occuring.
Of all the URLs I use daily, only 3 (of about 50) would consistently, but "randomly",
hang; the GOES IR and WV .jpg, and your site (which is why I had to open this post
using my Dial-up; I could NEVER get past your login). Different IR and WV .jpgs, in
completely different URLs, would work fine when the bad ones would not:

BAD

http://www.goes.noaa.gov/GIFS/ECIR.JPG
http://www.goes.noaa.gov/ECWV1.html (the .jpg, not the .html itself)

GOOD

http://www.ssec.wisc.edu/data/east/latest_eastir.jpg
http://www.ssec.wisc.edu/data/east/latest_eastwv.jpg

This particular hang does NOT & has NEVER occured when I use Dial-up @ 56Kbps
to the GOES IR URL.

It SPORATICALLY occurs when I am connected to the 4510L via Network&Sharing/WiFi.
If I delete my Temporary Internet files in IE, I can USUALLY cause it to hang
while trying to logon to your site, as well as the GOES URLs.

What I provided was a NETMON trace. The lone 0x1 is the 'TCP Segment lost' GUI column.
I would provide a screen shot, but there doesn't seem to be a way to upload a .jpg
in this forum. This was from another hang that I analyzed more in detail:

3271 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 116 iexplore.exe 0xd94  TCP 0x1 Half Connected Good  192.168.1.2 140.90.200.23 TCP:Flags=......S., SrcPort=51476, DstPort=HTTP(80), PayloadLen=0, Seq=1149862327, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192
   0x1, Seq=1149862327, Ack=0,
   SEND (me(src) to them(dst))
3272 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 116 iexplore.exe 0xd94  TCP 0x2 Connected Good  140.90.200.23 192.168.1.2 TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=51476, PayloadLen=0, Seq=1406608998, Ack=1149862328, Win=5840 ( Negotiated scale factor 0x9 ) = 2990080
   0x2, Seq=1406608998, Ack=1149862328,
   RECV (them to me)                 | <== +1 from me seq
3273 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 104 iexplore.exe 0xd94  TCP 0x1 Connected Good  192.168.1.2 140.90.200.23 TCP:Flags=...A...., SrcPort=51476, DstPort=HTTP(80), PayloadLen=0, Seq=1149862328, Ack=1406608999, Win=4380 (scale factor 0x2) = 17520
   0x1, Seq=1149862328, Ack=1406608999,
                     | <== me +1     | <==them seq +1
3274 {HTTP:495, TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 575 iexplore.exe 0xd94 Request, GET /GIFS/ECIR.JPG HTTP 0x1 Connected Good  192.168.1.2 140.90.200.23 HTTP:Request, GET /GIFS/ECIR.JPG
   0x1,

3275 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 104 iexplore.exe 0xd94  TCP 0x2 Connected Good  140.90.200.23 192.168.1.2 TCP:Flags=...A...., SrcPort=HTTP(80), DstPort=51476, PayloadLen=0, Seq=1406608999, Ack=1149862799, Win=14 (scale factor 0x9) = 7168
   0x2, Seq=1406608999, Ack=1149862799,
                     | <== them seq +1
3276 {HTTP:495, TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 1286 iexplore.exe 0xd94 HTTP Payload, URL: /GIFS/ECIR.JPG HTTP 0x2 Connected Good 0x1 140.90.200.23 192.168.1.2 HTTP:HTTP Payload, URL: /GIFS/ECIR.JPG
   seg lost
   0x2,

Frame: Number = 3276, Captured Frame Length = 1286, MediaType = WiFi
- WiFi: [Unencrypted Data] F.....P, (I) RSSI = -49 dBm, Rate = 67.5 Mbps
- MetaData: RSSI = -49 dBm, Rate = 67.5 Mbps
     Version: 2 (0x2)
     Length: 32 (0x20)
   - OpMode: Extensible Station Mode
      StationMode:           (...............................0) Not Station Mode
      APMode:                (..............................0.) Not AP Mode
      ExtensibleStationMode: (.............................1..) Extensible Station Mode
      Unused:                (.0000000000000000000000000000...)
      MonitorMode:           (0...............................) Not Monitor Mode
     Flags: 0 (0x0)
     PhyType: 802.11g
     Channel: 1, Center Frequency: 2412 MHz
     lRSSI: -49 dBm
     Rate: 67.5 Mbps
     TimeStamp: 08/06/2011, 02:18:22.207599 UTC
- FrameControl: Version 0,Data, Data, F.....P(0x4208)
     Version:        (..............00) 0
     Type:           (............10..) Data
     SubType:        (........0000....) Data
     DS:             (......10........) DS to STA via AP
     MoreFrag:       (.....0..........) No
     Retry:          (....0...........) No
     PowerMgt:       (...0............) Active Mode
     MoreData:       (..0.............) No
     ProtectedFrame: (.1..............) Yes
     Order:          (0...............) Unordered
    Duration: 48 (0x30)
    DA: 1C659D CA2550
    BSSID: Novatel Wireless, Inc. 04C0AF
    SA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 1770
     FragmentNumber: (............0000) 0
     SequenceNumber: (011011101010....) 1770
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     IG:      (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     CR:      (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
     MMM: (000.....) 0
     PF:   (...0....) Poll Bit - No Response Solicited
     MM:   (....00..)
     Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
    OrganizationCode: XEROX CORPORATION, 0(0x0000)
    EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=140.90.200.23, Dest = 192.168.1.2, Next Protocol = TCP, Packet ID = 11489, Total IP Length = 1222
- Versions: IPv4, Internet Protocol; Header Length = 20
     Version:      (0100....) IPv4, Internet Protocol
     HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
     DSCP: (000000..) Differentiated services codepoint 0
     ECT: (......0.) ECN-Capable Transport not set
     CE:   (.......0) ECN-CE not set
    TotalLength: 1222 (0x4C6)
    Identification: 11489 (0x2CE1)
- FragmentFlags: 16384 (0x4000)
     Reserved: (0...............)
     DF:       (.1..............) Do not fragment
     MF:       (..0.............) This is the last fragment
     Offset:   (...0000000000000) 0
    TimeToLive: 45 (0x2D)
    NextProtocol: TCP, 6(0x6)
    Checksum: 1589 (0x635)
    SourceAddress: 140.90.200.23
    DestinationAddress: 192.168.1.2
- Tcp: [Segment Lost]Flags=...AP..., SrcPort=HTTP(80), DstPort=51476, PayloadLen=1182, Seq=1406611919 - 1406613101, Ack=1149862799, Win=14 (scale factor 0x9) = 7168

***** THIS SHOWS UP IN THE 'TCP Segment Lost' GUI column.

    SrcPort: HTTP(80)
    DstPort: 51476
    SequenceNumber: 1406611919 (0x53D731CF)
    AcknowledgementNumber: 1149862799 (0x4489838F)
- DataOffset: 80 (0x50)
     DataOffset: (0101....) 20 bytes
     Reserved:   (....000.)
     NS:         (.......0) Nonce Sum not significant
- Flags: ...AP...
     CWR:    (0.......) CWR not significant
     ECE:    (.0......) ECN-Echo not significant
     Urgent: (..0.....) Not Urgent Data
     Ack:    (...1....) Acknowledgement field significant
     Push:   (....1...) Push Function
     Reset: (.....0..) No Reset
     Syn:    (......0.) Not Synchronize sequence numbers
     Fin:    (.......0) Not End of data
    Window: 14 (scale factor 0x9) = 7168
    Checksum: 0x3239, Good
    UrgentPointer: 0 (0x0)
    TCPPayload: SourcePort = 80, DestinationPort = 51476
- Http: HTTP Payload, URL: /GIFS/ECIR.JPG
- payload: HttpContentType = NetmonNull
     HTTPPayloadLine: ...

3277 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 116 iexplore.exe 0xd94  TCP 0x1 Connected Good  192.168.1.2 140.90.200.23 TCP:Flags=...A...., SrcPort=51476, DstPort=HTTP(80), PayloadLen=0, Seq=1149862799, Ack=1406608999, Win=4380 (scale factor 0x2) = 17520
   0x1, Seq=1149862799, Ack=1406608999,
3278 {TCP:494, IPv4:481} 8:18:24 PM 8/5/2011 104 iexplore.exe 0xd94  TCP 0x1 Disconnected Good  192.168.1.2 140.90.200.23 TCP:Flags=...A.R.., SrcPort=51476, DstPort=HTTP(80), PayloadLen=0, Seq=1149862799, Ack=1406608999, Win=0 (scale factor 0x2) = 0
   0x1, Seq=1149862799, Ack=1406608999,

Lately it hasn't been occuring. I just tried forcing it to fail, but I can't,
even using the same methods I used before to make it fail most of the time,
both the GOES URLs and your site, so all I have now are the traces when it DID fail.
I use the GOES IR URL daily, and, so far, it's worked every time the past few weeks
(almost since this original post).

MtheK

OK, it failed again yesterday. Here's detail from NETMON including entries proir. #11104 is the detected failure.

Have to do this post in multiple entries due to character size restriction:

11097 {DNS:734, UDP:175, IPv4:9} 7:02:15 AM 8/24/2011 127 DNS 0x1 192.168.1.2 8.8.8.8 DNS:QueryId = 0x355C, QUERY (Standard query), Query for www.goes.noaa.gov of type Host Addr on class Internet

11098 {DNS:734, UDP:175, IPv4:9} 7:02:15 AM 8/24/2011 247 DNS 0x2 8.8.8.8 192.168.1.2 DNS:QueryId = 0x355C, QUERY (Standard query), Response - Success, 129.15.96.23, 140.90.33.23 ...

11099 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 116 iexplore.exe 0x598 TCP 0x1 Half Connected Good 192.168.1.2 129.15.96.23 Flags=......S., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806479952, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192 TCP:Flags=......S., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806479952, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192

11100 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 116 iexplore.exe 0x598 TCP 0x2 Connected Good 129.15.96.23 192.168.1.2 Flags=...A..S., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795654, Ack=3806479953, Win=5840 ( Negotiated scale factor 0x9 ) = 2990080 TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795654, Ack=3806479953, Win=5840 ( Negotiated scale factor 0x9 ) = 2990080

11101 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 104 iexplore.exe 0x598 TCP 0x1 Connected Good 192.168.1.2 129.15.96.23 Flags=...A...., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806479953, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520 TCP:Flags=...A...., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806479953, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520

11102 {HTTP:737, TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 639 iexplore.exe Request, GET /GIFS/ECIR.JPG 0x598 HTTP 0x1 Connected Good 192.168.1.2 129.15.96.23 Flags=...AP..., SrcPort=49472, DstPort=HTTP(80), PayloadLen=535, Seq=3806479953 - 3806480488, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520 HTTP:Request, GET /GIFS/ECIR.JPG

Frame: Number = 11102, Captured Frame Length = 639, MediaType = WiFi
- WiFi: [Unencrypted Data] .T....., (I)
- MetaData:
     Version: 2 (0x2)
     Length: 32 (0x20)
   - OpMode: Extensible Station Mode
      StationMode:           (...............................0) Not Station Mode
      APMode:                (..............................0.) Not AP Mode
      ExtensibleStationMode: (.............................1..) Extensible Station Mode
      Unused:                (.0000000000000000000000000000...)
      MonitorMode:           (0...............................) Not Monitor Mode
     Flags: 4294967295 (0xFFFFFFFF)
     RemData: Outbound
     TimeStamp: 08/24/2011, 13:02:15.555461 UTC
- FrameControl: Version 0,Data, Data, .T.....(0x108)
     Version:        (..............00) 0
     Type:           (............10..) Data
     SubType:        (........0000....) Data
     DS:             (......01........) STA to DS via AP
     MoreFrag:       (.....0..........) No
     Retry:          (....0...........) No
     PowerMgt:       (...0............) Active Mode
     MoreData:       (..0.............) No
     ProtectedFrame: (.0..............) No
     Order:          (0...............) Unordered
    Duration: 32768 (0x8000)
    BSSID: Novatel Wireless, Inc. 04C0AF
    SA: 1C659D CA2550
    DA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 0
     FragmentNumber: (............0000) 0
     SequenceNumber: (000000000000....) 0
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     IG:      (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     CR:      (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
     MMM: (000.....) 0
     PF:   (...0....) Poll Bit - No Response Solicited
     MM:   (....00..)
     Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
    OrganizationCode: XEROX CORPORATION, 0(0x0000)
    EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=192.168.1.2, Dest = 129.15.96.23, Next Protocol = TCP, Packet ID = 4638, Total IP Length = 575
- Versions: IPv4, Internet Protocol; Header Length = 20
     Version:      (0100....) IPv4, Internet Protocol
     HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
     DSCP: (000000..) Differentiated services codepoint 0
     ECT: (......0.) ECN-Capable Transport not set
     CE:   (.......0) ECN-CE not set
    TotalLength: 575 (0x23F)
    Identification: 4638 (0x121E)
- FragmentFlags: 16384 (0x4000)
     Reserved: (0...............)
     DF:       (.1..............) Do not fragment
     MF:       (..0.............) This is the last fragment
     Offset:   (...0000000000000) 0
    TimeToLive: 128 (0x80)
    NextProtocol: TCP, 6(0x6)
    Checksum: 17354 (0x43CA)
    SourceAddress: 192.168.1.2
    DestinationAddress: 129.15.96.23
- Tcp: Flags=...AP..., SrcPort=49472, DstPort=HTTP(80), PayloadLen=535, Seq=3806479953 - 3806480488, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520
    SrcPort: 49472
    DstPort: HTTP(80)
    SequenceNumber: 3806479953 (0xE2E24651)
    AcknowledgementNumber: 3370795655 (0xC8EA4287)
- DataOffset: 80 (0x50)
     DataOffset: (0101....) 20 bytes
     Reserved:   (....000.)
     NS:         (.......0) Nonce Sum not significant
- Flags: ...AP...
     CWR:    (0.......) CWR not significant
     ECE:    (.0......) ECN-Echo not significant
     Urgent: (..0.....) Not Urgent Data
     Ack:    (...1....) Acknowledgement field significant
     Push:   (....1...) Push Function
     Reset: (.....0..) No Reset
     Syn:    (......0.) Not Synchronize sequence numbers
     Fin:    (.......0) Not End of data
    Window: 4380 (scale factor 0x2) = 17520
    Checksum: 0x448E, Good
    UrgentPointer: 0 (0x0)
    TCPPayload: SourcePort = 49472, DestinationPort = 80
- Http: Request, GET /GIFS/ECIR.JPG
    Command: GET
- URI: /GIFS/ECIR.JPG
     Location: /GIFS/ECIR.JPG
    ProtocolVersion: HTTP/1.1
    Accept: image/jpeg, application/x-ms-application, image/gif, application/xaml+xml, image/pjpeg, application/x-ms-xbap, application/x-shockwave-flash, */*
    Accept-Language: en-US
    UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; CMNTDF; BRI/1)
    Accept-Encoding: gzip, deflate
    If-Modified-Since: Tue, 23 Aug 2011 12:05:22 GMT; length=53589
    Host: www.goes.noaa.gov
    Connection: Keep-Alive
    HeaderEnd: CRLF

MtheK

11103 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 104 iexplore.exe 0x598 TCP 0x2 Connected Good 129.15.96.23 192.168.1.2 Flags=...A...., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795655, Ack=3806480488, Win=14 (scale factor 0x9) = 7168 TCP:Flags=...A...., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795655, Ack=3806480488, Win=14 (scale factor 0x9) = 7168

Frame: Number = 11103, Captured Frame Length = 104, MediaType = WiFi
- WiFi: [Unencrypted Data] F.....P, (I) RSSI = -51 dBm, Rate = 67.5 Mbps
- MetaData: RSSI = -51 dBm, Rate = 67.5 Mbps
     Version: 2 (0x2)
     Length: 32 (0x20)
   - OpMode: Extensible Station Mode
      StationMode:           (...............................0) Not Station Mode
      APMode:                (..............................0.) Not AP Mode
      ExtensibleStationMode: (.............................1..) Extensible Station Mode
      Unused:                (.0000000000000000000000000000...)
      MonitorMode:           (0...............................) Not Monitor Mode
     Flags: 0 (0x0)
     PhyType: 802.11g
     Channel: 2, Center Frequency: 2417 MHz
     lRSSI: -51 dBm
     Rate: 67.5 Mbps
     TimeStamp: 08/24/2011, 13:02:15.623759 UTC
- FrameControl: Version 0,Data, Data, F.....P(0x4208)
     Version:        (..............00) 0
     Type:           (............10..) Data
     SubType:        (........0000....) Data
     DS:             (......10........) DS to STA via AP
     MoreFrag:       (.....0..........) No
     Retry:          (....0...........) No
     PowerMgt:       (...0............) Active Mode
     MoreData:       (..0.............) No
     ProtectedFrame: (.1..............) Yes
     Order:          (0...............) Unordered
    Duration: 48 (0x30)
    DA: 1C659D CA2550
    BSSID: Novatel Wireless, Inc. 04C0AF
    SA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 2338
     FragmentNumber: (............0000) 0
     SequenceNumber: (100100100010....) 2338
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     IG:      (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     CR:      (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
     MMM: (000.....) 0
     PF:   (...0....) Poll Bit - No Response Solicited
     MM:   (....00..)
     Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
    OrganizationCode: XEROX CORPORATION, 0(0x0000)
    EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=129.15.96.23, Dest = 192.168.1.2, Next Protocol = TCP, Packet ID = 62246, Total IP Length = 40
- Versions: IPv4, Internet Protocol; Header Length = 20
     Version:      (0100....) IPv4, Internet Protocol
     HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
     DSCP: (000000..) Differentiated services codepoint 0
     ECT: (......0.) ECN-Capable Transport not set
     CE:   (.......0) ECN-CE not set
    TotalLength: 40 (0x28)
    Identification: 62246 (0xF326)
- FragmentFlags: 16384 (0x4000)
     Reserved: (0...............)
     DF:       (.1..............) Do not fragment
     MF:       (..0.............) This is the last fragment
     Offset:   (...0000000000000) 0
    TimeToLive: 46 (0x2E)
    NextProtocol: TCP, 6(0x6)
    Checksum: 46808 (0xB6D8)
    SourceAddress: 129.15.96.23
    DestinationAddress: 192.168.1.2
- Tcp: Flags=...A...., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795655, Ack=3806480488, Win=14 (scale factor 0x9) = 7168
    SrcPort: HTTP(80)
    DstPort: 49472
    SequenceNumber: 3370795655 (0xC8EA4287)
    AcknowledgementNumber: 3806480488 (0xE2E24868)
- DataOffset: 80 (0x50)
     DataOffset: (0101....) 20 bytes
     Reserved:   (....000.)
     NS:         (.......0) Nonce Sum not significant
- Flags: ...A....
     CWR:    (0.......) CWR not significant
     ECE:    (.0......) ECN-Echo not significant
     Urgent: (..0.....) Not Urgent Data
     Ack:    (...1....) Acknowledgement field significant
     Push:   (....0...) No Push Function
     Reset: (.....0..) No Reset
     Syn:    (......0.) Not Synchronize sequence numbers
     Fin:    (.......0) Not End of data
    Window: 14 (scale factor 0x9) = 7168
    Checksum: 0x14A8, Good
    UrgentPointer: 0 (0x0)

11104 {HTTP:737, TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 1286 iexplore.exe HTTP Payload, URL: /GIFS/ECIR.JPG 0x598 HTTP 0x2 Connected Good 0x1 129.15.96.23 192.168.1.2 [Segment Lost]Flags=...AP..., SrcPort=HTTP(80), DstPort=49472, PayloadLen=1182, Seq=3370798575 - 3370799757, Ack=3806480488, Win=14 (scale factor 0x9) = 7168 HTTP:HTTP Payload, URL: /GIFS/ECIR.JPG

Frame: Number = 11104, Captured Frame Length = 1286, MediaType = WiFi
- WiFi: [Unencrypted Data] F.....P, (I) RSSI = -51 dBm, Rate = 67.5 Mbps
- MetaData: RSSI = -51 dBm, Rate = 67.5 Mbps
     Version: 2 (0x2)
     Length: 32 (0x20)
   - OpMode: Extensible Station Mode
      StationMode:           (...............................0) Not Station Mode
      APMode:                (..............................0.) Not AP Mode
      ExtensibleStationMode: (.............................1..) Extensible Station Mode
      Unused:                (.0000000000000000000000000000...)
      MonitorMode:           (0...............................) Not Monitor Mode
     Flags: 0 (0x0)
     PhyType: 802.11g
     Channel: 2, Center Frequency: 2417 MHz
     lRSSI: -51 dBm
     Rate: 67.5 Mbps
     TimeStamp: 08/24/2011, 13:02:15.626528 UTC
- FrameControl: Version 0,Data, Data, F.....P(0x4208)
     Version:        (..............00) 0
     Type:           (............10..) Data
     SubType:        (........0000....) Data
     DS:             (......10........) DS to STA via AP
     MoreFrag:       (.....0..........) No
     Retry:          (....0...........) No
     PowerMgt:       (...0............) Active Mode
     MoreData:       (..0.............) No
     ProtectedFrame: (.1..............) Yes
     Order:          (0...............) Unordered
    Duration: 48 (0x30)
    DA: 1C659D CA2550
    BSSID: Novatel Wireless, Inc. 04C0AF
    SA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 2339
     FragmentNumber: (............0000) 0
     SequenceNumber: (100100100011....) 2339
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     IG:      (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
     Address: (1010101.) SNAP(Sub-Network Access Protocol)
     CR:      (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
     MMM: (000.....) 0
     PF:   (...0....) Poll Bit - No Response Solicited
     MM:   (....00..)
     Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
    OrganizationCode: XEROX CORPORATION, 0(0x0000)
    EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=129.15.96.23, Dest = 192.168.1.2, Next Protocol = TCP, Packet ID = 62249, Total IP Length = 1222
- Versions: IPv4, Internet Protocol; Header Length = 20
     Version:      (0100....) IPv4, Internet Protocol
     HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
     DSCP: (000000..) Differentiated services codepoint 0
     ECT: (......0.) ECN-Capable Transport not set
     CE:   (.......0) ECN-CE not set
    TotalLength: 1222 (0x4C6)
    Identification: 62249 (0xF329)
- FragmentFlags: 16384 (0x4000)
     Reserved: (0...............)
     DF:       (.1..............) Do not fragment
     MF:       (..0.............) This is the last fragment
     Offset:   (...0000000000000) 0
    TimeToLive: 46 (0x2E)
    NextProtocol: TCP, 6(0x6)
    Checksum: 45623 (0xB237)
    SourceAddress: 129.15.96.23
    DestinationAddress: 192.168.1.2
- Tcp: [Segment Lost]Flags=...AP..., SrcPort=HTTP(80), DstPort=49472, PayloadLen=1182, Seq=3370798575 - 3370799757, Ack=3806480488, Win=14 (scale factor 0x9) = 7168
    SrcPort: HTTP(80)
    DstPort: 49472
    SequenceNumber: 3370798575 (0xC8EA4DEF)
    AcknowledgementNumber: 3806480488 (0xE2E24868)
- DataOffset: 80 (0x50)
     DataOffset: (0101....) 20 bytes
     Reserved:   (....000.)
     NS:         (.......0) Nonce Sum not significant
- Flags: ...AP...
     CWR:    (0.......) CWR not significant
     ECE:    (.0......) ECN-Echo not significant
     Urgent: (..0.....) Not Urgent Data
     Ack:    (...1....) Acknowledgement field significant
     Push:   (....1...) Push Function
     Reset: (.....0..) No Reset
     Syn:    (......0.) Not Synchronize sequence numbers
     Fin:    (.......0) Not End of data
    Window: 14 (scale factor 0x9) = 7168
    Checksum: 0xD681, Good
    UrgentPointer: 0 (0x0)
    TCPPayload: SourcePort = 80, DestinationPort = 49472
- Http: HTTP Payload, URL: /GIFS/ECIR.JPG
- payload: HttpContentType = NetmonNull
     HTTPPayloadLine: 4ïücvÖ#8íÒª×wªx!fÕ.î Ô-`µ’whð˜URÇT :smileytongue: 1Ç ªsxXLdß«Ç(Ü’¤YVú‘ÈèGZ

Child Item