- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I had to use Dial-Up just to get this far!!!
Sometimes it works fine; other times it hangs FOREVER (TCP Segment Lost)! Must manually STOP..
I've let it hang for over 10 minutes; nothing ever happens after the last trace entry. No re-xmits.
The last time it hung, I collected dumps&traces, then Stop & Refresh in IE and it worked fine.
During the hang, I successfully TELNET'ed to the DNS (same IPAddr), so it's NOT apparently a connection issue.
Certainly YOUR OWN URL should NOT be having constant problems!
I powered off&on your device. Still occasionally hangs.
WHAT IS GOING ON? The only solution seems to be to use Dial-Up!!! I have NEVER had this problem in all the many years
using Dial-Up.
Here are NETMON traces from a recent hang
669 {DNS:131, UDP:130, IPv4:4} 4:01:19 PM 8/4/2011 127 DNS 0x1 192.168.1.2 8.8.8.8 DNS:QueryId = 0xCAB, QUERY (Standard query), Query for www.goes.noaa.gov of type Host Addr on class Internet
670 {DNS:131, UDP:130, IPv4:4} 4:01:19 PM 8/4/2011 247 DNS 0x2 8.8.8.8 192.168.1.2 DNS:QueryId = 0xCAB, QUERY (Standard query), Response - Success, 129.15.96.23, 140.90.33.23 ...
671 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 116 iexplore.exe 0x12d4 TCP 0x1 Half Connected Disregarded 192.168.1.2 129.15.96.23 TCP:Flags=......S., SrcPort=49248, DstPort=HTTP(80), PayloadLen=0, Seq=3442312612, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192
672 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 116 iexplore.exe 0x12d4 TCP 0x2 Connected Good 129.15.96.23 192.168.1.2 TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=49248, PayloadLen=0, Seq=3625396553, Ack=3442312613, Win=5840 ( Negotiated scale factor 0x9 ) = 2990080
673 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 104 iexplore.exe 0x12d4 TCP 0x1 Connected Disregarded 192.168.1.2 129.15.96.23 TCP:Flags=...A...., SrcPort=49248, DstPort=HTTP(80), PayloadLen=0, Seq=3442312613, Ack=3625396554, Win=4380 (scale factor 0x2) = 17520
674 {HTTP:133, TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 497 iexplore.exe 0x12d4 Request, GET /GIFS/ECIR.JPG HTTP 0x1 Connected Disregarded 192.168.1.2 129.15.96.23 HTTP:Request, GET /GIFS/ECIR.JPG
675 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 104 iexplore.exe 0x12d4 TCP 0x2 Connected Good 129.15.96.23 192.168.1.2 TCP:Flags=...A...., SrcPort=HTTP(80), DstPort=49248, PayloadLen=0, Seq=3625396554, Ack=3442313006, Win=14 (scale factor 0x9) = 7168
676 {HTTP:133, TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 1286 iexplore.exe 0x12d4 HTTP Payload, URL: /GIFS/ECIR.JPG IPHTTPS 0x2 Connected Good 0x1 129.15.96.23 192.168.1.2 IPHTTPS
Frame: Number = 676, Captured Frame Length = 1286, MediaType = WiFi
- WiFi: [Unencrypted Data] F.....P, (I) RSSI = -49 dBm, Rate = 67.5 Mbps
- MetaData: RSSI = -49 dBm, Rate = 67.5 Mbps
Version: 2 (0x2)
Length: 32 (0x20)
- OpMode: Extensible Station Mode
StationMode: (...............................0) Not Station Mode
APMode: (..............................0.) Not AP Mode
ExtensibleStationMode: (.............................1..) Extensible Station Mode
Unused: (.0000000000000000000000000000...)
MonitorMode: (0...............................) Not Monitor Mode
Flags: 0 (0x0)
PhyType: 802.11g
Channel: 1, Center Frequency: 2412 MHz
lRSSI: -49 dBm
Rate: 67.5 Mbps
TimeStamp: 08/04/2011, 22:01:19.606165 UTC
- FrameControl: Version 0,Data, Data, F.....P(0x4208)
Version: (..............00) 0
Type: (............10..) Data
SubType: (........0000....) Data
DS: (......10........) DS to STA via AP
MoreFrag: (.....0..........) No
Retry: (....0...........) No
PowerMgt: (...0............) Active Mode
MoreData: (..0.............) No
ProtectedFrame: (.1..............) Yes
Order: (0...............) Unordered
Duration: 48 (0x30)
DA: 1C659D CA2550
BSSID: Novatel Wireless, Inc. 04C0AF
SA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 889
FragmentNumber: (............0000) 0
SequenceNumber: (001101111001....) 889
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
Address: (1010101.) SNAP(Sub-Network Access Protocol)
IG: (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
Address: (1010101.) SNAP(Sub-Network Access Protocol)
CR: (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
MMM: (000.....) 0
PF: (...0....) Poll Bit - No Response Solicited
MM: (....00..)
Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
OrganizationCode: XEROX CORPORATION, 0(0x0000)
EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=129.15.96.23, Dest = 192.168.1.2, Next Protocol = TCP, Packet ID = 44701, Total IP Length = 1222
- Versions: IPv4, Internet Protocol; Header Length = 20
Version: (0100....) IPv4, Internet Protocol
HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
DSCP: (000000..) Differentiated services codepoint 0
ECT: (......0.) ECN-Capable Transport not set
CE: (.......0) ECN-CE not set
TotalLength: 1222 (0x4C6)
Identification: 44701 (0xAE9D)
- FragmentFlags: 16384 (0x4000)
Reserved: (0...............)
DF: (.1..............) Do not fragment
MF: (..0.............) This is the last fragment
Offset: (...0000000000000) 0
TimeToLive: 46 (0x2E)
NextProtocol: TCP, 6(0x6)
Checksum: 63171 (0xF6C3)
SourceAddress: 129.15.96.23
DestinationAddress: 192.168.1.2
- Tcp: [Segment Lost]Flags=...AP..., SrcPort=HTTP(80), DstPort=49248, PayloadLen=1182, Seq=3625399474 - 3625400656, Ack=3442313006, Win=14 (scale factor 0x9) = 7168
ALL HANGS GET "SEGMENT LOST"
SrcPort: HTTP(80)
DstPort: 49248
SequenceNumber: 3625399474 (0xD81734B2)
AcknowledgementNumber: 3442313006 (0xCD2D872E)
- DataOffset: 80 (0x50)
DataOffset: (0101....) 20 bytes
Reserved: (....000.)
NS: (.......0) Nonce Sum not significant
- Flags: ...AP...
CWR: (0.......) CWR not significant
ECE: (.0......) ECN-Echo not significant
Urgent: (..0.....) Not Urgent Data
Ack: (...1....) Acknowledgement field significant
Push: (....1...) Push Function
Reset: (.....0..) No Reset
Syn: (......0.) Not Synchronize sequence numbers
Fin: (.......0) Not End of data
Window: 14 (scale factor 0x9) = 7168
Checksum: 0xF6BE, Good
UrgentPointer: 0 (0x0)
TCPPayload: SourcePort = 80, DestinationPort = 49248
- Http: HTTP Payload, URL: /GIFS/ECIR.JPG
payload: HttpContentType = NetmonNull
IPHTTPS:
677 {TCP:132, IPv4:26} 4:01:19 PM 8/4/2011 116 iexplore.exe 0x12d4 TCP 0x1 Connected Disregarded 192.168.1.2 129.15.96.23 TCP:Flags=...A...., SrcPort=49248, DstPort=HTTP(80), PayloadLen=0, Seq=3442313006, Ack=3625396554, Win=4380 (scale factor 0x2) = 17520
Comments?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi MtheK,
My understanding is that you have the 4G Mifi and it is losing connection, correct? Are you using Dial-Up to connect, or are you using the Mifi to connect?
Please provide some additional details, as well as any error messages you are receiving. We want to make sure your service is working.
Thank you!
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It's not that the connection is lost, just the specific URL hangs. I can TELNET via a
DOS prompt to the same IP address just fine while this FOREVER hang is occuring.
Of all the URLs I use daily, only 3 (of about 50) would consistently, but "randomly",
hang; the GOES IR and WV .jpg, and your site (which is why I had to open this post
using my Dial-up; I could NEVER get past your login). Different IR and WV .jpgs, in
completely different URLs, would work fine when the bad ones would not:
BAD
http://www.goes.noaa.gov/GIFS/ECIR.JPG
http://www.goes.noaa.gov/ECWV1.html (the .jpg, not the .html itself)
GOOD
http://www.ssec.wisc.edu/data/east/latest_eastir.jpg
http://www.ssec.wisc.edu/data/east/latest_eastwv.jpg
This particular hang does NOT & has NEVER occured when I use Dial-up @ 56Kbps
to the GOES IR URL.
It SPORATICALLY occurs when I am connected to the 4510L via Network&Sharing/WiFi.
If I delete my Temporary Internet files in IE, I can USUALLY cause it to hang
while trying to logon to your site, as well as the GOES URLs.
What I provided was a NETMON trace. The lone 0x1 is the 'TCP Segment lost' GUI column.
I would provide a screen shot, but there doesn't seem to be a way to upload a .jpg
in this forum. This was from another hang that I analyzed more in detail:
3271 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 116 iexplore.exe 0xd94 TCP 0x1 Half Connected Good 192.168.1.2 140.90.200.23 TCP:Flags=......S., SrcPort=51476, DstPort=HTTP(80), PayloadLen=0, Seq=1149862327, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192
0x1, Seq=1149862327, Ack=0,
SEND (me(src) to them(dst))
3272 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 116 iexplore.exe 0xd94 TCP 0x2 Connected Good 140.90.200.23 192.168.1.2 TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=51476, PayloadLen=0, Seq=1406608998, Ack=1149862328, Win=5840 ( Negotiated scale factor 0x9 ) = 2990080
0x2, Seq=1406608998, Ack=1149862328,
RECV (them to me) | <== +1 from me seq
3273 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 104 iexplore.exe 0xd94 TCP 0x1 Connected Good 192.168.1.2 140.90.200.23 TCP:Flags=...A...., SrcPort=51476, DstPort=HTTP(80), PayloadLen=0, Seq=1149862328, Ack=1406608999, Win=4380 (scale factor 0x2) = 17520
0x1, Seq=1149862328, Ack=1406608999,
| <== me +1 | <==them seq +1
3274 {HTTP:495, TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 575 iexplore.exe 0xd94 Request, GET /GIFS/ECIR.JPG HTTP 0x1 Connected Good 192.168.1.2 140.90.200.23 HTTP:Request, GET /GIFS/ECIR.JPG
0x1,
3275 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 104 iexplore.exe 0xd94 TCP 0x2 Connected Good 140.90.200.23 192.168.1.2 TCP:Flags=...A...., SrcPort=HTTP(80), DstPort=51476, PayloadLen=0, Seq=1406608999, Ack=1149862799, Win=14 (scale factor 0x9) = 7168
0x2, Seq=1406608999, Ack=1149862799,
| <== them seq +1
3276 {HTTP:495, TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 1286 iexplore.exe 0xd94 HTTP Payload, URL: /GIFS/ECIR.JPG HTTP 0x2 Connected Good 0x1 140.90.200.23 192.168.1.2 HTTP:HTTP Payload, URL: /GIFS/ECIR.JPG
seg lost
0x2,
Frame: Number = 3276, Captured Frame Length = 1286, MediaType = WiFi
- WiFi: [Unencrypted Data] F.....P, (I) RSSI = -49 dBm, Rate = 67.5 Mbps
- MetaData: RSSI = -49 dBm, Rate = 67.5 Mbps
Version: 2 (0x2)
Length: 32 (0x20)
- OpMode: Extensible Station Mode
StationMode: (...............................0) Not Station Mode
APMode: (..............................0.) Not AP Mode
ExtensibleStationMode: (.............................1..) Extensible Station Mode
Unused: (.0000000000000000000000000000...)
MonitorMode: (0...............................) Not Monitor Mode
Flags: 0 (0x0)
PhyType: 802.11g
Channel: 1, Center Frequency: 2412 MHz
lRSSI: -49 dBm
Rate: 67.5 Mbps
TimeStamp: 08/06/2011, 02:18:22.207599 UTC
- FrameControl: Version 0,Data, Data, F.....P(0x4208)
Version: (..............00) 0
Type: (............10..) Data
SubType: (........0000....) Data
DS: (......10........) DS to STA via AP
MoreFrag: (.....0..........) No
Retry: (....0...........) No
PowerMgt: (...0............) Active Mode
MoreData: (..0.............) No
ProtectedFrame: (.1..............) Yes
Order: (0...............) Unordered
Duration: 48 (0x30)
DA: 1C659D CA2550
BSSID: Novatel Wireless, Inc. 04C0AF
SA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 1770
FragmentNumber: (............0000) 0
SequenceNumber: (011011101010....) 1770
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
Address: (1010101.) SNAP(Sub-Network Access Protocol)
IG: (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
Address: (1010101.) SNAP(Sub-Network Access Protocol)
CR: (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
MMM: (000.....) 0
PF: (...0....) Poll Bit - No Response Solicited
MM: (....00..)
Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
OrganizationCode: XEROX CORPORATION, 0(0x0000)
EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=140.90.200.23, Dest = 192.168.1.2, Next Protocol = TCP, Packet ID = 11489, Total IP Length = 1222
- Versions: IPv4, Internet Protocol; Header Length = 20
Version: (0100....) IPv4, Internet Protocol
HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
DSCP: (000000..) Differentiated services codepoint 0
ECT: (......0.) ECN-Capable Transport not set
CE: (.......0) ECN-CE not set
TotalLength: 1222 (0x4C6)
Identification: 11489 (0x2CE1)
- FragmentFlags: 16384 (0x4000)
Reserved: (0...............)
DF: (.1..............) Do not fragment
MF: (..0.............) This is the last fragment
Offset: (...0000000000000) 0
TimeToLive: 45 (0x2D)
NextProtocol: TCP, 6(0x6)
Checksum: 1589 (0x635)
SourceAddress: 140.90.200.23
DestinationAddress: 192.168.1.2
- Tcp: [Segment Lost]Flags=...AP..., SrcPort=HTTP(80), DstPort=51476, PayloadLen=1182, Seq=1406611919 - 1406613101, Ack=1149862799, Win=14 (scale factor 0x9) = 7168
***** THIS SHOWS UP IN THE 'TCP Segment Lost' GUI column.
SrcPort: HTTP(80)
DstPort: 51476
SequenceNumber: 1406611919 (0x53D731CF)
AcknowledgementNumber: 1149862799 (0x4489838F)
- DataOffset: 80 (0x50)
DataOffset: (0101....) 20 bytes
Reserved: (....000.)
NS: (.......0) Nonce Sum not significant
- Flags: ...AP...
CWR: (0.......) CWR not significant
ECE: (.0......) ECN-Echo not significant
Urgent: (..0.....) Not Urgent Data
Ack: (...1....) Acknowledgement field significant
Push: (....1...) Push Function
Reset: (.....0..) No Reset
Syn: (......0.) Not Synchronize sequence numbers
Fin: (.......0) Not End of data
Window: 14 (scale factor 0x9) = 7168
Checksum: 0x3239, Good
UrgentPointer: 0 (0x0)
TCPPayload: SourcePort = 80, DestinationPort = 51476
- Http: HTTP Payload, URL: /GIFS/ECIR.JPG
- payload: HttpContentType = NetmonNull
HTTPPayloadLine: ...
3277 {TCP:494, IPv4:481} 8:18:22 PM 8/5/2011 116 iexplore.exe 0xd94 TCP 0x1 Connected Good 192.168.1.2 140.90.200.23 TCP:Flags=...A...., SrcPort=51476, DstPort=HTTP(80), PayloadLen=0, Seq=1149862799, Ack=1406608999, Win=4380 (scale factor 0x2) = 17520
0x1, Seq=1149862799, Ack=1406608999,
3278 {TCP:494, IPv4:481} 8:18:24 PM 8/5/2011 104 iexplore.exe 0xd94 TCP 0x1 Disconnected Good 192.168.1.2 140.90.200.23 TCP:Flags=...A.R.., SrcPort=51476, DstPort=HTTP(80), PayloadLen=0, Seq=1149862799, Ack=1406608999, Win=0 (scale factor 0x2) = 0
0x1, Seq=1149862799, Ack=1406608999,
Lately it hasn't been occuring. I just tried forcing it to fail, but I can't,
even using the same methods I used before to make it fail most of the time,
both the GOES URLs and your site, so all I have now are the traces when it DID fail.
I use the GOES IR URL daily, and, so far, it's worked every time the past few weeks
(almost since this original post).
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
OK, it failed again yesterday. Here's detail from NETMON including entries proir. #11104 is the detected failure.
Have to do this post in multiple entries due to character size restriction:
11097 {DNS:734, UDP:175, IPv4:9} 7:02:15 AM 8/24/2011 127 DNS 0x1 192.168.1.2 8.8.8.8 DNS:QueryId = 0x355C, QUERY (Standard query), Query for www.goes.noaa.gov of type Host Addr on class Internet
11098 {DNS:734, UDP:175, IPv4:9} 7:02:15 AM 8/24/2011 247 DNS 0x2 8.8.8.8 192.168.1.2 DNS:QueryId = 0x355C, QUERY (Standard query), Response - Success, 129.15.96.23, 140.90.33.23 ...
11099 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 116 iexplore.exe 0x598 TCP 0x1 Half Connected Good 192.168.1.2 129.15.96.23 Flags=......S., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806479952, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192 TCP:Flags=......S., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806479952, Ack=0, Win=8192 ( Negotiating scale factor 0x2 ) = 8192
11100 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 116 iexplore.exe 0x598 TCP 0x2 Connected Good 129.15.96.23 192.168.1.2 Flags=...A..S., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795654, Ack=3806479953, Win=5840 ( Negotiated scale factor 0x9 ) = 2990080 TCP:Flags=...A..S., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795654, Ack=3806479953, Win=5840 ( Negotiated scale factor 0x9 ) = 2990080
11101 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 104 iexplore.exe 0x598 TCP 0x1 Connected Good 192.168.1.2 129.15.96.23 Flags=...A...., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806479953, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520 TCP:Flags=...A...., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806479953, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520
11102 {HTTP:737, TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 639 iexplore.exe Request, GET /GIFS/ECIR.JPG 0x598 HTTP 0x1 Connected Good 192.168.1.2 129.15.96.23 Flags=...AP..., SrcPort=49472, DstPort=HTTP(80), PayloadLen=535, Seq=3806479953 - 3806480488, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520 HTTP:Request, GET /GIFS/ECIR.JPG
Frame: Number = 11102, Captured Frame Length = 639, MediaType = WiFi
- WiFi: [Unencrypted Data] .T....., (I)
- MetaData:
Version: 2 (0x2)
Length: 32 (0x20)
- OpMode: Extensible Station Mode
StationMode: (...............................0) Not Station Mode
APMode: (..............................0.) Not AP Mode
ExtensibleStationMode: (.............................1..) Extensible Station Mode
Unused: (.0000000000000000000000000000...)
MonitorMode: (0...............................) Not Monitor Mode
Flags: 4294967295 (0xFFFFFFFF)
RemData: Outbound
TimeStamp: 08/24/2011, 13:02:15.555461 UTC
- FrameControl: Version 0,Data, Data, .T.....(0x108)
Version: (..............00) 0
Type: (............10..) Data
SubType: (........0000....) Data
DS: (......01........) STA to DS via AP
MoreFrag: (.....0..........) No
Retry: (....0...........) No
PowerMgt: (...0............) Active Mode
MoreData: (..0.............) No
ProtectedFrame: (.0..............) No
Order: (0...............) Unordered
Duration: 32768 (0x8000)
BSSID: Novatel Wireless, Inc. 04C0AF
SA: 1C659D CA2550
DA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 0
FragmentNumber: (............0000) 0
SequenceNumber: (000000000000....) 0
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
Address: (1010101.) SNAP(Sub-Network Access Protocol)
IG: (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
Address: (1010101.) SNAP(Sub-Network Access Protocol)
CR: (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
MMM: (000.....) 0
PF: (...0....) Poll Bit - No Response Solicited
MM: (....00..)
Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
OrganizationCode: XEROX CORPORATION, 0(0x0000)
EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=192.168.1.2, Dest = 129.15.96.23, Next Protocol = TCP, Packet ID = 4638, Total IP Length = 575
- Versions: IPv4, Internet Protocol; Header Length = 20
Version: (0100....) IPv4, Internet Protocol
HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
DSCP: (000000..) Differentiated services codepoint 0
ECT: (......0.) ECN-Capable Transport not set
CE: (.......0) ECN-CE not set
TotalLength: 575 (0x23F)
Identification: 4638 (0x121E)
- FragmentFlags: 16384 (0x4000)
Reserved: (0...............)
DF: (.1..............) Do not fragment
MF: (..0.............) This is the last fragment
Offset: (...0000000000000) 0
TimeToLive: 128 (0x80)
NextProtocol: TCP, 6(0x6)
Checksum: 17354 (0x43CA)
SourceAddress: 192.168.1.2
DestinationAddress: 129.15.96.23
- Tcp: Flags=...AP..., SrcPort=49472, DstPort=HTTP(80), PayloadLen=535, Seq=3806479953 - 3806480488, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520
SrcPort: 49472
DstPort: HTTP(80)
SequenceNumber: 3806479953 (0xE2E24651)
AcknowledgementNumber: 3370795655 (0xC8EA4287)
- DataOffset: 80 (0x50)
DataOffset: (0101....) 20 bytes
Reserved: (....000.)
NS: (.......0) Nonce Sum not significant
- Flags: ...AP...
CWR: (0.......) CWR not significant
ECE: (.0......) ECN-Echo not significant
Urgent: (..0.....) Not Urgent Data
Ack: (...1....) Acknowledgement field significant
Push: (....1...) Push Function
Reset: (.....0..) No Reset
Syn: (......0.) Not Synchronize sequence numbers
Fin: (.......0) Not End of data
Window: 4380 (scale factor 0x2) = 17520
Checksum: 0x448E, Good
UrgentPointer: 0 (0x0)
TCPPayload: SourcePort = 49472, DestinationPort = 80
- Http: Request, GET /GIFS/ECIR.JPG
Command: GET
- URI: /GIFS/ECIR.JPG
Location: /GIFS/ECIR.JPG
ProtocolVersion: HTTP/1.1
Accept: image/jpeg, application/x-ms-application, image/gif, application/xaml+xml, image/pjpeg, application/x-ms-xbap, application/x-shockwave-flash, */*
Accept-Language: en-US
UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; CMNTDF; BRI/1)
Accept-Encoding: gzip, deflate
If-Modified-Since: Tue, 23 Aug 2011 12:05:22 GMT; length=53589
Host: www.goes.noaa.gov
Connection: Keep-Alive
HeaderEnd: CRLF
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11103 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 104 iexplore.exe 0x598 TCP 0x2 Connected Good 129.15.96.23 192.168.1.2 Flags=...A...., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795655, Ack=3806480488, Win=14 (scale factor 0x9) = 7168 TCP:Flags=...A...., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795655, Ack=3806480488, Win=14 (scale factor 0x9) = 7168
Frame: Number = 11103, Captured Frame Length = 104, MediaType = WiFi
- WiFi: [Unencrypted Data] F.....P, (I) RSSI = -51 dBm, Rate = 67.5 Mbps
- MetaData: RSSI = -51 dBm, Rate = 67.5 Mbps
Version: 2 (0x2)
Length: 32 (0x20)
- OpMode: Extensible Station Mode
StationMode: (...............................0) Not Station Mode
APMode: (..............................0.) Not AP Mode
ExtensibleStationMode: (.............................1..) Extensible Station Mode
Unused: (.0000000000000000000000000000...)
MonitorMode: (0...............................) Not Monitor Mode
Flags: 0 (0x0)
PhyType: 802.11g
Channel: 2, Center Frequency: 2417 MHz
lRSSI: -51 dBm
Rate: 67.5 Mbps
TimeStamp: 08/24/2011, 13:02:15.623759 UTC
- FrameControl: Version 0,Data, Data, F.....P(0x4208)
Version: (..............00) 0
Type: (............10..) Data
SubType: (........0000....) Data
DS: (......10........) DS to STA via AP
MoreFrag: (.....0..........) No
Retry: (....0...........) No
PowerMgt: (...0............) Active Mode
MoreData: (..0.............) No
ProtectedFrame: (.1..............) Yes
Order: (0...............) Unordered
Duration: 48 (0x30)
DA: 1C659D CA2550
BSSID: Novatel Wireless, Inc. 04C0AF
SA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 2338
FragmentNumber: (............0000) 0
SequenceNumber: (100100100010....) 2338
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
Address: (1010101.) SNAP(Sub-Network Access Protocol)
IG: (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
Address: (1010101.) SNAP(Sub-Network Access Protocol)
CR: (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
MMM: (000.....) 0
PF: (...0....) Poll Bit - No Response Solicited
MM: (....00..)
Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
OrganizationCode: XEROX CORPORATION, 0(0x0000)
EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=129.15.96.23, Dest = 192.168.1.2, Next Protocol = TCP, Packet ID = 62246, Total IP Length = 40
- Versions: IPv4, Internet Protocol; Header Length = 20
Version: (0100....) IPv4, Internet Protocol
HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
DSCP: (000000..) Differentiated services codepoint 0
ECT: (......0.) ECN-Capable Transport not set
CE: (.......0) ECN-CE not set
TotalLength: 40 (0x28)
Identification: 62246 (0xF326)
- FragmentFlags: 16384 (0x4000)
Reserved: (0...............)
DF: (.1..............) Do not fragment
MF: (..0.............) This is the last fragment
Offset: (...0000000000000) 0
TimeToLive: 46 (0x2E)
NextProtocol: TCP, 6(0x6)
Checksum: 46808 (0xB6D8)
SourceAddress: 129.15.96.23
DestinationAddress: 192.168.1.2
- Tcp: Flags=...A...., SrcPort=HTTP(80), DstPort=49472, PayloadLen=0, Seq=3370795655, Ack=3806480488, Win=14 (scale factor 0x9) = 7168
SrcPort: HTTP(80)
DstPort: 49472
SequenceNumber: 3370795655 (0xC8EA4287)
AcknowledgementNumber: 3806480488 (0xE2E24868)
- DataOffset: 80 (0x50)
DataOffset: (0101....) 20 bytes
Reserved: (....000.)
NS: (.......0) Nonce Sum not significant
- Flags: ...A....
CWR: (0.......) CWR not significant
ECE: (.0......) ECN-Echo not significant
Urgent: (..0.....) Not Urgent Data
Ack: (...1....) Acknowledgement field significant
Push: (....0...) No Push Function
Reset: (.....0..) No Reset
Syn: (......0.) Not Synchronize sequence numbers
Fin: (.......0) Not End of data
Window: 14 (scale factor 0x9) = 7168
Checksum: 0x14A8, Good
UrgentPointer: 0 (0x0)
11104 {HTTP:737, TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 1286 iexplore.exe HTTP Payload, URL: /GIFS/ECIR.JPG 0x598 HTTP 0x2 Connected Good 0x1 129.15.96.23 192.168.1.2 [Segment Lost]Flags=...AP..., SrcPort=HTTP(80), DstPort=49472, PayloadLen=1182, Seq=3370798575 - 3370799757, Ack=3806480488, Win=14 (scale factor 0x9) = 7168 HTTP:HTTP Payload, URL: /GIFS/ECIR.JPG
Frame: Number = 11104, Captured Frame Length = 1286, MediaType = WiFi
- WiFi: [Unencrypted Data] F.....P, (I) RSSI = -51 dBm, Rate = 67.5 Mbps
- MetaData: RSSI = -51 dBm, Rate = 67.5 Mbps
Version: 2 (0x2)
Length: 32 (0x20)
- OpMode: Extensible Station Mode
StationMode: (...............................0) Not Station Mode
APMode: (..............................0.) Not AP Mode
ExtensibleStationMode: (.............................1..) Extensible Station Mode
Unused: (.0000000000000000000000000000...)
MonitorMode: (0...............................) Not Monitor Mode
Flags: 0 (0x0)
PhyType: 802.11g
Channel: 2, Center Frequency: 2417 MHz
lRSSI: -51 dBm
Rate: 67.5 Mbps
TimeStamp: 08/24/2011, 13:02:15.626528 UTC
- FrameControl: Version 0,Data, Data, F.....P(0x4208)
Version: (..............00) 0
Type: (............10..) Data
SubType: (........0000....) Data
DS: (......10........) DS to STA via AP
MoreFrag: (.....0..........) No
Retry: (....0...........) No
PowerMgt: (...0............) Active Mode
MoreData: (..0.............) No
ProtectedFrame: (.1..............) Yes
Order: (0...............) Unordered
Duration: 48 (0x30)
DA: 1C659D CA2550
BSSID: Novatel Wireless, Inc. 04C0AF
SA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 2339
FragmentNumber: (............0000) 0
SequenceNumber: (100100100011....) 2339
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
Address: (1010101.) SNAP(Sub-Network Access Protocol)
IG: (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
Address: (1010101.) SNAP(Sub-Network Access Protocol)
CR: (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
MMM: (000.....) 0
PF: (...0....) Poll Bit - No Response Solicited
MM: (....00..)
Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
OrganizationCode: XEROX CORPORATION, 0(0x0000)
EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=129.15.96.23, Dest = 192.168.1.2, Next Protocol = TCP, Packet ID = 62249, Total IP Length = 1222
- Versions: IPv4, Internet Protocol; Header Length = 20
Version: (0100....) IPv4, Internet Protocol
HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
DSCP: (000000..) Differentiated services codepoint 0
ECT: (......0.) ECN-Capable Transport not set
CE: (.......0) ECN-CE not set
TotalLength: 1222 (0x4C6)
Identification: 62249 (0xF329)
- FragmentFlags: 16384 (0x4000)
Reserved: (0...............)
DF: (.1..............) Do not fragment
MF: (..0.............) This is the last fragment
Offset: (...0000000000000) 0
TimeToLive: 46 (0x2E)
NextProtocol: TCP, 6(0x6)
Checksum: 45623 (0xB237)
SourceAddress: 129.15.96.23
DestinationAddress: 192.168.1.2
- Tcp: [Segment Lost]Flags=...AP..., SrcPort=HTTP(80), DstPort=49472, PayloadLen=1182, Seq=3370798575 - 3370799757, Ack=3806480488, Win=14 (scale factor 0x9) = 7168
SrcPort: HTTP(80)
DstPort: 49472
SequenceNumber: 3370798575 (0xC8EA4DEF)
AcknowledgementNumber: 3806480488 (0xE2E24868)
- DataOffset: 80 (0x50)
DataOffset: (0101....) 20 bytes
Reserved: (....000.)
NS: (.......0) Nonce Sum not significant
- Flags: ...AP...
CWR: (0.......) CWR not significant
ECE: (.0......) ECN-Echo not significant
Urgent: (..0.....) Not Urgent Data
Ack: (...1....) Acknowledgement field significant
Push: (....1...) Push Function
Reset: (.....0..) No Reset
Syn: (......0.) Not Synchronize sequence numbers
Fin: (.......0) Not End of data
Window: 14 (scale factor 0x9) = 7168
Checksum: 0xD681, Good
UrgentPointer: 0 (0x0)
TCPPayload: SourcePort = 80, DestinationPort = 49472
- Http: HTTP Payload, URL: /GIFS/ECIR.JPG
- payload: HttpContentType = NetmonNull
HTTPPayloadLine: 4ïücvÖ#8íÒª×wªx!fÕ.î Ô-`µ’whð˜URÇT1Ç ªsxXLdß«Ç(Ü’¤YVú‘ÈèGZ
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11105 {TCP:736, IPv4:735} 7:02:15 AM 8/24/2011 116 iexplore.exe 0x598 TCP 0x1 Connected Good 192.168.1.2 129.15.96.23 Flags=...A...., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806480488, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520 TCP:Flags=...A...., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806480488, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520
Frame: Number = 11105, Captured Frame Length = 116, MediaType = WiFi
- WiFi: [Unencrypted Data] .T....., (I)
- MetaData:
Version: 2 (0x2)
Length: 32 (0x20)
- OpMode: Extensible Station Mode
StationMode: (...............................0) Not Station Mode
APMode: (..............................0.) Not AP Mode
ExtensibleStationMode: (.............................1..) Extensible Station Mode
Unused: (.0000000000000000000000000000...)
MonitorMode: (0...............................) Not Monitor Mode
Flags: 4294967295 (0xFFFFFFFF)
RemData: Outbound
TimeStamp: 08/24/2011, 13:02:15.626649 UTC
- FrameControl: Version 0,Data, Data, .T.....(0x108)
Version: (..............00) 0
Type: (............10..) Data
SubType: (........0000....) Data
DS: (......01........) STA to DS via AP
MoreFrag: (.....0..........) No
Retry: (....0...........) No
PowerMgt: (...0............) Active Mode
MoreData: (..0.............) No
ProtectedFrame: (.0..............) No
Order: (0...............) Unordered
Duration: 32768 (0x8000)
BSSID: Novatel Wireless, Inc. 04C0AF
SA: 1C659D CA2550
DA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 0
FragmentNumber: (............0000) 0
SequenceNumber: (000000000000....) 0
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
Address: (1010101.) SNAP(Sub-Network Access Protocol)
IG: (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
Address: (1010101.) SNAP(Sub-Network Access Protocol)
CR: (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
MMM: (000.....) 0
PF: (...0....) Poll Bit - No Response Solicited
MM: (....00..)
Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
OrganizationCode: XEROX CORPORATION, 0(0x0000)
EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=192.168.1.2, Dest = 129.15.96.23, Next Protocol = TCP, Packet ID = 4639, Total IP Length = 52
- Versions: IPv4, Internet Protocol; Header Length = 20
Version: (0100....) IPv4, Internet Protocol
HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
DSCP: (000000..) Differentiated services codepoint 0
ECT: (......0.) ECN-Capable Transport not set
CE: (.......0) ECN-CE not set
TotalLength: 52 (0x34)
Identification: 4639 (0x121F)
- FragmentFlags: 16384 (0x4000)
Reserved: (0...............)
DF: (.1..............) Do not fragment
MF: (..0.............) This is the last fragment
Offset: (...0000000000000) 0
TimeToLive: 128 (0x80)
NextProtocol: TCP, 6(0x6)
Checksum: 17876 (0x45D4)
SourceAddress: 192.168.1.2
DestinationAddress: 129.15.96.23
- Tcp: Flags=...A...., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806480488, Ack=3370795655, Win=4380 (scale factor 0x2) = 17520
SrcPort: 49472
DstPort: HTTP(80)
SequenceNumber: 3806480488 (0xE2E24868)
AcknowledgementNumber: 3370795655 (0xC8EA4287)
- DataOffset: 128 (0x80)
DataOffset: (1000....) 32 bytes
Reserved: (....000.)
NS: (.......0) Nonce Sum not significant
- Flags: ...A....
CWR: (0.......) CWR not significant
ECE: (.0......) ECN-Echo not significant
Urgent: (..0.....) Not Urgent Data
Ack: (...1....) Acknowledgement field significant
Push: (....0...) No Push Function
Reset: (.....0..) No Reset
Syn: (......0.) Not Synchronize sequence numbers
Fin: (.......0) Not End of data
Window: 4380 (scale factor 0x2) = 17520
Checksum: 0x9B30, Good
UrgentPointer: 0 (0x0)
- TCPOptions:
- NoOption:
type: No operation. 1(0x1)
- NoOption:
type: No operation. 1(0x1)
- SACK:
type: SACK. 5(0x5)
Length: 10 (0xA)
- Blocks: -924168721~-924167539
LeftEdge: 3370798575 (0xC8EA4DEF)
RightEdge: 3370799757 (0xC8EA528D)
11106 {TCP:736, IPv4:735} 7:02:35 AM 8/24/2011 104 iexplore.exe 0x598 TCP 0x1 Disconnected Good 192.168.1.2 129.15.96.23 Flags=...A.R.., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806480488, Ack=3370795655, Win=0 (scale factor 0x2) = 0 TCP:Flags=...A.R.., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806480488, Ack=3370795655, Win=0 (scale factor 0x2) = 0
Frame: Number = 11106, Captured Frame Length = 104, MediaType = WiFi
- WiFi: [Unencrypted Data] .T....., (I)
- MetaData:
Version: 2 (0x2)
Length: 32 (0x20)
- OpMode: Extensible Station Mode
StationMode: (...............................0) Not Station Mode
APMode: (..............................0.) Not AP Mode
ExtensibleStationMode: (.............................1..) Extensible Station Mode
Unused: (.0000000000000000000000000000...)
MonitorMode: (0...............................) Not Monitor Mode
Flags: 4294967295 (0xFFFFFFFF)
RemData: Outbound
TimeStamp: 08/24/2011, 13:02:35.844371 UTC
- FrameControl: Version 0,Data, Data, .T.....(0x108)
Version: (..............00) 0
Type: (............10..) Data
SubType: (........0000....) Data
DS: (......01........) STA to DS via AP
MoreFrag: (.....0..........) No
Retry: (....0...........) No
PowerMgt: (...0............) Active Mode
MoreData: (..0.............) No
ProtectedFrame: (.0..............) No
Order: (0...............) Unordered
Duration: 32768 (0x8000)
BSSID: Novatel Wireless, Inc. 04C0AF
SA: 1C659D CA2550
DA: Novatel Wireless, Inc. 04C0AF
- SequenceControl: Sequence Number = 0
FragmentNumber: (............0000) 0
SequenceNumber: (000000000000....) 0
- LLC: Unnumbered(U) Frame, Command Frame, SSAP = SNAP(Sub-Network Access Protocol), DSAP = SNAP(Sub-Network Access Protocol)
- DSAP: SNAP(Sub-Network Access Protocol), Individual DSAP
Address: (1010101.) SNAP(Sub-Network Access Protocol)
IG: (.......0) Individual Address
- SSAP: SNAP(Sub-Network Access Protocol), Command
Address: (1010101.) SNAP(Sub-Network Access Protocol)
CR: (.......0) Command Frame
- Unnumbered: UI - Unnumbered Information
MMM: (000.....) 0
PF: (...0....) Poll Bit - No Response Solicited
MM: (....00..)
Type: (......11) Unnumbered(U) Frame
- Snap: EtherType = Internet IP (IPv4), OrgCode = XEROX CORPORATION
OrganizationCode: XEROX CORPORATION, 0(0x0000)
EtherType: Internet IP (IPv4), 2048(0x0800)
- Ipv4: src=192.168.1.2, Dest = 129.15.96.23, Next Protocol = TCP, Packet ID = 4640, Total IP Length = 40
- Versions: IPv4, Internet Protocol; Header Length = 20
Version: (0100....) IPv4, Internet Protocol
HeaderLength: (....0101) 20 bytes (0x5)
- DifferentiatedServicesField: DSCP: 0, ECN: 0
DSCP: (000000..) Differentiated services codepoint 0
ECT: (......0.) ECN-Capable Transport not set
CE: (.......0) ECN-CE not set
TotalLength: 40 (0x28)
Identification: 4640 (0x1220)
- FragmentFlags: 16384 (0x4000)
Reserved: (0...............)
DF: (.1..............) Do not fragment
MF: (..0.............) This is the last fragment
Offset: (...0000000000000) 0
TimeToLive: 128 (0x80)
NextProtocol: TCP, 6(0x6)
Checksum: 17887 (0x45DF)
SourceAddress: 192.168.1.2
DestinationAddress: 129.15.96.23
- Tcp: Flags=...A.R.., SrcPort=49472, DstPort=HTTP(80), PayloadLen=0, Seq=3806480488, Ack=3370795655, Win=0 (scale factor 0x2) = 0
SrcPort: 49472
DstPort: HTTP(80)
SequenceNumber: 3806480488 (0xE2E24868)
AcknowledgementNumber: 3370795655 (0xC8EA4287)
- DataOffset: 80 (0x50)
DataOffset: (0101....) 20 bytes
Reserved: (....000.)
NS: (.......0) Nonce Sum not significant
- Flags: ...A.R..
CWR: (0.......) CWR not significant
ECE: (.0......) ECN-Echo not significant
Urgent: (..0.....) Not Urgent Data
Ack: (...1....) Acknowledgement field significant
Push: (....0...) No Push Function
Reset: (.....1..) Reset
Syn: (......0.) Not Synchronize sequence numbers
Fin: (.......0) Not End of data
Window: 0 (scale factor 0x2) = 0
Checksum: 0x14B2, Good
UrgentPointer: 0 (0x0)