Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

ssh v4.2p1 IPv6 TCP checksum error

Subject: ssh v4.2p1 IPv6 TCP checksum error
Date: Fri, 11 Nov 2005 08:14:47 -0600
First post to this list...  This is LONG, and for that I apologize,but I'm out 
of ideas and I want to include sufficient detail.  I'll behugely grateful for 
any tips or pointers in the right direction.
I cannot get ssh to work over IPv6 between two IPv6-enabled FC4 hostson my home 
network, each configured with site-local IPv6 addresses.  Irepeatedly encounter 
TCP checksum errors (described in detail below).
Things I've tried so far:
*  kernel 2.6.13-1.1532_FC4 (server and client)*  kernel 2.6.13-1.1456_FC4 
(server and client)*  kernel 2.6.12-1.1390_FC4 (server and client)*  kernel 
2.6.12-1.1369_FC4 (server and client)*  ssh v4.2p1 rpm from fedora.redhat.com*  
ssh v4.2p1 source from openssh.org (Note 1)*  usagi telnetd/telnet/inetd source 
(Note 2)*  usagi telnetd/telnet/inetd rpm packages (Note 2)
Note 1:  I had to build openssh4.2p1 with the zlib check turned offbecause 
Fedora still uses version 1.2.2.2.  (Could this cause what I'mexperiencing?)
Note 2:  I tried using the usagi stuff just to have SOMETHING toverify whether 
TCP over IPv6 would work at all, but I had problemseither building or 
installing.  Building the source resulted in oneerror after another.  After 
fixing a half dozen or so, I finally gaveup.  Using the rpm, I found the 
binaries were so old (circa 2002),they were incompatible with my OS.  Finding 
an IPv6-enabled telnet isharder than I thought it'd be; I still don't have one.
What DOES work:  I can ping6 either host from the other host. traceroute6 works 
between the hosts.  Also, a simple IPv6 TCPclient-server application from 
Stephens "Unix Network Programming Vol.1" works just fine; the client issues a 
connect, and the serverresponds with the output of the "date" command.  This 
little programis important to me because it indicates that TCP over IPv6 works 
in atleast one instance, thus clearing the kernel of suspicion (I think).
Okay, on to the ssh problem...  The client in this case is an FC4x86_64 running 
2.6.13-1.1532_FC4, and the server is an FC4 i386 alsorunning 2.6.13-1.1532_FC4, 
although the problem occurs no matter whichsystem is client or server.  Both 
systems are running openssh4.2p1-fc4.1 from the Fedora updates-released repo.  
In the stuff thatfollows, the client and server can be identified by the last 4 
digitsof their respective IPv6 addresses as follows:
client: 9069server: 6dda
Basically, what's happening is the client and server execute the TCP3-way 
handshake in frames 3, 4, and 5.  Then in frame 6 the serverasserts its ssh 
protocol preference (protocol 2), to which the clientacks in frame 7.  In frame 
8 the trouble begins.  The client assertsthat it, too, can speak protocol 2, 
but that frame suffers a TCPchecksum error.  Frames 9, 10, 11, 13, 14, 15, 16, 
17, and 25  areretransmissions of frame 8, each bearing a checksum error.  
Oddly, the"incorrect" checksum value remains constant at 0x5d72, while 
the"should be" value is all over the map.  At frame 32 the server throwsup its 
arms in dismay and issues a FIN,ACK and closes the connection.
Capturing on eth0Frame 1 (86 bytes on wire, 86 bytes captured)    Arrival Time: 
Nov  9, 2005 20:46:29.682499000    Time delta from previous packet: 0.000000000 
seconds    Time since reference or first frame: 0.000000000 seconds    Frame 
Number: 1    Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols 
in frame: eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 
(00:50:8d:ef:90:69), Dst:IPv6-Neighbor-Discovery_ff:82:6d:da 
(33:33:ff:82:6d:da)    Destination: IPv6-Neighbor-Discovery_ff:82:6d:da 
(33:33:ff:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: ff02::1:ff82:6dda 
(ff02::1:ff82:6dda)Internet Control Message Protocol v6    Type: 135 (Neighbor 
solicitation)    Code: 0    Checksum: 0x8f61 [correct]    Target: 
fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)    ICMPv6 options        
Type: 1 (Source link-layer address)        Length: 8 bytes (1)        
Link-layer address: 00:50:8d:ef:90:69
Frame 2 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:29.682623000    Time delta from previous packet: 0.000124000 seconds    
Time since reference or first frame: 0.000124000 seconds    Frame Number: 2    
Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)    Destination address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)Internet Control Message Protocol v6    Type: 136 
(Neighbor advertisement)    Code: 0    Checksum: 0x3a90 [correct]    Flags: 
0x60000000        0... .... .... .... .... .... .... .... = Not router        
.1.. .... .... .... .... .... .... .... = Solicited        ..1. .... .... .... 
.... .... .... .... = Override    Target: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)    ICMPv6 options        Type: 2 (Target link-layer 
address)        Length: 8 bytes (1)        Link-layer address: 00:b0:d0:82:6d:da
Frame 3 (94 bytes on wire, 94 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:29.682638000    Time delta from previous packet: 0.000015000 seconds    
Time since reference or first frame: 0.000139000 seconds    Frame Number: 3    
Packet Length: 94 bytes    Capture Length: 94 bytes    Protocols in frame: 
eth:ipv6:tcpEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 40    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 0, Ack: 0, Len: 0    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 0    (relative 
sequence number)    Header length: 40 bytes    Flags: 0x0002 (SYN)        0... 
.... = Congestion Window Reduced (CWR): Not set        .0.. .... = ECN-Echo: 
Not set        ..0. .... = Urgent: Not set        ...0 .... = Acknowledgment: 
Not set        .... 0... = Push: Not set        .... .0.. = Reset: Not set      
  .... ..1. = Syn: Set        .... ...0 = Fin: Not set    Window size: 5760    
Checksum: 0x0446 [correct]    Options: (20 bytes)        Maximum segment size: 
1440 bytes        SACK permitted        Time stamp: tsval 1894413, tsecr 0      
  NOP        Window scale: 2 (multiply by 4)
Frame 4 (94 bytes on wire, 94 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:29.682754000    Time delta from previous packet: 0.000116000 seconds    
Time since reference or first frame: 0.000255000 seconds    Frame Number: 4    
Packet Length: 94 bytes    Capture Length: 94 bytes    Protocols in frame: 
eth:ipv6:tcpEthernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 40    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)    Destination address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)Transmission Control Protocol, Src Port: ssh (22), 
Dst Port: 41335(41335), Seq: 0, Ack: 1, Len: 0    Source port: ssh (22)    
Destination port: 41335 (41335)    Sequence number: 0    (relative sequence 
number)    Acknowledgement number: 1    (relative ack number)    Header length: 
40 bytes    Flags: 0x0012 (SYN, ACK)        0... .... = Congestion Window 
Reduced (CWR): Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = 
Urgent: Not set        ...1 .... = Acknowledgment: Set        .... 0... = Push: 
Not set        .... .0.. = Reset: Not set        .... ..1. = Syn: Set        
.... ...0 = Fin: Not set    Window size: 5712    Checksum: 0x99fe [correct]    
Options: (20 bytes)        Maximum segment size: 1440 bytes        SACK 
permitted        Time stamp: tsval 1142800, tsecr 1894413        NOP        
Window scale: 2 (multiply by 4)    SEQ/ACK analysis        This is an ACK to 
the segment in frame: 3        The RTT to ACK the segment was: 0.000116000 
seconds
Frame 5 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:29.682772000    Time delta from previous packet: 0.000018000 seconds    
Time since reference or first frame: 0.000273000 seconds    Frame Number: 5    
Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:tcpEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 1, Len: 0    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Acknowledgement number: 1    (relative ack number)    
Header length: 32 bytes    Flags: 0x0010 (ACK)        0... .... = Congestion 
Window Reduced (CWR): Not set        .0.. .... = ECN-Echo: Not set        ..0. 
.... = Urgent: Not set        ...1 .... = Acknowledgment: Set        .... 0... 
= Push: Not set        .... .0.. = Reset: Not set        .... ..0. = Syn: Not 
set        .... ...0 = Fin: Not set    Window size: 5760 (scaled)    Checksum: 
0xd960 [correct]    Options: (12 bytes)        NOP        NOP        Time 
stamp: tsval 1894414, tsecr 1142800    SEQ/ACK analysis        This is an ACK 
to the segment in frame: 4        The RTT to ACK the segment was: 0.000018000 
seconds
Frame 6 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:29.699957000    Time delta from previous packet: 0.017185000 seconds    
Time since reference or first frame: 0.017458000 seconds    Frame Number: 6    
Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)    Destination address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)Transmission Control Protocol, Src Port: ssh (22), 
Dst Port: 41335(41335), Seq: 1, Ack: 1, Len: 20    Source port: ssh (22)    
Destination port: 41335 (41335)    Sequence number: 1    (relative sequence 
number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 1    (relative ack number)    Header length: 32 bytes   
 Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5712 (scaled)    Checksum: 0x24a7 [correct]    Options: 
(12 bytes)        NOP        NOP        Time stamp: tsval 1142804, tsecr 
1894414SSH Protocol    Protocol: SSH-2.0-OpenSSH_4.2\n
Frame 7 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:29.710663000    Time delta from previous packet: 0.010706000 seconds    
Time since reference or first frame: 0.028164000 seconds    Frame Number: 7    
Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:tcpEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 0    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Acknowledgement number: 21    (relative ack number)    
Header length: 32 bytes    Flags: 0x0010 (ACK)        0... .... = Congestion 
Window Reduced (CWR): Not set        .0.. .... = ECN-Echo: Not set        ..0. 
.... = Urgent: Not set        ...1 .... = Acknowledgment: Set        .... 0... 
= Push: Not set        .... .0.. = Reset: Not set        .... ..0. = Syn: Not 
set        .... ...0 = Fin: Not set    Window size: 5760 (scaled)    Checksum: 
0xd941 [correct]    Options: (12 bytes)        NOP        NOP        Time 
stamp: tsval 1894421, tsecr 1142804    SEQ/ACK analysis        This is an ACK 
to the segment in frame: 6        The RTT to ACK the segment was: 0.010706000 
seconds
Frame 8 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:29.710788000    Time delta from previous packet: 0.000125000 seconds    
Time since reference or first frame: 0.028289000 seconds    Frame Number: 8    
Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0x2480]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1894421, tsecr 1142804SSH Protocol    Protocol: SSH-2.0-OpenSSH_4.2\n
Frame 9 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:29.914480000    Time delta from previous packet: 0.203692000 seconds    
Time since reference or first frame: 0.231981000 seconds    Frame Number: 9    
Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0x244d]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1894472, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 0.203692000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Overly large number 0x5353482d        Padding 
Length: 50        Key Exchange            Msg code: Unknown (46) (46)           
 Algorithms[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 10 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:30.322506000    Time delta from previous packet: 0.408026000 seconds    
Time since reference or first frame: 0.640007000 seconds    Frame Number: 10    
Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0x23e7]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1894574, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 0.611718000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Overly large number 0x5353482d        Padding 
Length: 50        Key Exchange            Msg code: Unknown (46) 
(46)[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 11 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:31.138557000    Time delta from previous packet: 0.816051000 seconds    
Time since reference or first frame: 1.456058000 seconds    Frame Number: 11    
Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0x231b]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1894778, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 1.427769000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Overly large number 0x5353482d        Padding 
Length: 50        Key Exchange            Msg code: Unknown (46) 
(46)[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 12 (60 bytes on wire, 60 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:32.085446000    Time delta from previous packet: 0.946889000 seconds    
Time since reference or first frame: 2.402947000 seconds    Frame Number: 12    
Packet Length: 60 bytes    Capture Length: 60 bytes    Protocols in frame: 
eth:arpEthernet II, Src: DellComp_60:3f:db (00:b0:d0:60:3f:db), Dst:Broadcast 
(ff:ff:ff:ff:ff:ff)    Destination: Broadcast (ff:ff:ff:ff:ff:ff)    Source: 
DellComp_60:3f:db (00:b0:d0:60:3f:db)    Type: ARP (0x0806)    Trailer: 
000000000000000000000000000000000000Address Resolution Protocol (request)    
Hardware type: Ethernet (0x0001)    Protocol type: IP (0x0800)    Hardware 
size: 6    Protocol size: 4    Opcode: request (0x0001)    Sender MAC address: 
DellComp_60:3f:db (00:b0:d0:60:3f:db)    Sender IP address: 192.168.1.1 
(192.168.1.1)    Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)    
Target IP address: 192.168.1.4 (192.168.1.4)
Frame 13 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:32.770679000    Time delta from previous packet: 0.685233000 seconds    
Time since reference or first frame: 3.088180000 seconds    Frame Number: 13    
Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0x2183]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1895186, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 3.059891000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Overly large number 0x5353482d        Padding 
Length: 50        Key Exchange            Msg code: Unknown (46) 
(46)[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 14 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:36.034868000    Time delta from previous packet: 3.264189000 seconds    
Time since reference or first frame: 6.352369000 seconds    Frame Number: 14    
Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0x1e53]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1896002, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 6.324080000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Encrypted Packet: 
5353482D322E302D4F70656E5353485F342E320A
Frame 15 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:42.563274000    Time delta from previous packet: 6.528406000 seconds    
Time since reference or first frame: 12.880775000 seconds    Frame Number: 15   
 Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0x17f3]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1897634, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 12.852486000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Encrypted Packet: 
5353482D322E302D4F70656E5353485F342E320A
Frame 16 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:46:55.620091000    Time delta from previous packet: 13.056817000 seconds    
Time since reference or first frame: 25.937592000 seconds    Frame Number: 16   
 Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0x0b33]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1900898, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 25.909303000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Encrypted Packet: 
5353482D322E302D4F70656E5353485F342E320A
Frame 17 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:47:21.733723000    Time delta from previous packet: 26.113632000 seconds    
Time since reference or first frame: 52.051224000 seconds    Frame Number: 17   
 Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0xf1b2]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1907426, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 52.022935000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Encrypted Packet: 
5353482D322E302D4F70656E5353485F342E320A
Frame 18 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:47:26.734031000    Time delta from previous packet: 5.000308000 seconds    
Time since reference or first frame: 57.051532000 seconds    Frame Number: 18   
 Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6    Type: 135 
(Neighbor solicitation)    Code: 0    Checksum: 0xbd34 [correct]    Target: 
fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)    ICMPv6 options        
Type: 1 (Source link-layer address)        Length: 8 bytes (1)        
Link-layer address: 00:50:8d:ef:90:69
Frame 19 (78 bytes on wire, 78 bytes captured)    Arrival Time: Nov  9, 2005 
20:47:26.734162000    Time delta from previous packet: 0.000131000 seconds    
Time since reference or first frame: 57.051663000 seconds    Frame Number: 19   
 Packet Length: 78 bytes    Capture Length: 78 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 24    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)    Destination address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6    Type: 136 
(Neighbor advertisement)    Code: 0    Checksum: 0x9be6 [correct]    Flags: 
0x40000000        0... .... .... .... .... .... .... .... = Not router        
.1.. .... .... .... .... .... .... .... = Solicited        ..0. .... .... .... 
.... .... .... .... = Not override    Target: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)
Frame 20 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:47:31.732963000    Time delta from previous packet: 4.998801000 seconds    
Time since reference or first frame: 62.050464000 seconds    Frame Number: 20   
 Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)    Destination address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6    Type: 135 
(Neighbor solicitation)    Code: 0    Checksum: 0xbdb4 [correct]    Target: 
fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)    ICMPv6 options        
Type: 1 (Source link-layer address)        Length: 8 bytes (1)        
Link-layer address: 00:b0:d0:82:6d:da
Frame 21 (78 bytes on wire, 78 bytes captured)    Arrival Time: Nov  9, 2005 
20:47:31.732998000    Time delta from previous packet: 0.000035000 seconds    
Time since reference or first frame: 62.050499000 seconds    Frame Number: 21   
 Packet Length: 78 bytes    Capture Length: 78 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 24    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)    Destination address: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6    Type: 136 
(Neighbor advertisement)    Code: 0    Checksum: 0xbcca [correct]    Flags: 
0x40000000        0... .... .... .... .... .... .... .... = Not router        
.1.. .... .... .... .... .... .... .... = Solicited        ..0. .... .... .... 
.... .... .... .... = Not override    Target: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)
Frame 22 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:47:36.730657000    Time delta from previous packet: 4.997659000 seconds    
Time since reference or first frame: 67.048158000 seconds    Frame Number: 22   
 Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)    Destination address: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6    Type: 135 
(Neighbor solicitation)    Code: 0    Checksum: 0xbdb4 [correct]    Target: 
fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)    ICMPv6 options        
Type: 1 (Source link-layer address)        Length: 8 bytes (1)        
Link-layer address: 00:50:8d:ef:90:69
Frame 23 (78 bytes on wire, 78 bytes captured)    Arrival Time: Nov  9, 2005 
20:47:36.730778000    Time delta from previous packet: 0.000121000 seconds    
Time since reference or first frame: 67.048279000 seconds    Frame Number: 23   
 Packet Length: 78 bytes    Capture Length: 78 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 24    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)    Destination address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6    Type: 136 
(Neighbor advertisement)    Code: 0    Checksum: 0x9c66 [correct]    Flags: 
0x40000000        0... .... .... .... .... .... .... .... = Not router        
.1.. .... .... .... .... .... .... .... = Solicited        ..0. .... .... .... 
.... .... .... .... = Not override    Target: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)
Frame 24 (110 bytes on wire, 110 bytes captured)    Arrival Time: Nov  9, 2005 
20:47:37.719072000    Time delta from previous packet: 0.988294000 seconds    
Time since reference or first frame: 68.036573000 seconds    Frame Number: 24   
 Packet Length: 110 bytes    Capture Length: 110 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:IPv6-Neighbor-Discovery_00:00:00:01 (33:33:00:00:00:01)    Destination: 
IPv6-Neighbor-Discovery_00:00:00:01 (33:33:00:00:00:01)    Source: 
AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: IPv6 (0x86dd)Internet Protocol 
Version 6    Version: 6    Traffic class: 0x00    Flowlabel: 0x00000    Payload 
length: 56    Next header: ICMPv6 (0x3a)    Hop limit: 255    Source address: 
fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)    Destination address: 
ff02::1 (ff02::1)Internet Control Message Protocol v6    Type: 134 (Router 
advertisement)    Code: 0    Checksum: 0xf25e [correct]    Cur hop limit: 64    
Flags: 0x00        0... .... = Not managed        .0.. .... = Not other        
..0. .... = Not Home Agent        ...0 0... = Router preference: Medium    
Router lifetime: 0    Reachable time: 0    Retrans time: 0    ICMPv6 options    
    Type: 3 (Prefix information)        Length: 32 bytes (4)        Prefix 
length: 64        Flags: 0xe0            1... .... = Onlink            .1.. 
.... = Auto            ..1. .... = Router Address            ...0 .... = Not 
site prefix        Valid lifetime: 0x00278d00        Preferred lifetime: 
0x00093a80        Prefix: fec0::    ICMPv6 options        Type: 1 (Source 
link-layer address)        Length: 8 bytes (1)        Link-layer address: 
00:50:8d:ef:90:69
Frame 25 (106 bytes on wire, 106 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:13.961000000    Time delta from previous packet: 36.241928000 seconds    
Time since reference or first frame: 104.278501000 seconds    Frame Number: 25  
  Packet Length: 106 bytes    Capture Length: 106 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 52    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 1    (relative 
sequence number)    Next sequence number: 21    (relative sequence number)    
Acknowledgement number: 21    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0018 (PSH, ACK)        0... .... = Congestion Window Reduced (CWR): 
Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: Not set 
       ...1 .... = Acknowledgment: Set        .... 1... = Push: Set        .... 
.0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...0 = Fin: 
Not set    Window size: 5760 (scaled)    Checksum: 0x5d72 [incorrect, should be 
0xbeb2]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1920482, tsecr 1142804    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) retransmission            The RTO for this segment 
was: 104.250212000 seconds            RTO based on delta from frame: 8SSH 
Protocol    SSH Version 2        Encrypted Packet: 
5353482D322E302D4F70656E5353485F342E320A
Frame 26 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:18.961294000    Time delta from previous packet: 5.000294000 seconds    
Time since reference or first frame: 109.278795000 seconds    Frame Number: 26  
  Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6    Type: 135 
(Neighbor solicitation)    Code: 0    Checksum: 0xbd34 [correct]    Target: 
fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)    ICMPv6 options        
Type: 1 (Source link-layer address)        Length: 8 bytes (1)        
Link-layer address: 00:50:8d:ef:90:69
Frame 27 (78 bytes on wire, 78 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:18.961423000    Time delta from previous packet: 0.000129000 seconds    
Time since reference or first frame: 109.278924000 seconds    Frame Number: 27  
  Packet Length: 78 bytes    Capture Length: 78 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 24    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)    Destination address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6    Type: 136 
(Neighbor advertisement)    Code: 0    Checksum: 0x9be6 [correct]    Flags: 
0x40000000        0... .... .... .... .... .... .... .... = Not router        
.1.. .... .... .... .... .... .... .... = Solicited        ..0. .... .... .... 
.... .... .... .... = Not override    Target: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)
Frame 28 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:23.958529000    Time delta from previous packet: 4.997106000 seconds    
Time since reference or first frame: 114.276030000 seconds    Frame Number: 28  
  Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)    Destination address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6    Type: 135 
(Neighbor solicitation)    Code: 0    Checksum: 0xbdb4 [correct]    Target: 
fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)    ICMPv6 options        
Type: 1 (Source link-layer address)        Length: 8 bytes (1)        
Link-layer address: 00:b0:d0:82:6d:da
Frame 29 (78 bytes on wire, 78 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:23.958562000    Time delta from previous packet: 0.000033000 seconds    
Time since reference or first frame: 114.276063000 seconds    Frame Number: 29  
  Packet Length: 78 bytes    Capture Length: 78 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 24    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)    Destination address: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6    Type: 136 
(Neighbor advertisement)    Code: 0    Checksum: 0xbcca [correct]    Flags: 
0x40000000        0... .... .... .... .... .... .... .... = Not router        
.1.. .... .... .... .... .... .... .... = Solicited        ..0. .... .... .... 
.... .... .... .... = Not override    Target: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)
Frame 30 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:28.957920000    Time delta from previous packet: 4.999358000 seconds    
Time since reference or first frame: 119.275421000 seconds    Frame Number: 30  
  Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)    Destination address: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6    Type: 135 
(Neighbor solicitation)    Code: 0    Checksum: 0xbdb4 [correct]    Target: 
fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)    ICMPv6 options        
Type: 1 (Source link-layer address)        Length: 8 bytes (1)        
Link-layer address: 00:50:8d:ef:90:69
Frame 31 (78 bytes on wire, 78 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:28.958044000    Time delta from previous packet: 0.000124000 seconds    
Time since reference or first frame: 119.275545000 seconds    Frame Number: 31  
  Packet Length: 78 bytes    Capture Length: 78 bytes    Protocols in frame: 
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 24    Next header: ICMPv6 (0x3a)    Hop 
limit: 255    Source address: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)    Destination address: fe80::250:8dff:feef:9069 
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6    Type: 136 
(Neighbor advertisement)    Code: 0    Checksum: 0x9c66 [correct]    Flags: 
0x40000000        0... .... .... .... .... .... .... .... = Not router        
.1.. .... .... .... .... .... .... .... = Solicited        ..0. .... .... .... 
.... .... .... .... = Not override    Target: fe80::2b0:d0ff:fe82:6dda 
(fe80::2b0:d0ff:fe82:6dda)
Frame 32 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:29.711575000    Time delta from previous packet: 0.753531000 seconds    
Time since reference or first frame: 120.029076000 seconds    Frame Number: 32  
  Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:tcpEthernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)    Destination address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)Transmission Control Protocol, Src Port: ssh (22), 
Dst Port: 41335(41335), Seq: 21, Ack: 1, Len: 0    Source port: ssh (22)    
Destination port: 41335 (41335)    Sequence number: 21    (relative sequence 
number)    Acknowledgement number: 1    (relative ack number)    Header length: 
32 bytes    Flags: 0x0011 (FIN, ACK)        0... .... = Congestion Window 
Reduced (CWR): Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = 
Urgent: Not set        ...1 .... = Acknowledgment: Set        .... 0... = Push: 
Not set        .... .0.. = Reset: Not set        .... ..0. = Syn: Not set       
 .... ...1 = Fin: Set    Window size: 5712 (scaled)    Checksum: 0x641c 
[correct]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1172804, tsecr 1894421    SEQ/ACK analysis
Frame 33 (798 bytes on wire, 798 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:29.712283000    Time delta from previous packet: 0.000708000 seconds    
Time since reference or first frame: 120.029784000 seconds    Frame Number: 33  
  Packet Length: 798 bytes    Capture Length: 798 bytes    Protocols in frame: 
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 744    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 21, Ack: 22, Len: 712    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 21    (relative 
sequence number)    Next sequence number: 733    (relative sequence number)    
Acknowledgement number: 22    (relative ack number)    Header length: 32 bytes  
  Flags: 0x0019 (FIN, PSH, ACK)        0... .... = Congestion Window Reduced 
(CWR): Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = Urgent: 
Not set        ...1 .... = Acknowledgment: Set        .... 1... = Push: Set     
   .... .0.. = Reset: Not set        .... ..0. = Syn: Not set        .... ...1 
= Fin: Set    Window size: 5760 (scaled)    Checksum: 0x6026 [incorrect, should 
be 0xe52f]    Options: (12 bytes)        NOP        NOP        Time stamp: 
tsval 1924419, tsecr 1172804
 SEQ/ACK analysis        This is an ACK to the segment in frame: 32        The 
RTT to ACK the segment was: 0.000708000 secondsSSH Protocol    SSH Version 2    
    Encrypted Packet: 000002C405142E266F9276ADB32C4205071FA4A4D0500000...
Frame 34 (86 bytes on wire, 86 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:29.915155000    Time delta from previous packet: 0.202872000 seconds    
Time since reference or first frame: 120.232656000 seconds    Frame Number: 34  
  Packet Length: 86 bytes    Capture Length: 86 bytes    Protocols in frame: 
eth:ipv6:tcpEthernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), 
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Destination: AbitComp_ef:90:69 
(00:50:8d:ef:90:69)    Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 32    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)    Destination address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)Transmission Control Protocol, Src Port: ssh (22), 
Dst Port: 41335(41335), Seq: 21, Ack: 1, Len: 0    Source port: ssh (22)    
Destination port: 41335 (41335)    Sequence number: 21    (relative sequence 
number)    Acknowledgement number: 1    (relative ack number)    Header length: 
32 bytes    Flags: 0x0011 (FIN, ACK)        0... .... = Congestion Window 
Reduced (CWR): Not set        .0.. .... = ECN-Echo: Not set        ..0. .... = 
Urgent: Not set        ...1 .... = Acknowledgment: Set        .... 0... = Push: 
Not set        .... .0.. = Reset: Not set        .... ..0. = Syn: Not set       
 .... ...1 = Fin: Set    Window size: 5712 (scaled)    Checksum: 0x63e9 
[correct]    Options: (12 bytes)        NOP        NOP        Time stamp: tsval 
1172855, tsecr 1894421    SEQ/ACK analysis        TCP Analysis Flags            
This frame is a (suspected) out-of-order segment
Frame 35 (98 bytes on wire, 98 bytes captured)    Arrival Time: Nov  9, 2005 
20:48:29.915185000    Time delta from previous packet: 0.000030000 seconds    
Time since reference or first frame: 120.232686000 seconds    Frame Number: 35  
  Packet Length: 98 bytes    Capture Length: 98 bytes    Protocols in frame: 
eth:ipv6:tcpEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), 
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da)    Destination: DellComp_82:6d:da 
(00:b0:d0:82:6d:da)    Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)    Type: 
IPv6 (0x86dd)Internet Protocol Version 6    Version: 6    Traffic class: 0x00   
 Flowlabel: 0x00000    Payload length: 44    Next header: TCP (0x06)    Hop 
limit: 64    Source address: fec0::250:8dff:feef:9069 
(fec0::250:8dff:feef:9069)    Destination address: fec0::2b0:d0ff:fe82:6dda 
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335 
(41335), Dst Port: ssh(22), Seq: 734, Ack: 22, Len: 0    Source port: 41335 
(41335)    Destination port: ssh (22)    Sequence number: 734    (relative 
sequence number)    Acknowledgement number: 22    (relative ack number)    
Header length: 44 bytes    Flags: 0x0010 (ACK)        0... .... = Congestion 
Window Reduced (CWR): Not set        .0.. .... = ECN-Echo: Not set        ..0. 
.... = Urgent: Not set        ...1 .... = Acknowledgment: Set        .... 0... 
= Push: Not set        .... .0.. = Reset: Not set        .... ..0. = Syn: Not 
set        .... ...0 = Fin: Not set    Window size: 5760 (scaled)    Checksum: 
0xc0d2 [correct]    Options: (24 bytes)        NOP        NOP        Time 
stamp: tsval 1924470, tsecr 1172855        NOP        NOP        SACK: 21-22    
        left edge = 21 (relative)            right edge = 22 (relative)

<Prev in Thread] Current Thread [Next in Thread>