Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | ssh v4.2p1 IPv6 TCP checksum error |
|---|---|
| Date: | Fri, 11 Nov 2005 08:14:47 -0600 |
First post to this list... This is LONG, and for that I apologize,but I'm out
of ideas and I want to include sufficient detail. I'll behugely grateful for
any tips or pointers in the right direction.
I cannot get ssh to work over IPv6 between two IPv6-enabled FC4 hostson my home
network, each configured with site-local IPv6 addresses. Irepeatedly encounter
TCP checksum errors (described in detail below).
Things I've tried so far:
* kernel 2.6.13-1.1532_FC4 (server and client)* kernel 2.6.13-1.1456_FC4
(server and client)* kernel 2.6.12-1.1390_FC4 (server and client)* kernel
2.6.12-1.1369_FC4 (server and client)* ssh v4.2p1 rpm from fedora.redhat.com*
ssh v4.2p1 source from openssh.org (Note 1)* usagi telnetd/telnet/inetd source
(Note 2)* usagi telnetd/telnet/inetd rpm packages (Note 2)
Note 1: I had to build openssh4.2p1 with the zlib check turned offbecause
Fedora still uses version 1.2.2.2. (Could this cause what I'mexperiencing?)
Note 2: I tried using the usagi stuff just to have SOMETHING toverify whether
TCP over IPv6 would work at all, but I had problemseither building or
installing. Building the source resulted in oneerror after another. After
fixing a half dozen or so, I finally gaveup. Using the rpm, I found the
binaries were so old (circa 2002),they were incompatible with my OS. Finding
an IPv6-enabled telnet isharder than I thought it'd be; I still don't have one.
What DOES work: I can ping6 either host from the other host. traceroute6 works
between the hosts. Also, a simple IPv6 TCPclient-server application from
Stephens "Unix Network Programming Vol.1" works just fine; the client issues a
connect, and the serverresponds with the output of the "date" command. This
little programis important to me because it indicates that TCP over IPv6 works
in atleast one instance, thus clearing the kernel of suspicion (I think).
Okay, on to the ssh problem... The client in this case is an FC4x86_64 running
2.6.13-1.1532_FC4, and the server is an FC4 i386 alsorunning 2.6.13-1.1532_FC4,
although the problem occurs no matter whichsystem is client or server. Both
systems are running openssh4.2p1-fc4.1 from the Fedora updates-released repo.
In the stuff thatfollows, the client and server can be identified by the last 4
digitsof their respective IPv6 addresses as follows:
client: 9069server: 6dda
Basically, what's happening is the client and server execute the TCP3-way
handshake in frames 3, 4, and 5. Then in frame 6 the serverasserts its ssh
protocol preference (protocol 2), to which the clientacks in frame 7. In frame
8 the trouble begins. The client assertsthat it, too, can speak protocol 2,
but that frame suffers a TCPchecksum error. Frames 9, 10, 11, 13, 14, 15, 16,
17, and 25 areretransmissions of frame 8, each bearing a checksum error.
Oddly, the"incorrect" checksum value remains constant at 0x5d72, while
the"should be" value is all over the map. At frame 32 the server throwsup its
arms in dismay and issues a FIN,ACK and closes the connection.
Capturing on eth0Frame 1 (86 bytes on wire, 86 bytes captured) Arrival Time:
Nov 9, 2005 20:46:29.682499000 Time delta from previous packet: 0.000000000
seconds Time since reference or first frame: 0.000000000 seconds Frame
Number: 1 Packet Length: 86 bytes Capture Length: 86 bytes Protocols
in frame: eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69
(00:50:8d:ef:90:69), Dst:IPv6-Neighbor-Discovery_ff:82:6d:da
(33:33:ff:82:6d:da) Destination: IPv6-Neighbor-Discovery_ff:82:6d:da
(33:33:ff:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: ff02::1:ff82:6dda
(ff02::1:ff82:6dda)Internet Control Message Protocol v6 Type: 135 (Neighbor
solicitation) Code: 0 Checksum: 0x8f61 [correct] Target:
fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda) ICMPv6 options
Type: 1 (Source link-layer address) Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 2 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:46:29.682623000 Time delta from previous packet: 0.000124000 seconds
Time since reference or first frame: 0.000124000 seconds Frame Number: 2
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda) Destination address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069)Internet Control Message Protocol v6 Type: 136
(Neighbor advertisement) Code: 0 Checksum: 0x3a90 [correct] Flags:
0x60000000 0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited ..1. .... .... ....
.... .... .... .... = Override Target: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda) ICMPv6 options Type: 2 (Target link-layer
address) Length: 8 bytes (1) Link-layer address: 00:b0:d0:82:6d:da
Frame 3 (94 bytes on wire, 94 bytes captured) Arrival Time: Nov 9, 2005
20:46:29.682638000 Time delta from previous packet: 0.000015000 seconds
Time since reference or first frame: 0.000139000 seconds Frame Number: 3
Packet Length: 94 bytes Capture Length: 94 bytes Protocols in frame:
eth:ipv6:tcpEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 40 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 0, Ack: 0, Len: 0 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 0 (relative
sequence number) Header length: 40 bytes Flags: 0x0002 (SYN) 0...
.... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo:
Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment:
Not set .... 0... = Push: Not set .... .0.. = Reset: Not set
.... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 5760
Checksum: 0x0446 [correct] Options: (20 bytes) Maximum segment size:
1440 bytes SACK permitted Time stamp: tsval 1894413, tsecr 0
NOP Window scale: 2 (multiply by 4)
Frame 4 (94 bytes on wire, 94 bytes captured) Arrival Time: Nov 9, 2005
20:46:29.682754000 Time delta from previous packet: 0.000116000 seconds
Time since reference or first frame: 0.000255000 seconds Frame Number: 4
Packet Length: 94 bytes Capture Length: 94 bytes Protocols in frame:
eth:ipv6:tcpEthernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 40 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda) Destination address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069)Transmission Control Protocol, Src Port: ssh (22),
Dst Port: 41335(41335), Seq: 0, Ack: 1, Len: 0 Source port: ssh (22)
Destination port: 41335 (41335) Sequence number: 0 (relative sequence
number) Acknowledgement number: 1 (relative ack number) Header length:
40 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window
Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... =
Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push:
Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set
.... ...0 = Fin: Not set Window size: 5712 Checksum: 0x99fe [correct]
Options: (20 bytes) Maximum segment size: 1440 bytes SACK
permitted Time stamp: tsval 1142800, tsecr 1894413 NOP
Window scale: 2 (multiply by 4) SEQ/ACK analysis This is an ACK to
the segment in frame: 3 The RTT to ACK the segment was: 0.000116000
seconds
Frame 5 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:46:29.682772000 Time delta from previous packet: 0.000018000 seconds
Time since reference or first frame: 0.000273000 seconds Frame Number: 5
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:tcpEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 1, Len: 0 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion
Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0.
.... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0...
= Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not
set .... ...0 = Fin: Not set Window size: 5760 (scaled) Checksum:
0xd960 [correct] Options: (12 bytes) NOP NOP Time
stamp: tsval 1894414, tsecr 1142800 SEQ/ACK analysis This is an ACK
to the segment in frame: 4 The RTT to ACK the segment was: 0.000018000
seconds
Frame 6 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:29.699957000 Time delta from previous packet: 0.017185000 seconds
Time since reference or first frame: 0.017458000 seconds Frame Number: 6
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda) Destination address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069)Transmission Control Protocol, Src Port: ssh (22),
Dst Port: 41335(41335), Seq: 1, Ack: 1, Len: 20 Source port: ssh (22)
Destination port: 41335 (41335) Sequence number: 1 (relative sequence
number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 1 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5712 (scaled) Checksum: 0x24a7 [correct] Options:
(12 bytes) NOP NOP Time stamp: tsval 1142804, tsecr
1894414SSH Protocol Protocol: SSH-2.0-OpenSSH_4.2\n
Frame 7 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:46:29.710663000 Time delta from previous packet: 0.010706000 seconds
Time since reference or first frame: 0.028164000 seconds Frame Number: 7
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:tcpEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 0 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion
Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0.
.... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0...
= Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not
set .... ...0 = Fin: Not set Window size: 5760 (scaled) Checksum:
0xd941 [correct] Options: (12 bytes) NOP NOP Time
stamp: tsval 1894421, tsecr 1142804 SEQ/ACK analysis This is an ACK
to the segment in frame: 6 The RTT to ACK the segment was: 0.010706000
seconds
Frame 8 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:29.710788000 Time delta from previous packet: 0.000125000 seconds
Time since reference or first frame: 0.028289000 seconds Frame Number: 8
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0x2480] Options: (12 bytes) NOP NOP Time stamp: tsval
1894421, tsecr 1142804SSH Protocol Protocol: SSH-2.0-OpenSSH_4.2\n
Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:29.914480000 Time delta from previous packet: 0.203692000 seconds
Time since reference or first frame: 0.231981000 seconds Frame Number: 9
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0x244d] Options: (12 bytes) NOP NOP Time stamp: tsval
1894472, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 0.203692000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Overly large number 0x5353482d Padding
Length: 50 Key Exchange Msg code: Unknown (46) (46)
Algorithms[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:30.322506000 Time delta from previous packet: 0.408026000 seconds
Time since reference or first frame: 0.640007000 seconds Frame Number: 10
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0x23e7] Options: (12 bytes) NOP NOP Time stamp: tsval
1894574, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 0.611718000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Overly large number 0x5353482d Padding
Length: 50 Key Exchange Msg code: Unknown (46)
(46)[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:31.138557000 Time delta from previous packet: 0.816051000 seconds
Time since reference or first frame: 1.456058000 seconds Frame Number: 11
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0x231b] Options: (12 bytes) NOP NOP Time stamp: tsval
1894778, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 1.427769000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Overly large number 0x5353482d Padding
Length: 50 Key Exchange Msg code: Unknown (46)
(46)[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 12 (60 bytes on wire, 60 bytes captured) Arrival Time: Nov 9, 2005
20:46:32.085446000 Time delta from previous packet: 0.946889000 seconds
Time since reference or first frame: 2.402947000 seconds Frame Number: 12
Packet Length: 60 bytes Capture Length: 60 bytes Protocols in frame:
eth:arpEthernet II, Src: DellComp_60:3f:db (00:b0:d0:60:3f:db), Dst:Broadcast
(ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Source:
DellComp_60:3f:db (00:b0:d0:60:3f:db) Type: ARP (0x0806) Trailer:
000000000000000000000000000000000000Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware
size: 6 Protocol size: 4 Opcode: request (0x0001) Sender MAC address:
DellComp_60:3f:db (00:b0:d0:60:3f:db) Sender IP address: 192.168.1.1
(192.168.1.1) Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
Target IP address: 192.168.1.4 (192.168.1.4)
Frame 13 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:32.770679000 Time delta from previous packet: 0.685233000 seconds
Time since reference or first frame: 3.088180000 seconds Frame Number: 13
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0x2183] Options: (12 bytes) NOP NOP Time stamp: tsval
1895186, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 3.059891000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Overly large number 0x5353482d Padding
Length: 50 Key Exchange Msg code: Unknown (46)
(46)[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 14 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:36.034868000 Time delta from previous packet: 3.264189000 seconds
Time since reference or first frame: 6.352369000 seconds Frame Number: 14
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0x1e53] Options: (12 bytes) NOP NOP Time stamp: tsval
1896002, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 6.324080000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Encrypted Packet:
5353482D322E302D4F70656E5353485F342E320A
Frame 15 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:42.563274000 Time delta from previous packet: 6.528406000 seconds
Time since reference or first frame: 12.880775000 seconds Frame Number: 15
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0x17f3] Options: (12 bytes) NOP NOP Time stamp: tsval
1897634, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 12.852486000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Encrypted Packet:
5353482D322E302D4F70656E5353485F342E320A
Frame 16 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:46:55.620091000 Time delta from previous packet: 13.056817000 seconds
Time since reference or first frame: 25.937592000 seconds Frame Number: 16
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0x0b33] Options: (12 bytes) NOP NOP Time stamp: tsval
1900898, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 25.909303000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Encrypted Packet:
5353482D322E302D4F70656E5353485F342E320A
Frame 17 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:47:21.733723000 Time delta from previous packet: 26.113632000 seconds
Time since reference or first frame: 52.051224000 seconds Frame Number: 17
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0xf1b2] Options: (12 bytes) NOP NOP Time stamp: tsval
1907426, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 52.022935000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Encrypted Packet:
5353482D322E302D4F70656E5353485F342E320A
Frame 18 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:47:26.734031000 Time delta from previous packet: 5.000308000 seconds
Time since reference or first frame: 57.051532000 seconds Frame Number: 18
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6 Type: 135
(Neighbor solicitation) Code: 0 Checksum: 0xbd34 [correct] Target:
fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda) ICMPv6 options
Type: 1 (Source link-layer address) Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 19 (78 bytes on wire, 78 bytes captured) Arrival Time: Nov 9, 2005
20:47:26.734162000 Time delta from previous packet: 0.000131000 seconds
Time since reference or first frame: 57.051663000 seconds Frame Number: 19
Packet Length: 78 bytes Capture Length: 78 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 24 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda) Destination address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6 Type: 136
(Neighbor advertisement) Code: 0 Checksum: 0x9be6 [correct] Flags:
0x40000000 0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited ..0. .... .... ....
.... .... .... .... = Not override Target: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)
Frame 20 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:47:31.732963000 Time delta from previous packet: 4.998801000 seconds
Time since reference or first frame: 62.050464000 seconds Frame Number: 20
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda) Destination address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6 Type: 135
(Neighbor solicitation) Code: 0 Checksum: 0xbdb4 [correct] Target:
fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069) ICMPv6 options
Type: 1 (Source link-layer address) Length: 8 bytes (1)
Link-layer address: 00:b0:d0:82:6d:da
Frame 21 (78 bytes on wire, 78 bytes captured) Arrival Time: Nov 9, 2005
20:47:31.732998000 Time delta from previous packet: 0.000035000 seconds
Time since reference or first frame: 62.050499000 seconds Frame Number: 21
Packet Length: 78 bytes Capture Length: 78 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 24 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069) Destination address: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6 Type: 136
(Neighbor advertisement) Code: 0 Checksum: 0xbcca [correct] Flags:
0x40000000 0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited ..0. .... .... ....
.... .... .... .... = Not override Target: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069)
Frame 22 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:47:36.730657000 Time delta from previous packet: 4.997659000 seconds
Time since reference or first frame: 67.048158000 seconds Frame Number: 22
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069) Destination address: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6 Type: 135
(Neighbor solicitation) Code: 0 Checksum: 0xbdb4 [correct] Target:
fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda) ICMPv6 options
Type: 1 (Source link-layer address) Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 23 (78 bytes on wire, 78 bytes captured) Arrival Time: Nov 9, 2005
20:47:36.730778000 Time delta from previous packet: 0.000121000 seconds
Time since reference or first frame: 67.048279000 seconds Frame Number: 23
Packet Length: 78 bytes Capture Length: 78 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 24 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda) Destination address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6 Type: 136
(Neighbor advertisement) Code: 0 Checksum: 0x9c66 [correct] Flags:
0x40000000 0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited ..0. .... .... ....
.... .... .... .... = Not override Target: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda)
Frame 24 (110 bytes on wire, 110 bytes captured) Arrival Time: Nov 9, 2005
20:47:37.719072000 Time delta from previous packet: 0.988294000 seconds
Time since reference or first frame: 68.036573000 seconds Frame Number: 24
Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:IPv6-Neighbor-Discovery_00:00:00:01 (33:33:00:00:00:01) Destination:
IPv6-Neighbor-Discovery_00:00:00:01 (33:33:00:00:00:01) Source:
AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type: IPv6 (0x86dd)Internet Protocol
Version 6 Version: 6 Traffic class: 0x00 Flowlabel: 0x00000 Payload
length: 56 Next header: ICMPv6 (0x3a) Hop limit: 255 Source address:
fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069) Destination address:
ff02::1 (ff02::1)Internet Control Message Protocol v6 Type: 134 (Router
advertisement) Code: 0 Checksum: 0xf25e [correct] Cur hop limit: 64
Flags: 0x00 0... .... = Not managed .0.. .... = Not other
..0. .... = Not Home Agent ...0 0... = Router preference: Medium
Router lifetime: 0 Reachable time: 0 Retrans time: 0 ICMPv6 options
Type: 3 (Prefix information) Length: 32 bytes (4) Prefix
length: 64 Flags: 0xe0 1... .... = Onlink .1..
.... = Auto ..1. .... = Router Address ...0 .... = Not
site prefix Valid lifetime: 0x00278d00 Preferred lifetime:
0x00093a80 Prefix: fec0:: ICMPv6 options Type: 1 (Source
link-layer address) Length: 8 bytes (1) Link-layer address:
00:50:8d:ef:90:69
Frame 25 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 9, 2005
20:48:13.961000000 Time delta from previous packet: 36.241928000 seconds
Time since reference or first frame: 104.278501000 seconds Frame Number: 25
Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 52 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 1, Ack: 21, Len: 20 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 1 (relative
sequence number) Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number) Header length: 32 bytes
Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR):
Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set .... 1... = Push: Set ....
.0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin:
Not set Window size: 5760 (scaled) Checksum: 0x5d72 [incorrect, should be
0xbeb2] Options: (12 bytes) NOP NOP Time stamp: tsval
1920482, tsecr 1142804 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) retransmission The RTO for this segment
was: 104.250212000 seconds RTO based on delta from frame: 8SSH
Protocol SSH Version 2 Encrypted Packet:
5353482D322E302D4F70656E5353485F342E320A
Frame 26 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:48:18.961294000 Time delta from previous packet: 5.000294000 seconds
Time since reference or first frame: 109.278795000 seconds Frame Number: 26
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6 Type: 135
(Neighbor solicitation) Code: 0 Checksum: 0xbd34 [correct] Target:
fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda) ICMPv6 options
Type: 1 (Source link-layer address) Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 27 (78 bytes on wire, 78 bytes captured) Arrival Time: Nov 9, 2005
20:48:18.961423000 Time delta from previous packet: 0.000129000 seconds
Time since reference or first frame: 109.278924000 seconds Frame Number: 27
Packet Length: 78 bytes Capture Length: 78 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 24 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda) Destination address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6 Type: 136
(Neighbor advertisement) Code: 0 Checksum: 0x9be6 [correct] Flags:
0x40000000 0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited ..0. .... .... ....
.... .... .... .... = Not override Target: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)
Frame 28 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:48:23.958529000 Time delta from previous packet: 4.997106000 seconds
Time since reference or first frame: 114.276030000 seconds Frame Number: 28
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda) Destination address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6 Type: 135
(Neighbor solicitation) Code: 0 Checksum: 0xbdb4 [correct] Target:
fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069) ICMPv6 options
Type: 1 (Source link-layer address) Length: 8 bytes (1)
Link-layer address: 00:b0:d0:82:6d:da
Frame 29 (78 bytes on wire, 78 bytes captured) Arrival Time: Nov 9, 2005
20:48:23.958562000 Time delta from previous packet: 0.000033000 seconds
Time since reference or first frame: 114.276063000 seconds Frame Number: 29
Packet Length: 78 bytes Capture Length: 78 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 24 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069) Destination address: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6 Type: 136
(Neighbor advertisement) Code: 0 Checksum: 0xbcca [correct] Flags:
0x40000000 0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited ..0. .... .... ....
.... .... .... .... = Not override Target: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069)
Frame 30 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:48:28.957920000 Time delta from previous packet: 4.999358000 seconds
Time since reference or first frame: 119.275421000 seconds Frame Number: 30
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069) Destination address: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda)Internet Control Message Protocol v6 Type: 135
(Neighbor solicitation) Code: 0 Checksum: 0xbdb4 [correct] Target:
fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda) ICMPv6 options
Type: 1 (Source link-layer address) Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 31 (78 bytes on wire, 78 bytes captured) Arrival Time: Nov 9, 2005
20:48:28.958044000 Time delta from previous packet: 0.000124000 seconds
Time since reference or first frame: 119.275545000 seconds Frame Number: 31
Packet Length: 78 bytes Capture Length: 78 bytes Protocols in frame:
eth:ipv6:icmpv6Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 24 Next header: ICMPv6 (0x3a) Hop
limit: 255 Source address: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda) Destination address: fe80::250:8dff:feef:9069
(fe80::250:8dff:feef:9069)Internet Control Message Protocol v6 Type: 136
(Neighbor advertisement) Code: 0 Checksum: 0x9c66 [correct] Flags:
0x40000000 0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited ..0. .... .... ....
.... .... .... .... = Not override Target: fe80::2b0:d0ff:fe82:6dda
(fe80::2b0:d0ff:fe82:6dda)
Frame 32 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:48:29.711575000 Time delta from previous packet: 0.753531000 seconds
Time since reference or first frame: 120.029076000 seconds Frame Number: 32
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:tcpEthernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda) Destination address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069)Transmission Control Protocol, Src Port: ssh (22),
Dst Port: 41335(41335), Seq: 21, Ack: 1, Len: 0 Source port: ssh (22)
Destination port: 41335 (41335) Sequence number: 21 (relative sequence
number) Acknowledgement number: 1 (relative ack number) Header length:
32 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window
Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... =
Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push:
Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set
.... ...1 = Fin: Set Window size: 5712 (scaled) Checksum: 0x641c
[correct] Options: (12 bytes) NOP NOP Time stamp: tsval
1172804, tsecr 1894421 SEQ/ACK analysis
Frame 33 (798 bytes on wire, 798 bytes captured) Arrival Time: Nov 9, 2005
20:48:29.712283000 Time delta from previous packet: 0.000708000 seconds
Time since reference or first frame: 120.029784000 seconds Frame Number: 33
Packet Length: 798 bytes Capture Length: 798 bytes Protocols in frame:
eth:ipv6:tcp:sshEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 744 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 21, Ack: 22, Len: 712 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 21 (relative
sequence number) Next sequence number: 733 (relative sequence number)
Acknowledgement number: 22 (relative ack number) Header length: 32 bytes
Flags: 0x0019 (FIN, PSH, ACK) 0... .... = Congestion Window Reduced
(CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent:
Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set
.... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1
= Fin: Set Window size: 5760 (scaled) Checksum: 0x6026 [incorrect, should
be 0xe52f] Options: (12 bytes) NOP NOP Time stamp:
tsval 1924419, tsecr 1172804
SEQ/ACK analysis This is an ACK to the segment in frame: 32 The
RTT to ACK the segment was: 0.000708000 secondsSSH Protocol SSH Version 2
Encrypted Packet: 000002C405142E266F9276ADB32C4205071FA4A4D0500000...
Frame 34 (86 bytes on wire, 86 bytes captured) Arrival Time: Nov 9, 2005
20:48:29.915155000 Time delta from previous packet: 0.202872000 seconds
Time since reference or first frame: 120.232656000 seconds Frame Number: 34
Packet Length: 86 bytes Capture Length: 86 bytes Protocols in frame:
eth:ipv6:tcpEthernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da),
Dst:AbitComp_ef:90:69 (00:50:8d:ef:90:69) Destination: AbitComp_ef:90:69
(00:50:8d:ef:90:69) Source: DellComp_82:6d:da (00:b0:d0:82:6d:da) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 32 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda) Destination address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069)Transmission Control Protocol, Src Port: ssh (22),
Dst Port: 41335(41335), Seq: 21, Ack: 1, Len: 0 Source port: ssh (22)
Destination port: 41335 (41335) Sequence number: 21 (relative sequence
number) Acknowledgement number: 1 (relative ack number) Header length:
32 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window
Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... =
Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push:
Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set
.... ...1 = Fin: Set Window size: 5712 (scaled) Checksum: 0x63e9
[correct] Options: (12 bytes) NOP NOP Time stamp: tsval
1172855, tsecr 1894421 SEQ/ACK analysis TCP Analysis Flags
This frame is a (suspected) out-of-order segment
Frame 35 (98 bytes on wire, 98 bytes captured) Arrival Time: Nov 9, 2005
20:48:29.915185000 Time delta from previous packet: 0.000030000 seconds
Time since reference or first frame: 120.232686000 seconds Frame Number: 35
Packet Length: 98 bytes Capture Length: 98 bytes Protocols in frame:
eth:ipv6:tcpEthernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69),
Dst:DellComp_82:6d:da (00:b0:d0:82:6d:da) Destination: DellComp_82:6d:da
(00:b0:d0:82:6d:da) Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69) Type:
IPv6 (0x86dd)Internet Protocol Version 6 Version: 6 Traffic class: 0x00
Flowlabel: 0x00000 Payload length: 44 Next header: TCP (0x06) Hop
limit: 64 Source address: fec0::250:8dff:feef:9069
(fec0::250:8dff:feef:9069) Destination address: fec0::2b0:d0ff:fe82:6dda
(fec0::2b0:d0ff:fe82:6dda)Transmission Control Protocol, Src Port: 41335
(41335), Dst Port: ssh(22), Seq: 734, Ack: 22, Len: 0 Source port: 41335
(41335) Destination port: ssh (22) Sequence number: 734 (relative
sequence number) Acknowledgement number: 22 (relative ack number)
Header length: 44 bytes Flags: 0x0010 (ACK) 0... .... = Congestion
Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0.
.... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0...
= Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not
set .... ...0 = Fin: Not set Window size: 5760 (scaled) Checksum:
0xc0d2 [correct] Options: (24 bytes) NOP NOP Time
stamp: tsval 1924470, tsecr 1172855 NOP NOP SACK: 21-22
left edge = 21 (relative) right edge = 22 (relative)
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Re: passwordless login with heimdal (kerberos) on openssh 4.2p1, elanthis |
|---|---|
| Next by Date: | Re: Re: passwordless login with heimdal (kerberos) on openssh 4.2p1, Steven Van Acker |
| Previous by Thread: | Passing unique value to PAM, Sam Watters |
| Next by Thread: | SOLVED: Re: ssh v4.2p1 IPv6 TCP checksum error, J. K. Cliburn |
| Indexes: | [Date] [Thread] [Top] [All Lists] |