ATTACHED IS THE TCP PORTION O THE CAPTURE
Frame 10161: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.078851000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.078851000 seconds
[Time delta from previous captured frame: 0.002722000 seconds]
[Time delta from previous displayed frame: 0.652909000 seconds]
[Time since reference or first frame: 46.641213000 seconds]
Frame Number: 10161
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 52
Identification: 0x3967 (14695)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 0, Len: 0
Source Port: 53540
Destination Port: 5906
[Stream index: 40]
[TCP Segment Len: 0]
Sequence number: 0 (relative sequence number)
Acknowledgment number: 0
1000 .... = Header Length: 32 bytes (8)
Flags: 0x002 (SYN)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgment: Not set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..1. = Syn: Set
[Expert Info (Chat/Sequence): Connection establish request (SYN): server port 5906]
[Connection establish request (SYN): server port 5906]
[Severity level: Chat]
[Group: Sequence]
.... .... ...0 = Fin: Not set
[TCP Flags: ··········S·]
Window size value: 64240
[Calculated window size: 64240]
Checksum: 0x8592 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), SACK permitted
TCP Option - Maximum segment size: 1460 bytes
Kind: Maximum Segment Size (2)
Length: 4
MSS Value: 1460
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - Window scale: 8 (multiply by 256)
Kind: Window Scale (3)
Length: 3
Shift count: 8
[Multiplier: 256]
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - SACK permitted
Kind: SACK Permitted (4)
Length: 2
Frame 10162: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.080057000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.080057000 seconds
[Time delta from previous captured frame: 0.001206000 seconds]
[Time delta from previous displayed frame: 0.001206000 seconds]
[Time since reference or first frame: 46.642419000 seconds]
Frame Number: 10162
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: AsustekC_46:39:ef (00:26:18:46:39:ef), Dst: Evga_02:35:81 (00:1f:bc:02:35:81)
Destination: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.6, Dst: 192.168.2.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 52
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb558 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.6
Destination: 192.168.2.21
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 5906, Dst Port: 53540, Seq: 0, Ack: 1, Len: 0
Source Port: 5906
Destination Port: 53540
[Stream index: 40]
[TCP Segment Len: 0]
Sequence number: 0 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
1000 .... = Header Length: 32 bytes (8)
Flags: 0x012 (SYN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..1. = Syn: Set
[Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 5906]
[Connection establish acknowledge (SYN+ACK): server port 5906]
[Severity level: Chat]
[Group: Sequence]
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A··S·]
Window size value: 65535
[Calculated window size: 65535]
Checksum: 0x1779 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), Maximum segment size, No-Operation (NOP), Window scale, SACK permitted, End of Option List (EOL)
TCP Option - Maximum segment size: 1460 bytes
Kind: Maximum Segment Size (2)
Length: 4
MSS Value: 1460
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - Window scale: 6 (multiply by 64)
Kind: Window Scale (3)
Length: 3
Shift count: 6
[Multiplier: 64]
TCP Option - SACK permitted
Kind: SACK Permitted (4)
Length: 2
TCP Option - End of Option List (EOL)
Kind: End of Option List (0)
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 10161]
[The RTT to ACK the segment was: 0.001206000 seconds]
[iRTT: 0.001271000 seconds]
Frame 10163: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.080122000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.080122000 seconds
[Time delta from previous captured frame: 0.000065000 seconds]
[Time delta from previous displayed frame: 0.000065000 seconds]
[Time since reference or first frame: 46.642484000 seconds]
Frame Number: 10163
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x3968 (14696)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 1, Ack: 1, Len: 0
Source Port: 53540
Destination Port: 5906
[Stream index: 40]
[TCP Segment Len: 0]
Sequence number: 1 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window size value: 256
[Calculated window size: 65536]
[Window size scaling factor: 256]
Checksum: 0x8586 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 10162]
[The RTT to ACK the segment was: 0.000065000 seconds]
[iRTT: 0.001271000 seconds]
Frame 10187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.152582000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.152582000 seconds
[Time delta from previous captured frame: 0.002595000 seconds]
[Time delta from previous displayed frame: 0.002595000 seconds]
[Time since reference or first frame: 46.714944000 seconds]
Frame Number: 10187
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: AsustekC_46:39:ef (00:26:18:46:39:ef), Dst: Evga_02:35:81 (00:1f:bc:02:35:81)
Destination: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Padding: 000000000000
Internet Protocol Version 4, Src: 192.168.2.6, Dst: 192.168.2.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb564 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.6
Destination: 192.168.2.21
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 5906, Dst Port: 53540, Seq: 3, Ack: 1, Len: 0
Source Port: 5906
Destination Port: 53540
[Stream index: 42]
[TCP Segment Len: 0]
Sequence number: 3 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x011 (FIN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...1 = Fin: Set
[Expert Info (Chat/Sequence): Connection finish (FIN)]
[Connection finish (FIN)]
[Severity level: Chat]
[Group: Sequence]
[TCP Flags: ·······A···F]
Window size value: 1026
[Calculated window size: 1026]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x532c [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Frame 10188: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.152608000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.152608000 seconds
[Time delta from previous captured frame: 0.000026000 seconds]
[Time delta from previous displayed frame: 0.000026000 seconds]
[Time since reference or first frame: 46.714970000 seconds]
Frame Number: 10188
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x396b (14699)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 1, Ack: 1, Len: 0
Source Port: 53540
Destination Port: 5906
[Stream index: 43]
[TCP Segment Len: 0]
Sequence number: 1 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window size value: 256
[Calculated window size: 256]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x8586 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Frame 10195: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.179209000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.179209000 seconds
[Time delta from previous captured frame: 0.005132000 seconds]
[Time delta from previous displayed frame: 0.026601000 seconds]
[Time since reference or first frame: 46.741571000 seconds]
Frame Number: 10195
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x396c (14700)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 1, Ack: 1, Len: 0
Source Port: 53540
Destination Port: 5906
[Stream index: 43]
[TCP Segment Len: 0]
Sequence number: 1 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x011 (FIN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...1 = Fin: Set
[Expert Info (Chat/Sequence): Connection finish (FIN)]
[Connection finish (FIN)]
[Severity level: Chat]
[Group: Sequence]
[TCP Flags: ·······A···F]
Window size value: 256
[Calculated window size: 256]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x8586 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Frame 10196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.179613000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.179613000 seconds
[Time delta from previous captured frame: 0.000404000 seconds]
[Time delta from previous displayed frame: 0.000404000 seconds]
[Time since reference or first frame: 46.741975000 seconds]
Frame Number: 10196
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: AsustekC_46:39:ef (00:26:18:46:39:ef), Dst: Evga_02:35:81 (00:1f:bc:02:35:81)
Destination: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Padding: 000000000000
Internet Protocol Version 4, Src: 192.168.2.6, Dst: 192.168.2.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb564 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.6
Destination: 192.168.2.21
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 5906, Dst Port: 53540, Seq: 4, Ack: 2, Len: 0
Source Port: 5906
Destination Port: 53540
[Stream index: 42]
[TCP Segment Len: 0]
Sequence number: 4 (relative sequence number)
Acknowledgment number: 2 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window size value: 1026
[Calculated window size: 1026]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x532b [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0