VM not connecting via VNC - core i7 720

[dureal99d]

I am able to start a V.M. but unable to connect via VNC in FN 11.0 u3.

i have an i7 720 (qaud core with H.T.)

i have read the hardware requirements of freenas which clearly states:
VM:
In FreeNAS11 VMs use the bhyve virtual machine software.
This type of virtualization requires an Intel processor with
Extended Page Tables (EPT) or an AMD processor with
Rapid Virtualization Indexing (RVI) or Nested Page Tables (NPT).

I run the vm and then use the real vnc viewer to connect to ip 192.xxx.x.xxx:blah<<<<port

and i get a connection refused error? why?

Is my being unable to connect via VNC a bug or am i missing something? or has some hardware requirements changed and perhaps not been updated via notes?

please help me thanks!!!

 

[dlavigne]

Is there a firewall in the way, such as on the client system? That is the usual cause of connection refused errors.

 

[dureal99d]

Is there a firewall in the way, such as on the client system? That is the usual cause of connection refused errors.

no firewall. i am completely stomped. i do use pfsense as my router but that should not interfere with anything

 

[dlavigne]

Would be interesting to see what a packet sniff says...

 

[dureal99d]

Would be interesting to see what a packet sniff says...

let me load up the shark

 

[Stux]

What error exactly?

https://bugs.freenas.org/issues/23977

 

[dureal99d]

What error exactly?

https://bugs.freenas.org/issues/23977

this seems to be an authentication issue

 

[dureal99d]

but it makes no sense, everything else works flawlessly but me being able to connect to the vm

 

[dureal99d]

What error exactly?

https://bugs.freenas.org/issues/23977

i keep getting the connection closed unexpectedly??

 

[Stux]

this seems to be an authentication issue

https://bugs.freenas.org/issues/23979

You need to configure real VNC to not use authentication.

 

[dureal99d]

https://bugs.freenas.org/issues/23979

You need to configure real VNC to not use authentication.

No go, authentication has been disabled. this is highly strange. I did a packet sniff with wire-shark. I am at work and unable to post the results at the moment but will as soon as i get home

 

[dureal99d]

i wanted to post the packet file but the forum wont let me upload it

 

[dureal99d]

CAPTURE 1 OF 3

ATTACHED IS THE VNC PORTION OF THE CAPTURE

Frame 10180: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.148334000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.148334000 seconds
[Time delta from previous captured frame: 0.004596000 seconds]
[Time delta from previous displayed frame: 0.068212000 seconds]
[Time since reference or first frame: 46.710696000 seconds]
Frame Number: 10180
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp:vnc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: AsustekC_46:39:ef (00:26:18:46:39:ef), Dst: Evga_02:35:81 (00:1f:bc:02:35:81)
Destination: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.6, Dst: 192.168.2.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 52
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb558 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.6
Destination: 192.168.2.21
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 5906, Dst Port: 53540, Seq: 4294967285, Ack: 4294967285, Len: 12
Source Port: 5906
Destination Port: 53540
[Stream index: 42]
[TCP Segment Len: 12]
Sequence number: 4294967285 (relative sequence number)
[Next sequence number: 1 (relative sequence number)]
Acknowledgment number: 4294967285 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window size value: 1026
[Calculated window size: 1026]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xf333 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
TCP payload (12 bytes)
Virtual Network Computing
Server protocol version: 003.008

CAPTURE 2 OF 3

Frame 10185: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.149658000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.149658000 seconds
[Time delta from previous captured frame: 0.000089000 seconds]
[Time delta from previous displayed frame: 0.001324000 seconds]
[Time since reference or first frame: 46.712020000 seconds]
Frame Number: 10185
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp:vnc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 52
Identification: 0x396a (14698)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 4294967285, Ack: 4294967294, Len: 12
Source Port: 53540
Destination Port: 5906
[Stream index: 43]
[TCP Segment Len: 12]
Sequence number: 4294967285 (relative sequence number)
[Next sequence number: 1 (relative sequence number)]
Acknowledgment number: 4294967294 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window size value: 256
[Calculated window size: 256]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x8592 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
TCP payload (12 bytes)
Virtual Network Computing
Server protocol version: 003.003

CAPTURE 3 OF 3

Frame 10186: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.149987000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.149987000 seconds
[Time delta from previous captured frame: 0.000329000 seconds]
[Time delta from previous displayed frame: 0.000329000 seconds]
[Time since reference or first frame: 46.712349000 seconds]
Frame Number: 10186
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp:vnc]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: AsustekC_46:39:ef (00:26:18:46:39:ef), Dst: Evga_02:35:81 (00:1f:bc:02:35:81)
Destination: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Padding: 00000000
Internet Protocol Version 4, Src: 192.168.2.6, Dst: 192.168.2.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 42
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb562 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.6
Destination: 192.168.2.21
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 5906, Dst Port: 53540, Seq: 1, Ack: 1, Len: 2
Source Port: 5906
Destination Port: 53540
[Stream index: 42]
[TCP Segment Len: 2]
Sequence number: 1 (relative sequence number)
[Next sequence number: 3 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window size value: 1026
[Calculated window size: 1026]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x5224 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
[SEQ/ACK analysis]
[Bytes in flight: 2]
[Bytes sent since last PSH flag: 2]
TCP payload (2 bytes)
Virtual Network Computing

 

[dureal99d]

ATTACHED IS THE TCP PORTION O THE CAPTURE

Frame 10161: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.078851000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.078851000 seconds
[Time delta from previous captured frame: 0.002722000 seconds]
[Time delta from previous displayed frame: 0.652909000 seconds]
[Time since reference or first frame: 46.641213000 seconds]
Frame Number: 10161
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 52
Identification: 0x3967 (14695)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 0, Len: 0
Source Port: 53540
Destination Port: 5906
[Stream index: 40]
[TCP Segment Len: 0]
Sequence number: 0 (relative sequence number)
Acknowledgment number: 0
1000 .... = Header Length: 32 bytes (8)
Flags: 0x002 (SYN)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...0 .... = Acknowledgment: Not set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..1. = Syn: Set
[Expert Info (Chat/Sequence): Connection establish request (SYN): server port 5906]
[Connection establish request (SYN): server port 5906]
[Severity level: Chat]
[Group: Sequence]
.... .... ...0 = Fin: Not set
[TCP Flags: ··········S·]
Window size value: 64240
[Calculated window size: 64240]
Checksum: 0x8592 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), SACK permitted
TCP Option - Maximum segment size: 1460 bytes
Kind: Maximum Segment Size (2)
Length: 4
MSS Value: 1460
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - Window scale: 8 (multiply by 256)
Kind: Window Scale (3)
Length: 3
Shift count: 8
[Multiplier: 256]
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - SACK permitted
Kind: SACK Permitted (4)
Length: 2

Frame 10162: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.080057000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.080057000 seconds
[Time delta from previous captured frame: 0.001206000 seconds]
[Time delta from previous displayed frame: 0.001206000 seconds]
[Time since reference or first frame: 46.642419000 seconds]
Frame Number: 10162
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: AsustekC_46:39:ef (00:26:18:46:39:ef), Dst: Evga_02:35:81 (00:1f:bc:02:35:81)
Destination: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.6, Dst: 192.168.2.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 52
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb558 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.6
Destination: 192.168.2.21
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 5906, Dst Port: 53540, Seq: 0, Ack: 1, Len: 0
Source Port: 5906
Destination Port: 53540
[Stream index: 40]
[TCP Segment Len: 0]
Sequence number: 0 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
1000 .... = Header Length: 32 bytes (8)
Flags: 0x012 (SYN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..1. = Syn: Set
[Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 5906]
[Connection establish acknowledge (SYN+ACK): server port 5906]
[Severity level: Chat]
[Group: Sequence]
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A··S·]
Window size value: 65535
[Calculated window size: 65535]
Checksum: 0x1779 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), Maximum segment size, No-Operation (NOP), Window scale, SACK permitted, End of Option List (EOL)
TCP Option - Maximum segment size: 1460 bytes
Kind: Maximum Segment Size (2)
Length: 4
MSS Value: 1460
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - Window scale: 6 (multiply by 64)
Kind: Window Scale (3)
Length: 3
Shift count: 6
[Multiplier: 64]
TCP Option - SACK permitted
Kind: SACK Permitted (4)
Length: 2
TCP Option - End of Option List (EOL)
Kind: End of Option List (0)
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 10161]
[The RTT to ACK the segment was: 0.001206000 seconds]
[iRTT: 0.001271000 seconds]


Frame 10163: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.080122000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.080122000 seconds
[Time delta from previous captured frame: 0.000065000 seconds]
[Time delta from previous displayed frame: 0.000065000 seconds]
[Time since reference or first frame: 46.642484000 seconds]
Frame Number: 10163
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x3968 (14696)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 1, Ack: 1, Len: 0
Source Port: 53540
Destination Port: 5906
[Stream index: 40]
[TCP Segment Len: 0]
Sequence number: 1 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window size value: 256
[Calculated window size: 65536]
[Window size scaling factor: 256]
Checksum: 0x8586 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 10162]
[The RTT to ACK the segment was: 0.000065000 seconds]
[iRTT: 0.001271000 seconds]


Frame 10187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.152582000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.152582000 seconds
[Time delta from previous captured frame: 0.002595000 seconds]
[Time delta from previous displayed frame: 0.002595000 seconds]
[Time since reference or first frame: 46.714944000 seconds]
Frame Number: 10187
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: AsustekC_46:39:ef (00:26:18:46:39:ef), Dst: Evga_02:35:81 (00:1f:bc:02:35:81)
Destination: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Padding: 000000000000
Internet Protocol Version 4, Src: 192.168.2.6, Dst: 192.168.2.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb564 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.6
Destination: 192.168.2.21
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 5906, Dst Port: 53540, Seq: 3, Ack: 1, Len: 0
Source Port: 5906
Destination Port: 53540
[Stream index: 42]
[TCP Segment Len: 0]
Sequence number: 3 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x011 (FIN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...1 = Fin: Set
[Expert Info (Chat/Sequence): Connection finish (FIN)]
[Connection finish (FIN)]
[Severity level: Chat]
[Group: Sequence]
[TCP Flags: ·······A···F]
Window size value: 1026
[Calculated window size: 1026]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x532c [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0

Frame 10188: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.152608000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.152608000 seconds
[Time delta from previous captured frame: 0.000026000 seconds]
[Time delta from previous displayed frame: 0.000026000 seconds]
[Time since reference or first frame: 46.714970000 seconds]
Frame Number: 10188
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x396b (14699)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 1, Ack: 1, Len: 0
Source Port: 53540
Destination Port: 5906
[Stream index: 43]
[TCP Segment Len: 0]
Sequence number: 1 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window size value: 256
[Calculated window size: 256]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x8586 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0



Frame 10195: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.179209000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.179209000 seconds
[Time delta from previous captured frame: 0.005132000 seconds]
[Time delta from previous displayed frame: 0.026601000 seconds]
[Time since reference or first frame: 46.741571000 seconds]
Frame Number: 10195
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: Evga_02:35:81 (00:1f:bc:02:35:81), Dst: AsustekC_46:39:ef (00:26:18:46:39:ef)
Destination: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.2.21, Dst: 192.168.2.6
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x396c (14700)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (6)
Header checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.21
Destination: 192.168.2.6
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 53540, Dst Port: 5906, Seq: 1, Ack: 1, Len: 0
Source Port: 53540
Destination Port: 5906
[Stream index: 43]
[TCP Segment Len: 0]
Sequence number: 1 (relative sequence number)
Acknowledgment number: 1 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x011 (FIN, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...1 = Fin: Set
[Expert Info (Chat/Sequence): Connection finish (FIN)]
[Connection finish (FIN)]
[Severity level: Chat]
[Group: Sequence]
[TCP Flags: ·······A···F]
Window size value: 256
[Calculated window size: 256]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x8586 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0


Frame 10196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Interface id: 0 (\Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8})
Interface name: \Device\NPF_{E2A1CF7B-2C75-4242-86E8-6A43240F37F8}
Encapsulation type: Ethernet (1)
Arrival Time: Sep 22, 2017 09:42:42.179613000 Central Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1506091362.179613000 seconds
[Time delta from previous captured frame: 0.000404000 seconds]
[Time delta from previous displayed frame: 0.000404000 seconds]
[Time since reference or first frame: 46.741975000 seconds]
Frame Number: 10196
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: AsustekC_46:39:ef (00:26:18:46:39:ef), Dst: Evga_02:35:81 (00:1f:bc:02:35:81)
Destination: Evga_02:35:81 (00:1f:bc:02:35:81)
Address: Evga_02:35:81 (00:1f:bc:02:35:81)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: AsustekC_46:39:ef (00:26:18:46:39:ef)
Address: AsustekC_46:39:ef (00:26:18:46:39:ef)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Padding: 000000000000
Internet Protocol Version 4, Src: 192.168.2.6, Dst: 192.168.2.21
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb564 [validation disabled]
[Header checksum status: Unverified]
Source: 192.168.2.6
Destination: 192.168.2.21
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 5906, Dst Port: 53540, Seq: 4, Ack: 2, Len: 0
Source Port: 5906
Destination Port: 53540
[Stream index: 42]
[TCP Segment Len: 0]
Sequence number: 4 (relative sequence number)
Acknowledgment number: 2 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window size value: 1026
[Calculated window size: 1026]
[Window size scaling factor: -1 (unknown)]
Checksum: 0x532b [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0