Categories
Protocols
Reading Captures

Get Wireshark

RSS Feed

Keep up with the latest captures by subscribing to the RSS feed.

Leech

To download all captures, point your download manager to the leech page.

More Captures
Protocol » Transmission Control Protocol (Info)
Viewing 1 - 12 of 12 captures
Sort by: Newest · Name · Popularity

BGP_AS_set.cap (1.6 KB)

Packets: 18 Avg Size: 74 bytes Duration: 0.9 sec
Data Rate: 11.63 Kbps Added: 17 Sep 2008 Downloads: 565

Packet #15 includes a BGP update containing both an AS sequence and an AS set in its AS path attribute.

PPP_TCP_compression.cap (1.5 KB)

Packets: 43 Avg Size: 18 bytes Duration: 2.9 sec
Data Rate: 2.06 Kbps Added: 5 Aug 2008 Downloads: 418

A telnet session is established to 191.1.13.3 across a PPP link performing TCP header compression. The user at 191.1.13.1 logs in with the password "cisco" and terminates the connection.

TDP.cap (2.8 KB)

Packets: 33 Avg Size: 70 bytes Duration: 47.5 sec
Data Rate: 0.38 Kbps Added: 27 Jul 2008 Downloads: 427

P2 and PE2 exchange Tag Distribution Protocol hellos and form an adjacency over TCP port 711.

LDP_adjacency.cap (5.7 KB)

Packets: 61 Avg Size: 80 bytes Duration: 108.0 sec
Data Rate: 0.35 Kbps Added: 15 Jul 2008 Downloads: 461

PE1 and P1 multicast LDP hellos to 224.0.0.2 on UDP port 646. They then establish an adjacency on TCP port 646 and exchange labels.

MSDP.cap (4.1 KB)

Packets: 35 Avg Size: 105 bytes Duration: 391.3 sec
Data Rate: 0.07 Kbps Added: 6 Jul 2008 Downloads: 363

R2 and R3 become MSDP peers and exchange keepalives. A multicast source 172.16.40.10 begins sending traffic to group 239.123.123.123, and R2 begins sending periodic source active messages to R3. Capture perspective is the R2-R3 link.

BGP_notification.cap (764 bytes)

Packets: 9 Avg Size: 66 bytes Duration: 0.1 sec
Data Rate: 32.33 Kbps Added: 30 Jun 2008 Downloads: 319

R1 has been misconfigured to expect R2 to reside in AS 65100. R2 attempts to peer with R1 advertising itself correctly in AS 65200. R1 issues a NOTIFICATION in packet #5 citing a "bad peer AS" error and terminates the TCP connection.

BGP_soft_reset.cap (2.0 KB)

Packets: 17 Avg Size: 105 bytes Duration: 180.2 sec
Data Rate: 0.08 Kbps Added: 30 Jun 2008 Downloads: 263

R1 performs a soft bidirectional reset (clear ip bgp soft) on its adjacency with R2. The ROUTE-REFRESH message is visible in packet #7. Note that the TCP connection remains uninterrupted, and neither router views the reset as disruptive.

BGP_hard_reset.cap (3.2 KB)

Packets: 32 Avg Size: 87 bytes Duration: 208.1 sec
Data Rate: 0.10 Kbps Added: 29 Jun 2008 Downloads: 311

A hard reset (clear ip bgp) is performed on R1 for its adjacency with R2. Packet #7 shows R1 sending a packet with the TCP FIN flag set, indicating the connection is to be torn down. The TCP connection is then reestablished and UPDATEs are retransmitted.

IBGP_adjacency.cap (2.3 KB)

Packets: 17 Avg Size: 119 bytes Duration: 62.6 sec
Data Rate: 0.25 Kbps Added: 29 Jun 2008 Downloads: 246

Routers 3 and 4 form an internal BGP relationship. This is evidenced by the OPEN messages in packets #4 and #5, which show both routers belong to the same AS (65300). Also note that IBGP packets are not subject to a limited TTL as are EBGP packets.

EBGP_adjacency.cap (2.7 KB)

Packets: 24 Avg Size: 96 bytes Duration: 182.3 sec
Data Rate: 0.10 Kbps Added: 29 Jun 2008 Downloads: 257

The external BGP adjacency between routers 1 and 2 is brought online and routes are exchanged. Keepalives are then exchanged every 60 seconds. Note that the IP TTL (normally 1) has been increased to 2 with ebgp-multihop to facilitate communication between the routers' loopback interfaces.

SSHv2.cap (11.4 KB)

Packets: 90 Avg Size: 114 bytes Duration: 7.0 sec
Data Rate: 11.53 Kbps Added: 20 Jun 2008 Downloads: 328

An SSH version 2 session between two routers. All communication is securely encrypted.

telnet.cap (7.3 KB)

Packets: 74 Avg Size: 85 bytes Duration: 9.9 sec
Data Rate: 4.92 Kbps Added: 20 Jun 2008 Downloads: 335

Telnetting from one router to another. Note that all communication is visible in cleartext.

Viewing 1 - 12 of 12 captures