Interesting Traces - Hung TCP_OS server/Connection Backlog exceeded
In an attempt to make each connection easier to see I've added a color attribute to each of the connections in the trace. I have also deleted most of the data packets and their ACKs to reduce the size of the trace and eliminated the window probe packets for each connection after the first couple of probes. I also timed each connection so that the previous connection had already finished sending data and was just sending probes (which I have deleted).
What you see is that the first 8 connections from ports 1051, 1052, 1053, 1054, 1-55, 1056, 1057 and 1059 (no 1058) are accepted and the clients start to send data. However, a close look at the acknowlegments shows that the window goes down to 0 which eventually forces the clients to send window probe messages (1 byte of data) which are ACKed with the previous sequence number and a zero window, indicating that the connection is active but the window is still closed. These connections are all in the backlog queue waiting to be accepted by the server. A netstat will show these connections in the established state with 11468 bytes in the recv queue. Connections from ports 1060 and 1061 are ignored so all you see are repeated SYN packets from the client. The client will eventually timeout.
OK why are 8 connections accepted instead of 5 which is what the backlog is set to. Because internally the backlog is set to the requested backlog times 1.5 rounded up to the nearest integer.
>system>tcp_os>command_library>packet_monitor -numeric -time_stamp -verbose -filter -host 172.16.1.101
dir icmp type tcp
hh:mm:ss.ttt dir len proto source destination src port dst port type
9:22:06.419 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 61e6, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d4f, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1052 to 172.16.1.253.2080
seq 59ffdb56, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 124b, Urg-> 0000
9:22:06.419 Xmit IP Ver/HL 45, ToS 0, Len 2c, ID ff98, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fb1, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1052
seq 488da0e, ack 59ffdb57, window 2ccc, 4. data bytes, flags Syn Ack.
X/Off 06, Flags 12, Cksum ef9d, Urg-> 0000
9:22:06.421 Rcvd IP Ver/HL 45, ToS 0, Len 28, ID 61e7, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d66, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1052 to 172.16.1.253.2080
seq 59ffdb57, ack 488da0f, window ffff, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 3427, Urg-> 0000
9:22:06.423 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 61e8, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 37b1, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1052 to 172.16.1.253.2080
seq 59ffdb57, ack 488da0f, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1d2b, Urg-> 0000
9:22:06.425 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 61e9, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 37b0, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1052 to 172.16.1.253.2080
seq 59ffe10b, ack 488da0f, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4ba1, Urg-> 0000
9:22:06.622 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ff99, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fb4, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1052
seq 488da0f, ack 59ffe6bf, window 2164, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 075b, Urg-> 0000
. . .
9:22:06.827 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 61f0, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 37a9, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1052 to 172.16.1.253.2080
seq 59fffd8f, ack 488da0f, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 115e, Urg-> 0000
9:22:07.025 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ff9b, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fb2, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1052
seq 488da0f, ack 5a000343, window 4e0, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 075b, Urg-> 0000
9:22:12.249 Rcvd IP Ver/HL 45, ToS 0, Len 508, ID 61f7, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3876, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1052 to 172.16.1.253.2080
seq 5a000343, ack 488da0f, window ffff, 1248. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 94b2, Urg-> 0000
9:22:12.448 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ff9c, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fb1, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1052
seq 488da0f, ack 5a000823, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 075b, Urg-> 0000
9:22:13.996 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 61f8, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d54, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1052 to 172.16.1.253.2080
seq 5a000823, ack 488da0f, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum cf59, Urg-> 0000
9:22:13.996 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ff9d, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fb0, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1052
seq 488da0f, ack 5a000823, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 075b, Urg-> 0000
9:22:17.278 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 61f9, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d53, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1052 to 172.16.1.253.2080
seq 5a000823, ack 488da0f, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum cf59, Urg-> 0000
9:22:17.278 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffa4, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fa9, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1052
seq 488da0f, ack 5a000823, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 075b, Urg-> 0000
9:22:58.585 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 6205, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d30, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1053 to 172.16.1.253.2080
seq 5ab69860, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 5489, Urg-> 0000
9:22:58.585 Xmit IP Ver/HL 45, ToS 0, Len 2c, ID ffa8, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fa1, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1053
seq 4f0cc1f, ack 5ab69861, window 2ccc, 4. data bytes, flags Syn Ack.
X/Off 06, Flags 12, Cksum 3f63, Urg-> 0000
9:22:58.587 Rcvd IP Ver/HL 45, ToS 0, Len 28, ID 6206, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d47, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1053 to 172.16.1.253.2080
seq 5ab69861, ack 4f0cc20, window ffff, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 83ec, Urg-> 0000
9:22:58.589 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6207, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3792, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1053 to 172.16.1.253.2080
seq 5ab69861, ack 4f0cc20, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 6cf0, Urg-> 0000
9:22:58.591 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6208, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3791, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1053 to 172.16.1.253.2080
seq 5ab69e15, ack 4f0cc20, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 9b66, Urg-> 0000
9:22:58.788 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffa9, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fa4, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1053
seq 4f0cc20, ack 5ab6a3c9, window 2164, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 5720, Urg-> 0000
. . .
9:22:58.993 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 620f, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 378a, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1053 to 172.16.1.253.2080
seq 5ab6ba99, ack 4f0cc20, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 6123, Urg-> 0000
9:22:59.191 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffab, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fa2, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1053
seq 4f0cc20, ack 5ab6c04d, window 4e0, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 5720, Urg-> 0000
9:23:04.419 Rcvd IP Ver/HL 45, ToS 0, Len 508, ID 6216, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3857, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1053 to 172.16.1.253.2080
seq 5ab6c04d, ack 4f0cc20, window ffff, 1248. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum e477, Urg-> 0000
9:23:04.618 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffad, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1fa0, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1053
seq 4f0cc20, ack 5ab6c52d, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 5720, Urg-> 0000
9:23:06.387 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 6217, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d35, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1053 to 172.16.1.253.2080
seq 5ab6c52d, ack 4f0cc20, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1f1f, Urg-> 0000
9:23:06.387 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffae, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f9f, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1053
seq 4f0cc20, ack 5ab6c52d, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 5720, Urg-> 0000
9:23:10.107 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 6218, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d34, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1053 to 172.16.1.253.2080
seq 5ab6c52d, ack 4f0cc20, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1f1f, Urg-> 0000
9:23:10.107 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffaf, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f9e, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1053
seq 4f0cc20, ack 5ab6c52d, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 5720, Urg-> 0000
9:24:06.183 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 6225, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d10, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1054 to 172.16.1.253.2080
seq 5ba2e0d5, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 0b27, Urg-> 0000
9:24:06.184 Xmit IP Ver/HL 45, ToS 0, Len 2c, ID ffbc, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f8d, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1054
seq 5778b0f, ack 5ba2e0d6, window 2ccc, 4. data bytes, flags Syn Ack.
X/Off 06, Flags 12, Cksum 368a, Urg-> 0000
9:24:06.185 Rcvd IP Ver/HL 45, ToS 0, Len 28, ID 6226, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d27, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1054 to 172.16.1.253.2080
seq 5ba2e0d6, ack 5778b10, window ffff, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 7b13, Urg-> 0000
9:24:06.188 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6227, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3772, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1054 to 172.16.1.253.2080
seq 5ba2e0d6, ack 5778b10, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 6417, Urg-> 0000
9:24:06.190 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6228, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3771, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1054 to 172.16.1.253.2080
seq 5ba2e68a, ack 5778b10, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 928d, Urg-> 0000
9:24:06.387 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffbd, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f90, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1054
seq 5778b10, ack 5ba2ec3e, window 2164, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4e47, Urg-> 0000
. . .
9:24:06.592 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 622f, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 376a, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1054 to 172.16.1.253.2080
seq 5ba3030e, ack 5778b10, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 584a, Urg-> 0000
9:24:06.789 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffbf, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f8e, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1054
seq 5778b10, ack 5ba308c2, window 4e0, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4e47, Urg-> 0000
9:24:12.014 Rcvd IP Ver/HL 45, ToS 0, Len 508, ID 6233, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 383a, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1054 to 172.16.1.253.2080
seq 5ba308c2, ack 5778b10, window ffff, 1248. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum db9e, Urg-> 0000
9:24:12.213 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffc0, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f8d, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1054
seq 5778b10, ack 5ba30da2, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4e47, Urg-> 0000
9:24:14.092 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 6234, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d18, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1054 to 172.16.1.253.2080
seq 5ba30da2, ack 5778b10, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1646, Urg-> 0000
9:24:14.092 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffc1, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f8c, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1054
seq 5778b10, ack 5ba30da2, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4e47, Urg-> 0000
9:24:18.028 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 6235, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d17, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1054 to 172.16.1.253.2080
seq 5ba30da2, ack 5778b10, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1646, Urg-> 0000
9:24:18.028 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffc8, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f85, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1054
seq 5778b10, ack 5ba30da2, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4e47, Urg-> 0000
9:24:27.231 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 623d, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3cf8, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1055 to 172.16.1.253.2080
seq 5bed0e92, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum dd1e, Urg-> 0000
9:24:27.231 Xmit IP Ver/HL 45, ToS 0, Len 2c, ID ffca, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f7f, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1055
seq 5a2660f, ack 5bed0e93, window 2ccc, 4. data bytes, flags Syn Ack.
X/Off 06, Flags 12, Cksum 2d57, Urg-> 0000
9:24:27.233 Rcvd IP Ver/HL 45, ToS 0, Len 28, ID 623e, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3d0f, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1055 to 172.16.1.253.2080
seq 5bed0e93, ack 5a26610, window ffff, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 71e0, Urg-> 0000
9:24:27.235 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 623f, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 375a, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1055 to 172.16.1.253.2080
seq 5bed0e93, ack 5a26610, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 5ae4, Urg-> 0000
9:24:27.235 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6240, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3759, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1055 to 172.16.1.253.2080
seq 5bed1447, ack 5a26610, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 895a, Urg-> 0000
9:24:27.434 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffcb, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f82, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1055
seq 5a26610, ack 5bed19fb, window 2164, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4514, Urg-> 0000
. . .
9:24:27.639 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6247, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3752, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1055 to 172.16.1.253.2080
seq 5bed30cb, ack 5a26610, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4f17, Urg-> 0000
9:24:27.836 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffcd, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f80, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1055
seq 5a26610, ack 5bed367f, window 4e0, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4514, Urg-> 0000
9:24:33.015 Rcvd IP Ver/HL 45, ToS 0, Len 508, ID 624d, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3820, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1055 to 172.16.1.253.2080
seq 5bed367f, ack 5a26610, window ffff, 1248. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum d26b, Urg-> 0000
9:24:33.214 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffce, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f7f, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1055
seq 5a26610, ack 5bed3b5f, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4514, Urg-> 0000
9:24:34.980 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 624e, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3cfe, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1055 to 172.16.1.253.2080
seq 5bed3b5f, ack 5a26610, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 0d13, Urg-> 0000
9:24:34.980 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffcf, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f7e, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1055
seq 5a26610, ack 5bed3b5f, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4514, Urg-> 0000
9:24:38.700 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 624f, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3cfd, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1055 to 172.16.1.253.2080
seq 5bed3b5f, ack 5a26610, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 0d13, Urg-> 0000
9:24:38.700 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffd0, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f7d, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1055
seq 5a26610, ack 5bed3b5f, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 4514, Urg-> 0000
9:24:46.793 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 625e, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3cd7, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1056 to 172.16.1.253.2080
seq 5c31b179, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 39f2, Urg-> 0000
9:24:46.793 Xmit IP Ver/HL 45, ToS 0, Len 2c, ID ffd3, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f76, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1056
seq 5c9b525, ack 5c31b17a, window 2ccc, 4. data bytes, flags Syn Ack.
X/Off 06, Flags 12, Cksum 3aed, Urg-> 0000
9:24:46.795 Rcvd IP Ver/HL 45, ToS 0, Len 28, ID 625f, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3cee, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1056 to 172.16.1.253.2080
seq 5c31b17a, ack 5c9b526, window ffff, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 7f76, Urg-> 0000
9:24:46.797 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6260, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3739, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1056 to 172.16.1.253.2080
seq 5c31b17a, ack 5c9b526, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 687a, Urg-> 0000
9:24:46.799 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6261, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3738, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1056 to 172.16.1.253.2080
seq 5c31b72e, ack 5c9b526, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 96f0, Urg-> 0000
9:24:46.996 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffd4, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f79, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1056
seq 5c9b526, ack 5c31bce2, window 2164, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 52aa, Urg-> 0000
. . .
9:24:47.201 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6268, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3731, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1056 to 172.16.1.253.2080
seq 5c31d3b2, ack 5c9b526, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 5cad, Urg-> 0000
9:24:47.399 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffd6, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f77, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1056
seq 5c9b526, ack 5c31d966, window 4e0, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 52aa, Urg-> 0000
9:24:52.591 Rcvd IP Ver/HL 45, ToS 0, Len 508, ID 627a, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 37f3, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1056 to 172.16.1.253.2080
seq 5c31d966, ack 5c9b526, window ffff, 1248. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum e001, Urg-> 0000
9:24:52.790 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffd7, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f76, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1056
seq 5c9b526, ack 5c31de46, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 52aa, Urg-> 0000
9:24:54.341 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 627f, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3ccd, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1056 to 172.16.1.253.2080
seq 5c31de46, ack 5c9b526, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1aa9, Urg-> 0000
9:24:54.341 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffd8, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f75, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1056
seq 5c9b526, ack 5c31de46, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 52aa, Urg-> 0000
9:24:57.622 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 6281, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3ccb, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1056 to 172.16.1.253.2080
seq 5c31de46, ack 5c9b526, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1aa9, Urg-> 0000
9:24:57.622 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffd9, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f74, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1056
seq 5c9b526, ack 5c31de46, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 52aa, Urg-> 0000
9:25:08.393 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 628c, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3ca9, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1057 to 172.16.1.253.2080
seq 5c7dc8c4, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 225a, Urg-> 0000
9:25:08.394 Xmit IP Ver/HL 45, ToS 0, Len 2c, ID ffde, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f6b, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1057
seq 5f60068, ack 5c7dc8c5, window 2ccc, 4. data bytes, flags Syn Ack.
X/Off 06, Flags 12, Cksum d7e5, Urg-> 0000
9:25:08.395 Rcvd IP Ver/HL 45, ToS 0, Len 28, ID 628d, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3cc0, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1057 to 172.16.1.253.2080
seq 5c7dc8c5, ack 5f60069, window ffff, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1c6f, Urg-> 0000
9:25:08.398 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 628e, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 370b, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1057 to 172.16.1.253.2080
seq 5c7dc8c5, ack 5f60069, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 0573, Urg-> 0000
9:25:08.400 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 628f, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 370a, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1057 to 172.16.1.253.2080
seq 5c7dce79, ack 5f60069, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 33e9, Urg-> 0000
9:25:08.597 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffdf, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f6e, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1057
seq 5f60069, ack 5c7dd42d, window 2164, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum efa2, Urg-> 0000
. . .
9:25:08.801 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6296, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3703, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1057 to 172.16.1.253.2080
seq 5c7deafd, ack 5f60069, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum f9a5, Urg-> 0000
9:25:08.999 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffe1, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f6c, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1057
seq 5f60069, ack 5c7df0b1, window 4e0, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum efa2, Urg-> 0000
9:25:14.247 Rcvd IP Ver/HL 45, ToS 0, Len 508, ID 629d, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 37d0, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1057 to 172.16.1.253.2080
seq 5c7df0b1, ack 5f60069, window ffff, 1248. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 7cfa, Urg-> 0000
9:25:14.446 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffe3, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f6a, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1057
seq 5f60069, ack 5c7df591, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum efa2, Urg-> 0000
9:25:15.997 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 629e, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3cae, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1057 to 172.16.1.253.2080
seq 5c7df591, ack 5f60069, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum b7a1, Urg-> 0000
9:25:15.997 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffe5, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f68, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1057
seq 5f60069, ack 5c7df591, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum efa2, Urg-> 0000
9:25:19.279 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 62a0, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3cac, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1057 to 172.16.1.253.2080
seq 5c7df591, ack 5f60069, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum b7a1, Urg-> 0000
9:25:19.279 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffed, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f60, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1057
seq 5f60069, ack 5c7df591, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum efa2, Urg-> 0000
9:26:22.091 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 6322, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3c13, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1059 to 172.16.1.253.2080
seq 5d804679, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum a3a0, Urg-> 0000
9:26:22.091 Xmit IP Ver/HL 45, ToS 0, Len 2c, ID fffc, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f4d, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1059
seq 6887646, ack 5d80467a, window 2ccc, 4. data bytes, flags Syn Ack.
X/Off 06, Flags 12, Cksum e2bb, Urg-> 0000
9:26:22.093 Rcvd IP Ver/HL 45, ToS 0, Len 28, ID 6323, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3c2a, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1059 to 172.16.1.253.2080
seq 5d80467a, ack 6887647, window ffff, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 2745, Urg-> 0000
9:26:22.099 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6324, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3675, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1059 to 172.16.1.253.2080
seq 5d80467a, ack 6887647, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 1049, Urg-> 0000
9:26:22.099 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 6325, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3674, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1059 to 172.16.1.253.2080
seq 5d804c2e, ack 6887647, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 3ebf, Urg-> 0000
9:26:22.298 Xmit IP Ver/HL 45, ToS 0, Len 28, ID fffd, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f50, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1059
seq 6887647, ack 5d8051e2, window 2164, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum fa78, Urg-> 0000
. . .
9:26:22.504 Rcvd IP Ver/HL 45, ToS 0, Len 5dc, ID 632c, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 366d, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1059 to 172.16.1.253.2080
seq 5d8068b2, ack 6887647, window ffff, 1460. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 047c, Urg-> 0000
9:26:22.701 Xmit IP Ver/HL 45, ToS 0, Len 28, ID ffff, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f4e, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1059
seq 6887647, ack 5d806e66, window 4e0, 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum fa78, Urg-> 0000
9:26:27.966 Rcvd IP Ver/HL 45, ToS 0, Len 508, ID 6332, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 373b, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1059 to 172.16.1.253.2080
seq 5d806e66, ack 6887647, window ffff, 1248. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum 87d0, Urg-> 0000
9:26:28.167 Xmit IP Ver/HL 45, ToS 0, Len 28, ID 1, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f4d, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1059
seq 6887647, ack 5d807346, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum fa78, Urg-> 0000
9:26:29.606 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 6333, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3c19, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1059 to 172.16.1.253.2080
seq 5d807346, ack 6887647, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum c277, Urg-> 0000
9:26:29.606 Xmit IP Ver/HL 45, ToS 0, Len 28, ID 2, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f4c, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1059
seq 6887647, ack 5d807346, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum fa78, Urg-> 0000
9:26:32.670 Rcvd IP Ver/HL 45, ToS 0, Len 29, ID 6336, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3c16, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1059 to 172.16.1.253.2080
seq 5d807346, ack 6887647, window ffff, 1. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum c277, Urg-> 0000
9:26:32.670 Xmit IP Ver/HL 45, ToS 0, Len 28, ID 4, Flg/Frg 0, TTL 40, Prtl 6
Cksum 1f4a, Src ac1001fd, Dst ac100165
TCP from 172.16.1.253.2080 to 172.16.1.101.1059
seq 6887647, ack 5d807346, window n.a., 0. data bytes, flags Ack.
X/Off 05, Flags 10, Cksum fa78, Urg-> 0000
9:27:46.310 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 63a1, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3b94, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1060 to 172.16.1.253.2080
seq 5ea6dd78, ack n.a., window 86a0, 24. data bytes, flags Syn
X/Off 0b, Flags 02, Cksum 0b7a, Urg-> 0000
9:27:49.559 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 63aa, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3b8b, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1060 to 172.16.1.253.2080
seq 5ea6dd78, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 0b7a, Urg-> 0000
9:27:56.123 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 63ab, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3b8a, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1060 to 172.16.1.253.2080
seq 5ea6dd78, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 0b7a, Urg-> 0000
9:28:12.128 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 63ed, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3b48, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1061 to 172.16.1.253.2080
seq 5f019324, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 5572, Urg-> 0000
9:28:15.371 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 63f5, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3b40, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1061 to 172.16.1.253.2080
seq 5f019324, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 5572, Urg-> 0000
9:28:21.933 Rcvd IP Ver/HL 45, ToS 0, Len 40, ID 63f7, Flg/Frg 4000, TTL 80, Prtl 6
Cksum 3b3e, Src ac100165, Dst ac1001fd
TCP from 172.16.1.101.1061 to 172.16.1.253.2080
seq 5f019324, ack n.a., window 86a0, 24. data bytes, flags Syn.
X/Off 0b, Flags 02, Cksum 5572, Urg-> 0000
Send comments and suggestions