Ethereal-users: [Ethereal-users] incorrect tcp checksums

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Davidson, Stuart" <Stuart.Davidson@xxxxxx>
Date: Fri, 11 Oct 2002 18:44:57 +0100
We are seeing apparent tcp checksum corruption which results in retransmits and hence slow network performance.

The network configuration is:

Sun-Fire-280R (10.10.2.52)
|
100 M/bit enet
|
Cisco Catalyst 3500 Series XL
|
100 M/bit enet
|
Sun-Blade-100 (10.150.0.108)

The Sun Blade is being jumpstarted from the Sun Fire hence the Sun Fire is the server and main tranmitter of tcp packets.

To investigate the problem we have ethereal running on the Sun Fire and on another Sun Blade in the same VLAN as the Sun Blade. Since it's a switched network a span port is configured from the jumpstart Blade to the monitor Blade. 

On the server VLAN tcp checksums always appear incorrect e.g. for a 1460 byte packet the value is always 0x1caa.

On the client VLAN any packets with incorrect tcp checksum results in a retransmit as expected.

The following traces show a retransmit sequence.

- on the server VLAN, frames 18822 - 18830 correspond to frames 17910 - 17918 on client VLAN
- all frames on the server VLAN appear to have incorrect tcp checksums
- note, the last frame 18830 appears to have incorrect tcp checksum on server VLAN. However, the corresponding frame 17918 on the client VLAN has the correct tcp checksum

Questions:

1. why is the tcp checksum for a 1460 byte frame always incorrect?
2. how can last frame have incorrect tcp checksum on server VLAN but correct tcp checksum on client VLAN?
3. any ideas how to debug this further?

Thanks,
	Stuart

Environment: Solaris 5.8, ethereal 0.8.19 compiled GTK+ 1.2.10, Glib 1.2.10, libpcap 0.6, libz 1.1.3, UCD SNMP 4.2.1

Note, although time is not sync'd between the client and server, the delta time between the packets is the same indicating that frames 18822 - 18830 and 17910 - 17918 do correspond.

 <<js_cli.txt>>  <<js_srv.txt>> 

Frame 17909 (97 on wire, 97 captured)
    Arrival Time: Oct 11, 2002 09:29:52.764618
    Time delta from previous packet: 0.000060 seconds
    Time relative to first packet: 536.513655 seconds
    Frame Number: 17909
    Packet Length: 97 bytes
    Capture Length: 97 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Type: IP (0x0800)
    Trailer: 00000000000000000000000000000000...
Internet Protocol, Src Addr: 10.150.0.8 (10.150.0.8), Dst Addr: 10.10.2.52 (10.10.2.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0d22
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x16bf (correct)
    Source: 10.150.0.8 (10.150.0.8)
    Destination: 10.10.2.52 (10.10.2.52)
Transmission Control Protocol, Src Port: 1022 (1022), Dst Port: 2049 (2049), Seq: 92857068, Ack: 991586816
    Source port: 1022 (1022)
    Destination port: 2049 (2049)
    Sequence number: 92857068
    Acknowledgement number: 991586816
    Header length: 40 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x4788 (correct)
    Options: (20 bytes)
        NOP
        NOP
        SACK:
            left edge = 991594116, right edge = 991597036
            left edge = 991591196, right edge = 991592656

Frame 17910 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:29:53.152265
    Time delta from previous packet: 0.387647 seconds
    Time relative to first packet: 536.901302 seconds
    Frame Number: 17910
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x2bf3
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xf34d (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 17911 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:29:53.961424
    Time delta from previous packet: 0.809159 seconds
    Time relative to first packet: 537.710461 seconds
    Frame Number: 17911
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x2bf4
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xf34c (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 17912 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:29:55.579333
    Time delta from previous packet: 1.617909 seconds
    Time relative to first packet: 539.328370 seconds
    Frame Number: 17912
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x2bf5
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xf34b (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 17913 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:29:58.815481
    Time delta from previous packet: 3.236148 seconds
    Time relative to first packet: 542.564518 seconds
    Frame Number: 17913
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x2bf6
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xf34a (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 17914 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:30:05.287981
    Time delta from previous packet: 6.472500 seconds
    Time relative to first packet: 549.037018 seconds
    Frame Number: 17914
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b1
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xec8f (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 17915 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:30:18.232545
    Time delta from previous packet: 12.944564 seconds
    Time relative to first packet: 561.981582 seconds
    Frame Number: 17915
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b2
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xec8e (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 17916 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:30:44.121706
    Time delta from previous packet: 25.889161 seconds
    Time relative to first packet: 587.870743 seconds
    Frame Number: 17916
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b3
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xec8d (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 17917 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:31:35.900272
    Time delta from previous packet: 51.778566 seconds
    Time relative to first packet: 639.649309 seconds
    Frame Number: 17917
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b4
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xec8c (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 17918 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 09:32:35.829250
    Time delta from previous packet: 59.928978 seconds
    Time relative to first packet: 699.578287 seconds
    Frame Number: 17918
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b5
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0xec8b (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0xcecc (correct)
Data (1460 bytes)


Frame 17919 (97 on wire, 97 captured)
    Arrival Time: Oct 11, 2002 09:32:35.829528
    Time delta from previous packet: 0.000278 seconds
    Time relative to first packet: 699.578565 seconds
    Frame Number: 17919
    Packet Length: 97 bytes
    Capture Length: 97 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:10:e1:f0 (00:03:ba:10:e1:f0)
    Type: IP (0x0800)
    Trailer: 00000000000000000000000000000000...
Internet Protocol, Src Addr: 10.150.0.8 (10.150.0.8), Dst Addr: 10.10.2.52 (10.10.2.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0d23
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x16be (correct)
    Source: 10.150.0.8 (10.150.0.8)
    Destination: 10.10.2.52 (10.10.2.52)
Transmission Control Protocol, Src Port: 1022 (1022), Dst Port: 2049 (2049), Seq: 92857068, Ack: 991588276
    Source port: 1022 (1022)
    Destination port: 2049 (2049)
    Sequence number: 92857068
    Acknowledgement number: 991588276
    Header length: 40 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x41d4 (correct)
    Options: (20 bytes)
        NOP
        NOP
        SACK:
            left edge = 991594116, right edge = 991597036
            left edge = 991591196, right edge = 991592656


Frame 18821 (74 on wire, 74 captured)
    Arrival Time: Oct 11, 2002 08:30:36.869912
    Time delta from previous packet: 0.000016 seconds
    Time relative to first packet: 535.144095 seconds
    Frame Number: 18821
    Packet Length: 74 bytes
    Capture Length: 74 bytes
Ethernet II
    Destination: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.150.0.8 (10.150.0.8), Dst Addr: 10.10.2.52 (10.10.2.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0d22
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0x17bf (correct)
    Source: 10.150.0.8 (10.150.0.8)
    Destination: 10.10.2.52 (10.10.2.52)
Transmission Control Protocol, Src Port: 1022 (1022), Dst Port: 2049 (2049), Seq: 92857068, Ack: 991586816
    Source port: 1022 (1022)
    Destination port: 2049 (2049)
    Sequence number: 92857068
    Acknowledgement number: 991586816
    Header length: 40 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x4788 (correct)
    Options: (20 bytes)
        NOP
        NOP
        SACK:
            left edge = 991594116, right edge = 991597036
            left edge = 991591196, right edge = 991592656

Frame 18822 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:30:37.256963
    Time delta from previous packet: 0.387051 seconds
    Time relative to first packet: 535.531146 seconds
    Frame Number: 18822
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x2bf3
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xf24d (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18823 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:30:38.066941
    Time delta from previous packet: 0.809978 seconds
    Time relative to first packet: 536.341124 seconds
    Frame Number: 18823
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x2bf4
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xf24c (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18824 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:30:39.686922
    Time delta from previous packet: 1.619981 seconds
    Time relative to first packet: 537.961105 seconds
    Frame Number: 18824
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x2bf5
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xf24b (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18825 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:30:42.926907
    Time delta from previous packet: 3.239985 seconds
    Time relative to first packet: 541.201090 seconds
    Frame Number: 18825
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x2bf6
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xf24a (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18826 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:30:49.406988
    Time delta from previous packet: 6.480081 seconds
    Time relative to first packet: 547.681171 seconds
    Frame Number: 18826
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b1
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xeb8f (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18827 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:31:02.366861
    Time delta from previous packet: 12.959873 seconds
    Time relative to first packet: 560.641044 seconds
    Frame Number: 18827
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b2
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xeb8e (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18828 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:31:28.286582
    Time delta from previous packet: 25.919721 seconds
    Time relative to first packet: 586.560765 seconds
    Frame Number: 18828
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b3
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xeb8d (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18829 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:32:20.126191
    Time delta from previous packet: 51.839609 seconds
    Time relative to first packet: 638.400374 seconds
    Frame Number: 18829
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b4
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xeb8c (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18830 (1514 on wire, 1514 captured)
    Arrival Time: Oct 11, 2002 08:33:20.125748
    Time delta from previous packet: 59.999557 seconds
    Time relative to first packet: 698.399931 seconds
    Frame Number: 18830
    Packet Length: 1514 bytes
    Capture Length: 1514 bytes
Ethernet II
    Destination: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Source: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.10.2.52 (10.10.2.52), Dst Addr: 10.150.0.8 (10.150.0.8)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0x32b5
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xeb8b (correct)
    Source: 10.10.2.52 (10.10.2.52)
    Destination: 10.150.0.8 (10.150.0.8)
Transmission Control Protocol, Src Port: 2049 (2049), Dst Port: 1022 (1022), Seq: 991586816, Ack: 92857068
    Source port: 2049 (2049)
    Destination port: 1022 (1022)
    Sequence number: 991586816
    Next sequence number: 991588276
    Acknowledgement number: 92857068
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x1caa (incorrect, should be 0xcecc)
Data (1460 bytes)


Frame 18831 (74 on wire, 74 captured)
    Arrival Time: Oct 11, 2002 08:33:20.127233
    Time delta from previous packet: 0.001485 seconds
    Time relative to first packet: 698.401416 seconds
    Frame Number: 18831
    Packet Length: 74 bytes
    Capture Length: 74 bytes
Ethernet II
    Destination: 00:03:ba:12:64:3f (00:03:ba:12:64:3f)
    Source: 00:08:21:90:58:c2 (00:08:21:90:58:c2)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 10.150.0.8 (10.150.0.8), Dst Addr: 10.10.2.52 (10.10.2.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0d23
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: TCP (0x06)
    Header checksum: 0x17be (correct)
    Source: 10.150.0.8 (10.150.0.8)
    Destination: 10.10.2.52 (10.10.2.52)
Transmission Control Protocol, Src Port: 1022 (1022), Dst Port: 2049 (2049), Seq: 92857068, Ack: 991588276
    Source port: 1022 (1022)
    Destination port: 2049 (2049)
    Sequence number: 92857068
    Acknowledgement number: 991588276
    Header length: 40 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 24820
    Checksum: 0x41d4 (correct)
    Options: (20 bytes)
        NOP
        NOP
        SACK:
            left edge = 991594116, right edge = 991597036
            left edge = 991591196, right edge = 991592656