root@tyr23:~# tshark -n -V -f 'host 10.4.11.

22'
tshark: Lua: Error during loading:
[string "/usr/share/wireshark/init.lua"]:45: dofile has been disabled
Running as user "root" and group "root". This could be dangerous.
Capturing on eth0
Frame 1: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) on interface
0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:06.572697000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340926.572697000 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 42 bytes (336 bits)
Capture Length: 42 bytes (336 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:arp]
Ethernet II, Src: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4), Dst: ff:ff:ff:ff:ff:ff
(ff:ff:ff:ff:ff:ff)
Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
Address: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
.... ..1. .... .... .... .... = LG bit: Locally administered address (th
is is NOT the factory default)
.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadca
st)
Source: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: ARP (0x0806)
Address Resolution Protocol (request)
Hardware type: Ethernet (1)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (1)
Sender MAC address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Sender IP address: 10.4.11.23 (10.4.11.23)
Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00)
Target IP address: 10.4.11.22 (10.4.11.22)
Frame 2: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface
0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:06.572868000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340926.572868000 seconds
[Time delta from previous captured frame: 0.000171000 seconds]
[Time delta from previous displayed frame: 0.000171000 seconds]
[Time since reference or first frame: 0.000171000 seconds]
Frame Number: 2
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]

[Frame is ignored: False]

[Protocols in frame: eth:arp]
Ethernet II, Src: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04), Dst: 90:2b:34:6d:5f:d4
(90:2b:34:6d:5f:d4)
Destination: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: ARP (0x0806)
Padding: 000000000000000000000000000000000000
Address Resolution Protocol (reply)
Hardware type: Ethernet (1)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: reply (2)
Sender MAC address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Sender IP address: 10.4.11.22 (10.4.11.22)
Target MAC address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Target IP address: 10.4.11.23 (10.4.11.23)
Frame 3: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interface
0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:06.572878000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340926.572878000 seconds
[Time delta from previous captured frame: 0.000010000 seconds]
[Time delta from previous displayed frame: 0.000010000 seconds]
[Time since reference or first frame: 0.000181000 seconds]
Frame Number: 3
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:icmp:data]
Ethernet II, Src: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4), Dst: 90:2b:34:8d:2c:04
(90:2b:34:8d:2c:04)
Destination: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.4.11.23 (10.4.11.23), Dst: 10.4.11.22 (10.4
.11.22)
Version: 4
Header length: 20 bytes

Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT
(Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable T
ransport) (0x00)
Total Length: 84
Identification: 0x2900 (10496)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0xe774 [correct]
[Good: True]
[Bad: False]
Source: 10.4.11.23 (10.4.11.23)
Destination: 10.4.11.22 (10.4.11.22)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol
Type: 8 (Echo (ping) request)
Code: 0
Checksum: 0x5137 [correct]
Identifier (BE): 3966 (0x0f7e)
Identifier (LE): 32271 (0x7e0f)
Sequence number (BE): 1 (0x0001)
Sequence number (LE): 256 (0x0100)
Timestamp from icmp data: Mar 20, 2014 15:42:06.572666000 ART
[Timestamp from icmp data (relative): 0.000212000 seconds]
Data (48 bytes)
0000 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 ................
0010 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 ........ !"#$%&'
0020 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 ()*+,-./01234567
Data: 08090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f...
[Length: 48]
Frame 4: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interface
0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:06.572990000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340926.572990000 seconds
[Time delta from previous captured frame: 0.000112000 seconds]
[Time delta from previous displayed frame: 0.000112000 seconds]
[Time since reference or first frame: 0.000293000 seconds]
Frame Number: 4
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:icmp:data]
Ethernet II, Src: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04), Dst: 90:2b:34:6d:5f:d4
(90:2b:34:6d:5f:d4)
Destination: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory

default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.4.11.22 (10.4.11.22), Dst: 10.4.11.23 (10.4
.11.23)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT
(Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable T
ransport) (0x00)
Total Length: 84
Identification: 0x1df1 (7665)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0x3284 [correct]
[Good: True]
[Bad: False]
Source: 10.4.11.22 (10.4.11.22)
Destination: 10.4.11.23 (10.4.11.23)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol
Type: 0 (Echo (ping) reply)
Code: 0
Checksum: 0x5937 [correct]
Identifier (BE): 3966 (0x0f7e)
Identifier (LE): 32271 (0x7e0f)
Sequence number (BE): 1 (0x0001)
Sequence number (LE): 256 (0x0100)
[Response To: 3]
[Response Time: 0,112 ms]
Timestamp from icmp data: Mar 20, 2014 15:42:06.572666000 ART
[Timestamp from icmp data (relative): 0.000324000 seconds]
Data (48 bytes)
0000 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 ................
0010 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 ........ !"#$%&'
0020 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 ()*+,-./01234567
Data: 08090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f...
[Length: 48]
Frame 5: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interface
0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:07.571685000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340927.571685000 seconds

[Time delta from previous captured frame: 0.998695000 seconds]

[Time delta from previous displayed frame: 0.998695000 seconds]
[Time since reference or first frame: 0.998988000 seconds]
Frame Number: 5
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:icmp:data]
Ethernet II, Src: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4), Dst: 90:2b:34:8d:2c:04
(90:2b:34:8d:2c:04)
Destination: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.4.11.23 (10.4.11.23), Dst: 10.4.11.22 (10.4
.11.22)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT
(Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable T
ransport) (0x00)
Total Length: 84
Identification: 0x2901 (10497)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0xe773 [correct]
[Good: True]
[Bad: False]
Source: 10.4.11.23 (10.4.11.23)
Destination: 10.4.11.22 (10.4.11.22)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol
Type: 8 (Echo (ping) request)
Code: 0
Checksum: 0x333a [correct]
Identifier (BE): 3966 (0x0f7e)
Identifier (LE): 32271 (0x7e0f)
Sequence number (BE): 2 (0x0002)
Sequence number (LE): 512 (0x0200)
Timestamp from icmp data: Mar 20, 2014 15:42:07.571671000 ART
[Timestamp from icmp data (relative): 0.000014000 seconds]
Data (48 bytes)
0000 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17

................

0010 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 ........ !"#$%&'

0020 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 ()*+,-./01234567
Data: 08090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f...
[Length: 48]
Frame 6: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interface
0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:07.571866000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340927.571866000 seconds
[Time delta from previous captured frame: 0.000181000 seconds]
[Time delta from previous displayed frame: 0.000181000 seconds]
[Time since reference or first frame: 0.999169000 seconds]
Frame Number: 6
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:icmp:data]
Ethernet II, Src: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04), Dst: 90:2b:34:6d:5f:d4
(90:2b:34:6d:5f:d4)
Destination: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.4.11.22 (10.4.11.22), Dst: 10.4.11.23 (10.4
.11.23)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT
(Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable T
ransport) (0x00)
Total Length: 84
Identification: 0x1df2 (7666)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0x3283 [correct]
[Good: True]
[Bad: False]
Source: 10.4.11.22 (10.4.11.22)
Destination: 10.4.11.23 (10.4.11.23)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol

Type: 0 (Echo (ping) reply)

Code: 0
Checksum: 0x3b3a [correct]
Identifier (BE): 3966 (0x0f7e)
Identifier (LE): 32271 (0x7e0f)
Sequence number (BE): 2 (0x0002)
Sequence number (LE): 512 (0x0200)
[Response To: 5]
[Response Time: 0,181 ms]
Timestamp from icmp data: Mar 20, 2014 15:42:07.571671000 ART
[Timestamp from icmp data (relative): 0.000195000 seconds]
Data (48 bytes)
0000 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 ................
0010 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 ........ !"#$%&'
0020 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 ()*+,-./01234567
Data: 08090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f...
[Length: 48]
Frame 7: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interface
0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:08.570691000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340928.570691000 seconds
[Time delta from previous captured frame: 0.998825000 seconds]
[Time delta from previous displayed frame: 0.998825000 seconds]
[Time since reference or first frame: 1.997994000 seconds]
Frame Number: 7
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:icmp:data]
Ethernet II, Src: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4), Dst: 90:2b:34:8d:2c:04
(90:2b:34:8d:2c:04)
Destination: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.4.11.23 (10.4.11.23), Dst: 10.4.11.22 (10.4
.11.22)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT
(Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable T
ransport) (0x00)
Total Length: 84
Identification: 0x2902 (10498)
Flags: 0x02 (Don't Fragment)

0... .... = Reserved bit: Not set

.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0xe772 [correct]
[Good: True]
[Bad: False]
Source: 10.4.11.23 (10.4.11.23)
Destination: 10.4.11.22 (10.4.11.22)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol
Type: 8 (Echo (ping) request)
Code: 0
Checksum: 0x163d [correct]
Identifier (BE): 3966 (0x0f7e)
Identifier (LE): 32271 (0x7e0f)
Sequence number (BE): 3 (0x0003)
Sequence number (LE): 768 (0x0300)
Timestamp from icmp data: Mar 20, 2014 15:42:08.570675000 ART
[Timestamp from icmp data (relative): 0.000016000 seconds]
Data (48 bytes)
0000 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 ................
0010 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 ........ !"#$%&'
0020 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 ()*+,-./01234567
Data: 08090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f...
[Length: 48]
Frame 8: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interface
0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:08.570873000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340928.570873000 seconds
[Time delta from previous captured frame: 0.000182000 seconds]
[Time delta from previous displayed frame: 0.000182000 seconds]
[Time since reference or first frame: 1.998176000 seconds]
Frame Number: 8
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:icmp:data]
Ethernet II, Src: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04), Dst: 90:2b:34:6d:5f:d4
(90:2b:34:6d:5f:d4)
Destination: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)

Internet Protocol Version 4, Src: 10.4.11.22 (10.4.11.22), Dst: 10.4.11.23 (10.4

.11.23)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT
(Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable T
ransport) (0x00)
Total Length: 84
Identification: 0x1df3 (7667)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0x3282 [correct]
[Good: True]
[Bad: False]
Source: 10.4.11.22 (10.4.11.22)
Destination: 10.4.11.23 (10.4.11.23)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol
Type: 0 (Echo (ping) reply)
Code: 0
Checksum: 0x1e3d [correct]
Identifier (BE): 3966 (0x0f7e)
Identifier (LE): 32271 (0x7e0f)
Sequence number (BE): 3 (0x0003)
Sequence number (LE): 768 (0x0300)
[Response To: 7]
[Response Time: 0,182 ms]
Timestamp from icmp data: Mar 20, 2014 15:42:08.570675000 ART
[Timestamp from icmp data (relative): 0.000198000 seconds]
Data (48 bytes)
0000 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 ................
0010 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 ........ !"#$%&'
0020 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 ()*+,-./01234567
Data: 08090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f...
[Length: 48]
^CFrame 9: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interfac
e 0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:09.569821000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340929.569821000 seconds
[Time delta from previous captured frame: 0.998948000 seconds]
[Time delta from previous displayed frame: 0.998948000 seconds]
[Time since reference or first frame: 2.997124000 seconds]
Frame Number: 9
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]

[Protocols in frame: eth:ip:icmp:data]

Ethernet II, Src: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4), Dst: 90:2b:34:8d:2c:04
(90:2b:34:8d:2c:04)
Destination: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.4.11.23 (10.4.11.23), Dst: 10.4.11.22 (10.4
.11.22)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT
(Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable T
ransport) (0x00)
Total Length: 84
Identification: 0x2903 (10499)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0xe771 [correct]
[Good: True]
[Bad: False]
Source: 10.4.11.23 (10.4.11.23)
Destination: 10.4.11.22 (10.4.11.22)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol
Type: 8 (Echo (ping) request)
Code: 0
Checksum: 0x7b3f [correct]
Identifier (BE): 3966 (0x0f7e)
Identifier (LE): 32271 (0x7e0f)
Sequence number (BE): 4 (0x0004)
Sequence number (LE): 1024 (0x0400)
Timestamp from icmp data: Mar 20, 2014 15:42:09.569805000 ART
[Timestamp from icmp data (relative): 0.000016000 seconds]
Data (48 bytes)
0000 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 ................
0010 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 ........ !"#$%&'
0020 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 ()*+,-./01234567
Data: 08090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f...
[Length: 48]
Frame 10: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) on interface
0
Interface id: 0

WTAP_ENCAP: 1
Arrival Time: Mar 20, 2014 15:42:09.570010000 ART
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1395340929.570010000 seconds
[Time delta from previous captured frame: 0.000189000 seconds]
[Time delta from previous displayed frame: 0.000189000 seconds]
[Time since reference or first frame: 2.997313000 seconds]
Frame Number: 10
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:icmp:data]
Ethernet II, Src: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04), Dst: 90:2b:34:6d:5f:d4
(90:2b:34:6d:5f:d4)
Destination: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
Address: 90:2b:34:6d:5f:d4 (90:2b:34:6d:5f:d4)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
Address: 90:2b:34:8d:2c:04 (90:2b:34:8d:2c:04)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory
default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.4.11.22 (10.4.11.22), Dst: 10.4.11.23 (10.4
.11.23)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT
(Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable T
ransport) (0x00)
Total Length: 84
Identification: 0x1df4 (7668)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: ICMP (1)
Header checksum: 0x3281 [correct]
[Good: True]
[Bad: False]
Source: 10.4.11.22 (10.4.11.22)
Destination: 10.4.11.23 (10.4.11.23)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Internet Control Message Protocol
Type: 0 (Echo (ping) reply)
Code: 0
Checksum: 0x833f [correct]
Identifier (BE): 3966 (0x0f7e)
Identifier (LE): 32271 (0x7e0f)
Sequence number (BE): 4 (0x0004)
Sequence number (LE): 1024 (0x0400)
[Response To: 9]

[Response Time: 0,189 ms]

Timestamp from icmp data: Mar 20, 2014 15:42:09.569805000 ART
[Timestamp from icmp data (relative): 0.000205000 seconds]
Data (48 bytes)
0000 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 ................
0010 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 ........ !"#$%&'
0020 28 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 ()*+,-./01234567
Data: 08090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f...
[Length: 48]
10 packets captured
root@tyr23:~#