ssh v4.2p1 IPv6 TCP checksum error
From: J. K. Cliburn (jcliburn_at_gmail.com)
Date: 11/11/05
- Previous message: elanthis_at_awesomeplay.com: "Re: Re: passwordless login with heimdal (kerberos) on openssh 4.2p1"
- Next in thread: J. K. Cliburn: "SOLVED: Re: ssh v4.2p1 IPv6 TCP checksum error"
- Reply: J. K. Cliburn: "SOLVED: Re: ssh v4.2p1 IPv6 TCP checksum error"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 11 Nov 2005 08:14:47 -0600 To: secureshell@securityfocus.com
First post to this list... This is LONG, and for that I apologize,
but I'm out of ideas and I want to include sufficient detail. I'll be
hugely grateful for any tips or pointers in the right direction.
I cannot get ssh to work over IPv6 between two IPv6-enabled FC4 hosts
on my home network, each configured with site-local IPv6 addresses. I
repeatedly encounter TCP checksum errors (described in detail below).
Things I've tried so far:
* kernel 2.6.13-1.1532_FC4 (server and client)
* kernel 2.6.13-1.1456_FC4 (server and client)
* kernel 2.6.12-1.1390_FC4 (server and client)
* kernel 2.6.12-1.1369_FC4 (server and client)
* ssh v4.2p1 rpm from fedora.redhat.com
* ssh v4.2p1 source from openssh.org (Note 1)
* usagi telnetd/telnet/inetd source (Note 2)
* usagi telnetd/telnet/inetd rpm packages (Note 2)
Note 1: I had to build openssh4.2p1 with the zlib check turned off
because Fedora still uses version 1.2.2.2. (Could this cause what I'm
experiencing?)
Note 2: I tried using the usagi stuff just to have SOMETHING to
verify whether TCP over IPv6 would work at all, but I had problems
either building or installing. Building the source resulted in one
error after another. After fixing a half dozen or so, I finally gave
up. Using the rpm, I found the binaries were so old (circa 2002),
they were incompatible with my OS. Finding an IPv6-enabled telnet is
harder than I thought it'd be; I still don't have one.
What DOES work: I can ping6 either host from the other host.
traceroute6 works between the hosts. Also, a simple IPv6 TCP
client-server application from Stephens "Unix Network Programming Vol.
1" works just fine; the client issues a connect, and the server
responds with the output of the "date" command. This little program
is important to me because it indicates that TCP over IPv6 works in at
least one instance, thus clearing the kernel of suspicion (I think).
Okay, on to the ssh problem... The client in this case is an FC4
x86_64 running 2.6.13-1.1532_FC4, and the server is an FC4 i386 also
running 2.6.13-1.1532_FC4, although the problem occurs no matter which
system is client or server. Both systems are running openssh
4.2p1-fc4.1 from the Fedora updates-released repo. In the stuff that
follows, the client and server can be identified by the last 4 digits
of their respective IPv6 addresses as follows:
client: 9069
server: 6dda
Basically, what's happening is the client and server execute the TCP
3-way handshake in frames 3, 4, and 5. Then in frame 6 the server
asserts its ssh protocol preference (protocol 2), to which the client
acks in frame 7. In frame 8 the trouble begins. The client asserts
that it, too, can speak protocol 2, but that frame suffers a TCP
checksum error. Frames 9, 10, 11, 13, 14, 15, 16, 17, and 25 are
retransmissions of frame 8, each bearing a checksum error. Oddly, the
"incorrect" checksum value remains constant at 0x5d72, while the
"should be" value is all over the map. At frame 32 the server throws
up its arms in dismay and issues a FIN,ACK and closes the connection.
Capturing on eth0
Frame 1 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.682499000
Time delta from previous packet: 0.000000000 seconds
Time since reference or first frame: 0.000000000 seconds
Frame Number: 1
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
IPv6-Neighbor-Discovery_ff:82:6d:da (33:33:ff:82:6d:da)
Destination: IPv6-Neighbor-Discovery_ff:82:6d:da (33:33:ff:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: ff02::1:ff82:6dda (ff02::1:ff82:6dda)
Internet Control Message Protocol v6
Type: 135 (Neighbor solicitation)
Code: 0
Checksum: 0x8f61 [correct]
Target: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
ICMPv6 options
Type: 1 (Source link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 2 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.682623000
Time delta from previous packet: 0.000124000 seconds
Time since reference or first frame: 0.000124000 seconds
Frame Number: 2
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Destination address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Internet Control Message Protocol v6
Type: 136 (Neighbor advertisement)
Code: 0
Checksum: 0x3a90 [correct]
Flags: 0x60000000
0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited
..1. .... .... .... .... .... .... .... = Override
Target: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
ICMPv6 options
Type: 2 (Target link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:b0:d0:82:6d:da
Frame 3 (94 bytes on wire, 94 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.682638000
Time delta from previous packet: 0.000015000 seconds
Time since reference or first frame: 0.000139000 seconds
Frame Number: 3
Packet Length: 94 bytes
Capture Length: 94 bytes
Protocols in frame: eth:ipv6:tcp
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 40
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 0, Ack: 0, Len: 0
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5760
Checksum: 0x0446 [correct]
Options: (20 bytes)
Maximum segment size: 1440 bytes
SACK permitted
Time stamp: tsval 1894413, tsecr 0
NOP
Window scale: 2 (multiply by 4)
Frame 4 (94 bytes on wire, 94 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.682754000
Time delta from previous packet: 0.000116000 seconds
Time since reference or first frame: 0.000255000 seconds
Frame Number: 4
Packet Length: 94 bytes
Capture Length: 94 bytes
Protocols in frame: eth:ipv6:tcp
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 40
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Destination address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 41335
(41335), Seq: 0, Ack: 1, Len: 0
Source port: ssh (22)
Destination port: 41335 (41335)
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 40 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5712
Checksum: 0x99fe [correct]
Options: (20 bytes)
Maximum segment size: 1440 bytes
SACK permitted
Time stamp: tsval 1142800, tsecr 1894413
NOP
Window scale: 2 (multiply by 4)
SEQ/ACK analysis
This is an ACK to the segment in frame: 3
The RTT to ACK the segment was: 0.000116000 seconds
Frame 5 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.682772000
Time delta from previous packet: 0.000018000 seconds
Time since reference or first frame: 0.000273000 seconds
Frame Number: 5
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:tcp
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 1, Len: 0
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0xd960 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1894414, tsecr 1142800
SEQ/ACK analysis
This is an ACK to the segment in frame: 4
The RTT to ACK the segment was: 0.000018000 seconds
Frame 6 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.699957000
Time delta from previous packet: 0.017185000 seconds
Time since reference or first frame: 0.017458000 seconds
Frame Number: 6
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Destination address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 41335
(41335), Seq: 1, Ack: 1, Len: 20
Source port: ssh (22)
Destination port: 41335 (41335)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5712 (scaled)
Checksum: 0x24a7 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1142804, tsecr 1894414
SSH Protocol
Protocol: SSH-2.0-OpenSSH_4.2\n
Frame 7 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.710663000
Time delta from previous packet: 0.010706000 seconds
Time since reference or first frame: 0.028164000 seconds
Frame Number: 7
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:tcp
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 0
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0xd941 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1894421, tsecr 1142804
SEQ/ACK analysis
This is an ACK to the segment in frame: 6
The RTT to ACK the segment was: 0.010706000 seconds
Frame 8 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.710788000
Time delta from previous packet: 0.000125000 seconds
Time since reference or first frame: 0.028289000 seconds
Frame Number: 8
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0x2480]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1894421, tsecr 1142804
SSH Protocol
Protocol: SSH-2.0-OpenSSH_4.2\n
Frame 9 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:29.914480000
Time delta from previous packet: 0.203692000 seconds
Time since reference or first frame: 0.231981000 seconds
Frame Number: 9
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0x244d]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1894472, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 0.203692000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Overly large number 0x5353482d
Padding Length: 50
Key Exchange
Msg code: Unknown (46) (46)
Algorithms
[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 10 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:30.322506000
Time delta from previous packet: 0.408026000 seconds
Time since reference or first frame: 0.640007000 seconds
Frame Number: 10
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0x23e7]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1894574, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 0.611718000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Overly large number 0x5353482d
Padding Length: 50
Key Exchange
Msg code: Unknown (46) (46)
[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 11 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:31.138557000
Time delta from previous packet: 0.816051000 seconds
Time since reference or first frame: 1.456058000 seconds
Frame Number: 11
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0x231b]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1894778, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 1.427769000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Overly large number 0x5353482d
Padding Length: 50
Key Exchange
Msg code: Unknown (46) (46)
[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 12 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 9, 2005 20:46:32.085446000
Time delta from previous packet: 0.946889000 seconds
Time since reference or first frame: 2.402947000 seconds
Frame Number: 12
Packet Length: 60 bytes
Capture Length: 60 bytes
Protocols in frame: eth:arp
Ethernet II, Src: DellComp_60:3f:db (00:b0:d0:60:3f:db), Dst:
Broadcast (ff:ff:ff:ff:ff:ff)
Destination: Broadcast (ff:ff:ff:ff:ff:ff)
Source: DellComp_60:3f:db (00:b0:d0:60:3f:db)
Type: ARP (0x0806)
Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
Sender MAC address: DellComp_60:3f:db (00:b0:d0:60:3f:db)
Sender IP address: 192.168.1.1 (192.168.1.1)
Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
Target IP address: 192.168.1.4 (192.168.1.4)
Frame 13 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:32.770679000
Time delta from previous packet: 0.685233000 seconds
Time since reference or first frame: 3.088180000 seconds
Frame Number: 13
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0x2183]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1895186, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 3.059891000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Overly large number 0x5353482d
Padding Length: 50
Key Exchange
Msg code: Unknown (46) (46)
[Unreassembled Packet [incorrect TCP checksum]: SSH]
Frame 14 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:36.034868000
Time delta from previous packet: 3.264189000 seconds
Time since reference or first frame: 6.352369000 seconds
Frame Number: 14
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0x1e53]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1896002, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 6.324080000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Encrypted Packet: 5353482D322E302D4F70656E5353485F342E320A
Frame 15 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:42.563274000
Time delta from previous packet: 6.528406000 seconds
Time since reference or first frame: 12.880775000 seconds
Frame Number: 15
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0x17f3]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1897634, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 12.852486000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Encrypted Packet: 5353482D322E302D4F70656E5353485F342E320A
Frame 16 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:46:55.620091000
Time delta from previous packet: 13.056817000 seconds
Time since reference or first frame: 25.937592000 seconds
Frame Number: 16
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0x0b33]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1900898, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 25.909303000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Encrypted Packet: 5353482D322E302D4F70656E5353485F342E320A
Frame 17 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:47:21.733723000
Time delta from previous packet: 26.113632000 seconds
Time since reference or first frame: 52.051224000 seconds
Frame Number: 17
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0xf1b2]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1907426, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 52.022935000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Encrypted Packet: 5353482D322E302D4F70656E5353485F342E320A
Frame 18 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:47:26.734031000
Time delta from previous packet: 5.000308000 seconds
Time since reference or first frame: 57.051532000 seconds
Frame Number: 18
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Internet Control Message Protocol v6
Type: 135 (Neighbor solicitation)
Code: 0
Checksum: 0xbd34 [correct]
Target: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
ICMPv6 options
Type: 1 (Source link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 19 (78 bytes on wire, 78 bytes captured)
Arrival Time: Nov 9, 2005 20:47:26.734162000
Time delta from previous packet: 0.000131000 seconds
Time since reference or first frame: 57.051663000 seconds
Frame Number: 19
Packet Length: 78 bytes
Capture Length: 78 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 24
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Destination address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Internet Control Message Protocol v6
Type: 136 (Neighbor advertisement)
Code: 0
Checksum: 0x9be6 [correct]
Flags: 0x40000000
0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited
..0. .... .... .... .... .... .... .... = Not override
Target: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Frame 20 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:47:31.732963000
Time delta from previous packet: 4.998801000 seconds
Time since reference or first frame: 62.050464000 seconds
Frame Number: 20
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Destination address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Internet Control Message Protocol v6
Type: 135 (Neighbor solicitation)
Code: 0
Checksum: 0xbdb4 [correct]
Target: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
ICMPv6 options
Type: 1 (Source link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:b0:d0:82:6d:da
Frame 21 (78 bytes on wire, 78 bytes captured)
Arrival Time: Nov 9, 2005 20:47:31.732998000
Time delta from previous packet: 0.000035000 seconds
Time since reference or first frame: 62.050499000 seconds
Frame Number: 21
Packet Length: 78 bytes
Capture Length: 78 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 24
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Destination address: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Internet Control Message Protocol v6
Type: 136 (Neighbor advertisement)
Code: 0
Checksum: 0xbcca [correct]
Flags: 0x40000000
0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited
..0. .... .... .... .... .... .... .... = Not override
Target: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Frame 22 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:47:36.730657000
Time delta from previous packet: 4.997659000 seconds
Time since reference or first frame: 67.048158000 seconds
Frame Number: 22
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Destination address: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Internet Control Message Protocol v6
Type: 135 (Neighbor solicitation)
Code: 0
Checksum: 0xbdb4 [correct]
Target: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
ICMPv6 options
Type: 1 (Source link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 23 (78 bytes on wire, 78 bytes captured)
Arrival Time: Nov 9, 2005 20:47:36.730778000
Time delta from previous packet: 0.000121000 seconds
Time since reference or first frame: 67.048279000 seconds
Frame Number: 23
Packet Length: 78 bytes
Capture Length: 78 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 24
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Destination address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Internet Control Message Protocol v6
Type: 136 (Neighbor advertisement)
Code: 0
Checksum: 0x9c66 [correct]
Flags: 0x40000000
0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited
..0. .... .... .... .... .... .... .... = Not override
Target: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Frame 24 (110 bytes on wire, 110 bytes captured)
Arrival Time: Nov 9, 2005 20:47:37.719072000
Time delta from previous packet: 0.988294000 seconds
Time since reference or first frame: 68.036573000 seconds
Frame Number: 24
Packet Length: 110 bytes
Capture Length: 110 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
IPv6-Neighbor-Discovery_00:00:00:01 (33:33:00:00:00:01)
Destination: IPv6-Neighbor-Discovery_00:00:00:01 (33:33:00:00:00:01)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 56
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Destination address: ff02::1 (ff02::1)
Internet Control Message Protocol v6
Type: 134 (Router advertisement)
Code: 0
Checksum: 0xf25e [correct]
Cur hop limit: 64
Flags: 0x00
0... .... = Not managed
.0.. .... = Not other
..0. .... = Not Home Agent
...0 0... = Router preference: Medium
Router lifetime: 0
Reachable time: 0
Retrans time: 0
ICMPv6 options
Type: 3 (Prefix information)
Length: 32 bytes (4)
Prefix length: 64
Flags: 0xe0
1... .... = Onlink
.1.. .... = Auto
..1. .... = Router Address
...0 .... = Not site prefix
Valid lifetime: 0x00278d00
Preferred lifetime: 0x00093a80
Prefix: fec0::
ICMPv6 options
Type: 1 (Source link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 25 (106 bytes on wire, 106 bytes captured)
Arrival Time: Nov 9, 2005 20:48:13.961000000
Time delta from previous packet: 36.241928000 seconds
Time since reference or first frame: 104.278501000 seconds
Frame Number: 25
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 52
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 1, Ack: 21, Len: 20
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 1 (relative sequence number)
Next sequence number: 21 (relative sequence number)
Acknowledgement number: 21 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0x5d72 [incorrect, should be 0xbeb2]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1920482, tsecr 1142804
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 104.250212000 seconds
RTO based on delta from frame: 8
SSH Protocol
SSH Version 2
Encrypted Packet: 5353482D322E302D4F70656E5353485F342E320A
Frame 26 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:48:18.961294000
Time delta from previous packet: 5.000294000 seconds
Time since reference or first frame: 109.278795000 seconds
Frame Number: 26
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Internet Control Message Protocol v6
Type: 135 (Neighbor solicitation)
Code: 0
Checksum: 0xbd34 [correct]
Target: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
ICMPv6 options
Type: 1 (Source link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 27 (78 bytes on wire, 78 bytes captured)
Arrival Time: Nov 9, 2005 20:48:18.961423000
Time delta from previous packet: 0.000129000 seconds
Time since reference or first frame: 109.278924000 seconds
Frame Number: 27
Packet Length: 78 bytes
Capture Length: 78 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 24
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Destination address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Internet Control Message Protocol v6
Type: 136 (Neighbor advertisement)
Code: 0
Checksum: 0x9be6 [correct]
Flags: 0x40000000
0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited
..0. .... .... .... .... .... .... .... = Not override
Target: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Frame 28 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:48:23.958529000
Time delta from previous packet: 4.997106000 seconds
Time since reference or first frame: 114.276030000 seconds
Frame Number: 28
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Destination address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Internet Control Message Protocol v6
Type: 135 (Neighbor solicitation)
Code: 0
Checksum: 0xbdb4 [correct]
Target: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
ICMPv6 options
Type: 1 (Source link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:b0:d0:82:6d:da
Frame 29 (78 bytes on wire, 78 bytes captured)
Arrival Time: Nov 9, 2005 20:48:23.958562000
Time delta from previous packet: 0.000033000 seconds
Time since reference or first frame: 114.276063000 seconds
Frame Number: 29
Packet Length: 78 bytes
Capture Length: 78 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 24
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Destination address: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Internet Control Message Protocol v6
Type: 136 (Neighbor advertisement)
Code: 0
Checksum: 0xbcca [correct]
Flags: 0x40000000
0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited
..0. .... .... .... .... .... .... .... = Not override
Target: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Frame 30 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:48:28.957920000
Time delta from previous packet: 4.999358000 seconds
Time since reference or first frame: 119.275421000 seconds
Frame Number: 30
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Destination address: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Internet Control Message Protocol v6
Type: 135 (Neighbor solicitation)
Code: 0
Checksum: 0xbdb4 [correct]
Target: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
ICMPv6 options
Type: 1 (Source link-layer address)
Length: 8 bytes (1)
Link-layer address: 00:50:8d:ef:90:69
Frame 31 (78 bytes on wire, 78 bytes captured)
Arrival Time: Nov 9, 2005 20:48:28.958044000
Time delta from previous packet: 0.000124000 seconds
Time since reference or first frame: 119.275545000 seconds
Frame Number: 31
Packet Length: 78 bytes
Capture Length: 78 bytes
Protocols in frame: eth:ipv6:icmpv6
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 24
Next header: ICMPv6 (0x3a)
Hop limit: 255
Source address: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Destination address: fe80::250:8dff:feef:9069 (fe80::250:8dff:feef:9069)
Internet Control Message Protocol v6
Type: 136 (Neighbor advertisement)
Code: 0
Checksum: 0x9c66 [correct]
Flags: 0x40000000
0... .... .... .... .... .... .... .... = Not router
.1.. .... .... .... .... .... .... .... = Solicited
..0. .... .... .... .... .... .... .... = Not override
Target: fe80::2b0:d0ff:fe82:6dda (fe80::2b0:d0ff:fe82:6dda)
Frame 32 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:48:29.711575000
Time delta from previous packet: 0.753531000 seconds
Time since reference or first frame: 120.029076000 seconds
Frame Number: 32
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:tcp
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Destination address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 41335
(41335), Seq: 21, Ack: 1, Len: 0
Source port: ssh (22)
Destination port: 41335 (41335)
Sequence number: 21 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 5712 (scaled)
Checksum: 0x641c [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1172804, tsecr 1894421
SEQ/ACK analysis
Frame 33 (798 bytes on wire, 798 bytes captured)
Arrival Time: Nov 9, 2005 20:48:29.712283000
Time delta from previous packet: 0.000708000 seconds
Time since reference or first frame: 120.029784000 seconds
Frame Number: 33
Packet Length: 798 bytes
Capture Length: 798 bytes
Protocols in frame: eth:ipv6:tcp:ssh
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 744
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 21, Ack: 22, Len: 712
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 21 (relative sequence number)
Next sequence number: 733 (relative sequence number)
Acknowledgement number: 22 (relative ack number)
Header length: 32 bytes
Flags: 0x0019 (FIN, PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 5760 (scaled)
Checksum: 0x6026 [incorrect, should be 0xe52f]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1924419, tsecr 1172804
SEQ/ACK analysis
This is an ACK to the segment in frame: 32
The RTT to ACK the segment was: 0.000708000 seconds
SSH Protocol
SSH Version 2
Encrypted Packet: 000002C405142E266F9276ADB32C4205071FA4A4D0500000...
Frame 34 (86 bytes on wire, 86 bytes captured)
Arrival Time: Nov 9, 2005 20:48:29.915155000
Time delta from previous packet: 0.202872000 seconds
Time since reference or first frame: 120.232656000 seconds
Frame Number: 34
Packet Length: 86 bytes
Capture Length: 86 bytes
Protocols in frame: eth:ipv6:tcp
Ethernet II, Src: DellComp_82:6d:da (00:b0:d0:82:6d:da), Dst:
AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Destination: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Source: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 32
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Destination address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Transmission Control Protocol, Src Port: ssh (22), Dst Port: 41335
(41335), Seq: 21, Ack: 1, Len: 0
Source port: ssh (22)
Destination port: 41335 (41335)
Sequence number: 21 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 5712 (scaled)
Checksum: 0x63e9 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1172855, tsecr 1894421
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) out-of-order segment
Frame 35 (98 bytes on wire, 98 bytes captured)
Arrival Time: Nov 9, 2005 20:48:29.915185000
Time delta from previous packet: 0.000030000 seconds
Time since reference or first frame: 120.232686000 seconds
Frame Number: 35
Packet Length: 98 bytes
Capture Length: 98 bytes
Protocols in frame: eth:ipv6:tcp
Ethernet II, Src: AbitComp_ef:90:69 (00:50:8d:ef:90:69), Dst:
DellComp_82:6d:da (00:b0:d0:82:6d:da)
Destination: DellComp_82:6d:da (00:b0:d0:82:6d:da)
Source: AbitComp_ef:90:69 (00:50:8d:ef:90:69)
Type: IPv6 (0x86dd)
Internet Protocol Version 6
Version: 6
Traffic class: 0x00
Flowlabel: 0x00000
Payload length: 44
Next header: TCP (0x06)
Hop limit: 64
Source address: fec0::250:8dff:feef:9069 (fec0::250:8dff:feef:9069)
Destination address: fec0::2b0:d0ff:fe82:6dda (fec0::2b0:d0ff:fe82:6dda)
Transmission Control Protocol, Src Port: 41335 (41335), Dst Port: ssh
(22), Seq: 734, Ack: 22, Len: 0
Source port: 41335 (41335)
Destination port: ssh (22)
Sequence number: 734 (relative sequence number)
Acknowledgement number: 22 (relative ack number)
Header length: 44 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5760 (scaled)
Checksum: 0xc0d2 [correct]
Options: (24 bytes)
NOP
NOP
Time stamp: tsval 1924470, tsecr 1172855
NOP
NOP
SACK: 21-22
left edge = 21 (relative)
right edge = 22 (relative)
- Previous message: elanthis_at_awesomeplay.com: "Re: Re: passwordless login with heimdal (kerberos) on openssh 4.2p1"
- Next in thread: J. K. Cliburn: "SOLVED: Re: ssh v4.2p1 IPv6 TCP checksum error"
- Reply: J. K. Cliburn: "SOLVED: Re: ssh v4.2p1 IPv6 TCP checksum error"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
