Packet Captures

Sort by new | name | popular

Viewing 1 - 30 of 126

TCP_SACK.cap (27.5 KB)

Packets: 39 Duration: n/a Downloads: 15270

A TCP SACK option is included in packets #31, #33, #35, and #37. The missing segment is retransmitted in packet #38.

802.1Q_tunneling.cap (5.0 KB)

Packets: 26 Duration: 35s Downloads: 10655

HTTP.cap (24.9 KB)

Packets: 40 Duration: n/a Downloads: 10468

Simple HTTP transfer of a PNG image using wget

BGP_MP_NLRI.cap (2.9 KB)

Packets: 24 Duration: 60s Downloads: 8698

IPv6 routes are carried as a separate address family inside MP_REACH_NLRI attributes.

traceroute_MPLS.cap (3.3 KB)

Packets: 29 Duration: 3s Downloads: 7963

PPPoE_Dual-Stack_IPv4_IPv6-with_DHCPv6.cap (6.1 KB)

Packets: 65 Duration: 46s Downloads: 7681

Dual-stack PPPoE: IP (IPv4) and IPv6 with DHCPv6

QinQ.pcap.cap (184 bytes)

Packets: 2 Duration: 2s Downloads: 7557

ARP requests having two vlan IDs attached (QinQ)

iphttps.cap (12.4 KB)

Packets: 83 Duration: 38s Downloads: 7142

IP-HTTPS capture. This is Microsoft's IPv6 inside HTTPS tunneling for DirectAccess.

LLDP_and_CDP.cap (4.0 KB)

Packets: 12 Duration: 98s Downloads: 7021

LLDP and CDP advertisements sent between two switches, S1 and S2.

DHCP.cap (5.8 KB)

Packets: 12 Duration: 153s Downloads: 6668

R0 is the client and R1 is the DHCP server. Lease time is 1 minute.

PPP_EAP.cap (2.5 KB)

Packets: 52 Duration: 52s Downloads: 6668

PPP link negotiation employing EAP MD5 authentication

rpvstp-trunk-native-vid5.pcap.cap (1.8 KB)

Packets: 22 Duration: 11s Downloads: 6667

Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 5, VLAN 1 is also active over the trunk.

Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN 5 (not tagged - Frame 5) and one for each other active VLAN (tagged - Frame 3).

The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).

DHCP_MessageType 10,11,12 and 13.cap (1.9 KB)

Packets: 6 Duration: 13s Downloads: 6667

Access Concentrator/router queries lease for particular IP addresses using message type as "DHCP LEASE QUERY" and gets response as DHCP LEASE ACTIVE,LEASE UNASSIGNED and LEASE UNKNOWN.

Access Concenttrator/Router IP=10.10.39.14
DHCP server IP=10.10.35.33

ICMP_over_L2TPv3_Pseudowire.pcap.cap (5.3 KB)

Packets: 38 Duration: 30s Downloads: 6601

ICMP pings from a CE to a second CE via a L2TPv3 pseudowire.

GRE.cap (1.5 KB)

Packets: 10 Duration: n/a Downloads: 6473

ICMP is encapsulated into a Generic Routing Encapsulation (GRE) tunnel.

cm4116_telnet.cap (9.4 KB)

Packets: 113 Duration: 14s Downloads: 6382

Short Telnet session with an Opengear CM4116 used to demonstrate the urgent flag and pointer

ospf over gre tunnel.cap (8.2 KB)

Packets: 63 Duration: 241s Downloads: 6344

Configured ospf over GRE tunnel in which packets are double tagged with ip header, useful when there is no direct connection between the 2 routers but still we need to run ospf.

LACP.cap (2.8 KB)

Packets: 20 Duration: 112s Downloads: 6147

TACACS+_encrypted.cap (2.8 KB)

Packets: 34 Duration: 7s Downloads: 6085

TACACS+ authentication and authorization requests as made by a Cisco IOS router upon a user logging in via Telnet.

RADIUS.cap (775 bytes)

Packets: 4 Duration: n/a Downloads: 6076

A RADIUS authentication request is issued from a switch at 10.0.0.1 on behalf of an EAP client. The user authenticates via MD5 challenge with the username "John.McGuirk" and the password "S0cc3r".

IPv6_NDP.cap (2.1 KB)

Packets: 20 Duration: 41s Downloads: 6042

Neighbor Discovery Protocol (NDP) uses ICMPv6 to perform duplicate address detection and address resolution. Also includes multicast listener reports.

Frame-Relay over MPLS.pcap.cap (1.4 KB)

Packets: 10 Duration: 1s Downloads: 6020

ICMP on a Frame-relay over MPLS link. If Wireshark doesn't understand it's FR, right click on a packet, select "Decode as" from the menu and select "Frame Relay DLCI PW" on the "MPLS" tab.

BGP_MD5.cap (1.7 KB)

Packets: 16 Duration: 61s Downloads: 5999

An EBGP with TCP MD5 authentication enabled

EoMPLS_802.1q.pcap.cap (1.6 KB)

Packets: 10 Duration: 1s Downloads: 5901

ICMP over EoMPLS with 802.1q tagging

BGP_redist.cap (378 bytes)

Packets: 2 Duration: n/a Downloads: 5856

The OSPF metric is preserved and propagated within the MPLS cloud by the MP-BGP MED attribute.

PPP_negotiation.cap (4.6 KB)

Packets: 63 Duration: 67s Downloads: 5730

802.1D_spanning_tree.cap (1.1 KB)

Packets: 14 Duration: 26s Downloads: 5670

IEEE 802.1D Spanning Tree Protocol (STP) advertisements sent every two seconds.

EoMPLS.cap (7.0 KB)

Packets: 56 Duration: 32s Downloads: 5625

Routers at 1.1.2.1 and 1.1.2.2 are PEs in a MPLS cloud. LDP starts at packet 8 and they build up a pseudo-wire VC (last FEC in packets 11 and 13). At packet 15 we already have STP running between CE1 and CE2 (two routers with ESW), encapsulated in 2 MPLS headers. All the ethernet stuff follows: CDP, ARP, ICMP between two hosts on the same subnet.

VRRP_failover.cap (2.4 KB)

Packets: 32 Duration: 33s Downloads: 5587

The master router (R1) goes offline. After the down interval passes (roughly 3 seconds), R3 takes over as the master router in packet #12. R2 also offers to take over but R3 wins because it has the higher IP address.

IP_in_IP.cap (1.5 KB)

Packets: 10 Duration: n/a Downloads: 5369

Direct IP-in-IP tunnel encapsulation (configured in Cisco IOS with tunnel mode ipip).

Viewing 1 - 30 of 126