Sort by new | name | popular

Packet Captures

Showing 1 - 25 of 94

cm4116_telnet.cap 9.4 KB

Submitted Mar 1, 2011

Short Telnet session with an Opengear CM4116 used to demonstrate the urgent flag and pointer

Ethernet IP TCP Telnet

Packets: 113 Duration: 14s Downloads: 9050

HTTP.cap 24.9 KB

Submitted Mar 1, 2011

Simple HTTP transfer of a PNG image using wget

Ethernet HTTP IP TCP

Packets: 40 Duration: n/a Downloads: 14953

DHCP_MessageType 10,11,12 and 13.cap 1.9 KB

Submitted Jan 31, 2011 by Jawahar

Access Concentrator/router queries lease for particular IP addresses using message type as "DHCP LEASE QUERY" and gets response as DHCP LEASE ACTIVE,LEASE UNASSIGNED and LEASE UNKNOWN.

Access Concenttrator/Router IP=10.10.39.14
DHCP server IP=10.10.35.33

BOOTP Ethernet IP UDP

Packets: 6 Duration: 13s Downloads: 8896

QinQ.pcap.cap 184 bytes

Submitted Jan 9, 2011 by Ysaad

ARP requests having two vlan IDs attached (QinQ)

ARP Ethernet VLAN

Packets: 2 Duration: 2s Downloads: 10379

iphttps.cap 12.4 KB

Submitted Nov 12, 2010 by nacnud

IP-HTTPS capture. This is Microsoft's IPv6 inside HTTPS tunneling for DirectAccess.

ARP DNS Ethernet ICMPv6 IGMP IP IPv6 LLC NBNS NBSS SSL TCP UDP

Packets: 83 Duration: 38s Downloads: 9600

WCCPv2.pcap.cap 2.8 KB

Submitted Oct 5, 2010 by Ysaad

WCCP communication captures between 7200 Router and a WCCP capable optimization device (In my case it is Riverbed's Stealhead 2050)

Ethernet IP UDP WCCP

Packets: 15 Duration: 27s Downloads: 6365

LLDP_and_CDP.cap 4.0 KB

Submitted Oct 3, 2010

LLDP and CDP advertisements sent between two switches, S1 and S2.

CDP Ethernet LLC LLDP

Packets: 12 Duration: 98s Downloads: 9454

TACACS+_encrypted.cap 2.8 KB

Submitted Sep 28, 2010

TACACS+ authentication and authorization requests as made by a Cisco IOS router upon a user logging in via Telnet.

Ethernet IP TACACS+ TCP

Packets: 34 Duration: 7s Downloads: 8167

PPPoE_Dual-Stack_IPv4_IPv6-with_DHCPv6.cap 6.1 KB

Submitted Sep 13, 2010 by pierky

Dual-stack PPPoE: IP (IPv4) and IPv6 with DHCPv6

Ethernet IPCP IPv6 IPV6CP LCP PAP PPP PPPOED PPPOES

Packets: 65 Duration: 46s Downloads: 10938

ICMP_over_L2TPv3_Pseudowire.pcap.cap 5.3 KB

Submitted Sep 4, 2010 by onefst250r

ICMP pings from a CE to a second CE via a L2TPv3 pseudowire.

Ethernet IP L2TP LOOP OSPF

Packets: 38 Duration: 30s Downloads: 8662

802.1Q_tunneling.cap 5.0 KB

Submitted Jun 30, 2010

CDP Ethernet IP LLC VLAN

Packets: 26 Duration: 35s Downloads: 13923

BGP_MP_NLRI.cap 2.9 KB

Submitted Jun 28, 2010

IPv6 routes are carried as a separate address family inside MP_REACH_NLRI attributes.

BGP Ethernet IP IPv6 TCP

Packets: 24 Duration: 60s Downloads: 11276

TCP_SACK.cap 27.5 KB

Submitted Jun 16, 2010

A TCP SACK option is included in packets #31, #33, #35, and #37. The missing segment is retransmitted in packet #38.

Ethernet HTTP IP TCP

Packets: 39 Duration: n/a Downloads: 18160

DECnet_Phone.pcap.cap 7.5 KB

Submitted Jan 13, 2010 by vmlemon

A DECnet Phone session, using the Linux DECnet stack and a clone/port of the OpenVMS eponymous tool.

DEC_DNA Ethernet

Packets: 139 Duration: 100s Downloads: 5182

rpvstp-trunk-native-vid5.pcap.cap 1.8 KB

Submitted Dec 16, 2009 by einval

Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 5, VLAN 1 is also active over the trunk.

Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN 5 (not tagged - Frame 5) and one for each other active VLAN (tagged - Frame 3).

The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).

DTP Ethernet LLC LOOP STP VLAN VTP

Packets: 22 Duration: 11s Downloads: 8747

rpvstp-trunk-native-vid1.pcap.cap 6.4 KB

Submitted Dec 16, 2009 by einval

Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 1 (default), VLAN 5 is also active over the trunk.

Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN (not tagged - Frame 3) and one for each other active VLAN (tagged - Frame 5).

The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).

DTP Ethernet LLC LOOP STP VLAN VTP

Packets: 81 Duration: 45s Downloads: 8070

rpvstp-access.pcap.cap 3.7 KB

Submitted Dec 16, 2009 by einval

Rapid per-VLAN spanning tree capture of an access port (without portfast), configured in VLAN 5.

DNS Ethernet IP LLC LOOP STP UDP

Packets: 49 Duration: 77s Downloads: 6057

Frame-Relay over MPLS.pcap.cap 1.4 KB

Submitted Dec 5, 2009 by pierky

ICMP on a Frame-relay over MPLS link. If Wireshark doesn't understand it's FR, right click on a packet, select "Decode as" from the menu and select "Frame Relay DLCI PW" on the "MPLS" tab.

Ethernet MPLS

Packets: 10 Duration: 1s Downloads: 7658

EoMPLS_802.1q.pcap.cap 1.6 KB

Submitted Dec 5, 2009 by pierky

ICMP over EoMPLS with 802.1q tagging

Ethernet MPLS

Packets: 10 Duration: 1s Downloads: 7595

LDP_Ethernet_FrameRelay.pcap.cap 2.1 KB

Submitted Dec 5, 2009 by pierky

LDP with pseudowire FEC elements (Ethernet and Frame-Relay DLCI-to-DLCI)

Ethernet IP LDP MPLS TCP UDP

Packets: 14 Duration: 7s Downloads: 6600

BGP_MD5.cap 1.7 KB

Submitted Nov 26, 2009

An EBGP with TCP MD5 authentication enabled

BGP Ethernet IP TCP

Packets: 16 Duration: 61s Downloads: 7333

PAGP.cap 2.5 KB

Submitted Nov 15, 2009

Ethernet LLC PAGP

Packets: 25 Duration: 95s Downloads: 5532

LACP.cap 2.8 KB

Submitted Nov 15, 2009

Ethernet LACP

Packets: 20 Duration: 112s Downloads: 9028

EoMPLS.cap 7.0 KB

Submitted Oct 12, 2009 by pierky

Routers at 1.1.2.1 and 1.1.2.2 are PEs in a MPLS cloud. LDP starts at packet 8 and they build up a pseudo-wire VC (last FEC in packets 11 and 13). At packet 15 we already have STP running between CE1 and CE2 (two routers with ESW), encapsulated in 2 MPLS headers. All the ethernet stuff follows: CDP, ARP, ICMP between two hosts on the same subnet.

Ethernet IP LOOP MPLS TCP UDP

Packets: 56 Duration: 32s Downloads: 7284

DHCP_Inter_VLAN.cap 2.0 KB

Submitted Sep 30, 2009 by pierky

R1 is a router-on-a-stick. It receives a DHCP Discover on the trunk interface, it sets the "Relay agent IP address" to the sub-interface's IP address it received the packet on and, finally, it forwards it to the DHCP server. Capture perspective is R1-DHCP server link.

BOOTP Ethernet IP UDP

Packets: 4 Duration: n/a Downloads: 6750

Showing 1 - 25 of 94