Packet Captures
SSHv2.cap 11.4 KB
Submitted Sep 14, 2009
An SSH version 2 session between two routers. All communication is securely encrypted.
| Packets: 90 | Duration: 7s | Downloads: 45567 |
TCP_SACK.cap 27.5 KB
Submitted Jun 16, 2010
A TCP SACK option is included in packets #31, #33, #35, and #37. The missing segment is retransmitted in packet #38.
| Packets: 39 | Duration: n/a | Downloads: 26834 |
HTTP.cap 24.9 KB
Submitted Mar 1, 2011
Simple HTTP transfer of a PNG image using wget
| Packets: 40 | Duration: n/a | Downloads: 26830 |
802.1Q_tunneling.cap 5.0 KB
Submitted Jun 30, 2010
| Packets: 26 | Duration: 35s | Downloads: 21144 |
traceroute_MPLS.cap 3.3 KB
Submitted May 14, 2011 by stretch
| Packets: 29 | Duration: 3s | Downloads: 19268 |
GRE.cap 1.5 KB
Submitted Sep 14, 2009
ICMP is encapsulated into a Generic Routing Encapsulation (GRE) tunnel.
| Packets: 10 | Duration: n/a | Downloads: 18936 |
cm4116_telnet.cap 9.4 KB
Submitted Mar 1, 2011
Short Telnet session with an Opengear CM4116 used to demonstrate the urgent flag and pointer
| Packets: 113 | Duration: 14s | Downloads: 17673 |
IGMP_V2.cap 1.3 KB
Submitted Mar 27, 2012 by Emieeecy
All IGMP V2 requests : Query General, Query specfic group, Join specific group, leave specific group
| Packets: 18 | Duration: 133s | Downloads: 16926 |
BGP_MP_NLRI.cap 2.9 KB
Submitted Jun 28, 2010
IPv6 routes are carried as a separate address family inside MP_REACH_NLRI attributes.
| Packets: 24 | Duration: 60s | Downloads: 16615 |
ospf over gre tunnel.cap 8.2 KB
Submitted Jun 13, 2012 by altafk
Configured ospf over GRE tunnel in which packets are double tagged with ip header, useful when there is no direct connection between the 2 routers but still we need to run ospf.
| Packets: 63 | Duration: 241s | Downloads: 16331 |
RADIUS.cap 775 bytes
Submitted Sep 14, 2009
A RADIUS authentication request is issued from a switch at 10.0.0.1 on behalf of an EAP client. The user authenticates via MD5 challenge with the username "John.McGuirk" and the password "S0cc3r".
| Packets: 4 | Duration: n/a | Downloads: 15696 |
packet-c.cap 675.0 KB
Submitted Jan 31, 2012 by Slaingod
This is a packet capture from a SonicWall. We were troubleshooting DHCP packet flows. The SonicWall saw the DHCP Discover and Sent an Offer. We never saw the DHCP acknowledgement. In the adjacent core stacked switching we were running "debug ip dhcp server packets" we only saw discover packets from IP phones up to the SonicWall. For some reason the SonicWall could not let any other DHCP packets through or out of it INSIDE (LAN) interface. Even if we put an ANY-ANY ALC for that interface. We ended up having to replace the SonicWall and upload the configuration from the old SonicWall to the new one.
-Slaingod
BOOTP DNS HTTP IP LLC SKINNY SSL STP TCP UDP
| Packets: 926 | Duration: 13s | Downloads: 15586 |
iphttps.cap 12.4 KB
Submitted Nov 12, 2010 by nacnud
IP-HTTPS capture. This is Microsoft's IPv6 inside HTTPS tunneling for DirectAccess.
ARP DNS Ethernet ICMPv6 IGMP IP IPv6 LLC NBNS NBSS SSL TCP UDP
| Packets: 83 | Duration: 38s | Downloads: 14514 |
IPsec_ESP-AH_tunnel_mode.cap 2.1 KB
Submitted Sep 14, 2009
Encrypted ICMP across an IPsec tunnel. AH and ESP headers are present.
| Packets: 10 | Duration: n/a | Downloads: 13734 |
TACACS+_encrypted.cap 2.8 KB
Submitted Sep 28, 2010
TACACS+ authentication and authorization requests as made by a Cisco IOS router upon a user logging in via Telnet.
| Packets: 34 | Duration: 7s | Downloads: 13550 |
DHCP_MessageType 10,11,12 and 13.cap 1.9 KB
Submitted Jan 31, 2011 by Jawahar
Access Concentrator/router queries lease for particular IP addresses using message type as "DHCP LEASE QUERY" and gets response as DHCP LEASE ACTIVE,LEASE UNASSIGNED and LEASE UNKNOWN.
Access Concenttrator/Router IP=10.10.39.14
DHCP server IP=10.10.35.33
| Packets: 6 | Duration: 13s | Downloads: 13490 |
path_MTU_discovery.cap 6.2 KB
Submitted Sep 14, 2009
Tracepath is used to determine the MTU of the path between hosts 192.168.0.2 and .1.2. Packet #6 contains an ICMP "fragmentation needed" message, indicating the MTU for that hop is 1400 bytes.
| Packets: 8 | Duration: n/a | Downloads: 13106 |
IP_in_IP.cap 1.5 KB
Submitted Sep 14, 2009
Direct IP-in-IP tunnel encapsulation (configured in Cisco IOS with tunnel mode ipip).
| Packets: 10 | Duration: n/a | Downloads: 12509 |
ICMP_over_L2TPv3_Pseudowire.pcap.cap 5.3 KB
Submitted Sep 4, 2010 by onefst250r
ICMP pings from a CE to a second CE via a L2TPv3 pseudowire.
| Packets: 38 | Duration: 30s | Downloads: 12485 |
MPLS_encapsulation.cap 1.3 KB
Submitted Sep 14, 2009
Capture taken from the PE1-P1 link. ICMP traffic between CE1 and CE2 is encapsulated outbound with MPLS label 18. Note that returning traffic is not labeled, due to penultimate hop popping (PHP).
| Packets: 10 | Duration: n/a | Downloads: 12303 |
ISAKMP_sa_setup.cap 2.0 KB
Submitted Sep 14, 2009
An ISAKMP session is established prior to setting up an IPsec tunnel. Phase one occurs in main mode, and phase two occurs in quick mode.
| Packets: 9 | Duration: n/a | Downloads: 12247 |
OSPF_LSA_types.cap 4.0 KB
Submitted Sep 14, 2009
Capture of adjacency formation between OSPF routers 4 and 5 in area 20. Packet #12 contains LSAs of types 1, 2, 3, 4, and 5.
| Packets: 30 | Duration: 63s | Downloads: 12220 |
VRRP_failover.cap 2.4 KB
Submitted Sep 14, 2009
The master router (R1) goes offline. After the down interval passes (roughly 3 seconds), R3 takes over as the master router in packet #12. R2 also offers to take over but R3 wins because it has the higher IP address.
| Packets: 32 | Duration: 33s | Downloads: 12035 |
ICMP_across_dot1q.cap 1.7 KB
Submitted Sep 14, 2009
A ping issued from 192.168.123.2 to 192.168.123.1 is encapsulated with an IEEE 802.1Q header, placing it in VLAN 123.
| Packets: 15 | Duration: 35s | Downloads: 11981 |
IGMP_V1.cap 2.0 KB
Submitted Apr 2, 2012 by Emieeecy
All IGMP V1 requests : Query General, Join specific group
| Packets: 27 | Duration: 259s | Downloads: 11785 |