topasx Posted June 2, 2011 Posted June 2, 2011 (edited) Hallo zusammen, ich zweifle momentan langsam etwas an meinem Verstand und hoffe ihr könnt mir weiter helfen. OS ist Windows7 (Ultimate x64). Es ist vom LAN aus nicht möglich in irgend einer Art und Weise auf den Recording Service zuzugreifen. Ich habe folgende Zugriffe versucht: - PS3 - iPhone (Webinterface) - Anderer Windows 7 PC (Webinterface) - Anderer Windows 7 PC Liveboot XBMC - Anderer Windows 7 PC Media Player - Anderer Windows 7 PC VLC Das "Lustige" ist, dass sobald ich die oben genannten Zugriffsmöglichkeiten lokal (egal ob auf 127.0.0.1 oder die IP) auf dem Recording Service PC ausführe funktionieren die Connects ohne Probleme. Startet man von einem anderen Client aus einen Zugriff auf das Webinterface lädt und lädt die Seite und läuft irgend wann in einen Timeout. Mein erster Gedanke war natürlich sofort die Firewall - entsprechende Regheln erstellt - kein Erfolg. Firewall komplett aus - selbes Fehlerbild. Der Rechner mit dem Recording Service antwortet auf Pings und Zugriffe auf Fileshares funktionieren über das LAN auch. Starte ich einen PS3 Media Server kann auf diesen auch ohne Weiteres sofort zugegriffen werden. Ebenso die Windowseigene Medienfreigabe. Ich steh momentan wirklich wie die Kuh vor dem Berg und weiß absolut nicht weiter... EDIT: Ich habe auch schon andere Ports als die Standards getestet - leider auch erfolglos support.zip Edited June 2, 2011 by topasx
Inti31 Posted June 2, 2011 Posted June 2, 2011 (edited) ...hast Du auch den Port mitangegeben, also: ip-adresse:8089 ? Sehe gerade, Du hast Deinen Post editiert und die Ports ausprobiert... Edited June 2, 2011 by Inti31
Lars_MQ Posted June 2, 2011 Posted June 2, 2011 Eventuell funkt das Antiviren programm ja dazwischen...
topasx Posted June 2, 2011 Author Posted June 2, 2011 Eventuell funkt das Antiviren programm ja dazwischen... Die Vermutung hatte ich auch schon - bereits getestet und hat an dem Verhalten leider nichts geändert. :-/ Ich versteh das einfach nicht... Sogar netstat sagt mir, dass die Anfragen ankommen - es geht nur nix raus... Ich glaub zwar nicht, dass mir wireshark weiterhilf, aber ich schau mal ob ich da evtl ein paar infos mehr bekomm.
topasx Posted June 2, 2011 Author Posted June 2, 2011 Okay, wie vermutet war das jetzt nicht viel was dabei rüber gekommen ist. Man sieht noch wie der Client ein Syn vom Host bekommt, aber zu einem Ack kommt es dann schon nicht mehr... Das hier ist alles, was passiert. No. Time Source Destination Protocol Info 1 0.000000 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 1: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:40:49.982788000 Mitteleuropäische Sommerzeit Epoch Time: 1307018449.982788000 seconds [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 2 2.438330 192.168.1.148 192.168.1.255 BROWSER Host Announcement MIRI-PC, Workstation, Server, NT Workstation, Potential Browser, Backup Browser Frame 2: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Arrival Time: Jun 2, 2011 14:40:52.421118000 Mitteleuropäische Sommerzeit Epoch Time: 1307018452.421118000 seconds [Time delta from previous captured frame: 2.438330000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 2.438330000 seconds] Frame Number: 2 Frame Length: 243 bytes (1944 bits) Capture Length: 243 bytes (1944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:nbdgm:smb:browser] [Coloring Rule Name: SMB] [Coloring Rule String: smb || nbss || nbns || nbipx || ipxsap || netbios] Ethernet II, Src: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Address: Broadcast (ff:ff:ff:ff:ff:ff) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.148 (192.168.1.148), Dst: 192.168.1.255 (192.168.1.255) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 229 Identification: 0x6b6d (27501) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x89b7 [correct] [Good: True] [bad: False] Source: 192.168.1.148 (192.168.1.148) Destination: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) Source port: netbios-dgm (138) Destination port: netbios-dgm (138) Length: 209 Checksum: 0xd530 [validation disabled] [Good Checksum: False] [bad Checksum: False] NetBIOS Datagram Service Message Type: Direct_group datagram (17) More fragments follow: No This is first fragment: Yes Node Type: B node (0) Datagram ID: 0xcfb8 Source IP: 192.168.1.148 (192.168.1.148) Source Port: 138 Datagram length: 187 bytes Packet offset: 0 bytes Source name: MIRI-PC<20> (Server service) Destination name: WORKGROUP<1d> (Local Master Browser) SMB (Server Message Block Protocol) SMB Header Server Component: SMB SMB Command: Trans (0x25) Error Class: Success (0x00) Reserved: 00 Error Code: No Error Flags: 0x00 0... .... = Request/Response: Message is a request to the server .0.. .... = Notify: Notify client only on open ..0. .... = Oplocks: OpLock not requested/granted ...0 .... = Canonicalized Pathnames: Pathnames are not canonicalized .... 0... = Case Sensitivity: Path names are case sensitive .... ..0. = Receive Buffer Posted: Receive buffer has not been posted .... ...0 = Lock and Read: Lock&Read, Write&Unlock are not supported Flags2: 0x0000 0... .... .... .... = Unicode Strings: Strings are ASCII .0.. .... .... .... = Error Code Type: Error codes are DOS error codes ..0. .... .... .... = Execute-only Reads: Don't permit reads if execute-only ...0 .... .... .... = Dfs: Don't resolve pathnames with Dfs .... 0... .... .... = Extended Security Negotiation: Extended security negotiation is not supported .... .... .0.. .... = Long Names Used: Path names in request are not long file names .... .... .... .0.. = Security Signatures: Security signatures are not supported .... .... .... ..0. = Extended Attributes: Extended attributes are not supported .... .... .... ...0 = Long Names Allowed: Long file names are not allowed in the response Process ID High: 0 Signature: 0000000000000000 Reserved: 0000 Tree ID: 0 Process ID: 0 User ID: 0 Multiplex ID: 0 Trans Request (0x25) Word Count (WCT): 17 Total Parameter Count: 0 Total Data Count: 33 Max Parameter Count: 0 Max Data Count: 0 Max Setup Count: 0 Reserved: 00 Flags: 0x0000 .... .... .... ..0. = One Way Transaction: Two way transaction .... .... .... ...0 = Disconnect TID: Do NOT disconnect TID Timeout: 1 second Reserved: 0000 Parameter Count: 0 Parameter Offset: 0 Data Count: 33 Data Offset: 86 Setup Count: 3 Reserved: 00 Byte Count (BCC): 50 Transaction Name: \MAILSLOT\BROWSE SMB MailSlot Protocol Opcode: Write Mail Slot (1) Priority: 0 Class: Unreliable & Broadcast (2) Size: 50 Mailslot Name: \MAILSLOT\BROWSE Microsoft Windows Browser Protocol Command: Host Announcement (0x01) Update Count: 0 Update Periodicity: 12 minutes Host Name: MIRI-PC OS Major Version: 6 OS Minor Version: 1 Server Type: 0x00031003 .... .... .... .... .... .... .... ...1 = Workstation: This is a Workstation .... .... .... .... .... .... .... ..1. = Server: This is a Server .... .... .... .... .... .... .... .0.. = SQL: This is NOT an SQL server .... .... .... .... .... .... .... 0... = Domain Controller: This is NOT a Domain Controller .... .... .... .... .... .... ...0 .... = Backup Controller: This is NOT a Backup Controller .... .... .... .... .... .... ..0. .... = Time Source: This is NOT a Time Source .... .... .... .... .... .... .0.. .... = Apple: This is NOT an Apple host .... .... .... .... .... .... 0... .... = Novell: This is NOT a Novell server .... .... .... .... .... ...0 .... .... = Member: This is NOT a Domain Member server .... .... .... .... .... ..0. .... .... = Print: This is NOT a Print Queue server .... .... .... .... .... .0.. .... .... = Dialin: This is NOT a Dialin server .... .... .... .... .... 0... .... .... = Xenix: This is NOT a Xenix server .... .... .... .... ...1 .... .... .... = NT Workstation: This is an NT Workstation .... .... .... .... ..0. .... .... .... = WfW: This is NOT a WfW host .... .... .... .... 0... .... .... .... = NT Server: This is NOT an NT Server .... .... .... ...1 .... .... .... .... = Potential Browser: This is a Potential Browser .... .... .... ..1. .... .... .... .... = Backup Browser: This is a Backup Browser .... .... .... .0.. .... .... .... .... = Master Browser: This is NOT a Master Browser .... .... .... 0... .... .... .... .... = Domain Master Browser: This is NOT a Domain Master Browser .... .... ...0 .... .... .... .... .... = OSF: This is NOT an OSF host .... .... ..0. .... .... .... .... .... = VMS: This is NOT a VMS host .... .... .0.. .... .... .... .... .... = Windows 95+: This is NOT a Windows 95 or above host .... .... 0... .... .... .... .... .... = DFS: THis is NOT a DFS server .0.. .... .... .... .... .... .... .... = Local: This is NOT a local list only request 0... .... .... .... .... .... .... .... = Domain Enum: This is NOT a Domain Enum request Browser Protocol Major Version: 15 Browser Protocol Minor Version: 1 Signature: 0xaa55 Host Comment: No. Time Source Destination Protocol Info 3 2.496943 192.168.1.148 192.168.1.5 TCP 49356 > 8089 [sYN] Seq=0 Win=8192 Len=0 MSS=1452 SACK_PERM=1 Frame 3: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Arrival Time: Jun 2, 2011 14:40:52.479731000 Mitteleuropäische Sommerzeit Epoch Time: 1307018452.479731000 seconds [Time delta from previous captured frame: 0.058613000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 2.496943000 seconds] Frame Number: 3 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb), Dst: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Destination: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.148 (192.168.1.148), Dst: 192.168.1.5 (192.168.1.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x6b6e (27502) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x4b70 [correct] [Good: True] [bad: False] Source: 192.168.1.148 (192.168.1.148) Destination: 192.168.1.5 (192.168.1.5) Transmission Control Protocol, Src Port: 49356 (49356), Dst Port: 8089 (8089), Seq: 0, Len: 0 Source port: 49356 (49356) Destination port: 8089 (8089) [stream index: 2] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 8089] [Message: Connection establish request (SYN): server port 8089] [severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size: 8192 Checksum: 0x4088 [validation disabled] [Good Checksum: False] [bad Checksum: False] Options: (8 bytes) Maximum segment size: 1452 bytes NOP NOP TCP SACK Permitted Option: True No. Time Source Destination Protocol Info 4 4.002179 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 4: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:40:53.984967000 Mitteleuropäische Sommerzeit Epoch Time: 1307018453.984967000 seconds [Time delta from previous captured frame: 1.505236000 seconds] [Time delta from previous displayed frame: 1.505236000 seconds] [Time since reference or first frame: 4.002179000 seconds] Frame Number: 4 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 5 5.496545 192.168.1.148 192.168.1.5 TCP 49356 > 8089 [sYN] Seq=0 Win=8192 Len=0 MSS=1452 SACK_PERM=1 Frame 5: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Arrival Time: Jun 2, 2011 14:40:55.479333000 Mitteleuropäische Sommerzeit Epoch Time: 1307018455.479333000 seconds [Time delta from previous captured frame: 1.494366000 seconds] [Time delta from previous displayed frame: 2.999602000 seconds] [Time since reference or first frame: 5.496545000 seconds] Frame Number: 5 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb), Dst: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Destination: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.148 (192.168.1.148), Dst: 192.168.1.5 (192.168.1.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x6b6f (27503) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x4b6f [correct] [Good: True] [bad: False] Source: 192.168.1.148 (192.168.1.148) Destination: 192.168.1.5 (192.168.1.5) Transmission Control Protocol, Src Port: 49356 (49356), Dst Port: 8089 (8089), Seq: 0, Len: 0 Source port: 49356 (49356) Destination port: 8089 (8089) [stream index: 2] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 8089] [Message: Connection establish request (SYN): server port 8089] [severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size: 8192 Checksum: 0x4088 [validation disabled] [Good Checksum: False] [bad Checksum: False] Options: (8 bytes) Maximum segment size: 1452 bytes NOP NOP TCP SACK Permitted Option: True No. Time Source Destination Protocol Info 6 7.002108 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 6: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:40:56.984896000 Mitteleuropäische Sommerzeit Epoch Time: 1307018456.984896000 seconds [Time delta from previous captured frame: 1.505563000 seconds] [Time delta from previous displayed frame: 1.505563000 seconds] [Time since reference or first frame: 7.002108000 seconds] Frame Number: 6 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 7 10.002171 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 7: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:40:59.984959000 Mitteleuropäische Sommerzeit Epoch Time: 1307018459.984959000 seconds [Time delta from previous captured frame: 3.000063000 seconds] [Time delta from previous displayed frame: 4.505626000 seconds] [Time since reference or first frame: 10.002171000 seconds] Frame Number: 7 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 8 10.753298 192.168.1.148 192.168.1.5 TCP 49357 > 8089 [sYN] Seq=0 Win=8192 Len=0 MSS=1452 SACK_PERM=1 Frame 8: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Arrival Time: Jun 2, 2011 14:41:00.736086000 Mitteleuropäische Sommerzeit Epoch Time: 1307018460.736086000 seconds [Time delta from previous captured frame: 0.751127000 seconds] [Time delta from previous displayed frame: 5.256753000 seconds] [Time since reference or first frame: 10.753298000 seconds] Frame Number: 8 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb), Dst: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Destination: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.148 (192.168.1.148), Dst: 192.168.1.5 (192.168.1.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x6f77 (28535) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x4767 [correct] [Good: True] [bad: False] Source: 192.168.1.148 (192.168.1.148) Destination: 192.168.1.5 (192.168.1.5) Transmission Control Protocol, Src Port: 49357 (49357), Dst Port: 8089 (8089), Seq: 0, Len: 0 Source port: 49357 (49357) Destination port: 8089 (8089) [stream index: 3] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 8089] [Message: Connection establish request (SYN): server port 8089] [severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size: 8192 Checksum: 0x4065 [validation disabled] [Good Checksum: False] [bad Checksum: False] Options: (8 bytes) Maximum segment size: 1452 bytes NOP NOP TCP SACK Permitted Option: True No. Time Source Destination Protocol Info 9 11.496988 192.168.1.148 192.168.1.5 TCP 49356 > 8089 [sYN] Seq=0 Win=8192 Len=0 MSS=1452 SACK_PERM=1 Frame 9: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Arrival Time: Jun 2, 2011 14:41:01.479776000 Mitteleuropäische Sommerzeit Epoch Time: 1307018461.479776000 seconds [Time delta from previous captured frame: 0.743690000 seconds] [Time delta from previous displayed frame: 0.743690000 seconds] [Time since reference or first frame: 11.496988000 seconds] Frame Number: 9 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb), Dst: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Destination: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.148 (192.168.1.148), Dst: 192.168.1.5 (192.168.1.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x6f78 (28536) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x4766 [correct] [Good: True] [bad: False] Source: 192.168.1.148 (192.168.1.148) Destination: 192.168.1.5 (192.168.1.5) Transmission Control Protocol, Src Port: 49356 (49356), Dst Port: 8089 (8089), Seq: 0, Len: 0 Source port: 49356 (49356) Destination port: 8089 (8089) [stream index: 2] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 8089] [Message: Connection establish request (SYN): server port 8089] [severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size: 8192 Checksum: 0x4088 [validation disabled] [Good Checksum: False] [bad Checksum: False] Options: (8 bytes) Maximum segment size: 1452 bytes NOP NOP TCP SACK Permitted Option: True No. Time Source Destination Protocol Info 10 13.753158 192.168.1.148 192.168.1.5 TCP 49357 > 8089 [sYN] Seq=0 Win=8192 Len=0 MSS=1452 SACK_PERM=1 Frame 10: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Arrival Time: Jun 2, 2011 14:41:03.735946000 Mitteleuropäische Sommerzeit Epoch Time: 1307018463.735946000 seconds [Time delta from previous captured frame: 2.256170000 seconds] [Time delta from previous displayed frame: 2.256170000 seconds] [Time since reference or first frame: 13.753158000 seconds] Frame Number: 10 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb), Dst: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Destination: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.148 (192.168.1.148), Dst: 192.168.1.5 (192.168.1.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x6f79 (28537) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x4765 [correct] [Good: True] [bad: False] Source: 192.168.1.148 (192.168.1.148) Destination: 192.168.1.5 (192.168.1.5) Transmission Control Protocol, Src Port: 49357 (49357), Dst Port: 8089 (8089), Seq: 0, Len: 0 Source port: 49357 (49357) Destination port: 8089 (8089) [stream index: 3] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 8089] [Message: Connection establish request (SYN): server port 8089] [severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size: 8192 Checksum: 0x4065 [validation disabled] [Good Checksum: False] [bad Checksum: False] Options: (8 bytes) Maximum segment size: 1452 bytes NOP NOP TCP SACK Permitted Option: True No. Time Source Destination Protocol Info 11 14.008225 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 11: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:41:03.991013000 Mitteleuropäische Sommerzeit Epoch Time: 1307018463.991013000 seconds [Time delta from previous captured frame: 0.255067000 seconds] [Time delta from previous displayed frame: 0.255067000 seconds] [Time since reference or first frame: 14.008225000 seconds] Frame Number: 11 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 12 15.487266 Giga-Byt_7c:6a:cb Giga-Byt_27:e8:57 ARP Who has 192.168.1.5? Tell 192.168.1.148 Frame 12: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Arrival Time: Jun 2, 2011 14:41:05.470054000 Mitteleuropäische Sommerzeit Epoch Time: 1307018465.470054000 seconds [Time delta from previous captured frame: 1.479041000 seconds] [Time delta from previous displayed frame: 1.734108000 seconds] [Time since reference or first frame: 15.487266000 seconds] Frame Number: 12 Frame Length: 60 bytes (480 bits) Capture Length: 60 bytes (480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb), Dst: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Destination: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Trailer: 000000000000000000000000000000000000 Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) [is gratuitous: False] Sender MAC address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Sender IP address: 192.168.1.148 (192.168.1.148) Target MAC address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Target IP address: 192.168.1.5 (192.168.1.5) No. Time Source Destination Protocol Info 13 15.487287 Giga-Byt_27:e8:57 Giga-Byt_7c:6a:cb ARP 192.168.1.5 is at 00:1f:d0:27:e8:57 Frame 13: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Arrival Time: Jun 2, 2011 14:41:05.470075000 Mitteleuropäische Sommerzeit Epoch Time: 1307018465.470075000 seconds [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 1.734129000 seconds] [Time since reference or first frame: 15.487287000 seconds] Frame Number: 13 Frame Length: 42 bytes (336 bits) Capture Length: 42 bytes (336 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:arp] [Coloring Rule Name: ARP] [Coloring Rule String: arp] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Destination: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: ARP (0x0806) Address Resolution Protocol (reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) [is gratuitous: False] Sender MAC address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Sender IP address: 192.168.1.5 (192.168.1.5) Target MAC address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Target IP address: 192.168.1.148 (192.168.1.148) No. Time Source Destination Protocol Info 14 17.008180 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 14: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:41:06.990968000 Mitteleuropäische Sommerzeit Epoch Time: 1307018466.990968000 seconds [Time delta from previous captured frame: 1.520893000 seconds] [Time delta from previous displayed frame: 3.255022000 seconds] [Time since reference or first frame: 17.008180000 seconds] Frame Number: 14 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 15 19.753598 192.168.1.148 192.168.1.5 TCP 49357 > 8089 [sYN] Seq=0 Win=8192 Len=0 MSS=1452 SACK_PERM=1 Frame 15: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Arrival Time: Jun 2, 2011 14:41:09.736386000 Mitteleuropäische Sommerzeit Epoch Time: 1307018469.736386000 seconds [Time delta from previous captured frame: 2.745418000 seconds] [Time delta from previous displayed frame: 6.000440000 seconds] [Time since reference or first frame: 19.753598000 seconds] Frame Number: 15 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb), Dst: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Destination: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) Address: Giga-Byt_7c:6a:cb (00:24:1d:7c:6a:cb) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.148 (192.168.1.148), Dst: 192.168.1.5 (192.168.1.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x6f7a (28538) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x4764 [correct] [Good: True] [bad: False] Source: 192.168.1.148 (192.168.1.148) Destination: 192.168.1.5 (192.168.1.5) Transmission Control Protocol, Src Port: 49357 (49357), Dst Port: 8089 (8089), Seq: 0, Len: 0 Source port: 49357 (49357) Destination port: 8089 (8089) [stream index: 3] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgement: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 8089] [Message: Connection establish request (SYN): server port 8089] [severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set Window size: 8192 Checksum: 0x4065 [validation disabled] [Good Checksum: False] [bad Checksum: False] Options: (8 bytes) Maximum segment size: 1452 bytes NOP NOP TCP SACK Permitted Option: True No. Time Source Destination Protocol Info 16 20.012157 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 16: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:41:09.994945000 Mitteleuropäische Sommerzeit Epoch Time: 1307018469.994945000 seconds [Time delta from previous captured frame: 0.258559000 seconds] [Time delta from previous displayed frame: 0.258559000 seconds] [Time since reference or first frame: 20.012157000 seconds] Frame Number: 16 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 17 24.030929 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 17: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:41:14.013717000 Mitteleuropäische Sommerzeit Epoch Time: 1307018474.013717000 seconds [Time delta from previous captured frame: 4.018772000 seconds] [Time delta from previous displayed frame: 4.277331000 seconds] [Time since reference or first frame: 24.030929000 seconds] Frame Number: 17 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 18 27.035764 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 18: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:41:17.018552000 Mitteleuropäische Sommerzeit Epoch Time: 1307018477.018552000 seconds [Time delta from previous captured frame: 3.004835000 seconds] [Time delta from previous displayed frame: 7.282166000 seconds] [Time since reference or first frame: 27.035764000 seconds] Frame Number: 18 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n No. Time Source Destination Protocol Info 19 30.042664 fe80::f545:128e:ca07:5431 ff02::c SSDP M-SEARCH * HTTP/1.1 Frame 19: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) Arrival Time: Jun 2, 2011 14:41:20.025452000 Mitteleuropäische Sommerzeit Epoch Time: 1307018480.025452000 seconds [Time delta from previous captured frame: 3.006900000 seconds] [Time delta from previous displayed frame: 10.289066000 seconds] [Time since reference or first frame: 30.042664000 seconds] Frame Number: 19 Frame Length: 208 bytes (1664 bits) Capture Length: 208 bytes (1664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ipv6:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Destination: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) Address: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c) .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) Source: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) Address: Giga-Byt_27:e8:57 (00:1f:d0:27:e8:57) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431), Dst: ff02::c (ff02::c) 0110 .... = Version: 6 [0110 .... = This field makes the filter "ip.version == 6" possible: 6] .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00000000 .... 0000 00.. .... .... .... .... .... = Differentiated Services Field: Default (0x00000000) .... .... ..0. .... .... .... .... .... = ECN-Capable Transport (ECT): Not set .... .... ...0 .... .... .... .... .... = ECN-CE: Not set .... .... .... 0000 0000 0000 0000 0000 = Flowlabel: 0x00000000 Payload length: 154 Next header: UDP (0x11) Hop limit: 1 Source: fe80::f545:128e:ca07:5431 (fe80::f545:128e:ca07:5431) Destination: ff02::c (ff02::c) User Datagram Protocol, Src Port: 50070 (50070), Dst Port: ssdp (1900) Source port: 50070 (50070) Destination port: ssdp (1900) Length: 154 Checksum: 0x2448 [validation disabled] [Good Checksum: False] [bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:[FF02::C]:1900\r\n ST:urn:Microsoft Windows Peer Name Resolution Protocol: V4:IPV6:LinkLocal\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n
MaM Posted December 11, 2012 Posted December 11, 2012 Die Erklärung ist einfach: Dein Client redet IPV6, der Recording Service (noch) nicht. So kommen sie nicht zueinander.
Recommended Posts