Skip to content

Instantly share code, notes, and snippets.

@wortmanb
Created Jun 14, 2021
Embed
What would you like to do?
No. Time Source Destination Protocol Length Info
5370 209.390899778 192.168.2.215 192.168.2.61 TLSv1.2 235 Client Hello
Frame 5370: 235 bytes on wire (1880 bits), 235 bytes captured (1880 bits) on interface 0
Ethernet II, Src: Vmware_8e:dd:91 (00:0c:29:8e:dd:91), Dst: Vmware_11:11:11 (00:50:56:11:11:11)
Internet Protocol Version 4, Src: 192.168.2.215 (192.168.2.215), Dst: 192.168.2.61 (192.168.2.61)
Transmission Control Protocol, Src Port: 48028 (48028), Dst Port: https (443), Seq: 1, Ack: 1, Len: 169
Source port: 48028 (48028)
Destination port: https (443)
[Stream index: 32]
Sequence number: 1 (relative sequence number)
[Next sequence number: 170 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 229
[Calculated window size: 29312]
[Window size scaling factor: 128]
Checksum: 0x8734 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
No-Operation (NOP)
No-Operation (NOP)
Timestamps: TSval 947522266, TSecr 16051201
[SEQ/ACK analysis]
[Bytes in flight: 169]
Secure Sockets Layer
No. Time Source Destination Protocol Length Info
5371 209.390997057 192.168.2.61 192.168.2.215 TCP 66 https > 48028 [ACK] Seq=1 Ack=170 Win=30080 Len=0 TSval=16051232 TSecr=947522266
Frame 5371: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface 0
Ethernet II, Src: Vmware_11:11:11 (00:50:56:11:11:11), Dst: Vmware_8e:dd:91 (00:0c:29:8e:dd:91)
Internet Protocol Version 4, Src: 192.168.2.61 (192.168.2.61), Dst: 192.168.2.215 (192.168.2.215)
Transmission Control Protocol, Src Port: https (443), Dst Port: 48028 (48028), Seq: 1, Ack: 170, Len: 0
Source port: https (443)
Destination port: 48028 (48028)
[Stream index: 32]
Sequence number: 1 (relative sequence number)
Acknowledgment number: 170 (relative ack number)
Header length: 32 bytes
Flags: 0x010 (ACK)
Window size value: 235
[Calculated window size: 30080]
[Window size scaling factor: 128]
Checksum: 0x4a7d [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
No-Operation (NOP)
No-Operation (NOP)
Timestamps: TSval 16051232, TSecr 947522266
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 5370]
[The RTT to ACK the segment was: 0.000097279 seconds]
No. Time Source Destination Protocol Length Info
5372 209.391424498 192.168.2.61 192.168.2.215 TLSv1.2 73 Alert (Level: Fatal, Description: Handshake Failure)
Frame 5372: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0
Ethernet II, Src: Vmware_11:11:11 (00:50:56:11:11:11), Dst: Vmware_8e:dd:91 (00:0c:29:8e:dd:91)
Internet Protocol Version 4, Src: 192.168.2.61 (192.168.2.61), Dst: 192.168.2.215 (192.168.2.215)
Transmission Control Protocol, Src Port: https (443), Dst Port: 48028 (48028), Seq: 1, Ack: 170, Len: 7
Source port: https (443)
Destination port: 48028 (48028)
[Stream index: 32]
Sequence number: 1 (relative sequence number)
[Next sequence number: 8 (relative sequence number)]
Acknowledgment number: 170 (relative ack number)
Header length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 235
[Calculated window size: 30080]
[Window size scaling factor: 128]
Checksum: 0x0868 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
No-Operation (NOP)
No-Operation (NOP)
Timestamps: TSval 16051233, TSecr 947522266
[SEQ/ACK analysis]
[Bytes in flight: 7]
Secure Sockets Layer
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment