(not subscribed to the list, please Cc me)
wget-1.9.1
I am trying to do this:
$ wget -v -t 0 -nd -c --passive-ftp
ftp://ftp.smoovenet.com/pub/lardlad/sounds/season11/grift16.mp3
--12:34:45--
ftp://ftp.smoovenet.com/pub/lardlad/sounds/season11/grift16.mp3
=> `grift16.mp3'
Resolving ftp.smoovenet.com... 66.90.80.51
Connecting to ftp.smoovenet.com[66.90.80.51]:21... connected.
Logging in as anonymous ...
Login incorrect.
But, as you can see in frame #10 in the attached file, the reply is not
"login incorrect" but "too many users".
For some reason, wget thinks there's a "hard error" and gives up.
I'd like wget to just keep trying to download, according to the -t 0
option, instead of giving up. If the retries are separated by 30 seconds
or so, it won't overload the server.
--
Florin Andrei
http://florin.myip.org/
No. Time Source Destination Protocol Info
1 0.000000 XXX.YYY.ZZZ.KKK 66.90.80.51 TCP
33340 > ftp [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=242708530 TSER=0 WS=2
Frame 1 (74 bytes on wire, 74 bytes captured)
Arrival Time: Apr 11, 2005 12:34:45.852994000
Time delta from previous packet: 0.000000000 seconds
Time since reference or first frame: 0.000000000 seconds
Frame Number: 1
Packet Length: 74 bytes
Capture Length: 74 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:00:e2:2b:b1:2d, Dst: 00:00:0c:07:ac:01
Destination: 00:00:0c:07:ac:01 (All-HSRP-routers_01)
Source: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Type: IP (0x0800)
Internet Protocol, Src Addr: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK), Dst Addr:
66.90.80.51 (66.90.80.51)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0xd3b6 (54198)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0cb8 (correct)
Source: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Destination: 66.90.80.51 (66.90.80.51)
Transmission Control Protocol, Src Port: 33340 (33340), Dst Port: ftp (21),
Seq: 0, Ack: 0, Len: 0
Source port: 33340 (33340)
Destination port: ftp (21)
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0xc48e (correct)
Options: (20 bytes)
Maximum segment size: 1460 bytes
SACK permitted
Time stamp: tsval 242708530, tsecr 0
NOP
Window scale: 2 (multiply by 4)
No. Time Source Destination Protocol Info
2 0.108873 66.90.80.51 XXX.YYY.ZZZ.KKK TCP ftp
> 33340 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1380 TSV=41982635
TSER=242708530 WS=0
Frame 2 (74 bytes on wire, 74 bytes captured)
Arrival Time: Apr 11, 2005 12:34:45.961867000
Time delta from previous packet: 0.108873000 seconds
Time since reference or first frame: 0.108873000 seconds
Frame Number: 2
Packet Length: 74 bytes
Capture Length: 74 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:d0:bc:f6:8c:1c, Dst: 00:00:e2:2b:b1:2d
Destination: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Source: 00:d0:bc:f6:8c:1c (Cisco_f6:8c:1c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 66.90.80.51 (66.90.80.51), Dst Addr:
XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0000 (0)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 44
Protocol: TCP (0x06)
Header checksum: 0xf46e (correct)
Source: 66.90.80.51 (66.90.80.51)
Destination: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 33340 (33340),
Seq: 0, Ack: 1, Len: 0
Source port: ftp (21)
Destination port: 33340 (33340)
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 40 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5792
Checksum: 0x12ec (correct)
Options: (20 bytes)
Maximum segment size: 1380 bytes
SACK permitted
Time stamp: tsval 41982635, tsecr 242708530
NOP
Window scale: 0 (multiply by 1)
SEQ/ACK analysis
This is an ACK to the segment in frame: 1
The RTT to ACK the segment was: 0.108873000 seconds
No. Time Source Destination Protocol Info
3 0.109005 XXX.YYY.ZZZ.KKK 66.90.80.51 TCP
33340 > ftp [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=242708639 TSER=41982635
Frame 3 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 11, 2005 12:34:45.961999000
Time delta from previous packet: 0.000132000 seconds
Time since reference or first frame: 0.109005000 seconds
Frame Number: 3
Packet Length: 66 bytes
Capture Length: 66 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:00:e2:2b:b1:2d, Dst: 00:00:0c:07:ac:01
Destination: 00:00:0c:07:ac:01 (All-HSRP-routers_01)
Source: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Type: IP (0x0800)
Internet Protocol, Src Addr: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK), Dst Addr:
66.90.80.51 (66.90.80.51)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xd3b8 (54200)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0cbe (correct)
Source: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Destination: 66.90.80.51 (66.90.80.51)
Transmission Control Protocol, Src Port: 33340 (33340), Dst Port: ftp (21),
Seq: 1, Ack: 1, Len: 0
Source port: 33340 (33340)
Destination port: ftp (21)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840 (scaled)
Checksum: 0x51e0 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 242708639, tsecr 41982635
SEQ/ACK analysis
This is an ACK to the segment in frame: 2
The RTT to ACK the segment was: 0.000132000 seconds
No. Time Source Destination Protocol Info
4 10.224692 66.90.80.51 XXX.YYY.ZZZ.KKK FTP
Response: 220 ftp.smoovenet.com FTP Server ready
Frame 4 (106 bytes on wire, 106 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.077686000
Time delta from previous packet: 10.115687000 seconds
Time since reference or first frame: 10.224692000 seconds
Frame Number: 4
Packet Length: 106 bytes
Capture Length: 106 bytes
Protocols in frame: eth:ip:tcp:ftp
Ethernet II, Src: 00:d0:bc:f6:8c:1c, Dst: 00:00:e2:2b:b1:2d
Destination: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Source: 00:d0:bc:f6:8c:1c (Cisco_f6:8c:1c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 66.90.80.51 (66.90.80.51), Dst Addr:
XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 92
Identification: 0xc473 (50291)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 44
Protocol: TCP (0x06)
Header checksum: 0x2fdb (correct)
Source: 66.90.80.51 (66.90.80.51)
Destination: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 33340 (33340),
Seq: 1, Ack: 1, Len: 40
Source port: ftp (21)
Destination port: 33340 (33340)
Sequence number: 1 (relative sequence number)
Next sequence number: 41 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5792
Checksum: 0x3e5b (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 41983647, tsecr 242708639
File Transfer Protocol (FTP)
220 ftp.smoovenet.com FTP Server ready\r\n
Response code: Service ready for new user (220)
Response arg: ftp.smoovenet.com FTP Server ready
No. Time Source Destination Protocol Info
5 10.224817 XXX.YYY.ZZZ.KKK 66.90.80.51 TCP
33340 > ftp [ACK] Seq=1 Ack=41 Win=5840 Len=0 TSV=242718757 TSER=41983647
Frame 5 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.077811000
Time delta from previous packet: 0.000125000 seconds
Time since reference or first frame: 10.224817000 seconds
Frame Number: 5
Packet Length: 66 bytes
Capture Length: 66 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:00:e2:2b:b1:2d, Dst: 00:00:0c:07:ac:01
Destination: 00:00:0c:07:ac:01 (All-HSRP-routers_01)
Source: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Type: IP (0x0800)
Internet Protocol, Src Addr: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK), Dst Addr:
66.90.80.51 (66.90.80.51)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xd3ba (54202)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0cbc (correct)
Source: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Destination: 66.90.80.51 (66.90.80.51)
Transmission Control Protocol, Src Port: 33340 (33340), Dst Port: ftp (21),
Seq: 1, Ack: 41, Len: 0
Source port: 33340 (33340)
Destination port: ftp (21)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 41 (relative ack number)
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840 (scaled)
Checksum: 0x263e (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 242718757, tsecr 41983647
SEQ/ACK analysis
This is an ACK to the segment in frame: 4
The RTT to ACK the segment was: 0.000125000 seconds
No. Time Source Destination Protocol Info
6 10.227990 XXX.YYY.ZZZ.KKK 66.90.80.51 FTP
Request: USER anonymous
Frame 6 (82 bytes on wire, 82 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.080984000
Time delta from previous packet: 0.003173000 seconds
Time since reference or first frame: 10.227990000 seconds
Frame Number: 6
Packet Length: 82 bytes
Capture Length: 82 bytes
Protocols in frame: eth:ip:tcp:ftp
Ethernet II, Src: 00:00:e2:2b:b1:2d, Dst: 00:00:0c:07:ac:01
Destination: 00:00:0c:07:ac:01 (All-HSRP-routers_01)
Source: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Type: IP (0x0800)
Internet Protocol, Src Addr: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK), Dst Addr:
66.90.80.51 (66.90.80.51)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 68
Identification: 0xd3bc (54204)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0caa (correct)
Source: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Destination: 66.90.80.51 (66.90.80.51)
Transmission Control Protocol, Src Port: 33340 (33340), Dst Port: ftp (21),
Seq: 1, Ack: 41, Len: 16
Source port: 33340 (33340)
Destination port: ftp (21)
Sequence number: 1 (relative sequence number)
Next sequence number: 17 (relative sequence number)
Acknowledgement number: 41 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840 (scaled)
Checksum: 0x9e46 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 242718760, tsecr 41983647
File Transfer Protocol (FTP)
USER anonymous\r\n
Request command: USER
Request arg: anonymous
No. Time Source Destination Protocol Info
7 10.326069 66.90.80.51 XXX.YYY.ZZZ.KKK TCP ftp
> 33340 [ACK] Seq=41 Ack=17 Win=5792 Len=0 TSV=41983657 TSER=242718760
Frame 7 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.179063000
Time delta from previous packet: 0.098079000 seconds
Time since reference or first frame: 10.326069000 seconds
Frame Number: 7
Packet Length: 66 bytes
Capture Length: 66 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:d0:bc:f6:8c:1c, Dst: 00:00:e2:2b:b1:2d
Destination: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Source: 00:d0:bc:f6:8c:1c (Cisco_f6:8c:1c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 66.90.80.51 (66.90.80.51), Dst Addr:
XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xc474 (50292)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 44
Protocol: TCP (0x06)
Header checksum: 0x3002 (correct)
Source: 66.90.80.51 (66.90.80.51)
Destination: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 33340 (33340),
Seq: 41, Ack: 17, Len: 0
Source port: ftp (21)
Destination port: 33340 (33340)
Sequence number: 41 (relative sequence number)
Acknowledgement number: 17 (relative ack number)
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5792
Checksum: 0x1535 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 41983657, tsecr 242718760
SEQ/ACK analysis
This is an ACK to the segment in frame: 6
The RTT to ACK the segment was: 0.098079000 seconds
No. Time Source Destination Protocol Info
8 10.326546 66.90.80.51 XXX.YYY.ZZZ.KKK FTP
Response: 331 Anonymous login ok, send your complete email address as your
password.
Frame 8 (142 bytes on wire, 142 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.179540000
Time delta from previous packet: 0.000477000 seconds
Time since reference or first frame: 10.326546000 seconds
Frame Number: 8
Packet Length: 142 bytes
Capture Length: 142 bytes
Protocols in frame: eth:ip:tcp:ftp
Ethernet II, Src: 00:d0:bc:f6:8c:1c, Dst: 00:00:e2:2b:b1:2d
Destination: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Source: 00:d0:bc:f6:8c:1c (Cisco_f6:8c:1c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 66.90.80.51 (66.90.80.51), Dst Addr:
XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 128
Identification: 0xc475 (50293)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 44
Protocol: TCP (0x06)
Header checksum: 0x2fb5 (correct)
Source: 66.90.80.51 (66.90.80.51)
Destination: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 33340 (33340),
Seq: 41, Ack: 17, Len: 76
Source port: ftp (21)
Destination port: 33340 (33340)
Sequence number: 41 (relative sequence number)
Next sequence number: 117 (relative sequence number)
Acknowledgement number: 17 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5792
Checksum: 0x766a (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 41983657, tsecr 242718760
File Transfer Protocol (FTP)
331 Anonymous login ok, send your complete email address as your
password.\r\n
Response code: User name okay, need password (331)
Response arg: Anonymous login ok, send your complete email address as
your password.
No. Time Source Destination Protocol Info
9 10.326756 XXX.YYY.ZZZ.KKK 66.90.80.51 FTP
Request: PASS -wget@
Frame 9 (79 bytes on wire, 79 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.179750000
Time delta from previous packet: 0.000210000 seconds
Time since reference or first frame: 10.326756000 seconds
Frame Number: 9
Packet Length: 79 bytes
Capture Length: 79 bytes
Protocols in frame: eth:ip:tcp:ftp
Ethernet II, Src: 00:00:e2:2b:b1:2d, Dst: 00:00:0c:07:ac:01
Destination: 00:00:0c:07:ac:01 (All-HSRP-routers_01)
Source: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Type: IP (0x0800)
Internet Protocol, Src Addr: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK), Dst Addr:
66.90.80.51 (66.90.80.51)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 65
Identification: 0xd3be (54206)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0cab (correct)
Source: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Destination: 66.90.80.51 (66.90.80.51)
Transmission Control Protocol, Src Port: 33340 (33340), Dst Port: ftp (21),
Seq: 17, Ack: 117, Len: 13
Source port: 33340 (33340)
Destination port: ftp (21)
Sequence number: 17 (relative sequence number)
Next sequence number: 30 (relative sequence number)
Acknowledgement number: 117 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5840 (scaled)
Checksum: 0x3ab2 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 242718859, tsecr 41983657
SEQ/ACK analysis
This is an ACK to the segment in frame: 8
The RTT to ACK the segment was: 0.000210000 seconds
File Transfer Protocol (FTP)
PASS [EMAIL PROTECTED]
Request command: PASS
Request arg: -wget@
No. Time Source Destination Protocol Info
10 10.424528 66.90.80.51 XXX.YYY.ZZZ.KKK FTP
Response: 530 Sorry, the maximum number of allowed users are already connected
(%5)
Frame 10 (141 bytes on wire, 141 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.277522000
Time delta from previous packet: 0.097772000 seconds
Time since reference or first frame: 10.424528000 seconds
Frame Number: 10
Packet Length: 141 bytes
Capture Length: 141 bytes
Protocols in frame: eth:ip:tcp:ftp
Ethernet II, Src: 00:d0:bc:f6:8c:1c, Dst: 00:00:e2:2b:b1:2d
Destination: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Source: 00:d0:bc:f6:8c:1c (Cisco_f6:8c:1c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 66.90.80.51 (66.90.80.51), Dst Addr:
XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 127
Identification: 0xc476 (50294)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 44
Protocol: TCP (0x06)
Header checksum: 0x2fb5 (correct)
Source: 66.90.80.51 (66.90.80.51)
Destination: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 33340 (33340),
Seq: 117, Ack: 30, Len: 75
Source port: ftp (21)
Destination port: 33340 (33340)
Sequence number: 117 (relative sequence number)
Next sequence number: 192 (relative sequence number)
Acknowledgement number: 30 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5792
Checksum: 0x1b72 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 41983667, tsecr 242718859
SEQ/ACK analysis
This is an ACK to the segment in frame: 9
The RTT to ACK the segment was: 0.097772000 seconds
File Transfer Protocol (FTP)
530 Sorry, the maximum number of allowed users are already connected
(%5)\r\n
Response code: Not logged in (530)
Response arg: Sorry, the maximum number of allowed users are already
connected (%5)
No. Time Source Destination Protocol Info
11 10.424830 66.90.80.51 XXX.YYY.ZZZ.KKK TCP ftp
> 33340 [FIN, ACK] Seq=192 Ack=30 Win=5792 Len=0 TSV=41983667 TSER=242718859
Frame 11 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.277824000
Time delta from previous packet: 0.000302000 seconds
Time since reference or first frame: 10.424830000 seconds
Frame Number: 11
Packet Length: 66 bytes
Capture Length: 66 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:d0:bc:f6:8c:1c, Dst: 00:00:e2:2b:b1:2d
Destination: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Source: 00:d0:bc:f6:8c:1c (Cisco_f6:8c:1c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 66.90.80.51 (66.90.80.51), Dst Addr:
XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xc477 (50295)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 44
Protocol: TCP (0x06)
Header checksum: 0x2fff (correct)
Source: 66.90.80.51 (66.90.80.51)
Destination: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 33340 (33340),
Seq: 192, Ack: 30, Len: 0
Source port: ftp (21)
Destination port: 33340 (33340)
Sequence number: 192 (relative sequence number)
Acknowledgement number: 30 (relative ack number)
Header length: 32 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 5792
Checksum: 0x1423 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 41983667, tsecr 242718859
No. Time Source Destination Protocol Info
12 10.424962 XXX.YYY.ZZZ.KKK 66.90.80.51 TCP
33340 > ftp [FIN, ACK] Seq=30 Ack=193 Win=5840 Len=0 TSV=242718957 TSER=41983667
Frame 12 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.277956000
Time delta from previous packet: 0.000132000 seconds
Time since reference or first frame: 10.424962000 seconds
Frame Number: 12
Packet Length: 66 bytes
Capture Length: 66 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:00:e2:2b:b1:2d, Dst: 00:00:0c:07:ac:01
Destination: 00:00:0c:07:ac:01 (All-HSRP-routers_01)
Source: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Type: IP (0x0800)
Internet Protocol, Src Addr: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK), Dst Addr:
66.90.80.51 (66.90.80.51)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xd3c0 (54208)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0cb6 (correct)
Source: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Destination: 66.90.80.51 (66.90.80.51)
Transmission Control Protocol, Src Port: 33340 (33340), Dst Port: ftp (21),
Seq: 30, Ack: 193, Len: 0
Source port: 33340 (33340)
Destination port: ftp (21)
Sequence number: 30 (relative sequence number)
Acknowledgement number: 193 (relative ack number)
Header length: 32 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 5840 (scaled)
Checksum: 0x24ac (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 242718957, tsecr 41983667
SEQ/ACK analysis
This is an ACK to the segment in frame: 11
The RTT to ACK the segment was: 0.000132000 seconds
No. Time Source Destination Protocol Info
13 10.522360 66.90.80.51 XXX.YYY.ZZZ.KKK TCP ftp
> 33340 [ACK] Seq=193 Ack=31 Win=5792 Len=0 TSV=41983676 TSER=242718957
Frame 13 (66 bytes on wire, 66 bytes captured)
Arrival Time: Apr 11, 2005 12:34:56.375354000
Time delta from previous packet: 0.097398000 seconds
Time since reference or first frame: 10.522360000 seconds
Frame Number: 13
Packet Length: 66 bytes
Capture Length: 66 bytes
Protocols in frame: eth:ip:tcp
Ethernet II, Src: 00:d0:bc:f6:8c:1c, Dst: 00:00:e2:2b:b1:2d
Destination: 00:00:e2:2b:b1:2d (AcerTech_2b:b1:2d)
Source: 00:d0:bc:f6:8c:1c (Cisco_f6:8c:1c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 66.90.80.51 (66.90.80.51), Dst Addr:
XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 52
Identification: 0xc478 (50296)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 44
Protocol: TCP (0x06)
Header checksum: 0x2ffe (correct)
Source: 66.90.80.51 (66.90.80.51)
Destination: XXX.YYY.ZZZ.KKK (XXX.YYY.ZZZ.KKK)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: 33340 (33340),
Seq: 193, Ack: 31, Len: 0
Source port: ftp (21)
Destination port: 33340 (33340)
Sequence number: 193 (relative sequence number)
Acknowledgement number: 31 (relative ack number)
Header length: 32 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 5792
Checksum: 0x13b7 (correct)
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 41983676, tsecr 242718957
SEQ/ACK analysis
This is an ACK to the segment in frame: 12
The RTT to ACK the segment was: 0.097398000 seconds
