Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!uunet!husc6!rutgers!mtune!codas!novavax!utx1!hilmes
From: hilmes@utx1.UUCP (Douglas Hilmes)
Newsgroups: comp.dcom.lans
Subject: Re: ethernet analyzer
Message-ID: <1333@utx1.UUCP>
Date: Wed, 19-Aug-87 10:30:51 EDT
Article-I.D.: utx1.1333
Posted: Wed Aug 19 10:30:51 1987
Date-Received: Sat, 22-Aug-87 10:21:22 EDT
Organization: Racal-Milgo, Ft. Lauderdale, Fl.
Lines: 62


Yet another ethernet analyzer:  The Sniffer from Network General.
I had it on loan for about two days.  It does stats, filters packets and
gives the following kind of display for various protocols:




- - - - - - - - - - - - - - - - Frame 1 - - - - - - - - - - - - - - - -


DLC:  ---- DLC Header ----
DLC:  
DLC:  Frame 1 arrived at 10:25:26.611; frame size is 558 (022E hex) bytes.
DLC:  Destination: Station 08002B0489EA, hostA
DLC:  Source     : Station 0000C8000064, hostP
DLC:  Ethertype = 0800
DLC:
IP:   ---- IP Header ----
IP:   
IP:   Version = 4, header length = 20 bytes
IP:   Type of service = 00
IP:         000. .... = routine
IP:         ...0 .... = normal delay 
IP:         .... 0... = normal throughput
IP:         .... .0.. = normal reliability 
IP:   Total length = 544 bytes
IP:   Identification = 18218
IP:   Flags = 0X  
IP:   .0.. .... = may fragment
IP:   ..0. .... = last fragment 
IP:   Fragment offset = 0
IP:   Time to live = 15
IP:   Protocol = 6 (TCP)
IP:   Header checksum = D21F (correct)
IP:   Source address = [200.0.0.100]
IP:   Destination address = [200.0.0.42]
IP:   No options
IP:  
TCP:  ---- TCP header ---- 
TCP:   
TCP:  Source port = 1019 
TCP:  Destination port = 514 
TCP:  Sequence number = 55601483 
TCP:  Acknowledgment number = 591953873 
TCP:  Data offset = 20 
TCP:  Flags = 10 
TCP:  ..0. .... = (No urgent pointer) 
TCP:  ...1 .... = Acknowledgment 
TCP:  .... 0... = (No push) 
TCP:  .... .0.. = (No reset) 
TCP:  .... ..0. = (No SYN) 
TCP:  .... ...0 = (No FIN) 
TCP:  Window = 4096 
TCP:  Checksum = CC0B (correct) 
TCP:  No TCP options 
TCP:  [504 byte(s) of data] 
TCP:   
-- 
{allegra|codas}!novavax!utx1!hilmes
                     
Douglas Hilmes @ Racal-Milgo,  Fort Lauderdale, Florida (305) 476 6738