Test of a DiffServ Premium TCP stream on IBM router (time evolution with snoop)

(A.Pinizzotto)


The router is configured with a premium queue for a tcp stream, with an assigned bandwidth of 8% of the total bandwidth (8% of 2048 kbps, PPP).
The policer's tocket bucket size is the default one: 2200 bytes.
The observed throughput is almost 0 kbps. So we investigated in more details the TCP traffic pattern using a sniffer (snoop).

Test overview

  1. Testbed description
  2. TCP traffic pattern
  3. Snoop snapshot

Section 1. Testbed description

The network layout is the following:

                 ---------    PPP (2048 kbps)      ---------
                |  IBM    |_______________________|  IBM    |
                |  2212   | 76.1             76.2 |  2216   |
                |         |                       |         |
                 ---------                         ---------
                     | 74.1                            | 75.1
                     |                                 |
    ---------------------------------------------------------------------
              | 74.2        fast ethernet                       | 75.2
              |                                                 |
           -------                                           -------
          |       |                                         |       |
          |   A   |                                         |   B   |
           -------                                           -------
Routing: A is the stream source, B is the sink. Snoop runs both on A and B.
DiffServ is configured only on the IBM 2212 router for outgoing traffic from the ppp interface.
Bandwidths assigned to the diffserv premium queue is: 163.8 kbps (8% of PPP int. Bandwidth)


Definitions on IBM router:


Policies:
----------------------------------------------
Policy Name     = ds_tcp_74.2->75.2
        State:Priority =Enabled    : 10
        Profile        =tcp_74.2->75.2
        Valid Period   =val_always
        DiffServ Action=ds1_prem8
----------------------------------------------


Profiles:
----------------------------------------------
Profile Name    = tcp_74.2->75.2
        sAddr     =   192.168.74.2 :  sPort=    0 : 65535
        dAddr     =   192.168.75.2 :  dPort=    0 : 65535
        proto     =              6 : 6
        TOS       =            xFF : x00
        Remote Grp=All Users
----------------------------------------------


Diff-serv actions:
----------------------------------------------
DiffServ Name   = ds1_prem8                      Type =Permit
        TOS mask:modify=xFF:x01
        Queue:BwShare  =Premium    : 8 %
----------------------------------------------


Interface diffsev parameters:
-------------------------------------------------------------------------------
                        ---------- Premium -------   --------- Assured --------
Net If     Status  NumQ Bwdth  Wght  OutBuf  MaxQos Bwdth  Wght  OutBuf  MaxQos
Num                       (%)   (%) (bytes)     (%)   (%)   (%) (bytes)     (%)
-------------------------------------------------------------------------------
0   PPP   Enabled     2    20    90    5500      95    80    10   27500      80
-------------------------------------------------------------------------------

Token Bucket size is the default, 2200 bytes.


NETPERF and NETSERVER commands used:

TRAFFIC SOURCE
(source host 192.168.74.2)
netperf -p 50070 -H 192.168.75.2 -l 120 -f k
TRAFFIC RECEIVER
(dest host 192.168.75.2)
netserve -p 50070


SNOOP commands:

(source host 192.168.74.2)
snoop -V -d ge0 -s 120 -ta from 192.168.75.2 to 192.168.74.2                              
snoop -V -d ge0 -s 120 -ta from 192.168.74.2 to 192.168.75.2 

(dest host 192.168.75.2)
snoop -V -d ge0 -s 120 -ta from 192.168.74.2 to 192.168.75.2 

Section 2. TCP traffic pattern

The figure below is a representation of the evolution in time of the tcp traffic between A and B as reported by snoop.
The initial connection establishment phase is not reported. The first pack refers to the first data packet transmitted.

There are three rows:

  1. [A->>]: Packets from A to B, sniffed in A
  2. [->>B]: Packets from A to B, sniffed in B
  3. [A<<-]: Packets from B to A, sniffed in A
"#" (first row) represents a packet sent from A;
"#" (second row) represents a packet which arrived at rx (not dropped by the policer);
":" (second row) packet drop
"@" in the third row is an acknowledgment from B to A.

The numbers above the first row identify a given pack, a number occurring twice or more indicates packet retransmission.
                     ~ 4 secs       ~ 10 secs                ~ 14 secs  
                     <----->     <------------->         <----------------> 
                     
            1 2 3 4 5       2 3 4               3 4 5 6 7                  5 6 7
                    *
[A->>] .... #_#_#_#_#_______#_#_#_______________#_#_#_#_#__________________#_#_# ....
[->>B] .... #_:_:_:_#_______#_:_:_______________#_#_:_#_:__________________#_#_: ....
[A<<-] .... _@_______________@___________________@_@________________________@_@_ .... 

Note:
Replicated acknowledgment packets are not reported in this figure.

The tcp window reported by a data packet as reported by snooop is always 50370, with one exception, the fifth packet (marked with "*"), for which the window is 8760.

hypothesis
We think that this behavior could be due to the Token Bucket (TB) size.
In fact the TB size is 2200 and the packet size in this test is 1500.
This means that when a packet arrives to the policer it uses 1500 bytes of the TB, leaving just 700 bytes. If the following packet arrives before the TB is filled again with at least 1500 bytes, it will be dropped by the policer. In this test the second packet arrives about 140 microseconds after the first one (see A->> , packets from A to B sniffed in A). Since the committed rate for the premium queue is 163800 bps, that is 20475 bytes per second, it means that in 140 microseconds just about 3 bytes can be added to the Token Bucket, but they are not enough to transmit at least one packet (1500 bytes).
Some additional testing done by varying the buket depth show that when the bucket increases the performance of the TCP premium stream improves.

Note:
Commands to view/change the Token Bucket size

*TALK 4

Debugger


db>word ds_token_bucket                      (to view the current value)
Word at location 0x30ea2a2c contains 0x898 (2200)

db>word ds_token_bucket=4400                 (to write a new value)
Wrote 0x1130 to location 0x30ea2a2c

db>^P 
*TALK 5 
+FEATURE Policy
Policy console>RESET DATABASE



Section 3. Snoop snapshot

In this section snoop snapshots are reported with more details. Tcp connection establishment is included.

Note:
Time clock in host A and B are not syncronized.

  • A->>    Packets from A to B, sniffed in A
  • ->>B    Packets from A to B, sniffed in B
  • A<<-    Packets from B to A, sniffed in A


    (A->>)    Packets from A to B, sniffed in A

    
    
    TCP connection establishment and application initialization.
    
    
    ________________________________
    14:55:15.58082 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 58 bytes
    14:55:15.58082 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=44, ID=5499
    14:55:15.58082 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986 Syn Seq=2989577172 Len=0 Win=8760 Options=
    ________________________________
    14:55:15.58479 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 54 bytes
    14:55:15.58479 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=40, ID=5500
    14:55:15.58479 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633038 Seq=2989577173 Len=0 Win=8760
    ________________________________
    14:55:15.58492 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 310 bytes
    14:55:15.58492 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=296, ID=5501
    14:55:15.58492 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633038 Seq=2989577173 Len=256 Win=8760
    ________________________________
    14:55:15.59166 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 54 bytes
    14:55:15.59166 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=40, ID=5502
    14:55:15.59166 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633294 Seq=2989577429 Len=0 Win=8760
    ________________________________
    14:55:15.59283 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 310 bytes
    14:55:15.59283 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=296, ID=5503
    14:55:15.59283 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633294 Seq=2989577429 Len=256 Win=8760
    ________________________________
    14:55:15.59850 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 62 bytes
    14:55:15.59850 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=48, ID=5504
    14:55:15.59850 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987 Syn Seq=2989622164 Len=0 Win=65535 Options=
    ________________________________
    14:55:15.60286 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 54 bytes
    14:55:15.60286 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=40, ID=5505
    14:55:15.60286 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989622165 Len=0 Win=50370
    
    
    
    Beginning of data transfer
    
    
    ________________________________
    14:55:15.60514 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:15.60514 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5506
    14:55:15.60514 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989622165 Len=1460 Win=50370
    ________________________________
    14:55:15.60518 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:15.60518 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5507
    14:55:15.60518 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989623625 Len=1460 Win=50370
    ________________________________
    14:55:15.61432 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:15.61432 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5508
    14:55:15.61432 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989625085 Len=1460 Win=50370
    ________________________________
    14:55:15.61436 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:15.61436 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5509
    14:55:15.61436 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989626545 Len=1460 Win=50370
    ________________________________
    14:55:15.64386 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 54 bytes
    14:55:15.64386 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=40, ID=5510
    14:55:15.64386 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633550 Seq=2989577685 Len=0 Win=8760
    
    
    Source waiting.........
    
    
    ________________________________
    14:55:19.83396 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:19.83396 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5511
    14:55:19.83396 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989623625 Len=1460 Win=50370
    ________________________________
    14:55:19.84405 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:19.84405 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5512
    14:55:19.84405 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989625085 Len=1460 Win=50370
    ________________________________
    14:55:19.84409 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:19.84409 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5513
    14:55:19.84409 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989626545 Len=1460 Win=50370
    
    
    Source waiting.........
    
    
    ________________________________
    14:55:28.33397 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:28.33397 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5514
    14:55:28.33397 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989625085 Len=1460 Win=50370
    ________________________________
    14:55:28.41318 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:28.41318 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5515
    14:55:28.41318 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989626545 Len=1460 Win=50370
    ________________________________
    14:55:28.41323 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:28.41323 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5516
    14:55:28.41323 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989628005 Len=1460 Win=50370
    ________________________________
    14:55:28.49176 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:28.49176 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5517
    14:55:28.49176 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989629465 Len=1460 Win=50370
    ________________________________
    14:55:28.49181 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:28.49181 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5518
    14:55:28.49181 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989630925 Len=1460 Win=50370
    
    
    
    Source waiting.........
    
    
    ________________________________
    14:55:42.40406 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:42.40406 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5519
    14:55:42.40406 192.168.74.2 -> 192.168.75.2 TCP D=37777 S=32966     Ack=95320287 Seq=2899926271 Len=1460 Win=50370
    ________________________________
    14:55:42.48190 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:42.48190 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5520
    14:55:42.48190 192.168.74.2 -> 192.168.75.2 TCP D=37777 S=32966     Ack=95320287 Seq=2899927731 Len=1460 Win=50370
    ________________________________
    14:55:42.48193 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:42.48193 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5521
    14:55:42.48193 192.168.74.2 -> 192.168.75.2 TCP D=37777 S=32966     Ack=95320287 Seq=2899929191 Len=1460 Win=50370
    
    
    ........................
    ........................
    
    
    
    

    (->>B)    Packets from A to B, sniffed in B

    
    
    
    TCP connection establishment and application initialization.
    
    
    ________________________________
    14:55:21.68295 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:21.68295 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=44, ID=5499
    14:55:21.68295 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986 Syn Seq=2989577172 Len=0 Win=8760 Options=
    ________________________________
    14:55:21.68509 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:21.68509 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=40, ID=5500
    14:55:21.68509 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633038 Seq=2989577173 Len=0 Win=8760
    ________________________________
    14:55:21.68735 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 310 bytes
    14:55:21.68735 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=296, ID=5501
    14:55:21.68735 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633038 Seq=2989577173 Len=256 Win=8760
    ________________________________
    14:55:21.69178 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:21.69178 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=40, ID=5502
    14:55:21.69178 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633294 Seq=2989577429 Len=0 Win=8760
    ________________________________
    14:55:21.69403 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 310 bytes
    14:55:21.69403 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=296, ID=5503
    14:55:21.69403 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633294 Seq=2989577429 Len=256 Win=8760
    ________________________________
    14:55:21.70075 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 62 bytes
    14:55:21.70075 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=48, ID=5504
    14:55:21.70075 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987 Syn Seq=2989622164 Len=0 Win=65535 Options=
    ________________________________
    14:55:21.70292 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:21.70292 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=40, ID=5505
    14:55:21.70292 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989622165 Len=0 Win=50370
    
    
    
    Beginning of data transfer
    
    
    ________________________________
    14:55:21.71200 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:21.71200 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5506
    14:55:21.71200 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989622165 Len=1460 Win=50370
    ________________________________
    14:55:21.74504 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:21.74504 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=40, ID=5510
    14:55:21.74504 192.168.74.2 -> 192.168.75.2 TCP D=50070 S=32986     Ack=182633550 Seq=2989577685 Len=0 Win=8760
    
    
    
    Source waiting.........
    
    
    
    ________________________________
    14:55:25.94121 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:25.94121 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5511
    14:55:25.94121 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989623625 Len=1460 Win=50370
    
    
    
    Source waiting.........
    
    
    ________________________________
    14:55:34.44165 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:34.44165 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5514
    14:55:34.44165 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989625085 Len=1460 Win=50370
    ________________________________
    14:55:34.52137 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:34.52137 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5515
    14:55:34.52137 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989626545 Len=1460 Win=50370
    ________________________________
    14:55:34.59894 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:34.59894 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5517
    14:55:34.59894 192.168.74.2 -> 192.168.75.2 TCP D=37778 S=32987     Ack=182640236 Seq=2989629465 Len=1460 Win=50370
    
    
    
    Source waiting.........
    
    
    ________________________________
    14:55:48.51095 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:48.51095 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5519
    14:55:48.51095 192.168.74.2 -> 192.168.75.2 TCP D=37777 S=32966     Ack=95320287 Seq=2899926271 Len=1460 Win=50370
    ________________________________
    14:55:48.58842 192.168.74.2 -> 192.168.75.2 ETHER Type=0800 (IP), size = 1514 bytes
    14:55:48.58842 192.168.74.2 -> 192.168.75.2 IP  D=192.168.75.2 S=192.168.74.2 LEN=1500, ID=5520
    14:55:48.58842 192.168.74.2 -> 192.168.75.2 TCP D=37777 S=32966     Ack=95320287 Seq=2899927731 Len=1460 Win=50370
    
    
    ..............................
    ..............................
    
    
    
    
    
    
    

    (A<<-)    Packets from B to A, sniffed in A

    
    
    
    TCP connection establishment and application initialization.
    
    ________________________________
    14:55:15.58475 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:15.58475 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=44, ID=8446
    14:55:15.58475 192.168.75.2 -> 192.168.74.2 TCP D=32986 S=50070 Syn Ack=2989577173 Seq=182633037 Len=0 Win=8760 Options=
    ________________________________
    14:55:15.58922 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:15.58922 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8447
    14:55:15.58922 192.168.75.2 -> 192.168.74.2 TCP D=32986 S=50070     Ack=2989577429 Seq=182633038 Len=0 Win=8760
    ________________________________
    14:55:15.59154 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 310 bytes
    14:55:15.59154 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=296, ID=8448
    14:55:15.59154 192.168.75.2 -> 192.168.74.2 TCP D=32986 S=50070     Ack=2989577429 Seq=182633038 Len=256 Win=8760
    ________________________________
    14:55:15.59832 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 310 bytes
    14:55:15.59832 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=296, ID=8449
    14:55:15.59832 192.168.75.2 -> 192.168.74.2 TCP D=32986 S=50070     Ack=2989577685 Seq=182633294 Len=256 Win=8760
    ________________________________
    14:55:15.60282 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 62 bytes
    14:55:15.60282 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=48, ID=8450
    14:55:15.60282 192.168.75.2 -> 192.168.74.2 TCP D=32987 S=37778 Syn Ack=2989622165 Seq=182640235 Len=0 Win=65535 Options=
    
    
    
    Beginning of data transfer
    
    
    ________________________________
    14:55:15.61428 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:15.61428 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8451
    14:55:15.61428 192.168.75.2 -> 192.168.74.2 TCP D=32987 S=37778     Ack=2989623625 Seq=182640236 Len=0 Win=50370
    
    
    Source waiting.........
    
    
    ________________________________
    14:55:19.84400 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:19.84400 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8452
    14:55:19.84400 192.168.75.2 -> 192.168.74.2 TCP D=32987 S=37778     Ack=2989625085 Seq=182640236 Len=0 Win=50370
    
    
    Source waiting.........
    
    
    ________________________________
    14:55:28.41312 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:28.41312 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8453
    14:55:28.41312 192.168.75.2 -> 192.168.74.2 TCP D=32987 S=37778     Ack=2989626545 Seq=182640236 Len=0 Win=50370
    ________________________________
    14:55:28.49169 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:28.49169 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8454
    14:55:28.49169 192.168.75.2 -> 192.168.74.2 TCP D=32987 S=37778     Ack=2989628005 Seq=182640236 Len=0 Win=50370
    ________________________________
    14:55:28.50104 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:28.50104 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8455
    14:55:28.50104 192.168.75.2 -> 192.168.74.2 TCP D=32987 S=37778     Ack=2989628005 Seq=182640236 Len=0 Win=50370
    
    
    
    Source waiting.........
    
    
    ________________________________
    14:55:42.48184 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:42.48184 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8456
    14:55:42.48184 192.168.75.2 -> 192.168.74.2 TCP D=32966 S=37777     Ack=2899927731 Seq=95320287 Len=0 Win=50370
    ________________________________
    14:55:42.55143 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:42.55143 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8457
    14:55:42.55143 192.168.75.2 -> 192.168.74.2 TCP D=32966 S=37777     Ack=2899929191 Seq=95320287 Len=0 Win=50370
    ________________________________
    14:55:42.56071 192.168.75.2 -> 192.168.74.2 ETHER Type=0800 (IP), size = 60 bytes
    14:55:42.56071 192.168.75.2 -> 192.168.74.2 IP  D=192.168.74.2 S=192.168.75.2 LEN=40, ID=8458
    14:55:42.56071 192.168.75.2 -> 192.168.74.2 TCP D=32966 S=37777     Ack=2899929191 Seq=95320287 Len=0 Win=50370
    
    
    ....................
    ....................
    
    
    
    
    [end]