Skip to content

Instantly share code, notes, and snippets.

@calmh

calmh/pmp-wireshark.txt

Created April 28, 2016 09:34
Show Gist options
  • Save calmh/67cbe9a848cef6ea1e50162c3f7045d7 to your computer and use it in GitHub Desktop.
Save calmh/67cbe9a848cef6ea1e50162c3f7045d7 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
pmp-wireshark.txt
Frame 1: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Interface id: 0 (eth0.100)
Encapsulation type: Ethernet (1)
Arrival Time: Apr 28, 2016 11:33:23.725565244 CEST
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1461836003.725565244 seconds
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:udp:portcontrol]
Ethernet II, Src: ac:bc:32:b0:82:33, Dst: 00:25:90:38:94:04
Destination: 00:25:90:38:94:04
Address: 00:25:90:38:94:04
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: ac:bc:32:b0:82:33
Address: ac:bc:32:b0:82:33
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Padding: 00000000000000000000000000000000
Internet Protocol Version 4, Src: 172.16.32.175, Dst: 172.16.32.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 30
Identification: 0x5eee (24302)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x8310 [validation disabled]
[Good: False]
[Bad: False]
Source: 172.16.32.175
Destination: 172.16.32.1
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: 61228 (61228), Dst Port: 5351 (5351)
Source Port: 61228
Destination Port: 5351
Length: 10
Checksum: 0x62f5 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[Stream index: 0]
NAT Port Mapping Protocol, External Address Request
Version: 0
Opcode: External Address Request (0)
Frame 2: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
Interface id: 0 (eth0.100)
Encapsulation type: Ethernet (1)
Arrival Time: Apr 28, 2016 11:33:23.725617831 CEST
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1461836003.725617831 seconds
[Time delta from previous captured frame: 0.000052587 seconds]
[Time delta from previous displayed frame: 0.000052587 seconds]
[Time since reference or first frame: 0.000052587 seconds]
Frame Number: 2
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:udp:portcontrol]
Ethernet II, Src: 00:25:90:38:94:04, Dst: ac:bc:32:b0:82:33
Destination: ac:bc:32:b0:82:33
Address: ac:bc:32:b0:82:33
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 00:25:90:38:94:04
Address: 00:25:90:38:94:04
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 172.16.32.1, Dst: 172.16.32.175
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0xf69e (63134)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xab55 [validation disabled]
[Good: False]
[Bad: False]
Source: 172.16.32.1
Destination: 172.16.32.175
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: 5351 (5351), Dst Port: 61228 (61228)
Source Port: 5351
Destination Port: 61228
Length: 20
Checksum: 0x98f6 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[Stream index: 0]
NAT Port Mapping Protocol, External Address Response
Version: 0
Opcode: External Address Response (128)
Result Code: Success (0)
Seconds Since Start of Epoch: 317962
External IP Address: 213.114.37.239
Frame 3: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Interface id: 0 (eth0.100)
Encapsulation type: Ethernet (1)
Arrival Time: Apr 28, 2016 11:33:33.723467867 CEST
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1461836013.723467867 seconds
[Time delta from previous captured frame: 9.997850036 seconds]
[Time delta from previous displayed frame: 9.997850036 seconds]
[Time since reference or first frame: 9.997902623 seconds]
Frame Number: 3
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:udp:portcontrol]
Ethernet II, Src: ac:bc:32:b0:82:33, Dst: 00:25:90:38:94:04
Destination: 00:25:90:38:94:04
Address: 00:25:90:38:94:04
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: ac:bc:32:b0:82:33
Address: ac:bc:32:b0:82:33
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Padding: 000000000000
Internet Protocol Version 4, Src: 172.16.32.175, Dst: 172.16.32.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0xe0b7 (57527)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0x013d [validation disabled]
[Good: False]
[Bad: False]
Source: 172.16.32.175
Destination: 172.16.32.1
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: 54213 (54213), Dst Port: 5351 (5351)
Source Port: 54213
Destination Port: 5351
Length: 20
Checksum: 0xac35 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[Stream index: 1]
NAT Port Mapping Protocol, Map TCP Request
Version: 0
Opcode: Map TCP Request (2)
Reserved: 0
Internal Port: 22002
Requested External Port: 28174
Requested Port Mapping Lifetime: 3600
Frame 4: 58 bytes on wire (464 bits), 58 bytes captured (464 bits) on interface 0
Interface id: 0 (eth0.100)
Encapsulation type: Ethernet (1)
Arrival Time: Apr 28, 2016 11:33:33.723982551 CEST
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1461836013.723982551 seconds
[Time delta from previous captured frame: 0.000514684 seconds]
[Time delta from previous displayed frame: 0.000514684 seconds]
[Time since reference or first frame: 9.998417307 seconds]
Frame Number: 4
Frame Length: 58 bytes (464 bits)
Capture Length: 58 bytes (464 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:udp:portcontrol]
Ethernet II, Src: 00:25:90:38:94:04, Dst: ac:bc:32:b0:82:33
Destination: ac:bc:32:b0:82:33
Address: ac:bc:32:b0:82:33
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 00:25:90:38:94:04
Address: 00:25:90:38:94:04
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 172.16.32.1, Dst: 172.16.32.175
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 44
Identification: 0xfe56 (65110)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xa399 [validation disabled]
[Good: False]
[Bad: False]
Source: 172.16.32.1
Destination: 172.16.32.175
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: 5351 (5351), Dst Port: 54213 (54213)
Source Port: 5351
Destination Port: 54213
Length: 24
Checksum: 0x98fa [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[Stream index: 1]
NAT Port Mapping Protocol, Map TCP Response
Version: 0
Opcode: Map TCP Response (130)
Result Code: Success (0)
Seconds Since Start of Epoch: 317972
Internal Port: 242
Mapped External Port: 14
Port Mapping Lifetime: 3600
Frame 5: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Interface id: 0 (eth0.100)
Encapsulation type: Ethernet (1)
Arrival Time: Apr 28, 2016 11:33:33.727407871 CEST
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1461836013.727407871 seconds
[Time delta from previous captured frame: 0.003425320 seconds]
[Time delta from previous displayed frame: 0.003425320 seconds]
[Time since reference or first frame: 10.001842627 seconds]
Frame Number: 5
Frame Length: 60 bytes (480 bits)
Capture Length: 60 bytes (480 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:udp:portcontrol]
Ethernet II, Src: ac:bc:32:b0:82:33, Dst: 00:25:90:38:94:04
Destination: 00:25:90:38:94:04
Address: 00:25:90:38:94:04
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: ac:bc:32:b0:82:33
Address: ac:bc:32:b0:82:33
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Padding: 00000000000000000000000000000000
Internet Protocol Version 4, Src: 172.16.32.175, Dst: 172.16.32.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 30
Identification: 0x3dde (15838)
Flags: 0x00
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xa420 [validation disabled]
[Good: False]
[Bad: False]
Source: 172.16.32.175
Destination: 172.16.32.1
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: 61217 (61217), Dst Port: 5351 (5351)
Source Port: 61217
Destination Port: 5351
Length: 10
Checksum: 0x6300 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[Stream index: 2]
NAT Port Mapping Protocol, External Address Request
Version: 0
Opcode: External Address Request (0)
Frame 6: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
Interface id: 0 (eth0.100)
Encapsulation type: Ethernet (1)
Arrival Time: Apr 28, 2016 11:33:33.727472668 CEST
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1461836013.727472668 seconds
[Time delta from previous captured frame: 0.000064797 seconds]
[Time delta from previous displayed frame: 0.000064797 seconds]
[Time since reference or first frame: 10.001907424 seconds]
Frame Number: 6
Frame Length: 54 bytes (432 bits)
Capture Length: 54 bytes (432 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:udp:portcontrol]
Ethernet II, Src: 00:25:90:38:94:04, Dst: ac:bc:32:b0:82:33
Destination: ac:bc:32:b0:82:33
Address: ac:bc:32:b0:82:33
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: 00:25:90:38:94:04
Address: 00:25:90:38:94:04
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 172.16.32.1, Dst: 172.16.32.175
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 40
Identification: 0xfe57 (65111)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (17)
Header checksum: 0xa39c [validation disabled]
[Good: False]
[Bad: False]
Source: 172.16.32.1
Destination: 172.16.32.175
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: 5351 (5351), Dst Port: 61217 (61217)
Source Port: 5351
Destination Port: 61217
Length: 20
Checksum: 0x98f6 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[Stream index: 2]
NAT Port Mapping Protocol, External Address Response
Version: 0
Opcode: External Address Response (128)
Result Code: Success (0)
Seconds Since Start of Epoch: 317972
External IP Address: 213.114.37.239
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment