> Tom Tim wrote:
>
> > Only one new idea.
> > Is a LDAP SErver needing vor SCEP.
> > I dont have one up to now.
> >
> usaly scep does not require an ldap server
> but maybe you have put an ldap crldp (crl-distributionpoint) into your
> ca certificate? and the netscreen tries to get a valid crl from there?
How can ic check if i use crldp?
> > This are the last lines of a debug from Netscreen,
> > ----------------------------------------------
> > ...
> > GET request: len=2838
> > ## 13:11:28 : openHttpConnection: convert the host name 172.16.98.9
> > ## 13:11:28 : server IP 172.16.98.92
> > ## 13:11:28 : Trying to connect host 172.16.98.92 port 80
> > ## 13:11:28 : Trying to send to socket 637
> > ## 13:11:28 : openHttpConnection: done <0>.
> > ## 13:11:28 : scep_rsp_ca_ra: done, p_scep_context = 6608d9c
> > ## 13:11:31 : http socket <637> got data <06644e58> len <229> byte.
> > --- more ---
> > ## 13:11:31 : ldap_response_proc: parser error ret<-1> status<200>.
> > --------------------------------------------
> >
> and what does the apache logs show? ;) where the netscreen tries to
> connect too? maybe you can monitor the ldap port and see what netscreen
> tries to do at ldap... (or sniff it ;)
The only entries in apache2 log are in the access_log file. Here you see:
----------------------------------------------------------------
172.16.104.6 - - [11/Apr/2005:08:07:33 +0200] \"GET
/cgi-bin/scep/scep?operation=GetCACert&message=any HTTP/1.0\" 200 3357
172.16.104.6 - - [11/Apr/2005:08:07:34 +0200] \"GET
/cgi-bin/scep/scep?operation=PKIOperation&message=MIAGCSqGSIb3DQEHAqCAMIIHiAIBATEOMAwGCCqGSIb3DQIFBQAwgAYJKoZIhvcNAQcBoIAEggJTMIAGCSqGSIb3DQEHA6CAMIICPAIBADGB%2BDCB9QIBADBeMFkxCzAJBgNVBAYTAkRFMQ8wDQYDVQQKEwZCaW50ZWMxCzAJBgNVBAsTAlJEMQ0wCwYDVQQDEwRyb290MR0wGwYJKoZIhvcNAQkBFg5yb290QGxvY2FsaG9zdAIBAzANBgkqhkiG9w0BAQEFAASBgMUB2pOa6F3APPRIAQwrIXTZn0V%2FsiTC2acRGiA%2BVUsjKsn8Hu0bMNVi8QkdHsmvoHQkJAO6z0gXKWIneh1v5q9cNkdvLmO%2BKOdRktmhOkiPRHHPzYOc5WBGhGiMQyvXkNtw5cUPO9FwdBN%2Fr%2BddRN27piYpaGJd1IG%2Fb3V8ObhyMIIBOgYJKoZIhvcNAQcBMBEGBSsOAwIHBAijOtCgU455MYCCARgNN4qTEL9xkhWwgjhyDV9NThb1l1jKa%2FJHvYjqEqiiCYRD66ho%2FukebGgXoNJe3sT3AUzZv5F7yngRoyPjpB2snCDqlRyAM0SEVxyF00o1Y6fu7gcIChSv%2BPa1sd2p6%2FIbi7UUq3JZ8u%2FsS9%2FuE8izsANx1fMqUUP6GGBsqxFKutVCk7P19dK6GvA7DajWiuJVb4WmixpwrghSjuAGNPn1ZBLW7ZdU64VlPVVJ8jppg1UrhNse68FQ4cVsXiJdqYszAcLnzqFSv11%2B%2FXxIZ9NBV02DkrGnRk6IC0CsBoez7RrOtFDRRIxNdtE0ntGJis9A70yZibkr%2Fm7ncjZy6nDgpvQjaTRVtFY5s%2B51ownh1x
DyGjTPl%2FzNAAAAAAAAAACgggLsMIIC6DCCAlGgAwIBAgIRAIf%2F%2BJDqYyywkpHcqS2%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%2Bf8AtK37EdgZ2ztl91LcogD4b1HD05uOtDjoHtJOgjA06wekotGh3B46XBsvrMjuDZwTPjk%2BAxm2KrbT7BdWXJwlefU7F5MP3jZFvZXXzqQCcoV8qCMCPb7WqWiPBunxSnGJBdVeFv8hrUlSeV41d8DieGkeNHne7dCcCAwEAATANBgkqhkiG9w0BAQUFAAOBgQCWClxF2ksyETsW7kF3xRy1urBL4TECGDP9ZPxv1ecMmMMH3TvBtvaumeYfQ52Bzn2B6zijzEVUW6R6%2B1SKh7zd40fVNq6GZcnFZJNwn3uXkEIwwoT2O0YUIegm8
7ChGw3IIeLP%2FSIE%2B2JEjiUzqGB9IqbVr5Q293y5OCvTUVTb%2FDGCAhcwggITAgEBMIHHMIGxMQswCQYDVQQGEwJERTEQMA4GA1UECBMHR2VybWFueTEPMA0GA1UEChMGQmludGVjMQswCQYDVQQLEwJSRDEVMBMGA1UEAxMMMTcyLjE2LjEwNC42MRkwFwYDVQQDExAwMDI5MDcyMDAyMDAwMjU1MQwwCgYDVQQDEwM2NzcxEDAOBgNVBAMTB3JzYS1rZXkxEDAOBgNVBAMTB2NhbGludXgxDjAMBgNVBAMTBUxkYXAyAhEAh%2F%2F4kOpjLLCSkdypLb68YTAMBggqhkiG9w0CBQUAoIGjMBIGCmCGSAGG%2BEUBCQIxBBMCMjAwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAfBgkqhkiG9w0BCQQxEgQQvLmfOp%2F%2FLYNUL1szSn%2BEOTAgBgpghkgBhvhFAQkFMRIEEODa6A8NT%2FkEvkFZ6eclspcwMAYKYIZIAYb4RQEJBzEiEyA4N0ZGRjg5MEVBNjMyQ0IwOTI5MURDQTkyREJFQkM2MTANBgkqhkiG9w0BAQEFAASBgLFndLx8XykdWU7QevIbZyBrTOnS3pGeW1s0sC786r9%2BDbe7LNWPJlDnL1FUmcavFYFIrxP4O4rSxCrLne7TSmfQeJMDSD63TWNt5Ou%2BpwhRQf8PZLeXLzITjg6yQY%2FgVc%2Flf7XIGO%2FUnJHr7q%2FPd%2B6gQAr%2FxTFgpq8WlsfN7s8UAAAAAA%3D%3D
HTTP/1.0\" 200 -
---------------------------------------------------------------
The corresponding ethereal recording, you can see here:
--------------------------------------------------------------
No. Time Source Destination Protocol Info
13 2.932005 172.16.104.6 172.16.98.92 TCP 1617 >
www [SYN] Seq=0 Ack=0 Win=4096 Len=0 MSS=1380
Frame 13 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1617 (1617), Dst Port: www (80), Seq:
0, Ack: 0, Len: 0
Source port: 1617 (1617)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 24 bytes
Flags: 0x0002 (SYN)
Window size: 4096
Checksum: 0x1926 (correct)
Options: (4 bytes)
No. Time Source Destination Protocol Info
14 2.932035 172.16.98.92 172.16.104.6 TCP www >
1617 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460
Frame 14 (58 bytes on wire, 58 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1617 (1617), Seq:
0, Ack: 1, Len: 0
Source port: www (80)
Destination port: 1617 (1617)
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 24 bytes
Flags: 0x0012 (SYN, ACK)
Window size: 5840
Checksum: 0x3ebe (correct)
Options: (4 bytes)
SEQ/ACK analysis
This is an ACK to the segment in frame: 13
The RTT to ACK the segment was: 0.000030000 seconds
No. Time Source Destination Protocol Info
15 2.933532 172.16.104.6 172.16.98.92 TCP 1617 >
www [ACK] Seq=1 Ack=1 Win=4096 Len=0
Frame 15 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1617 (1617), Dst Port: www (80), Seq:
1, Ack: 1, Len: 0
Source port: 1617 (1617)
Destination port: www (80)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 4096
Checksum: 0x5d4b (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 14
The RTT to ACK the segment was: 0.001497000 seconds
No. Time Source Destination Protocol Info
16 2.934396 172.16.104.6 172.16.98.92 HTTP GET
/cgi-bin/scep/scep?operation=GetCACert&message=any HTTP/1.0
Frame 16 (184 bytes on wire, 184 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1617 (1617), Dst Port: www (80), Seq:
1, Ack: 1, Len: 130
Source port: 1617 (1617)
Destination port: www (80)
Sequence number: 1 (relative sequence number)
Next sequence number: 131 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
Window size: 4096
Checksum: 0x3df9 (correct)
Hypertext Transfer Protocol
GET /cgi-bin/scep/scep?operation=GetCACert&message=any HTTP/1.0\\r\\n
Request Method: GET
Accept-Language: en-us\\r\\n
Host: 172.16.98.92\\r\\n
Connection: Close\\r\\n
\\r\\n
No. Time Source Destination Protocol Info
17 2.934410 172.16.98.92 172.16.104.6 TCP www >
1617 [ACK] Seq=1 Ack=131 Win=5840 Len=0
Frame 17 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1617 (1617), Seq:
1, Ack: 131, Len: 0
Source port: www (80)
Destination port: 1617 (1617)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 131 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 5840
Checksum: 0x55f9 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 16
The RTT to ACK the segment was: 0.000014000 seconds
No. Time Source Destination Protocol Info
18 3.129098 172.16.98.92 172.16.104.6 HTTP
HTTP/1.1 200 OK (application/x-x509-ca-ra-cert)
Frame 18 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1617 (1617), Seq:
1, Ack: 131, Len: 1380
Source port: www (80)
Destination port: 1617 (1617)
Sequence number: 1 (relative sequence number)
Next sequence number: 1381 (relative sequence number)
Acknowledgement number: 131 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 5840
Checksum: 0xc5c8 (correct)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\\r\\n
Response Code: 200
Date: Mon, 11 Apr 2005 06:07:33 GMT\\r\\n
Server: Apache/2.0.53 (Unix)\\r\\n
Set-Cookie: CGISESSID=7334ced2042284b09b78cc5ea6bf52b6; path=/\\r\\n
Connection: close\\r\\n
Content-Type: application/x-x509-ca-ra-cert\\r\\n
\\r\\n
Media Type: application/x-x509-ca-ra-cert (1166 bytes)
No. Time Source Destination Protocol Info
19 3.129115 172.16.98.92 172.16.104.6 HTTP
Continuation or non-HTTP traffic
Frame 19 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1617 (1617), Seq:
1381, Ack: 131, Len: 1380
Source port: www (80)
Destination port: 1617 (1617)
Sequence number: 1381 (relative sequence number)
Next sequence number: 2761 (relative sequence number)
Acknowledgement number: 131 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
Window size: 5840
Checksum: 0x43a3 (correct)
Hypertext Transfer Protocol
Data (1380 bytes)
0000 44 c7 4e 3c 36 72 53 1a fd 9b 5a 4d 3d 74 d8 b2 D.N<6rS...ZM=t..
0010 e4 ff a0 64 67 78 42 e9 39 53 8d 8d 94 a2 1c 00 ...dgxB.9S......
0020 fd 7e ae 87 d5 6c a6 3b 58 7b be 90 4f 0d 11 b7 .~...l.;X{..O...
0030 eb 23 5d 36 db 2c a4 ef 48 19 1b e2 fc 8c 49 6f .#]6.,..H.....Io
0040 91 0a 03 b6 cc 98 57 5d 49 15 75 2c 02 0e 58 5e ......W]I.u,..X^
0050 99 5b 9d 54 20 d7 a6 0e 96 39 8d d7 a4 8a 8c 64 .[.T ....9.....d
0060 e8 70 9d 2a ed fa b8 21 86 ff 03 41 52 5d ab 8c .p.*...!...AR]..
0070 d1 9e 05 f0 bc 7f 04 67 04 88 51 3c b9 86 55 de .......g..Q<..U.
0080 f9 04 a4 f2 9e 99 df c9 2e 64 e0 47 de 94 08 a3 .........d.G....
0090 23 ea 94 12 0a 7a b8 33 9e 26 24 ea d9 2e 0d b8 #....z.3.&$.....
00a0 fc 68 11 82 f0 b7 8e 8e b0 27 41 b1 73 70 4e b6 .h.......\'A.spN.
00b0 9c 6f b3 78 1b 65 49 c6 1d 0e 87 c5 dc ea 77 9c .o.x.eI.......w.
00c0 a2 3b 8f 51 f1 d4 30 a4 3c 78 5d 58 5c 5b 41 8d .;.Q..0.<x]X\\[A.
00d0 f4 2f 72 16 56 9b ac 27 91 09 2e 5a 76 23 7b b2 ./r.V..\'...Zv#{.
00e0 b8 b3 05 35 c4 64 71 7e 1b 4b 0d 8c 75 58 c8 23 ...5.dq~.K..uX.#
00f0 d2 57 8f a6 79 35 85 ef a5 1e 49 8e da 94 12 72 .W..y5....I....r
0100 ab 22 4e 70 17 34 5c c6 6f b9 d2 34 81 77 96 49 .\"Np.4\\.o..4.w.I
0110 3b 6a 09 e3 da b9 93 52 2e f7 7d c5 ec 4d 83 f4 ;j.....R..}..M..
0120 69 b7 45 09 99 db 57 e3 b7 36 30 47 d8 95 33 ab i.E...W..60G..3.
0130 a0 5c 8e 5d e0 c4 72 ce 14 cb 71 ea c5 2b c2 c7 .\\.]..r...q..+..
0140 47 fc a4 f0 41 46 b1 85 b3 d0 a4 9c f2 3f ec 9c G...AF.......?..
0150 3c 36 91 fe f9 87 25 d7 f4 b0 41 7c 26 38 46 35 <6....%...A|&8F5
0160 fb fc 30 82 07 25 30 82 05 0d a0 03 02 01 02 02 ..0..%0.........
0170 09 00 89 ac c6 e7 41 6e c2 f4 30 0d 06 09 2a 86 ......An..0...*.
0180 48 86 f7 0d 01 01 05 05 00 30 59 31 0b 30 09 06 H........0Y1.0..
0190 03 55 04 06 13 02 44 45 31 0f 30 0d 06 03 55 04 .U....DE1.0...U.
01a0 0a 13 06 42 69 6e 74 65 63 31 0b 30 09 06 03 55 ...Bintec1.0...U
01b0 04 0b 13 02 52 44 31 0d 30 0b 06 03 55 04 03 13 ....RD1.0...U...
01c0 04 72 6f 6f 74 31 1d 30 1b 06 09 2a 86 48 86 f7 .root1.0...*.H..
01d0 0d 01 09 01 16 0e 72 6f 6f 74 40 6c 6f 63 61 6c [EMAIL PROTECTED]
01e0 68 6f 73 74 30 1e 17 0d 30 35 30 34 30 38 31 31 host0...05040811
01f0 30 30 35 34 5a 17 0d 30 37 30 34 30 38 31 31 30 0054Z..070408110
0200 30 35 34 5a 30 59 31 0b 30 09 06 03 55 04 06 13 054Z0Y1.0...U...
0210 02 44 45 31 0f 30 0d 06 03 55 04 0a 13 06 42 69 .DE1.0...U....Bi
0220 6e 74 65 63 31 0b 30 09 06 03 55 04 0b 13 02 52 ntec1.0...U....R
0230 44 31 0d 30 0b 06 03 55 04 03 13 04 72 6f 6f 74 D1.0...U....root
0240 31 1d 30 1b 06 09 2a 86 48 86 f7 0d 01 09 01 16 1.0...*.H.......
0250 0e 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 30 [EMAIL PROTECTED]
0260 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 ..\"0...*.H......
0270 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 .......0........
0280 c2 10 b2 4a a7 40 fd ba 89 43 d6 e7 cd 86 cc 04 [EMAIL PROTECTED]
0290 7d ec 64 ba 03 54 a6 f3 bf 1a 13 a9 ab 57 2e 93 }.d..T.......W..
02a0 72 a8 b2 76 96 cd 72 73 78 b4 c4 f9 e3 65 07 89 r..v..rsx....e..
02b0 56 49 b2 32 27 a8 54 5a 6d e2 3f ba c5 e1 60 15 VI.2\'.TZm.?...`.
02c0 8d c6 f6 ac 5d dc 5a 86 10 ca 73 91 37 90 8c 74 ....].Z...s.7..t
02d0 c8 01 23 e0 be ac 41 63 38 70 11 04 8f 48 b4 2e ..#...Ac8p...H..
02e0 e4 cf b6 7f b9 93 79 e2 8a c8 80 97 ec f4 8b f7 ......y.........
02f0 bd 89 d1 45 fa 27 4a 5a 59 14 5d 1a ee 7f 5a ef ...E.\'JZY.]...Z.
0300 c4 05 1e 8c 80 e5 49 81 c2 26 a3 f8 8c 4b 5f ba ......I..&...K_.
0310 3a 05 26 80 04 8e 97 01 99 c8 42 df a7 45 00 b0 :.&.......B..E..
0320 b7 4f a9 5a 8a 03 92 1b 6c 12 44 21 27 97 a3 4b .O.Z....l.D!\'..K
0330 8e d9 81 3d 95 4a 49 74 20 08 d7 fd 58 25 4f 2b ...=.JIt ...X%O+
0340 da 8e 89 cb 66 57 10 0c fb d9 7c 9e 6f ae b4 72 ....fW....|.o..r
0350 e4 fe b9 2d 8c 25 d0 69 f3 9c e8 c3 00 29 80 cd ...-.%.i.....)..
0360 0d 53 e4 73 11 6b 56 e4 bb b3 1a 8a 20 2e e3 ba .S.s.kV..... ...
0370 a1 a5 09 cc e8 36 d9 2f dd b4 81 45 d0 96 46 b4 .....6./...E..F.
0380 39 89 1e 8c 1f 64 9f 8f fe b1 8f b7 c6 56 98 2b 9....d.......V.+
0390 87 15 94 b4 17 61 36 fb 45 b9 d8 22 73 0c 54 c9 .....a6.E..\"s.T.
03a0 24 2e 28 2f 20 c1 c1 fd 85 22 46 c6 46 1c 02 c8 $.(/ ....\"F.F...
03b0 7f c8 87 cd 57 0a 03 0f 33 27 a5 58 96 56 3a 46 ....W...3\'.X.V:F
03c0 92 de 61 4a 2d f5 89 52 56 ed 90 da a1 b9 a2 3a ..aJ-..RV......:
03d0 67 c5 07 2b 1d 77 33 ef 49 b6 04 db 46 34 09 28 g..+.w3.I...F4.(
03e0 4c ef 87 e2 b3 10 54 00 b9 73 11 3b f6 2a 6b 2f L.....T..s.;.*k/
03f0 67 e5 62 8b 57 11 3b 19 b5 2b 7a da 78 8e b5 be g.b.W.;..+z.x...
0400 dc 19 df 86 3f 63 3e 09 2c db 5d 6d bf 7d ef 54 ....?c>.,.]m.}.T
0410 b5 9a 4b 3c 9d d5 a1 d8 05 66 26 b4 29 e8 1f 12 ..K<.....f&.)...
0420 98 93 5b f6 fc 29 2d 1d c1 40 62 25 a6 4b e5 ad ..[..)[EMAIL PROTECTED]
0430 94 ed e2 09 a2 9d 01 2b 09 2e 13 34 c7 79 cc 89 .......+...4.y..
0440 6c 63 91 a0 dc bf 71 aa 49 47 fb 89 0a 1c 9e 05 lc....q.IG......
0450 12 72 0b 4b cd 8f a7 9b f7 b5 7e 8b 69 a6 41 5e .r.K......~.i.A^
0460 48 93 65 ee 39 39 41 11 e7 a1 98 98 05 77 aa 98 H.e.99A......w..
0470 41 14 11 23 98 ee ae f5 45 b0 c7 60 12 41 20 37 A..#....E..`.A 7
0480 02 03 01 00 01 a3 82 01 ee 30 82 01 ea 30 0f 06 .........0...0..
0490 03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 1d .U.......0....0.
04a0 06 03 55 1d 0e 04 16 04 14 9f 32 c0 ea b9 57 d9 ..U.......2...W.
04b0 b4 c3 a1 f4 5e 87 29 bc 42 d4 97 48 e1 30 81 8b ....^.).B..H.0..
04c0 06 03 55 1d 23 04 81 83 30 81 80 80 14 9f 32 c0 ..U.#...0.....2.
04d0 ea b9 57 d9 b4 c3 a1 f4 5e 87 29 bc 42 d4 97 48 ..W.....^.).B..H
04e0 e1 a1 5d a4 5b 30 59 31 0b 30 09 06 03 55 04 06 ..].[0Y1.0...U..
04f0 13 02 44 45 31 0f 30 0d 06 03 55 04 0a 13 06 42 ..DE1.0...U....B
0500 69 6e 74 65 63 31 0b 30 09 06 03 55 04 0b 13 02 intec1.0...U....
0510 52 44 31 0d 30 0b 06 03 55 04 03 13 04 72 6f 6f RD1.0...U....roo
0520 74 31 1d 30 1b 06 09 2a 86 48 86 f7 0d 01 09 01 t1.0...*.H......
0530 16 0e 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 [EMAIL PROTECTED]
0540 82 09 00 89 ac c6 e7 41 6e c2 f4 30 0b 06 03 55 .......An..0...U
0550 1d 0f 04 04 03 02 01 06 30 19 06 03 55 1d 11 04 ........0...U...
0560 12 30 10 81 .0..
No. Time Source Destination Protocol Info
20 3.132412 172.16.104.6 172.16.98.92 TCP 1617 >
www [PSH, ACK] Seq=131 Ack=1381 Win=4096 Len=0
Frame 20 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1617 (1617), Dst Port: www (80), Seq:
131, Ack: 1381, Len: 0
Source port: 1617 (1617)
Destination port: www (80)
Sequence number: 131 (relative sequence number)
Acknowledgement number: 1381 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
Window size: 4096
Checksum: 0x575d (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 18
The RTT to ACK the segment was: 0.003314000 seconds
No. Time Source Destination Protocol Info
21 3.132444 172.16.98.92 172.16.104.6 HTTP
Continuation or non-HTTP traffic
Frame 21 (865 bytes on wire, 865 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1617 (1617), Seq:
2761, Ack: 131, Len: 811
Source port: www (80)
Destination port: 1617 (1617)
Sequence number: 2761 (relative sequence number)
Next sequence number: 3572 (relative sequence number)
Acknowledgement number: 131 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
Window size: 5840
Checksum: 0x273f (correct)
Hypertext Transfer Protocol
Data (811 bytes)
0000 0e 72 6f 6f 74 40 6c 6f 63 61 6c 68 6f 73 74 30 [EMAIL PROTECTED]
0010 19 06 03 55 1d 12 04 12 30 10 81 0e 72 6f 6f 74 ...U....0...root
0020 40 6c 6f 63 61 6c 68 6f 73 74 30 11 06 09 60 86 @localhost0...`.
0030 48 01 86 f8 42 01 01 04 04 03 02 00 07 30 39 06 H...B........09.
0040 09 60 86 48 01 86 f8 42 01 0d 04 2c 16 2a 42 69 .`.H...B...,.*Bi
0050 6e 74 65 63 20 43 65 72 74 69 66 69 63 61 74 69 ntec Certificati
0060 6f 6e 20 41 75 74 68 6f 72 69 74 79 20 43 65 72 on Authority Cer
0070 74 69 66 69 63 61 74 65 30 33 06 03 55 1d 1f 04 tificate03..U...
0080 2c 30 2a 30 28 a0 26 a0 24 86 22 68 74 74 70 3a ,0*0(.&.$.\"http:
0090 2f 2f 6c 6f 63 61 6c 68 6f 73 74 2f 70 75 62 2f //localhost/pub/
00a0 63 72 6c 2f 63 61 63 72 6c 2e 63 72 6c 30 31 06 crl/cacrl.crl01.
00b0 09 60 86 48 01 86 f8 42 01 04 04 24 16 22 68 74 .`.H...B...$.\"ht
00c0 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 2f 70 tp://localhost/p
00d0 75 62 2f 63 72 6c 2f 63 61 63 72 6c 2e 63 72 6c ub/crl/cacrl.crl
00e0 30 31 06 09 60 86 48 01 86 f8 42 01 03 04 24 16 01..`.H...B...$.
00f0 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 \"http://localhos
0100 74 2f 70 75 62 2f 63 72 6c 2f 63 61 63 72 6c 2e t/pub/crl/cacrl.
0110 63 72 6c 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 crl0...*.H......
0120 05 00 03 82 02 01 00 6e f6 a7 a0 ec cc 78 4d 7b .......n.....xM{
0130 01 9e 1e 27 02 a8 04 a8 c7 0c 2c 00 57 61 b8 44 ...\'......,.Wa.D
0140 6c ea 4b af b8 95 d2 33 c1 72 ed 66 2d 15 af 7e l.K....3.r.f-..~
0150 cc 58 0f 3d ba 49 d2 d1 bf a8 66 b5 ea ea bb 9d .X.=.I....f.....
0160 48 a5 5c 62 bc 64 04 73 5b 37 76 18 1a d1 25 ca H.\\b.d.s[7v...%.
0170 c3 51 c7 80 de 97 f3 3c 0a b9 a4 82 bb 29 07 cb .Q.....<.....)..
0180 63 79 34 c7 7c 74 1d cd 2d 99 e1 b4 55 e3 fd a6 cy4.|t..-...U...
0190 9f d3 8e ea d4 e1 f8 da 8c 84 52 f0 92 e5 2d 60 ..........R...-`
01a0 c2 5d 56 63 01 62 0e 98 f5 7f 13 da 15 1c 3a cd .]Vc.b........:.
01b0 01 3d 96 a1 b7 92 c5 4d b8 da 74 bf 0e 5e 1e ed .=.....M..t..^..
01c0 5e fb dc e8 ba ec f8 ad 52 f5 7f 9e ba f3 6b 87 ^.......R.....k.
01d0 9a 6c df 4a 2b cf f2 50 01 bd 1c 9b 8a 2c 70 85 .l.J+..P.....,p.
01e0 53 f1 5d 32 a0 2f 4c 6b 80 f9 95 c5 cf 33 ce 58 S.]2./Lk.....3.X
01f0 b9 51 84 e7 a2 92 11 f8 e7 d6 79 58 2f 97 41 5a .Q........yX/.AZ
0200 2a 57 89 19 8e 0a a8 84 97 7e 15 8a ac 8b a8 6f *W.......~.....o
0210 d6 6a b7 3f 51 f2 74 3a 1b 7f e0 fc a7 1a d0 96 .j.?Q.t:........
0220 b4 7f 67 da fa 14 8f 45 fc 13 9e 7e b7 d8 43 eb ..g....E...~..C.
0230 8f a6 ac 75 b8 20 ea f3 2a f7 bb b9 15 df bf 6b ...u. ..*......k
0240 6d 9f f3 a4 1c 32 92 96 71 0a 6e 27 08 84 d5 db m....2..q.n\'....
0250 f3 b8 7a 91 6a 41 51 54 bb f5 76 1d 69 4d 1e 70 ..z.jAQT..v.iM.p
0260 c7 30 d9 f6 17 eb a1 c2 e4 3b f4 43 63 4a fd a0 .0.......;.CcJ..
0270 c9 12 f0 29 63 48 29 6f 32 cf bb 85 3b 7d 0d 92 ...)cH)o2...;}..
0280 6e 0a ba 8e 0b 6b ac 03 98 e7 d6 39 c8 b2 56 ae n....k.....9..V.
0290 52 ae 2b 1a 93 75 ac 6b 94 af 98 33 76 46 9c 6e R.+..u.k...3vF.n
02a0 80 10 f9 b6 d3 ae 0d 9e e9 38 10 d1 a4 c5 dc 23 .........8.....#
02b0 47 68 67 07 23 49 f9 4f 2e 69 e6 36 93 aa 05 c9 Ghg.#I.O.i.6....
02c0 77 fb 58 4d 59 f0 26 2b 7a 24 fe 39 08 0c 74 1a w.XMY.&+z$.9..t.
02d0 29 b9 2f bb cd 06 9e bb cf 7a e4 9b 66 7f 9a f8 )./......z..f...
02e0 c2 b3 46 e7 3e d3 8f ef 6c ca 2e f7 e0 66 74 00 ..F.>...l....ft.
02f0 45 b7 03 d7 f8 33 e9 73 a4 67 c8 9b 87 66 ad 8b E....3.s.g...f..
0300 cd 90 18 d9 05 ff 2c ca ab bd 18 5a f2 be 88 ae ......,....Z....
0310 56 72 74 81 1f 5b 76 39 30 e1 83 2b 66 b1 86 d4 Vrt..[v90..+f...
0320 b0 74 07 1a cd 06 80 a1 00 31 00 .t.......1.
No. Time Source Destination Protocol Info
22 3.133003 172.16.98.92 172.16.104.6 TCP www >
1617 [FIN, ACK] Seq=3572 Ack=131 Win=5840 Len=0
Frame 22 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1617 (1617), Seq:
3572, Ack: 131, Len: 0
Source port: www (80)
Destination port: 1617 (1617)
Sequence number: 3572 (relative sequence number)
Acknowledgement number: 131 (relative ack number)
Header length: 20 bytes
Flags: 0x0011 (FIN, ACK)
Window size: 5840
Checksum: 0x4805 (correct)
No. Time Source Destination Protocol Info
23 3.134856 172.16.104.6 172.16.98.92 TCP 1617 >
www [PSH, ACK] Seq=131 Ack=2761 Win=4096 Len=0
Frame 23 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1617 (1617), Dst Port: www (80), Seq:
131, Ack: 2761, Len: 0
Source port: 1617 (1617)
Destination port: www (80)
Sequence number: 131 (relative sequence number)
Acknowledgement number: 2761 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
Window size: 4096
Checksum: 0x51f9 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 19
The RTT to ACK the segment was: 0.005741000 seconds
No. Time Source Destination Protocol Info
24 3.135728 172.16.104.6 172.16.98.92 TCP 1617 >
www [FIN, PSH, ACK] Seq=131 Ack=3573 Win=4096 Len=0
Frame 24 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1617 (1617), Dst Port: www (80), Seq:
131, Ack: 3573, Len: 0
Source port: 1617 (1617)
Destination port: www (80)
Sequence number: 131 (relative sequence number)
Acknowledgement number: 3573 (relative ack number)
Header length: 20 bytes
Flags: 0x0019 (FIN, PSH, ACK)
Window size: 4096
Checksum: 0x4ecc (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 22
The RTT to ACK the segment was: 0.002725000 seconds
No. Time Source Destination Protocol Info
25 3.135753 172.16.98.92 172.16.104.6 TCP www >
1617 [ACK] Seq=3573 Ack=132 Win=5840 Len=0
Frame 25 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1617 (1617), Seq:
3573, Ack: 132, Len: 0
Source port: www (80)
Destination port: 1617 (1617)
Sequence number: 3573 (relative sequence number)
Acknowledgement number: 132 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 5840
Checksum: 0x4804 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 24
The RTT to ACK the segment was: 0.000025000 seconds
No. Time Source Destination Protocol Info
26 3.136509 172.16.104.6 172.16.98.92 TCP [TCP
Out-Of-Order] 1617 > www [FIN, PSH, ACK] Seq=131 Ack=3573 Win=4096 Len=0
Frame 26 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1617 (1617), Dst Port: www (80), Seq:
131, Ack: 3573, Len: 0
Source port: 1617 (1617)
Destination port: www (80)
Sequence number: 131 (relative sequence number)
Acknowledgement number: 3573 (relative ack number)
Header length: 20 bytes
Flags: 0x0019 (FIN, PSH, ACK)
Window size: 4096
Checksum: 0x4ecc (correct)
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) out-of-order segment
No. Time Source Destination Protocol Info
27 3.136537 172.16.98.92 172.16.104.6 TCP [TCP
Dup ACK 25#1] www > 1617 [ACK] Seq=3573 Ack=132 Win=5840 Len=0
Frame 27 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1617 (1617), Seq:
3573, Ack: 132, Len: 0
Source port: www (80)
Destination port: 1617 (1617)
Sequence number: 3573 (relative sequence number)
Acknowledgement number: 132 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 5840
Checksum: 0x4804 (correct)
SEQ/ACK analysis
TCP Analysis Flags
This is a TCP duplicate ack
Duplicate ACK #: 1
Duplicate to the ACK in frame: 25
No. Time Source Destination Protocol Info
29 3.186521 172.16.104.6 172.16.98.92 TCP 1618 >
www [SYN] Seq=0 Ack=0 Win=4096 Len=0 MSS=1380
Frame 29 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1618 (1618), Dst Port: www (80), Seq:
0, Ack: 0, Len: 0
Source port: 1618 (1618)
Destination port: www (80)
Sequence number: 0 (relative sequence number)
Header length: 24 bytes
Flags: 0x0002 (SYN)
Window size: 4096
Checksum: 0xfcb5 (correct)
Options: (4 bytes)
No. Time Source Destination Protocol Info
30 3.186575 172.16.98.92 172.16.104.6 TCP www >
1618 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1460
Frame 30 (58 bytes on wire, 58 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1618 (1618), Seq:
0, Ack: 1, Len: 0
Source port: www (80)
Destination port: 1618 (1618)
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 24 bytes
Flags: 0x0012 (SYN, ACK)
Window size: 5840
Checksum: 0xbbf6 (correct)
Options: (4 bytes)
SEQ/ACK analysis
This is an ACK to the segment in frame: 29
The RTT to ACK the segment was: 0.000054000 seconds
No. Time Source Destination Protocol Info
31 3.188000 172.16.104.6 172.16.98.92 TCP 1618 >
www [ACK] Seq=1 Ack=1 Win=4096 Len=0
Frame 31 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1618 (1618), Dst Port: www (80), Seq:
1, Ack: 1, Len: 0
Source port: 1618 (1618)
Destination port: www (80)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 4096
Checksum: 0xda83 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 30
The RTT to ACK the segment was: 0.001425000 seconds
No. Time Source Destination Protocol Info
32 3.190389 172.16.104.6 172.16.98.92 HTTP GET
/cgi-bin/scep/scep?operation=PKIOperation&message=MIAGCSqGSIb3DQEHAqCAMIIHiAIBATEOMAwGCCqGSIb3DQIFBQAwgAYJKoZIhvcNAQcBoIAEggJTMIAGCSqGSIb3DQEHA6CAMIICPAIBADGB%2BDCB9QIBADBeMFkxCzAJBgNVBAYTAkRFMQ8wDQYDVQQKEwZCaW50ZWMxCzAJBgNVBAsTAlJEMQ0wCwYDVQQDEwRyb290MR0wGwYJKoZIhvcNAQkBFg5yb290QGxvY2FsaG9zdAIBAzANBgkqhkiG9w0BAQEFAASBgMUB2pOa6F3APPRIAQwrIXTZn0V%2FsiTC2acRGiA%2BVUsjKsn8Hu0bMNVi8QkdHsmvoHQkJAO6z0gXKWIneh1v5q9cNkdvLmO%2BKOdRktmhOkiPRHHPzYOc5WBGhGiMQyvXkNtw5cUPO9FwdBN%2Fr%2BddRN27piYpaGJd1IG%2Fb3V8ObhyMIIBOgYJKoZIhvcNAQcBMBEGBSsOAwIHBAijOtCgU455MYCCARgNN4qTEL9xkhWwgjhyDV9NThb1l1jKa%2FJHvYjqEqiiCYRD66ho%2FukebGgXoNJe3sT3AUzZv5F7yngRoyPjpB2snCDqlRyAM0SEVxyF00o1Y6fu7gcIChSv%2BPa1sd2p6%2FIbi7UUq3JZ8u%2FsS9%2FuE8izsANx1fMqUUP6GGBsqxFKutVCk7P19dK6GvA7DajWiuJVb4WmixpwrghSjuAGNPn1ZBLW7ZdU64VlPVVJ8jppg1UrhNse68FQ4cVsXiJdqYszAcLnzqFSv11%2B%2FXxIZ9NBV02DkrGnRk6IC0CsBoez7RrOtFDRRIxNdtE0ntGJis9A70yZibkr%2Fm7ncjZy6nD
gpvQjaTRVtFY5s%2B51ownh1xDyGjTPl%2FzNAAAAAAAAAACgggLsMIIC6DCCAlGgAwIBAgIRAIf%2F%2BJDqYyywkpHcqS2%2BvGEwDQYJKoZIhvcNAQEFBQAwgbExCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdHZXJtYW55MQ8wDQYDVQQKEwZCaW50ZWMxCzAJBgNVBAsTAlJEMRUwEwYDVQQDEwwxNzIuMTYuMTA0LjYxGTAXBgNVBAMTEDAwMjkwNzIwMDIwMDAyNTUxDDAKBgNVBAMTAzY3NzEQMA4GA1UEAxMHcnNhLWtleTEQMA4GA1UEAxMHY2FsaW51eDEOMAwGA1UEAxMFTGRhcDIwHhcNMDUwNDExMDgwNzQ0WhcNMDUwNDE4MDgwNzQ0WjCBsTELMAkGA1UEBhMCREUxEDAOBgNVBAgTB0dlcm1hbnkxDzANBgNVBAoT
Frame 32 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1618 (1618), Dst Port: www (80), Seq:
1, Ack: 1, Len: 1380
Source port: 1618 (1618)
Destination port: www (80)
Sequence number: 1 (relative sequence number)
Next sequence number: 1381 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 4096
Checksum: 0x0326 (correct)
Hypertext Transfer Protocol
GET
/cgi-bin/scep/scep?operation=PKIOperation&message=MIAGCSqGSIb3DQEHAqCAMIIHiAIBATEOMAwGCCqGSIb3DQIFBQAwgAYJKoZIhvcNAQcBoIAEggJTMIAGCSqGSIb3DQEHA6CAMIICPAIBADGB%2BDCB9QIBADBeMFkxCzAJBgNVBAYTAkRFMQ8wDQYDVQQKEwZCaW50ZWMxCzAJBgNVBAsTAlJEMQ0
Request Method: GET
No. Time Source Destination Protocol Info
33 3.190431 172.16.98.92 172.16.104.6 TCP www >
1618 [ACK] Seq=1 Ack=1381 Win=8280 Len=0
Frame 33 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1618 (1618), Seq:
1, Ack: 1381, Len: 0
Source port: www (80)
Destination port: 1618 (1618)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1381 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 8280
Checksum: 0xc4c7 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 32
The RTT to ACK the segment was: 0.000042000 seconds
No. Time Source Destination Protocol Info
34 3.191550 172.16.104.6 172.16.98.92 HTTP
Continuation or non-HTTP traffic
Frame 34 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1618 (1618), Dst Port: www (80), Seq:
1381, Ack: 1, Len: 1380
Source port: 1618 (1618)
Destination port: www (80)
Sequence number: 1381 (relative sequence number)
Next sequence number: 2761 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 4096
Checksum: 0x6f42 (correct)
Hypertext Transfer Protocol
Data (1380 bytes)
0000 42 6b 4a 70 62 6e 52 6c 59 7a 45 4c 4d 41 6b 47 BkJpbnRlYzELMAkG
0010 41 31 55 45 43 78 4d 43 55 6b 51 78 46 54 41 54 A1UECxMCUkQxFTAT
0020 42 67 4e 56 42 41 4d 54 44 44 45 33 4d 69 34 78 BgNVBAMTDDE3Mi4x
0030 4e 69 34 78 4d 44 51 75 4e 6a 45 5a 4d 42 63 47 Ni4xMDQuNjEZMBcG
0040 41 31 55 45 41 78 4d 51 4d 44 41 79 4f 54 41 33 A1UEAxMQMDAyOTA3
0050 4d 6a 41 77 4d 6a 41 77 4d 44 49 31 4e 54 45 4d MjAwMjAwMDI1NTEM
0060 4d 41 6f 47 41 31 55 45 41 78 4d 44 4e 6a 63 33 MAoGA1UEAxMDNjc3
0070 4d 52 41 77 44 67 59 44 56 51 51 44 45 77 64 79 MRAwDgYDVQQDEwdy
0080 63 32 45 74 61 32 56 35 4d 52 41 77 44 67 59 44 c2Eta2V5MRAwDgYD
0090 56 51 51 44 45 77 64 6a 59 57 78 70 62 6e 56 34 VQQDEwdjYWxpbnV4
00a0 4d 51 34 77 44 41 59 44 56 51 51 44 45 77 56 4d MQ4wDAYDVQQDEwVM
00b0 5a 47 46 77 4d 6a 43 42 6e 7a 41 4e 42 67 6b 71 ZGFwMjCBnzANBgkq
00c0 68 6b 69 47 39 77 30 42 41 51 45 46 41 41 4f 42 hkiG9w0BAQEFAAOB
00d0 6a 51 41 77 67 59 6b 43 67 59 45 41 38 4e 75 4d jQAwgYkCgYEA8NuM
00e0 76 50 4e 25 32 42 66 38 41 74 4b 33 37 45 64 67 vPN%2Bf8AtK37Edg
00f0 5a 32 7a 74 6c 39 31 4c 63 6f 67 44 34 62 31 48 Z2ztl91LcogD4b1H
0100 44 30 35 75 4f 74 44 6a 6f 48 74 4a 4f 67 6a 41 D05uOtDjoHtJOgjA
0110 30 36 77 65 6b 6f 74 47 68 33 42 34 36 58 42 73 06wekotGh3B46XBs
0120 76 72 4d 6a 75 44 5a 77 54 50 6a 6b 25 32 42 41 vrMjuDZwTPjk%2BA
0130 78 6d 32 4b 72 62 54 37 42 64 57 58 4a 77 6c 65 xm2KrbT7BdWXJwle
0140 66 55 37 46 35 4d 50 33 6a 5a 46 76 5a 58 58 7a fU7F5MP3jZFvZXXz
0150 71 51 43 63 6f 56 38 71 43 4d 43 50 62 37 57 71 qQCcoV8qCMCPb7Wq
0160 57 69 50 42 75 6e 78 53 6e 47 4a 42 64 56 65 46 WiPBunxSnGJBdVeF
0170 76 38 68 72 55 6c 53 65 56 34 31 64 38 44 69 65 v8hrUlSeV41d8Die
0180 47 6b 65 4e 48 6e 65 37 64 43 63 43 41 77 45 41 GkeNHne7dCcCAwEA
0190 41 54 41 4e 42 67 6b 71 68 6b 69 47 39 77 30 42 ATANBgkqhkiG9w0B
01a0 41 51 55 46 41 41 4f 42 67 51 43 57 43 6c 78 46 AQUFAAOBgQCWClxF
01b0 32 6b 73 79 45 54 73 57 37 6b 46 33 78 52 79 31 2ksyETsW7kF3xRy1
01c0 75 72 42 4c 34 54 45 43 47 44 50 39 5a 50 78 76 urBL4TECGDP9ZPxv
01d0 31 65 63 4d 6d 4d 4d 48 33 54 76 42 74 76 61 75 1ecMmMMH3TvBtvau
01e0 6d 65 59 66 51 35 32 42 7a 6e 32 42 36 7a 69 6a meYfQ52Bzn2B6zij
01f0 7a 45 56 55 57 36 52 36 25 32 42 31 53 4b 68 37 zEVUW6R6%2B1SKh7
0200 7a 64 34 30 66 56 4e 71 36 47 5a 63 6e 46 5a 4a zd40fVNq6GZcnFZJ
0210 4e 77 6e 33 75 58 6b 45 49 77 77 6f 54 32 4f 30 Nwn3uXkEIwwoT2O0
0220 59 55 49 65 67 6d 38 37 43 68 47 77 33 49 49 65 YUIegm87ChGw3IIe
0230 4c 50 25 32 46 53 49 45 25 32 42 32 4a 45 6a 69 LP%2FSIE%2B2JEji
0240 55 7a 71 47 42 39 49 71 62 56 72 35 51 32 39 33 UzqGB9IqbVr5Q293
0250 79 35 4f 43 76 54 55 56 54 62 25 32 46 44 47 43 y5OCvTUVTb%2FDGC
0260 41 68 63 77 67 67 49 54 41 67 45 42 4d 49 48 48 AhcwggITAgEBMIHH
0270 4d 49 47 78 4d 51 73 77 43 51 59 44 56 51 51 47 MIGxMQswCQYDVQQG
0280 45 77 4a 45 52 54 45 51 4d 41 34 47 41 31 55 45 EwJERTEQMA4GA1UE
0290 43 42 4d 48 52 32 56 79 62 57 46 75 65 54 45 50 CBMHR2VybWFueTEP
02a0 4d 41 30 47 41 31 55 45 43 68 4d 47 51 6d 6c 75 MA0GA1UEChMGQmlu
02b0 64 47 56 6a 4d 51 73 77 43 51 59 44 56 51 51 4c dGVjMQswCQYDVQQL
02c0 45 77 4a 53 52 44 45 56 4d 42 4d 47 41 31 55 45 EwJSRDEVMBMGA1UE
02d0 41 78 4d 4d 4d 54 63 79 4c 6a 45 32 4c 6a 45 77 AxMMMTcyLjE2LjEw
02e0 4e 43 34 32 4d 52 6b 77 46 77 59 44 56 51 51 44 NC42MRkwFwYDVQQD
02f0 45 78 41 77 4d 44 49 35 4d 44 63 79 4d 44 41 79 ExAwMDI5MDcyMDAy
0300 4d 44 41 77 4d 6a 55 31 4d 51 77 77 43 67 59 44 MDAwMjU1MQwwCgYD
0310 56 51 51 44 45 77 4d 32 4e 7a 63 78 45 44 41 4f VQQDEwM2NzcxEDAO
0320 42 67 4e 56 42 41 4d 54 42 33 4a 7a 59 53 31 72 BgNVBAMTB3JzYS1r
0330 5a 58 6b 78 45 44 41 4f 42 67 4e 56 42 41 4d 54 ZXkxEDAOBgNVBAMT
0340 42 32 4e 68 62 47 6c 75 64 58 67 78 44 6a 41 4d B2NhbGludXgxDjAM
0350 42 67 4e 56 42 41 4d 54 42 55 78 6b 59 58 41 79 BgNVBAMTBUxkYXAy
0360 41 68 45 41 68 25 32 46 25 32 46 34 6b 4f 70 6a AhEAh%2F%2F4kOpj
0370 4c 4c 43 53 6b 64 79 70 4c 62 36 38 59 54 41 4d LLCSkdypLb68YTAM
0380 42 67 67 71 68 6b 69 47 39 77 30 43 42 51 55 41 BggqhkiG9w0CBQUA
0390 6f 49 47 6a 4d 42 49 47 43 6d 43 47 53 41 47 47 oIGjMBIGCmCGSAGG
03a0 25 32 42 45 55 42 43 51 49 78 42 42 4d 43 4d 6a %2BEUBCQIxBBMCMj
03b0 41 77 47 41 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 AwGAYJKoZIhvcNAQ
03c0 6b 44 4d 51 73 47 43 53 71 47 53 49 62 33 44 51 kDMQsGCSqGSIb3DQ
03d0 45 48 41 54 41 66 42 67 6b 71 68 6b 69 47 39 77 EHATAfBgkqhkiG9w
03e0 30 42 43 51 51 78 45 67 51 51 76 4c 6d 66 4f 70 0BCQQxEgQQvLmfOp
03f0 25 32 46 25 32 46 4c 59 4e 55 4c 31 73 7a 53 6e %2F%2FLYNUL1szSn
0400 25 32 42 45 4f 54 41 67 42 67 70 67 68 6b 67 42 %2BEOTAgBgpghkgB
0410 68 76 68 46 41 51 6b 46 4d 52 49 45 45 4f 44 61 hvhFAQkFMRIEEODa
0420 36 41 38 4e 54 25 32 46 6b 45 76 6b 46 5a 36 65 6A8NT%2FkEvkFZ6e
0430 63 6c 73 70 63 77 4d 41 59 4b 59 49 5a 49 41 59 clspcwMAYKYIZIAY
0440 62 34 52 51 45 4a 42 7a 45 69 45 79 41 34 4e 30 b4RQEJBzEiEyA4N0
0450 5a 47 52 6a 67 35 4d 45 56 42 4e 6a 4d 79 51 30 ZGRjg5MEVBNjMyQ0
0460 49 77 4f 54 49 35 4d 55 52 44 51 54 6b 79 52 45 IwOTI5MURDQTkyRE
0470 4a 46 51 6b 4d 32 4d 54 41 4e 42 67 6b 71 68 6b JFQkM2MTANBgkqhk
0480 69 47 39 77 30 42 41 51 45 46 41 41 53 42 67 4c iG9w0BAQEFAASBgL
0490 46 6e 64 4c 78 38 58 79 6b 64 57 55 37 51 65 76 FndLx8XykdWU7Qev
04a0 49 62 5a 79 42 72 54 4f 6e 53 33 70 47 65 57 31 IbZyBrTOnS3pGeW1
04b0 73 30 73 43 37 38 36 72 39 25 32 42 44 62 65 37 s0sC786r9%2BDbe7
04c0 4c 4e 57 50 4a 6c 44 6e 4c 31 46 55 6d 63 61 76 LNWPJlDnL1FUmcav
04d0 46 59 46 49 72 78 50 34 4f 34 72 53 78 43 72 4c FYFIrxP4O4rSxCrL
04e0 6e 65 37 54 53 6d 66 51 65 4a 4d 44 53 44 36 33 ne7TSmfQeJMDSD63
04f0 54 57 4e 74 35 4f 75 25 32 42 70 77 68 52 51 66 TWNt5Ou%2BpwhRQf
0500 38 50 5a 4c 65 58 4c 7a 49 54 6a 67 36 79 51 59 8PZLeXLzITjg6yQY
0510 25 32 46 67 56 63 25 32 46 6c 66 37 58 49 47 4f %2FgVc%2Flf7XIGO
0520 25 32 46 55 6e 4a 48 72 37 71 25 32 46 50 64 25 %2FUnJHr7q%2FPd%
0530 32 42 36 67 51 41 72 25 32 46 78 54 46 67 70 71 2B6gQAr%2FxTFgpq
0540 38 57 6c 73 66 4e 37 73 38 55 41 41 41 41 41 41 8WlsfN7s8UAAAAAA
0550 25 33 44 25 33 44 20 48 54 54 50 2f 31 2e 30 0d %3D%3D HTTP/1.0.
0560 0a 41 63 63 .Acc
No. Time Source Destination Protocol Info
35 3.191573 172.16.98.92 172.16.104.6 TCP www >
1618 [ACK] Seq=1 Ack=2761 Win=11040 Len=0
Frame 35 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1618 (1618), Seq:
1, Ack: 2761, Len: 0
Source port: www (80)
Destination port: 1618 (1618)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 2761 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 11040
Checksum: 0xb49b (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 34
The RTT to ACK the segment was: 0.000023000 seconds
No. Time Source Destination Protocol Info
53 5.548610 172.16.104.6 172.16.98.92 HTTP
Continuation or non-HTTP traffic
Frame 53 (116 bytes on wire, 116 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1618 (1618), Dst Port: www (80), Seq:
2761, Ack: 1, Len: 62
Source port: 1618 (1618)
Destination port: www (80)
Sequence number: 2761 (relative sequence number)
Next sequence number: 2823 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 4096
Checksum: 0x9da6 (correct)
Hypertext Transfer Protocol
ept-Language: en-us\\r\\n
Host: 172.16.98.92\\r\\n
Connection: Close\\r\\n
\\r\\n
No. Time Source Destination Protocol Info
54 5.548629 172.16.98.92 172.16.104.6 TCP www >
1618 [ACK] Seq=1 Ack=2823 Win=11040 Len=0
Frame 54 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1618 (1618), Seq:
1, Ack: 2823, Len: 0
Source port: www (80)
Destination port: 1618 (1618)
Sequence number: 1 (relative sequence number)
Acknowledgement number: 2823 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 11040
Checksum: 0xb45d (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 53
The RTT to ACK the segment was: 0.000019000 seconds
No. Time Source Destination Protocol Info
56 5.761810 172.16.98.92 172.16.104.6 HTTP
HTTP/1.1 200 OK
Frame 56 (283 bytes on wire, 283 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1618 (1618), Seq:
1, Ack: 2823, Len: 229
Source port: www (80)
Destination port: 1618 (1618)
Sequence number: 1 (relative sequence number)
Next sequence number: 230 (relative sequence number)
Acknowledgement number: 2823 (relative ack number)
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
Window size: 11040
Checksum: 0x2b2e (correct)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\\r\\n
Response Code: 200
Date: Mon, 11 Apr 2005 06:07:34 GMT\\r\\n
Server: Apache/2.0.53 (Unix)\\r\\n
Set-Cookie: CGISESSID=79453092d4c7216a8676b512aa875177; path=/\\r\\n
Content-Length: 0\\r\\n
Connection: close\\r\\n
Content-Type: application/x-pki-message\\r\\n
\\r\\n
No. Time Source Destination Protocol Info
57 5.761962 172.16.98.92 172.16.104.6 TCP www >
1618 [FIN, ACK] Seq=230 Ack=2823 Win=11040 Len=0
Frame 57 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1618 (1618), Seq:
230, Ack: 2823, Len: 0
Source port: www (80)
Destination port: 1618 (1618)
Sequence number: 230 (relative sequence number)
Acknowledgement number: 2823 (relative ack number)
Header length: 20 bytes
Flags: 0x0011 (FIN, ACK)
Window size: 11040
Checksum: 0xb377 (correct)
No. Time Source Destination Protocol Info
58 5.763663 172.16.104.6 172.16.98.92 TCP 1618 >
www [FIN, PSH, ACK] Seq=2823 Ack=231 Win=4096 Len=0
Frame 58 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1618 (1618), Dst Port: www (80), Seq:
2823, Ack: 231, Len: 0
Source port: 1618 (1618)
Destination port: www (80)
Sequence number: 2823 (relative sequence number)
Acknowledgement number: 231 (relative ack number)
Header length: 20 bytes
Flags: 0x0019 (FIN, PSH, ACK)
Window size: 4096
Checksum: 0xce8e (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 57
The RTT to ACK the segment was: 0.001701000 seconds
No. Time Source Destination Protocol Info
59 5.763709 172.16.98.92 172.16.104.6 TCP www >
1618 [ACK] Seq=231 Ack=2824 Win=11040 Len=0
Frame 59 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1618 (1618), Seq:
231, Ack: 2824, Len: 0
Source port: www (80)
Destination port: 1618 (1618)
Sequence number: 231 (relative sequence number)
Acknowledgement number: 2824 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 11040
Checksum: 0xb376 (correct)
SEQ/ACK analysis
This is an ACK to the segment in frame: 58
The RTT to ACK the segment was: 0.000046000 seconds
No. Time Source Destination Protocol Info
60 5.764032 172.16.104.6 172.16.98.92 TCP [TCP
Out-Of-Order] 1618 > www [FIN, PSH, ACK] Seq=2823 Ack=231 Win=4096 Len=0
Frame 60 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:a0:f9:07:28:a6, Dst: 00:11:11:92:23:fa
Internet Protocol, Src Addr: 172.16.104.6 (172.16.104.6), Dst Addr:
172.16.98.92 (172.16.98.92)
Transmission Control Protocol, Src Port: 1618 (1618), Dst Port: www (80), Seq:
2823, Ack: 231, Len: 0
Source port: 1618 (1618)
Destination port: www (80)
Sequence number: 2823 (relative sequence number)
Acknowledgement number: 231 (relative ack number)
Header length: 20 bytes
Flags: 0x0019 (FIN, PSH, ACK)
Window size: 4096
Checksum: 0xce8e (correct)
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) out-of-order segment
No. Time Source Destination Protocol Info
61 5.764049 172.16.98.92 172.16.104.6 TCP [TCP
Dup ACK 59#1] www > 1618 [ACK] Seq=231 Ack=2824 Win=11040 Len=0
Frame 61 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: 00:11:11:92:23:fa, Dst: 00:a0:f9:03:7b:00
Internet Protocol, Src Addr: 172.16.98.92 (172.16.98.92), Dst Addr:
172.16.104.6 (172.16.104.6)
Transmission Control Protocol, Src Port: www (80), Dst Port: 1618 (1618), Seq:
231, Ack: 2824, Len: 0
Source port: www (80)
Destination port: 1618 (1618)
Sequence number: 231 (relative sequence number)
Acknowledgement number: 2824 (relative ack number)
Header length: 20 bytes
Flags: 0x0010 (ACK)
Window size: 11040
Checksum: 0xb376 (correct)
SEQ/ACK analysis
TCP Analysis Flags
This is a TCP duplicate ack
Duplicate ACK #: 1
Duplicate to the ACK in frame: 59
-------------------------------------------------------------------------
>
> what says netscreen documantion about this? ;)
> i mean requesting and so on... and if it may check on ldap or something...
On netscape docu, there were no info about the concrete handling on scep.
>
> greetings
> dalini
>
greetings
www.mails.at - Der kostenlose E-Mail Anbieter
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
