

Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
22      4.242   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017321-6017321, ack:3329126211, win: 8 CI000291        tandem.xtra.nl  IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:44.905
      FRAME: Time delta from previous physical frame: 146 milliseconds
      FRAME: Frame number: 22
      FRAME: Total frame length: 54 bytes
      FRAME: Capture frame length: 54 bytes
      FRAME: Frame data: Number of data bytes remaining = 54 (0x0036)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 00000C07AC15
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 0050DA4136C7
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 54 (0x0036)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 40 (0x0028)
  IP: ID = 0x61AA; Proto = TCP; Len: 40
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability
      IP: Total Length = 40 (0x28)
      IP: Identification = 25002 (0x61AA)
      IP: Flags Summary = 2 (0x2)
          IP: .......0 = Last fragment in datagram
          IP: ......1. = Cannot fragment datagram
      IP: Fragment Offset = 0 (0x0) bytes
      IP: Time to Live = 128 (0x80)
      IP: Protocol = TCP - Transmission Control
      IP: Checksum = 0x7F23
      IP: Source Address = 10.75.3.235
      IP: Destination Address = 10.75.1.130
      IP: Data: Number of data bytes remaining = 20 (0x0014)
  TCP: .A...., len:    0, seq:   6017321-6017321, ack:3329126211, win: 8439, src: 3590  dst:   21 (FTP) 
      TCP: Source Port = 0x0E06
      TCP: Destination Port = FTP [control]
      TCP: Sequence Number = 6017321 (0x5BD129)
      TCP: Acknowledgement Number = 3329126211 (0xC66E6F43)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)
      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset

page 1


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8439 (0x20F7)
      TCP: Checksum = 0x5F89
      TCP: Urgent Pointer = 0 (0x0)

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 61 AA 40 00 80 06 7F 23 0A 4B 03 EB 0A 4B   .(a.@...#.K...K
00020:  01 82 0E 06 00 15 00 5B D1 29 C6 6E 6F 43 50 10   .......[.).noCP.
00030:  20 F7 5F 89 00 00                                  ._...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
23      4.348   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329445890-3329447349, ack:   6017262, win tandem.xtra.nl  CI000291        IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:45.11
      FRAME: Time delta from previous physical frame: 106 milliseconds
      FRAME: Frame number: 23
      FRAME: Total frame length: 1514 bytes
      FRAME: Capture frame length: 1514 bytes
      FRAME: Frame data: Number of data bytes remaining = 1514 (0x05EA)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 0050DA4136C7
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 005054F5CE00
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 1514 (0x05EA)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 1500 (0x05DC)
  IP: ID = 0xF671; Proto = TCP; Len: 1500
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability
      IP: Total Length = 1500 (0x5DC)
      IP: Identification = 63089 (0xF671)
      IP: Flags Summary = 0 (0x0)
          IP: .......0 = Last fragment in datagram
          IP: ......0. = May fragment datagram if necessary
      IP: Fragment Offset = 0 (0x0) bytes
      IP: Time to Live = 29 (0x1D)
      IP: Protocol = TCP - Transmission Control
      IP: Checksum = 0x87A8
      IP: Source Address = 10.75.1.130
      IP: Destination Address = 10.75.3.235
      IP: Data: Number of data bytes remaining = 1480 (0x05C8)
  TCP: .A...., len: 1460, seq:3329445890-3329447349, ack:   6017262, win: 8192, src: 2653  dst: 3592 

page 2


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

      TCP: Source Port = 0x0A5D
      TCP: Destination Port = 0x0E08
      TCP: Sequence Number = 3329445890 (0xC6735002)
      TCP: Acknowledgement Number = 6017262 (0x5BD0EE)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)
      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset
          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8192 (0x2000)
      TCP: Checksum = 0x2D9E
      TCP: Urgent Pointer = 0 (0x0)
      TCP: Data: Number of data bytes remaining = 1460 (0x05B4)

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 71 00 00 1D 06 87 A8 0A 4B 01 82 0A 4B   ...q.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 50 02 00 5B D0 EE 50 10   ...]...sP..[..P.
00030:  20 00 2D 9E 00 00 30 30 34 39 30 31 44 45 4D 33    .-...004901DEM3
00040:  31 31 20 20 20 20 30 30 30 30 30 30 30 30 30 30   11    0000000000
00050:  30 31 2B 30 30 30 30 30 30 30 30 30 30 30 31 2B   01+000000000001+
00060:  30 30 30 30 30 30 30 30 30 30 30 31 2B 30 30 30   000000000001+000
00070:  30 30 30 30 30 30 30 30 31 2B 30 30 30 30 30 30   000000001+000000
00080:  30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 30   000000+....00490
00090:  31 45 55 52 31 30 32 4C 54 45 4C 30 30 30 30 30   1EUR102LTEL00000
000A0:  30 32 30 30 30 30 30 2D 30 30 30 30 30 30 30 30   0200000-00000000
000B0:  30 30 30 30 2B 30 30 30 30 30 30 30 32 35 30 30   0000+00000002500
000C0:  30 2D 30 30 30 30 30 30 32 32 35 30 30 30 2D 30   0-000000225000-0
000D0:  30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A   00000000000+....
000E0:  30 30 34 39 30 31 45 55 52 31 30 38 4C 54 45 4C   004901EUR108LTEL
000F0:  30 30 30 30 30 30 30 30 32 35 35 36 2D 30 30 30   000000002556-000
00100:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30   000000000+000000
00110:  30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30 32   000000+000000002
00120:  35 35 36 2D 30 30 30 30 30 30 30 30 30 30 30 30   556-000000000000
00130:  2B 0D 0A 0D 0A 30 30 34 39 30 31 45 55 52 33 31   +....004901EUR31
00140:  31 20 20 20 20 30 30 30 30 30 30 30 34 30 31 33   1    00000004013
00150:  31 2D 30 30 30 30 30 30 30 38 30 31 32 39 2B 30   1-000000080129+0
00160:  30 30 30 30 30 30 38 30 30 39 39 2B 30 30 30 30   00000080099+0000
00170:  30 30 30 34 30 31 36 31 2D 30 30 30 30 30 30 30   00040161-0000000
00180:  30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 30 31   00000+....004901
00190:  45 55 52 33 31 33 20 20 20 20 30 30 30 30 30 30   EUR313    000000
001A0:  30 31 31 37 39 33 2D 30 30 30 30 30 30 30 31 31   011793-000000011
001B0:  37 39 33 2B 30 30 30 30 30 30 30 31 31 37 39 33   793+000000011793
001C0:  2B 30 30 30 30 30 30 30 31 31 37 39 33 2D 30 30   +000000011793-00
001D0:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0
001E0:  30 34 39 30 31 45 55 52 34 30 36 4C 54 45 4C 30   04901EUR406LTEL0
001F0:  30 30 30 30 30 30 32 35 30 30 30 2D 30 30 30 30   00000025000-0000
00200:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30   00000000+0000000
00210:  37 35 30 30 30 2B 30 30 30 30 30 30 30 35 30 30   75000+0000000500
00220:  30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   00+000000000000+

page 3


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

00230:  0D 0A 0D 0A 30 30 34 39 30 31 45 55 52 35 30 31   ....004901EUR501
00240:  4C 54 45 4C 30 30 30 30 30 38 30 35 30 30 30 30   LTEL000008050000
00250:  2D 30 30 30 30 30 30 30 32 35 30 30 30 2D 30 30   -000000025000-00
00260:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
00270:  38 30 32 35 30 30 30 2D 30 30 30 30 30 30 30 30   8025000-00000000
00280:  30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 30 31 4E   0000+....004901N
00290:  4C 47 33 31 31 20 20 20 20 30 30 30 30 30 30 30   LG311    0000000
002A0:  30 30 30 35 30 2D 30 30 30 30 30 30 30 30 30 30   00050-0000000000
002B0:  35 30 2B 30 30 30 30 30 30 30 30 30 30 35 30 2B   50+000000000050+
002C0:  30 30 30 30 30 30 30 30 30 30 35 30 2D 30 30 30   000000000050-000
002D0:  30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30   000000000+....00
002E0:  34 39 31 30 43 48 46 31 30 30 20 20 20 20 30 30   4910CHF100    00
002F0:  30 30 30 31 34 31 30 36 34 30 2D 30 30 30 30 30   0001410640-00000
00300:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30   0000000+00000000
00310:  30 30 30 30 2B 30 30 30 30 30 31 34 31 30 36 34   0000+00000141064
00320:  30 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D   0-000000000000+.
00330:  0A 0D 0A 30 30 34 39 31 30 45 55 52 31 30 30 20   ...004910EUR100 
00340:  20 20 20 30 30 30 30 33 39 36 30 37 37 39 36 2D      000039607796-
00350:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
00360:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 33 39   000000000+000039
00370:  36 30 37 37 39 36 2D 30 30 30 30 30 30 30 30 30   607796-000000000
00380:  30 30 30 2B 0D 0A 0D 0A 30 30 34 39 31 30 45 55   000+....004910EU
00390:  52 31 32 31 20 20 20 20 30 30 30 30 30 31 35 39   R121    00000159
003A0:  36 33 39 39 2D 30 30 30 30 30 30 30 30 30 30 30   6399-00000000000
003B0:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0
003C0:  30 30 30 30 31 35 39 36 33 39 39 2D 30 30 30 30   00001596399-0000
003D0:  30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34   00000000+....004
003E0:  39 31 30 47 42 50 31 30 30 20 20 20 20 30 30 30   910GBP100    000
003F0:  30 30 30 36 30 30 30 30 30 2D 30 30 30 30 30 30   000600000-000000
00400:  30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30   000000+000000000
00410:  30 30 30 2B 30 30 30 30 30 30 36 30 30 30 30 30   000+000000600000
00420:  2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A   -000000000000+..
00430:  0D 0A 30 30 34 39 31 30 47 42 50 31 32 31 20 20   ..004910GBP121  
00440:  20 20 30 30 30 30 30 34 38 35 32 34 36 35 2D 30     000004852465-0
00450:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000
00460:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 34 38   00000000+0000048
00470:  35 32 34 36 35 2D 30 30 30 30 30 30 30 30 30 30   52465-0000000000
00480:  30 30 2B 0D 0A 0D 0A 30 30 34 39 31 30 55 53 44   00+....004910USD
00490:  31 30 30 20 20 20 20 30 30 30 30 31 30 36 37 36   100    000010676
004A0:  33 37 35 2D 30 30 30 30 30 30 30 30 30 30 30 30   375-000000000000
004B0:  2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   +000000000000+00
004C0:  30 30 31 30 36 37 36 33 37 35 2D 30 30 30 30 30   0010676375-00000
004D0:  30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39   0000000+....0049
004E0:  31 31 43 48 46 31 30 30 20 20 20 20 30 30 30 30   11CHF100    0000
004F0:  30 31 34 31 30 36 34 30 2B 30 30 30 30 30 30 30   01410640+0000000
00500:  30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30 30   00000+0000000000
00510:  30 30 2B 30 30 30 30 30 31 34 31 30 36 34 30 2B   00+000001410640+
00520:  30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D   000000000000+...
00530:  0A 30 30 34 39 31 31 45 55 52 31 30 30 20 20 20   .004911EUR100   
00540:  20 30 30 30 30 33 39 36 30 37 37 39 36 2B 30 30    000039607796+00
00550:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
00560:  30 30 30 30 30 30 30 2B 30 30 30 30 33 39 36 30   0000000+00003960
00570:  37 37 39 36 2B 30 30 30 30 30 30 30 30 30 30 30   7796+00000000000

page 4


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

00580:  30 2B 0D 0A 0D 0A 30 30 34 39 31 31 45 55 52 31   0+....004911EUR1
00590:  32 31 20 20 20 20 30 30 30 30 30 31 35 39 36 33   21    0000015963
005A0:  39 39 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   99+000000000000+
005B0:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
005C0:  30 30 31 35 39 36 33 39 39 2B 30 30 30 30 30 30   001596399+000000
005D0:  30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 31   000000+....00491
005E0:  31 45 55 52 33 31 31 20 20 20                     1EUR311         

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
24      4.349   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329447350-3329448809, ack:   6017262, win tandem.xtra.nl  CI000291        IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:45.12
      FRAME: Time delta from previous physical frame: 1 milliseconds
      FRAME: Frame number: 24
      FRAME: Total frame length: 1514 bytes
      FRAME: Capture frame length: 1514 bytes
      FRAME: Frame data: Number of data bytes remaining = 1514 (0x05EA)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 0050DA4136C7
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 005054F5CE00
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 1514 (0x05EA)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 1500 (0x05DC)
  IP: ID = 0xF672; Proto = TCP; Len: 1500
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability
      IP: Total Length = 1500 (0x5DC)
      IP: Identification = 63090 (0xF672)
      IP: Flags Summary = 0 (0x0)
          IP: .......0 = Last fragment in datagram
          IP: ......0. = May fragment datagram if necessary
      IP: Fragment Offset = 0 (0x0) bytes
      IP: Time to Live = 29 (0x1D)
      IP: Protocol = TCP - Transmission Control
      IP: Checksum = 0x87A7
      IP: Source Address = 10.75.1.130
      IP: Destination Address = 10.75.3.235
      IP: Data: Number of data bytes remaining = 1480 (0x05C8)
  TCP: .A...., len: 1460, seq:3329447350-3329448809, ack:   6017262, win: 8192, src: 2653  dst: 3592 
      TCP: Source Port = 0x0A5D
      TCP: Destination Port = 0x0E08
      TCP: Sequence Number = 3329447350 (0xC67355B6)

page 5


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

      TCP: Acknowledgement Number = 6017262 (0x5BD0EE)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)
      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset
          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8192 (0x2000)
      TCP: Checksum = 0x3E1B
      TCP: Urgent Pointer = 0 (0x0)
      TCP: Data: Number of data bytes remaining = 1460 (0x05B4)

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 72 00 00 1D 06 87 A7 0A 4B 01 82 0A 4B   ...r.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 55 B6 00 5B D0 EE 50 10   ...]...sU..[..P.
00030:  20 00 3E 1B 00 00 20 30 30 30 30 30 30 30 30 30    .>... 000000000
00040:  30 33 35 2B 30 30 30 30 30 30 32 34 35 32 36 33   035+000000245263
00050:  2B 30 30 30 30 30 30 32 34 35 32 36 33 2B 30 30   +000000245263+00
00060:  30 30 30 30 30 30 30 30 33 35 2B 30 30 30 30 30   0000000035+00000
00070:  30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39   0000000+....0049
00080:  31 31 47 42 50 31 30 30 20 20 20 20 30 30 30 30   11GBP100    0000
00090:  30 30 36 30 30 30 30 30 2B 30 30 30 30 30 30 30   00600000+0000000
000A0:  30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30 30   00000+0000000000
000B0:  30 30 2B 30 30 30 30 30 30 36 30 30 30 30 30 2B   00+000000600000+
000C0:  30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D   000000000000+...
000D0:  0A 30 30 34 39 31 31 47 42 50 31 32 31 20 20 20   .004911GBP121   
000E0:  20 30 30 30 30 30 34 38 35 32 34 36 35 2B 30 30    000004852465+00
000F0:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
00100:  30 30 30 30 30 30 30 2B 30 30 30 30 30 34 38 35   0000000+00000485
00110:  32 34 36 35 2B 30 30 30 30 30 30 30 30 30 30 30   2465+00000000000
00120:  30 2B 0D 0A 0D 0A 30 30 34 39 31 31 55 53 44 31   0+....004911USD1
00130:  30 30 20 20 20 20 30 30 30 30 31 30 36 37 36 33   00    0000106763
00140:  37 35 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   75+000000000000+
00150:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
00160:  30 31 30 36 37 36 33 37 35 2B 30 30 30 30 30 30   010676375+000000
00170:  30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 31   000000+....00491
00180:  31 55 53 44 33 31 31 20 20 20 20 30 30 30 30 30   1USD311    00000
00190:  30 30 30 30 30 30 31 2B 30 30 30 30 30 30 30 30   0000001+00000000
001A0:  30 30 30 31 2B 30 30 30 30 30 30 30 30 30 30 30   0001+00000000000
001B0:  31 2B 30 30 30 30 30 30 30 30 30 30 30 31 2B 30   1+000000000001+0
001C0:  30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A   00000000000+....
001D0:  30 30 34 39 32 30 45 55 52 31 30 30 20 20 20 20   004920EUR100    
001E0:  30 30 30 30 31 37 38 32 36 34 38 32 2D 30 30 30   000017826482-000
001F0:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30   000000000+000000
00200:  30 30 30 30 30 30 2B 30 30 30 30 31 37 38 32 36   000000+000017826
00210:  34 38 32 2D 30 30 30 30 30 30 30 30 30 30 30 30   482-000000000000
00220:  2B 0D 0A 0D 0A 30 30 34 39 32 31 44 45 4D 31 31   +....004921DEM11
00230:  31 20 20 20 20 30 30 30 30 30 30 30 30 32 32 32   1    00000000222
00240:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0
00250:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000

page 6


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

00260:  30 30 30 30 32 32 32 30 2B 30 30 30 30 30 30 30   00002220+0000000
00270:  30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31   00000+....004921
00280:  45 55 52 31 30 30 20 20 20 20 30 30 30 30 30 34   EUR100    000004
00290:  35 33 33 37 35 36 2D 30 30 30 30 30 30 30 30 30   533756-000000000
002A0:  30 30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30   000+000000000000
002B0:  2B 30 30 30 30 30 34 35 33 33 37 35 36 2D 30 30   +000004533756-00
002C0:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0
002D0:  30 34 39 32 31 45 55 52 31 30 30 41 41 42 20 30   04921EUR100AAB 0
002E0:  30 30 30 32 39 33 33 36 30 38 30 2B 30 30 30 30   00029336080+0000
002F0:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30   00000000+0000000
00300:  30 30 30 30 30 2B 30 30 30 30 32 39 33 33 36 30   00000+0000293360
00310:  38 30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   80+000000000000+
00320:  0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 31 30 30   ....004921EUR100
00330:  41 45 58 20 30 30 30 30 30 30 31 30 36 31 38 35   AEX 000000106185
00340:  2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   -000000000000+00
00350:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
00360:  30 31 30 36 31 38 35 2D 30 30 30 30 30 30 30 30   0106185-00000000
00370:  30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45   0000+....004921E
00380:  55 52 31 30 30 41 48 20 20 30 30 30 30 30 30 31   UR100AH  0000001
00390:  33 36 35 35 30 2B 30 30 30 30 30 30 30 30 30 30   36550+0000000000
003A0:  30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   00+000000000000+
003B0:  30 30 30 30 30 30 31 33 36 35 35 30 2B 30 30 30   000000136550+000
003C0:  30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30   000000000+....00
003D0:  34 39 32 31 45 55 52 31 30 30 42 41 41 4E 30 30   4921EUR100BAAN00
003E0:  30 30 30 30 39 35 31 38 33 31 2B 30 30 30 30 30   0000951831+00000
003F0:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30   0000000+00000000
00400:  30 30 30 30 2B 30 30 30 30 30 30 39 35 31 38 33   0000+00000095183
00410:  31 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D   1+000000000000+.
00420:  0A 0D 0A 30 30 34 39 32 31 45 55 52 31 30 30 44   ...004921EUR100D
00430:  52 54 20 30 30 30 30 30 30 39 36 39 32 35 36 2B   RT 000000969256+
00440:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
00450:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30   000000000+000000
00460:  39 36 39 32 35 36 2B 30 30 30 30 30 30 30 30 30   969256+000000000
00470:  30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55   000+....004921EU
00480:  52 31 30 30 45 4C 53 20 30 30 30 30 30 30 31 37   R100ELS 00000017
00490:  37 34 35 37 2D 30 30 30 30 30 30 30 30 30 30 30   7457-00000000000
004A0:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0
004B0:  30 30 30 30 30 31 37 37 34 35 37 2D 30 30 30 30   00000177457-0000
004C0:  30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34   00000000+....004
004D0:  39 32 31 45 55 52 31 30 30 46 4F 52 20 30 30 30   921EUR100FOR 000
004E0:  30 30 31 31 30 36 34 30 30 2D 30 30 30 30 30 30   001106400-000000
004F0:  30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30   000000+000000000
00500:  30 30 30 2B 30 30 30 30 30 31 31 30 36 34 30 30   000+000001106400
00510:  2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A   -000000000000+..
00520:  0D 0A 30 30 34 39 32 31 45 55 52 31 30 30 46 54   ..004921EUR100FT
00530:  49 20 30 30 30 30 30 30 30 33 33 37 36 31 2B 30   I 000000033761+0
00540:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000
00550:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30   00000000+0000000
00560:  33 33 37 36 31 2B 30 30 30 30 30 30 30 30 30 30   33761+0000000000
00570:  30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52   00+....004921EUR
00580:  31 30 30 4B 4C 4D 20 30 30 30 30 30 30 30 35 30   100KLM 000000050
00590:  32 39 32 2D 30 30 30 30 30 30 30 30 30 30 30 30   292-000000000000
005A0:  2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   +000000000000+00

page 7


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

005B0:  30 30 30 30 30 35 30 32 39 32 2D 30 30 30 30 30   0000050292-00000
005C0:  30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39   0000000+....0049
005D0:  32 31 45 55 52 31 30 30 50 48 49 20 30 30 30 30   21EUR100PHI 0000
005E0:  31 31 38 34 32 38 31 32 2B 30                     11842812+0      

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
25      4.350   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329448810, win: 8 CI000291        tandem.xtra.nl  IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:45.13
      FRAME: Time delta from previous physical frame: 1 milliseconds
      FRAME: Frame number: 25
      FRAME: Total frame length: 54 bytes
      FRAME: Capture frame length: 54 bytes
      FRAME: Frame data: Number of data bytes remaining = 54 (0x0036)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 00000C07AC15
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 0050DA4136C7
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 54 (0x0036)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 40 (0x0028)
  IP: ID = 0x62AA; Proto = TCP; Len: 40
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability
      IP: Total Length = 40 (0x28)
      IP: Identification = 25258 (0x62AA)
      IP: Flags Summary = 2 (0x2)
          IP: .......0 = Last fragment in datagram
          IP: ......1. = Cannot fragment datagram
      IP: Fragment Offset = 0 (0x0) bytes
      IP: Time to Live = 128 (0x80)
      IP: Protocol = TCP - Transmission Control
      IP: Checksum = 0x7E23
      IP: Source Address = 10.75.3.235
      IP: Destination Address = 10.75.1.130
      IP: Data: Number of data bytes remaining = 20 (0x0014)
  TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329448810, win: 8760, src: 3592  dst: 2653 
      TCP: Source Port = 0x0E08
      TCP: Destination Port = 0x0A5D
      TCP: Sequence Number = 6017262 (0x5BD0EE)
      TCP: Acknowledgement Number = 3329448810 (0xC6735B6A)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)

page 8


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset
          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8760 (0x2238)
      TCP: Checksum = 0x680D
      TCP: Urgent Pointer = 0 (0x0)

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 62 AA 40 00 80 06 7E 23 0A 4B 03 EB 0A 4B   .(b.@...~#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 5B 6A 50 10   .....].[...s[jP.
00030:  22 38 68 0D 00 00                                 "8h...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
26      4.351   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329448810-3329450269, ack:   6017262, win tandem.xtra.nl  CI000291        IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:45.14
      FRAME: Time delta from previous physical frame: 1 milliseconds
      FRAME: Frame number: 26
      FRAME: Total frame length: 1514 bytes
      FRAME: Capture frame length: 1514 bytes
      FRAME: Frame data: Number of data bytes remaining = 1514 (0x05EA)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 0050DA4136C7
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 005054F5CE00
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 1514 (0x05EA)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 1500 (0x05DC)
  IP: ID = 0xF673; Proto = TCP; Len: 1500
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability
      IP: Total Length = 1500 (0x5DC)
      IP: Identification = 63091 (0xF673)
      IP: Flags Summary = 0 (0x0)
          IP: .......0 = Last fragment in datagram
          IP: ......0. = May fragment datagram if necessary
      IP: Fragment Offset = 0 (0x0) bytes
      IP: Time to Live = 29 (0x1D)
      IP: Protocol = TCP - Transmission Control

page 9


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

      IP: Checksum = 0x87A6
      IP: Source Address = 10.75.1.130
      IP: Destination Address = 10.75.3.235
      IP: Data: Number of data bytes remaining = 1480 (0x05C8)
  TCP: .A...., len: 1460, seq:3329448810-3329450269, ack:   6017262, win: 8192, src: 2653  dst: 3592 
      TCP: Source Port = 0x0A5D
      TCP: Destination Port = 0x0E08
      TCP: Sequence Number = 3329448810 (0xC6735B6A)
      TCP: Acknowledgement Number = 6017262 (0x5BD0EE)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)
      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset
          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8192 (0x2000)
      TCP: Checksum = 0x2A8C
      TCP: Urgent Pointer = 0 (0x0)
      TCP: Data: Number of data bytes remaining = 1460 (0x05B4)

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 73 00 00 1D 06 87 A6 0A 4B 01 82 0A 4B   ...s.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 5B 6A 00 5B D0 EE 50 10   ...]...s[j.[..P.
00030:  20 00 2A 8C 00 00 30 30 30 30 30 30 30 30 30 30    .*...0000000000
00040:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0
00050:  30 30 30 31 31 38 34 32 38 31 32 2B 30 30 30 30   00011842812+0000
00060:  30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34   00000000+....004
00070:  39 32 31 45 55 52 31 30 30 52 44 20 20 30 30 30   921EUR100RD  000
00080:  30 30 30 31 34 32 36 39 30 2D 30 30 30 30 30 30   000142690-000000
00090:  30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30   000000+000000000
000A0:  30 30 30 2B 30 30 30 30 30 30 31 34 32 36 39 30   000+000000142690
000B0:  2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A   -000000000000+..
000C0:  0D 0A 30 30 34 39 32 31 45 55 52 31 30 30 55 4E   ..004921EUR100UN
000D0:  20 20 30 30 30 30 30 34 30 37 39 34 34 36 2D 30     000004079446-0
000E0:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000
000F0:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 34 30   00000000+0000040
00100:  37 39 34 34 36 2D 30 30 30 30 30 30 30 30 30 30   79446-0000000000
00110:  30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52   00+....004921EUR
00120:  31 30 30 55 4E 43 20 30 30 30 30 30 30 30 30 31   100UNC 000000001
00130:  31 34 30 2B 30 30 30 30 30 30 30 30 30 30 30 30   140+000000000000
00140:  2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   +000000000000+00
00150:  30 30 30 30 30 30 31 31 34 30 2B 30 30 30 30 30   0000001140+00000
00160:  30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39   0000000+....0049
00170:  32 31 45 55 52 31 30 30 55 4E 4F 20 30 30 30 30   21EUR100UNO 0000
00180:  30 33 35 37 32 34 35 39 2D 30 30 30 30 30 30 30   03572459-0000000
00190:  30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30 30   00000+0000000000
001A0:  30 30 2B 30 30 30 30 30 33 35 37 32 34 35 39 2D   00+000003572459-
001B0:  30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D   000000000000+...
001C0:  0A 30 30 34 39 32 31 45 55 52 31 30 30 57 45 53   .004921EUR100WES
001D0:  20 30 30 30 30 30 30 30 35 35 36 33 33 2B 30 30    000000055633+00

page 10


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

001E0:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
001F0:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30 35   0000000+00000005
00200:  35 36 33 33 2B 30 30 30 30 30 30 30 30 30 30 30   5633+00000000000
00210:  30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 31   0+....004921EUR1
00220:  30 31 44 52 54 20 30 30 30 30 30 31 34 37 38 37   01DRT 0000014787
00230:  35 30 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B   50-000000000000+
00240:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
00250:  30 30 31 34 37 38 37 35 30 2D 30 30 30 30 30 30   001478750-000000
00260:  30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32   000000+....00492
00270:  31 45 55 52 31 30 31 44 52 54 4F 30 30 30 30 30   1EUR101DRTO00000
00280:  32 30 38 35 35 30 30 2B 30 30 30 30 30 30 30 30   2085500+00000000
00290:  30 30 30 30 2B 30 30 30 30 30 30 30 30 30 30 30   0000+00000000000
002A0:  30 2B 30 30 30 30 30 32 30 38 35 35 30 30 2B 30   0+000002085500+0
002B0:  30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A   00000000000+....
002C0:  30 30 34 39 32 31 45 55 52 31 30 31 52 44 20 20   004921EUR101RD  
002D0:  30 30 30 30 32 35 38 31 34 30 30 30 2D 30 30 30   000025814000-000
002E0:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30   000000000+000000
002F0:  30 30 30 30 30 30 2B 30 30 30 30 32 35 38 31 34   000000+000025814
00300:  30 30 30 2D 30 30 30 30 30 30 30 30 30 30 30 30   000-000000000000
00310:  2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 31 30   +....004921EUR10
00320:  31 55 4E 20 20 30 30 30 30 32 39 37 30 36 32 33   1UN  00002970623
00330:  30 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0-000000000000+0
00340:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000
00350:  32 39 37 30 36 32 33 30 2D 30 30 30 30 30 30 30   29706230-0000000
00360:  30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31   00000+....004921
00370:  45 55 52 31 30 31 55 4E 4F 20 30 30 30 30 30 30   EUR101UNO 000000
00380:  30 33 37 33 38 30 2D 30 30 30 30 30 30 30 30 30   037380-000000000
00390:  30 30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30   000+000000000000
003A0:  2B 30 30 30 30 30 30 30 33 37 33 38 30 2D 30 30   +000000037380-00
003B0:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0
003C0:  30 34 39 32 31 45 55 52 31 30 32 41 41 42 20 30   04921EUR102AAB 0
003D0:  30 30 30 30 30 30 35 30 30 30 30 2B 30 30 30 30   00000050000+0000
003E0:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30   00000000+0000000
003F0:  30 30 30 30 30 2B 30 30 30 30 30 30 30 35 30 30   00000+0000000500
00400:  30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   00+000000000000+
00410:  0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 31 30 32   ....004921EUR102
00420:  44 52 54 20 30 30 30 30 31 33 38 31 34 39 35 30   DRT 000013814950
00430:  2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   +000000000000+00
00440:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 31   0000000000+00001
00450:  33 38 31 34 39 35 30 2B 30 30 30 30 30 30 30 30   3814950+00000000
00460:  30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45   0000+....004921E
00470:  55 52 31 30 32 44 52 54 41 30 30 30 30 30 30 30   UR102DRTA0000000
00480:  30 32 36 30 36 2B 30 30 30 30 30 30 30 30 30 30   02606+0000000000
00490:  30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   00+000000000000+
004A0:  30 30 30 30 30 30 30 30 32 36 30 36 2B 30 30 30   000000002606+000
004B0:  30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30   000000000+....00
004C0:  34 39 32 31 45 55 52 31 30 32 52 44 20 20 30 30   4921EUR102RD  00
004D0:  30 31 34 33 38 39 32 37 37 33 2B 30 30 30 30 30   0143892773+00000
004E0:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30   0000000+00000000
004F0:  30 30 30 30 2B 30 30 30 31 34 33 38 39 32 37 37   0000+00014389277
00500:  33 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D   3+000000000000+.
00510:  0A 0D 0A 30 30 34 39 32 31 45 55 52 31 30 32 55   ...004921EUR102U
00520:  4E 20 20 30 30 30 31 30 31 32 33 38 39 39 36 2D   N  000101238996-

page 11


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

00530:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
00540:  30 30 30 30 30 30 30 30 30 2B 30 30 30 31 30 31   000000000+000101
00550:  32 33 38 39 39 36 2D 30 30 30 30 30 30 30 30 30   238996-000000000
00560:  30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55   000+....004921EU
00570:  52 31 30 32 57 4F 4C 20 30 30 30 30 30 30 32 32   R102WOL 00000022
00580:  32 34 39 30 2B 30 30 30 30 30 30 30 30 30 30 30   2490+00000000000
00590:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0
005A0:  30 30 30 30 30 32 32 32 34 39 30 2B 30 30 30 30   00000222490+0000
005B0:  30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34   00000000+....004
005C0:  39 32 31 45 55 52 31 30 34 44 52 54 20 30 30 30   921EUR104DRT 000
005D0:  30 30 30 30 33 36 35 30 30 2B 30 30 30 30 30 30   000036500+000000
005E0:  30 30 30 30 30 30 2B 30 30 30                     000000+000      

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
27      4.351   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329450270, win: 8 CI000291        tandem.xtra.nl  IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:45.14
      FRAME: Time delta from previous physical frame: 0 milliseconds
      FRAME: Frame number: 27
      FRAME: Total frame length: 54 bytes
      FRAME: Capture frame length: 54 bytes
      FRAME: Frame data: Number of data bytes remaining = 54 (0x0036)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 00000C07AC15
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 0050DA4136C7
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 54 (0x0036)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 40 (0x0028)
  IP: ID = 0x63AA; Proto = TCP; Len: 40
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability
      IP: Total Length = 40 (0x28)
      IP: Identification = 25514 (0x63AA)
      IP: Flags Summary = 2 (0x2)
          IP: .......0 = Last fragment in datagram
          IP: ......1. = Cannot fragment datagram
      IP: Fragment Offset = 0 (0x0) bytes
      IP: Time to Live = 128 (0x80)
      IP: Protocol = TCP - Transmission Control
      IP: Checksum = 0x7D23
      IP: Source Address = 10.75.3.235
      IP: Destination Address = 10.75.1.130

page 12


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

      IP: Data: Number of data bytes remaining = 20 (0x0014)
  TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329450270, win: 8760, src: 3592  dst: 2653 
      TCP: Source Port = 0x0E08
      TCP: Destination Port = 0x0A5D
      TCP: Sequence Number = 6017262 (0x5BD0EE)
      TCP: Acknowledgement Number = 3329450270 (0xC673611E)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)
      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset
          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8760 (0x2238)
      TCP: Checksum = 0x6259
      TCP: Urgent Pointer = 0 (0x0)

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 63 AA 40 00 80 06 7D 23 0A 4B 03 EB 0A 4B   .(c.@...}#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 61 1E 50 10   .....].[...sa.P.
00030:  22 38 62 59 00 00                                 "8bY..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
28      4.352   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329450270-3329451729, ack:   6017262, win tandem.xtra.nl  CI000291        IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:45.15
      FRAME: Time delta from previous physical frame: 1 milliseconds
      FRAME: Frame number: 28
      FRAME: Total frame length: 1514 bytes
      FRAME: Capture frame length: 1514 bytes
      FRAME: Frame data: Number of data bytes remaining = 1514 (0x05EA)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 0050DA4136C7
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 005054F5CE00
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 1514 (0x05EA)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 1500 (0x05DC)
  IP: ID = 0xF674; Proto = TCP; Len: 1500
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability

page 13


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

      IP: Total Length = 1500 (0x5DC)
      IP: Identification = 63092 (0xF674)
      IP: Flags Summary = 0 (0x0)
          IP: .......0 = Last fragment in datagram
          IP: ......0. = May fragment datagram if necessary
      IP: Fragment Offset = 0 (0x0) bytes
      IP: Time to Live = 29 (0x1D)
      IP: Protocol = TCP - Transmission Control
      IP: Checksum = 0x87A5
      IP: Source Address = 10.75.1.130
      IP: Destination Address = 10.75.3.235
      IP: Data: Number of data bytes remaining = 1480 (0x05C8)
  TCP: .A...., len: 1460, seq:3329450270-3329451729, ack:   6017262, win: 8192, src: 2653  dst: 3592 
      TCP: Source Port = 0x0A5D
      TCP: Destination Port = 0x0E08
      TCP: Sequence Number = 3329450270 (0xC673611E)
      TCP: Acknowledgement Number = 6017262 (0x5BD0EE)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)
      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset
          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8192 (0x2000)
      TCP: Checksum = 0x8B91
      TCP: Urgent Pointer = 0 (0x0)
      TCP: Data: Number of data bytes remaining = 1460 (0x05B4)

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 74 00 00 1D 06 87 A5 0A 4B 01 82 0A 4B   ...t.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 61 1E 00 5B D0 EE 50 10   ...]...sa..[..P.
00030:  20 00 8B 91 00 00 30 30 30 30 30 30 30 30 30 2B    .....000000000+
00040:  30 30 30 30 30 30 30 33 36 35 30 30 2B 30 30 30   000000036500+000
00050:  30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30   000000000+....00
00060:  34 39 32 31 45 55 52 31 30 34 52 44 20 20 30 30   4921EUR104RD  00
00070:  30 30 32 31 33 31 39 35 30 30 2B 30 30 30 30 30   0021319500+00000
00080:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30   0000000+00000000
00090:  30 30 30 30 2B 30 30 30 30 32 31 33 31 39 35 30   0000+00002131950
000A0:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D   0+000000000000+.
000B0:  0A 0D 0A 30 30 34 39 32 31 45 55 52 31 30 34 55   ...004921EUR104U
000C0:  4E 20 20 30 30 30 30 32 34 38 35 35 35 32 30 2D   N  000024855520-
000D0:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
000E0:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 32 34   000000000+000024
000F0:  38 35 35 35 32 30 2D 30 30 30 30 30 30 30 30 30   855520-000000000
00100:  30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55   000+....004921EU
00110:  52 31 30 36 52 44 20 20 30 30 30 30 30 30 31 37   R106RD  00000017
00120:  32 36 30 32 2B 30 30 30 30 30 30 30 30 30 30 30   2602+00000000000
00130:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0
00140:  30 30 30 30 30 31 37 32 36 30 32 2B 30 30 30 30   00000172602+0000
00150:  30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34   00000000+....004

page 14


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

00160:  39 32 31 45 55 52 31 30 36 55 4E 20 20 30 30 30   921EUR106UN  000
00170:  30 30 32 35 33 32 33 38 33 2B 30 30 30 30 30 30   002532383+000000
00180:  30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30   000000+000000000
00190:  30 30 30 2B 30 30 30 30 30 32 35 33 32 33 38 33   000+000002532383
001A0:  2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A   +000000000000+..
001B0:  0D 0A 30 30 34 39 32 31 45 55 52 31 30 37 52 44   ..004921EUR107RD
001C0:  20 20 30 30 30 30 30 30 30 34 33 31 35 31 2D 30     000000043151-0
001D0:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000
001E0:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30   00000000+0000000
001F0:  34 33 31 35 31 2D 30 30 30 30 30 30 30 30 30 30   43151-0000000000
00200:  30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52   00+....004921EUR
00210:  31 30 37 55 4E 20 20 30 30 30 30 30 30 36 33 33   107UN  000000633
00220:  30 39 36 2D 30 30 30 30 30 30 30 30 30 30 30 30   096-000000000000
00230:  2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   +000000000000+00
00240:  30 30 30 30 36 33 33 30 39 36 2D 30 30 30 30 30   0000633096-00000
00250:  30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39   0000000+....0049
00260:  32 31 45 55 52 31 30 38 41 41 42 20 30 30 30 30   21EUR108AAB 0000
00270:  30 30 30 30 32 38 30 36 2D 30 30 30 30 30 30 30   00002806-0000000
00280:  30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30 30   00000+0000000000
00290:  30 30 2B 30 30 30 30 30 30 30 30 32 38 30 36 2D   00+000000002806-
002A0:  30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D   000000000000+...
002B0:  0A 30 30 34 39 32 31 45 55 52 31 30 38 41 53 4D   .004921EUR108ASM
002C0:  4C 30 30 30 30 30 30 30 30 30 34 32 30 2B 30 30   L000000000420+00
002D0:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
002E0:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30   0000000+00000000
002F0:  30 34 32 30 2B 30 30 30 30 30 30 30 30 30 30 30   0420+00000000000
00300:  30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 31   0+....004921EUR1
00310:  30 38 44 52 54 20 30 30 30 30 30 30 30 32 35 33   08DRT 0000000253
00320:  38 32 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B   82-000000000000+
00330:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
00340:  30 30 30 30 32 35 33 38 32 2D 30 30 30 30 30 30   000025382-000000
00350:  30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32   000000+....00492
00360:  31 45 55 52 31 30 38 52 44 20 20 30 30 30 30 30   1EUR108RD  00000
00370:  30 32 35 36 30 38 33 2D 30 30 30 30 30 30 30 30   0256083-00000000
00380:  30 30 30 30 2B 30 30 30 30 30 30 30 30 30 30 30   0000+00000000000
00390:  30 2B 30 30 30 30 30 30 32 35 36 30 38 33 2D 30   0+000000256083-0
003A0:  30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A   00000000000+....
003B0:  30 30 34 39 32 31 45 55 52 31 30 38 55 4E 20 20   004921EUR108UN  
003C0:  30 30 30 30 30 31 30 37 39 36 34 35 2D 30 30 30   000001079645-000
003D0:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30   000000000+000000
003E0:  30 30 30 30 30 30 2B 30 30 30 30 30 31 30 37 39   000000+000001079
003F0:  36 34 35 2D 30 30 30 30 30 30 30 30 30 30 30 30   645-000000000000
00400:  2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 31 30   +....004921EUR10
00410:  38 57 4F 4C 20 30 30 30 30 30 30 30 30 32 37 33   8WOL 00000000273
00420:  39 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   9-000000000000+0
00430:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000
00440:  30 30 30 30 32 37 33 39 2D 30 30 30 30 30 30 30   00002739-0000000
00450:  30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31   00000+....004921
00460:  45 55 52 31 30 39 44 52 54 20 30 30 30 30 30 30   EUR109DRT 000000
00470:  30 30 30 39 30 30 2D 30 30 30 30 30 30 30 30 30   000900-000000000
00480:  30 30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30   000+000000000000
00490:  2B 30 30 30 30 30 30 30 30 30 39 30 30 2D 30 30   +000000000900-00
004A0:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0

page 15


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

004B0:  30 34 39 32 31 45 55 52 31 30 39 44 52 54 4F 30   04921EUR109DRTO0
004C0:  30 30 30 30 30 30 30 30 39 30 30 2D 30 30 30 30   00000000900-0000
004D0:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30   00000000+0000000
004E0:  30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30 39   00000+0000000009
004F0:  30 30 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B   00-000000000000+
00500:  0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 31 30 39   ....004921EUR109
00510:  52 44 20 20 30 30 30 30 30 30 30 37 38 34 39 38   RD  000000078498
00520:  2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   -000000000000+00
00530:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
00540:  30 30 37 38 34 39 38 2D 30 30 30 30 30 30 30 30   0078498-00000000
00550:  30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45   0000+....004921E
00560:  55 52 31 30 39 55 4E 20 20 30 30 30 30 30 30 34   UR109UN  0000004
00570:  30 31 35 34 34 2D 30 30 30 30 30 30 30 30 30 30   01544-0000000000
00580:  30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   00+000000000000+
00590:  30 30 30 30 30 30 34 30 31 35 34 34 2D 30 30 30   000000401544-000
005A0:  30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30   000000000+....00
005B0:  34 39 32 31 45 55 52 31 31 30 52 44 20 20 30 30   4921EUR110RD  00
005C0:  30 30 30 30 30 30 30 33 30 30 2D 30 30 30 30 30   0000000300-00000
005D0:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30   0000000+00000000
005E0:  30 30 30 30 2B 30 30 30 30 30                     0000+00000      

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
29      4.354   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329451730-3329453189, ack:   6017262, win tandem.xtra.nl  CI000291        IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:45.17
      FRAME: Time delta from previous physical frame: 2 milliseconds
      FRAME: Frame number: 29
      FRAME: Total frame length: 1514 bytes
      FRAME: Capture frame length: 1514 bytes
      FRAME: Frame data: Number of data bytes remaining = 1514 (0x05EA)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 0050DA4136C7
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 005054F5CE00
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 1514 (0x05EA)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 1500 (0x05DC)
  IP: ID = 0xF675; Proto = TCP; Len: 1500
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability
      IP: Total Length = 1500 (0x5DC)
      IP: Identification = 63093 (0xF675)
      IP: Flags Summary = 0 (0x0)

page 16


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

          IP: .......0 = Last fragment in datagram
          IP: ......0. = May fragment datagram if necessary
      IP: Fragment Offset = 0 (0x0) bytes
      IP: Time to Live = 29 (0x1D)
      IP: Protocol = TCP - Transmission Control
      IP: Checksum = 0x87A4
      IP: Source Address = 10.75.1.130
      IP: Destination Address = 10.75.3.235
      IP: Data: Number of data bytes remaining = 1480 (0x05C8)
  TCP: .A...., len: 1460, seq:3329451730-3329453189, ack:   6017262, win: 8192, src: 2653  dst: 3592 
      TCP: Source Port = 0x0A5D
      TCP: Destination Port = 0x0E08
      TCP: Sequence Number = 3329451730 (0xC67366D2)
      TCP: Acknowledgement Number = 6017262 (0x5BD0EE)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)
      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset
          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8192 (0x2000)
      TCP: Checksum = 0x2894
      TCP: Urgent Pointer = 0 (0x0)
      TCP: Data: Number of data bytes remaining = 1460 (0x05B4)

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 75 00 00 1D 06 87 A4 0A 4B 01 82 0A 4B   ...u.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 66 D2 00 5B D0 EE 50 10   ...]...sf..[..P.
00030:  20 00 28 94 00 00 30 30 30 30 33 30 30 2D 30 30    .(...0000300-00
00040:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0
00050:  30 34 39 32 31 45 55 52 31 31 30 55 4E 20 20 30   04921EUR110UN  0
00060:  30 30 30 30 30 30 31 34 37 38 33 2D 30 30 30 30   00000014783-0000
00070:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30   00000000+0000000
00080:  30 30 30 30 30 2B 30 30 30 30 30 30 30 31 34 37   00000+0000000147
00090:  38 33 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B   83-000000000000+
000A0:  0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 31 31 31   ....004921EUR111
000B0:  20 20 20 20 30 30 30 30 30 31 38 39 39 38 30 37       000001899807
000C0:  2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   -000000000000+00
000D0:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
000E0:  31 38 39 39 38 30 37 2D 30 30 30 30 30 30 30 30   1899807-00000000
000F0:  30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45   0000+....004921E
00100:  55 52 31 31 32 44 52 54 20 30 30 30 30 30 30 30   UR112DRT 0000000
00110:  30 30 37 37 30 2D 30 30 30 30 30 30 30 30 30 30   00770-0000000000
00120:  30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   00+000000000000+
00130:  30 30 30 30 30 30 30 30 30 37 37 30 2D 30 30 30   000000000770-000
00140:  30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30   000000000+....00
00150:  34 39 32 31 45 55 52 31 31 32 44 52 54 4F 30 30   4921EUR112DRTO00
00160:  30 30 30 30 30 30 38 31 33 30 2D 30 30 30 30 30   0000008130-00000
00170:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30   0000000+00000000
00180:  30 30 30 30 2B 30 30 30 30 30 30 30 30 38 31 33   0000+00000000813

page 17


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

00190:  30 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D   0-000000000000+.
001A0:  0A 0D 0A 30 30 34 39 32 31 45 55 52 31 31 32 49   ...004921EUR112I
001B0:  4E 47 20 30 30 30 30 30 30 30 30 33 32 30 30 2D   NG 000000003200-
001C0:  30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30   000000000000+000
001D0:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30   000000000+000000
001E0:  30 30 33 32 30 30 2D 30 30 30 30 30 30 30 30 30   003200-000000000
001F0:  30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55   000+....004921EU
00200:  52 31 31 32 52 44 20 20 30 30 30 30 30 30 31 39   R112RD  00000019
00210:  37 39 33 33 2D 30 30 30 30 30 30 30 30 30 30 30   7933-00000000000
00220:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0
00230:  30 30 30 30 30 31 39 37 39 33 33 2D 30 30 30 30   00000197933-0000
00240:  30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34   00000000+....004
00250:  39 32 31 45 55 52 31 31 32 55 4E 20 20 30 30 30   921EUR112UN  000
00260:  30 30 30 34 38 39 39 31 32 2D 30 30 30 30 30 30   000489912-000000
00270:  30 30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30   000000+000000000
00280:  30 30 30 2B 30 30 30 30 30 30 34 38 39 39 31 32   000+000000489912
00290:  2D 30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A   -000000000000+..
002A0:  0D 0A 30 30 34 39 32 31 45 55 52 31 31 32 55 4E   ..004921EUR112UN
002B0:  4F 20 30 30 30 30 30 30 30 30 30 31 32 30 2D 30   O 000000000120-0
002C0:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000
002D0:  30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30 30   00000000+0000000
002E0:  30 30 31 32 30 2D 30 30 30 30 30 30 30 30 30 30   00120-0000000000
002F0:  30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52   00+....004921EUR
00300:  31 31 34 20 20 20 20 30 30 30 30 30 30 32 38 39   114    000000289
00310:  35 39 38 2D 30 30 30 30 30 30 30 30 30 30 30 30   598-000000000000
00320:  2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30 30   +000000000000+00
00330:  30 30 30 30 32 38 39 35 39 38 2D 30 30 30 30 30   0000289598-00000
00340:  30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39   0000000+....0049
00350:  32 31 45 55 52 31 31 39 52 44 20 20 30 30 30 30   21EUR119RD  0000
00360:  30 32 36 31 39 32 31 36 2D 30 30 30 30 30 30 30   02619216-0000000
00370:  30 30 30 30 30 2B 30 30 30 30 30 30 30 30 30 30   00000+0000000000
00380:  30 30 2B 30 30 30 30 30 32 36 31 39 32 31 36 2D   00+000002619216-
00390:  30 30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D   000000000000+...
003A0:  0A 30 30 34 39 32 31 45 55 52 31 32 31 20 20 20   .004921EUR121   
003B0:  20 30 30 30 30 30 30 35 38 36 35 32 39 2D 30 30    000000586529-00
003C0:  30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30   0000000000+00000
003D0:  30 30 30 30 30 30 30 2B 30 30 30 30 30 30 35 38   0000000+00000058
003E0:  36 35 32 39 2D 30 30 30 30 30 30 30 30 30 30 30   6529-00000000000
003F0:  30 2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 33   0+....004921EUR3
00400:  31 31 20 20 20 20 30 30 30 30 30 30 30 31 33 36   11    0000000136
00410:  33 39 2B 30 30 30 30 30 30 30 31 33 36 33 39 2B   39+000000013639+
00420:  30 30 30 30 30 30 30 31 34 31 37 35 2B 30 30 30   000000014175+000
00430:  30 30 30 30 31 34 31 37 35 2B 30 30 30 30 30 30   000014175+000000
00440:  30 30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32   000000+....00492
00450:  31 45 55 52 33 31 34 20 20 20 20 30 30 30 30 30   1EUR314    00000
00460:  30 30 39 37 30 30 33 2D 30 30 30 30 30 30 31 30   0097003-00000010
00470:  30 37 37 39 2B 30 30 30 30 30 30 30 39 37 30 30   0779+00000009700
00480:  33 2B 30 30 30 30 30 30 31 30 30 37 37 39 2D 30   3+000000100779-0
00490:  30 30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A   00000000000+....
004A0:  30 30 34 39 32 31 45 55 52 34 30 31 44 52 54 4F   004921EUR401DRTO
004B0:  30 30 30 30 30 33 32 33 37 36 31 38 2B 30 30 30   000003237618+000
004C0:  30 30 30 32 39 33 34 32 35 2B 30 30 30 30 30 30   000293425+000000
004D0:  30 30 30 30 30 30 2B 30 30 30 30 30 32 39 34 34   000000+000002944

page 18


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

004E0:  31 39 33 2B 30 30 30 30 30 30 30 30 30 30 30 30   193+000000000000
004F0:  2B 0D 0A 0D 0A 30 30 34 39 32 31 45 55 52 34 30   +....004921EUR40
00500:  31 52 44 20 20 30 30 30 30 32 35 39 30 39 30 30   1RD  00002590900
00510:  30 2B 30 30 30 30 30 30 38 38 35 37 35 30 2B 30   0+000000885750+0
00520:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000
00530:  32 35 30 32 33 32 35 30 2B 30 30 30 30 30 30 30   25023250+0000000
00540:  30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 32 31   00000+....004921
00550:  45 55 52 34 30 31 55 4E 20 20 30 30 30 30 30 35   EUR401UN  000005
00560:  34 37 33 35 30 30 2B 30 30 30 30 30 30 30 30 30   473500+000000000
00570:  30 30 30 2B 30 30 30 30 30 30 30 39 30 35 30 30   000+000000090500
00580:  2B 30 30 30 30 30 35 35 36 34 30 30 30 2B 30 30   +000005564000+00
00590:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0
005A0:  30 34 39 32 31 45 55 52 34 30 33 44 52 54 4F 30   04921EUR403DRTO0
005B0:  30 30 30 30 33 33 31 30 33 37 31 2B 30 30 30 30   00003310371+0000
005C0:  30 30 32 36 36 39 39 36 2B 30 30 30 30 30 30 30   00266996+0000000
005D0:  30 30 30 30 30 2B 30 30 30 30 30 33 30 34 33 33   00000+0000030433
005E0:  37 35 2B 30 30 30 30 30 30 30                     75+0000000      

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
30      4.354   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329453190, win: 8 CI000291        tandem.xtra.nl  IP

  FRAME: Base frame properties
      FRAME: Time of capture = Jun 28, 2000 11:54:45.17
      FRAME: Time delta from previous physical frame: 0 milliseconds
      FRAME: Frame number: 30
      FRAME: Total frame length: 54 bytes
      FRAME: Capture frame length: 54 bytes
      FRAME: Frame data: Number of data bytes remaining = 54 (0x0036)
  ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
      ETHERNET: Destination address : 00000C07AC15
          ETHERNET: .......0 = Individual address
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Source address : 0050DA4136C7
          ETHERNET: .......0 = No routing information present
          ETHERNET: ......0. = Universally administered address
      ETHERNET: Frame Length : 54 (0x0036)
      ETHERNET: Ethernet Type : 0x0800 (IP:  DOD Internet Protocol)
      ETHERNET: Ethernet Data: Number of data bytes remaining = 40 (0x0028)
  IP: ID = 0x64AA; Proto = TCP; Len: 40
      IP: Version = 4 (0x4)
      IP: Header Length = 20 (0x14)
      IP: Service Type = 0 (0x0)
          IP: Precedence = Routine
          IP: ...0.... = Normal Delay
          IP: ....0... = Normal Throughput
          IP: .....0.. = Normal Reliability
      IP: Total Length = 40 (0x28)
      IP: Identification = 25770 (0x64AA)
      IP: Flags Summary = 2 (0x2)
          IP: .......0 = Last fragment in datagram
          IP: ......1. = Cannot fragment datagram
      IP: Fragment Offset = 0 (0x0) bytes

page 19


Network Monitor trace  Wed 06/28/00 12:25:43  D:\TEMP\detail.txt

      IP: Time to Live = 128 (0x80)
      IP: Protocol = TCP - Transmission Control
      IP: Checksum = 0x7C23
      IP: Source Address = 10.75.3.235
      IP: Destination Address = 10.75.1.130
      IP: Data: Number of data bytes remaining = 20 (0x0014)
  TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329453190, win: 8760, src: 3592  dst: 2653 
      TCP: Source Port = 0x0E08
      TCP: Destination Port = 0x0A5D
      TCP: Sequence Number = 6017262 (0x5BD0EE)
      TCP: Acknowledgement Number = 3329453190 (0xC6736C86)
      TCP: Data Offset = 20 (0x14)
      TCP: Reserved = 0 (0x0000)
      TCP: Flags = 0x10 : .A....
          TCP: ..0..... = No urgent data
          TCP: ...1.... = Acknowledgement field significant
          TCP: ....0... = No Push function
          TCP: .....0.. = No Reset
          TCP: ......0. = No Synchronize
          TCP: .......0 = No Fin
      TCP: Window = 8760 (0x2238)
      TCP: Checksum = 0x56F1
      TCP: Urgent Pointer = 0 (0x0)

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 64 AA 40 00 80 06 7C 23 0A 4B 03 EB 0A 4B   .(d.@...|#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 6C 86 50 10   .....].[...sl.P.
00030:  22 38 56 F1 00 00                                 "8V...          


























page 20
