

Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
1       2.142   CI000291       AMBR6KX        TCP       ....S., len:    4, seq:   6017248-6017251, ack:         0, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x57AA; Proto = TCP; Len: 44
+ TCP: ....S., len:    4, seq:   6017248-6017251, ack:         0, win: 8192, src: 3590  dst:   21 (FTP) 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 2C 57 AA 40 00 80 06 89 1F 0A 4B 03 EB 0A 4B   .,W.@......K...K
00020:  01 82 0E 06 00 15 00 5B D0 E0 00 00 00 00 60 02   .......[......`.
00030:  20 00 7E CD 00 00 02 04 05 B4                      .~.......      

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
2       2.144   AMBR6K2        CI000291       TCP       .A..S., len:    4, seq:3329125889-3329125892, ack:   6017249, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF661; Proto = TCP; Len: 44
+ TCP: .A..S., len:    4, seq:3329125889-3329125892, ack:   6017249, win: 8192, src:   21 (FTP)  dst: 3590 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 2C F6 61 00 00 1D 06 8D 68 0A 4B 01 82 0A 4B   .,.a.....h.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E 01 00 5B D0 E1 60 12   .......nn..[..`.
00030:  20 00 4A 4C 00 00 02 04 05 B4 08 00                .JL........    

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
3       2.144   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017249-6017249, ack:3329125890, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x58AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017249-6017249, ack:3329125890, win: 8760, src: 3590  dst:   21 (FTP) 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 58 AA 40 00 80 06 88 23 0A 4B 03 EB 0A 4B   .(X.@....#.K...K
00020:  01 82 0E 06 00 15 00 5B D0 E1 C6 6E 6E 02 50 10   .......[...nn.P.
00030:  22 38 5F D1 00 00                                 "8_...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
4       2.838   AMBR6K2        CI000291       FTP       Resp. to Port 3590, '220  FTP SERVER T9552D40 (Version 3.f TANDEM tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF663; Proto = TCP; Len: 102
+ TCP: .AP..., len:   62, seq:3329125890-3329125951, ack:   6017249, win: 8192, src:   21 (FTP)  dst: 3590 
+ FTP: Resp. to Port 3590, '220  FTP SERVER T9552D40 (Version 3.f TANDEM 21MAY'

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.

page 1


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00010:  00 66 F6 63 00 00 1D 06 8D 2C 0A 4B 01 82 0A 4B   .f.c.....,.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E 02 00 5B D0 E1 50 18   .......nn..[..P.
00030:  20 00 FC 05 00 00 32 32 30 20 20 46 54 50 20 53    .....220  FTP S
00040:  45 52 56 45 52 20 54 39 35 35 32 44 34 30 20 28   ERVER T9552D40 (

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
5       2.874   CI000291       AMBR6KX        FTP       Req. from Port 3590, 'USER fss.ftpcoins'                          CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x59AA; Proto = TCP; Len: 59
+ TCP: .AP..., len:   19, seq:   6017249-6017267, ack:3329125952, win: 8698, src: 3590  dst:   21 (FTP) 
+ FTP: Req. from Port 3590, 'USER fss.ftpcoins'

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 3B 59 AA 40 00 80 06 87 10 0A 4B 03 EB 0A 4B   .;Y.@......K...K
00020:  01 82 0E 06 00 15 00 5B D0 E1 C6 6E 6E 40 50 18   .......[...nn@P.
00030:  21 FA 44 75 00 00 55 53 45 52 20 66 73 73 2E 66   !.Du..USER fss.f
00040:  74 70 63 6F 69 6E 73 0D 0A                        tpcoins..       

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
6       2.922   AMBR6K2        CI000291       TCP       .A...., len:    0, seq:3329125952-3329125952, ack:   6017268, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF664; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:3329125952-3329125952, ack:   6017268, win: 8192, src:   21 (FTP)  dst: 3590 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 28 F6 64 00 00 1D 06 8D 69 0A 4B 01 82 0A 4B   .(.d.....i.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E 40 00 5B D0 F4 50 10   .......nn@.[..P.
00030:  20 00 61 B8 00 00 20 20 20 20 20 20                .a...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
7       3.004   AMBR6K2        CI000291       FTP       Resp. to Port 3590, '331 Password required for FSS.FTPCOINS.'     tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF665; Proto = TCP; Len: 81
+ TCP: .AP..., len:   41, seq:3329125952-3329125992, ack:   6017268, win: 8192, src:   21 (FTP)  dst: 3590 
+ FTP: Resp. to Port 3590, '331 Password required for FSS.FTPCOINS.'

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 51 F6 65 00 00 1D 06 8D 3F 0A 4B 01 82 0A 4B   .Q.e.....?.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E 40 00 5B D0 F4 50 18   .......nn@.[..P.
00030:  20 00 9F 65 00 00 33 33 31 20 50 61 73 73 77 6F    ..e..331 Passwo
00040:  72 64 20 72 65 71 75 69 72 65 64 20 66 6F 72 20   rd required for 

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr

page 2


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

8       3.053   CI000291       AMBR6KX        FTP       Req. from Port 3590, 'PASS test!!'                                CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x5AAA; Proto = TCP; Len: 53
+ TCP: .AP..., len:   13, seq:   6017268-6017280, ack:3329125993, win: 8657, src: 3590  dst:   21 (FTP) 
+ FTP: Req. from Port 3590, 'PASS test!!'

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 35 5A AA 40 00 80 06 86 16 0A 4B 03 EB 0A 4B   .5Z.@......K...K
00020:  01 82 0E 06 00 15 00 5B D0 F4 C6 6E 6E 69 50 18   .......[...nniP.
00030:  21 D1 96 FE 00 00 50 41 53 53 20 74 65 73 74 21   !.....PASS test!
00040:  21 0D 0A                                          !..             

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
9       3.101   AMBR6K2        CI000291       TCP       .A...., len:    0, seq:3329125993-3329125993, ack:   6017281, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF666; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:3329125993-3329125993, ack:   6017281, win: 8192, src:   21 (FTP)  dst: 3590 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 28 F6 66 00 00 1D 06 8D 67 0A 4B 01 82 0A 4B   .(.f.....g.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E 69 00 5B D1 01 50 10   .......nni.[..P.
00030:  20 00 61 82 00 00 20 20 20 20 20 20                .a...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
10      3.539   AMBR6K2        CI000291       FTP       Resp. to Port 3590, '230 User FSS.FTPCOINS logged in.  GUARDIAN A tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF667; Proto = TCP; Len: 96
+ TCP: .AP..., len:   56, seq:3329125993-3329126048, ack:   6017281, win: 8192, src:   21 (FTP)  dst: 3590 
+ FTP: Resp. to Port 3590, '230 User FSS.FTPCOINS logged in.  GUARDIAN API ena'

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 60 F6 67 00 00 1D 06 8D 2E 0A 4B 01 82 0A 4B   .`.g.......K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E 69 00 5B D1 01 50 18   .......nni.[..P.
00030:  20 00 A3 BD 00 00 32 33 30 20 55 73 65 72 20 46    .....230 User F
00040:  53 53 2E 46 54 50 43 4F 49 4E 53 20 6C 6F 67 67   SS.FTPCOINS logg

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
11      3.592   CI000291       AMBR6KX        FTP       Req. from Port 3590, 'PASV'                                       CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x5BAA; Proto = TCP; Len: 46
+ TCP: .AP..., len:    6, seq:   6017281-6017286, ack:3329126049, win: 8601, src: 3590  dst:   21 (FTP) 
+ FTP: Req. from Port 3590, 'PASV'

page 3


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt


00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 2E 5B AA 40 00 80 06 85 1D 0A 4B 03 EB 0A 4B   ..[.@......K...K
00020:  01 82 0E 06 00 15 00 5B D1 01 C6 6E 6E A1 50 18   .......[...nn.P.
00030:  21 99 AF 01 00 00 50 41 53 56 0D 0A               !.....PASV..    

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
12      3.641   AMBR6K2        CI000291       TCP       .A...., len:    0, seq:3329126049-3329126049, ack:   6017287, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF668; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:3329126049-3329126049, ack:   6017287, win: 8192, src:   21 (FTP)  dst: 3590 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 28 F6 68 00 00 1D 06 8D 65 0A 4B 01 82 0A 4B   .(.h.....e.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E A1 00 5B D1 07 50 10   .......nn..[..P.
00030:  20 00 61 44 00 00 20 20 20 20 20 20                .aD..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
13      3.962   AMBR6K2        CI000291       FTP       Resp. to Port 3590, '227 Entering Passive Mode (10,75,1,130,10,93 tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF66C; Proto = TCP; Len: 87
+ TCP: .AP..., len:   47, seq:3329126049-3329126095, ack:   6017287, win: 8192, src:   21 (FTP)  dst: 3590 
+ FTP: Resp. to Port 3590, '227 Entering Passive Mode (10,75,1,130,10,93)'

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 57 F6 6C 00 00 1D 06 8D 32 0A 4B 01 82 0A 4B   .W.l.....2.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E A1 00 5B D1 07 50 18   .......nn..[..P.
00030:  20 00 18 EF 00 00 32 32 37 20 45 6E 74 65 72 69    .....227 Enteri
00040:  6E 67 20 50 61 73 73 69 76 65 20 4D 6F 64 65 20   ng Passive Mode 

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
14      4.001   CI000291       AMBR6KX        TCP       ....S., len:    4, seq:   6017261-6017264, ack:         0, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x5DAA; Proto = TCP; Len: 44
+ TCP: ....S., len:    4, seq:   6017261-6017264, ack:         0, win: 8192, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 2C 5D AA 40 00 80 06 83 1F 0A 4B 03 EB 0A 4B   .,].@......K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 ED 00 00 00 00 60 02   .....].[......`.
00030:  20 00 74 76 00 00 02 04 05 B4                      .tv......      

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
15      4.003   AMBR6K2        CI000291       TCP       .A..S., len:    4, seq:3329445889-3329445892, ack:   6017262, win tandem.xtra.nl  CI000291        IP

page 4


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt


+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF66D; Proto = TCP; Len: 44
+ TCP: .A..S., len:    4, seq:3329445889-3329445892, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 2C F6 6D 00 00 1D 06 8D 5C 0A 4B 01 82 0A 4B   .,.m.....\.K...K
00020:  03 EB 0A 5D 0E 08 C6 73 50 01 00 5B D0 EE 60 12   ...]...sP..[..`.
00030:  20 00 5D F0 00 00 02 04 05 B4 08 00                .].........    

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
16      4.003   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329445890, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x5EAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329445890, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 5E AA 40 00 80 06 82 23 0A 4B 03 EB 0A 4B   .(^.@....#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 50 02 50 10   .....].[...sP.P.
00030:  22 38 73 75 00 00                                 "8su..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
17      4.023   CI000291       AMBR6KX        FTP       Req. from Port 3590, 'TYPE A'                                     CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x5FAA; Proto = TCP; Len: 48
+ TCP: .AP..., len:    8, seq:   6017287-6017294, ack:3329126096, win: 8554, src: 3590  dst:   21 (FTP) 
+ FTP: Req. from Port 3590, 'TYPE A'

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 30 5F AA 40 00 80 06 81 1B 0A 4B 03 EB 0A 4B   .0_.@......K...K
00020:  01 82 0E 06 00 15 00 5B D1 07 C6 6E 6E D0 50 18   .......[...nn.P.
00030:  21 6A 8D B1 00 00 54 59 50 45 20 41 0D 0A         !j....TYPE A..  

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
18      4.026   AMBR6K2        CI000291       FTP       Resp. to Port 3590, '200 Type set to A.'                          tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF66E; Proto = TCP; Len: 60
+ TCP: .AP..., len:   20, seq:3329126096-3329126115, ack:   6017295, win: 8192, src:   21 (FTP)  dst: 3590 
+ FTP: Resp. to Port 3590, '200 Type set to A.'

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 3C F6 6E 00 00 1D 06 8D 4B 0A 4B 01 82 0A 4B   .<.n.....K.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E D0 00 5B D1 0F 50 18   .......nn..[..P.

page 5


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00030:  20 00 D6 0D 00 00 32 30 30 20 54 79 70 65 20 73    .....200 Type s
00040:  65 74 20 74 6F 20 41 2E 0D 0A                     et to A...      

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
19      4.061   CI000291       AMBR6KX        FTP       Req. from Port 3590, 'RETR $DATA.PCEOE.PCG0049'                   CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x60AA; Proto = TCP; Len: 66
+ TCP: .AP..., len:   26, seq:   6017295-6017320, ack:3329126116, win: 8534, src: 3590  dst:   21 (FTP) 
+ FTP: Req. from Port 3590, 'RETR $DATA.PCEOE.PCG0049'

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 42 60 AA 40 00 80 06 80 09 0A 4B 03 EB 0A 4B   .B`.@......K...K
00020:  01 82 0E 06 00 15 00 5B D1 0F C6 6E 6E E4 50 18   .......[...nn.P.
00030:  21 56 5C 5D 00 00 52 45 54 52 20 24 44 41 54 41   !V\]..RETR $DATA
00040:  2E 50 43 45 4F 45 2E 50 43 47 30 30 34 39 0D 0A   .PCEOE.PCG0049..

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
20      4.073   AMBR6K2        CI000291       TCP       .A...., len:    0, seq:3329126116-3329126116, ack:   6017321, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF66F; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:3329126116-3329126116, ack:   6017321, win: 8192, src:   21 (FTP)  dst: 3590 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 28 F6 6F 00 00 1D 06 8D 5E 0A 4B 01 82 0A 4B   .(.o.....^.K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E E4 00 5B D1 29 50 10   .......nn..[.)P.
00030:  20 00 60 DF 00 00 20 20 20 20 20 20                .`...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
21      4.096   AMBR6K2        CI000291       FTP       Resp. to Port 3590, '150 Opening data connection for \EXTRA.$DATA tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF670; Proto = TCP; Len: 135
+ TCP: .AP..., len:   95, seq:3329126116-3329126210, ack:   6017321, win: 8192, src:   21 (FTP)  dst: 3590 
+ FTP: Resp. to Port 3590, '150 Opening data connection for \EXTRA.$DATA.PCEOE'

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 87 F6 70 00 00 1D 06 8C FE 0A 4B 01 82 0A 4B   ...p.......K...K
00020:  03 EB 00 15 0E 06 C6 6E 6E E4 00 5B D1 29 50 18   .......nn..[.)P.
00030:  20 00 CA 23 00 00 31 35 30 20 4F 70 65 6E 69 6E    ..#..150 Openin
00040:  67 20 64 61 74 61 20 63 6F 6E 6E 65 63 74 69 6F   g data connectio

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
22      4.242   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017321-6017321, ack:3329126211, win: 8 CI000291        tandem.xtra.nl  IP


page 6


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x61AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017321-6017321, ack:3329126211, win: 8439, src: 3590  dst:   21 (FTP) 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 61 AA 40 00 80 06 7F 23 0A 4B 03 EB 0A 4B   .(a.@...#.K...K
00020:  01 82 0E 06 00 15 00 5B D1 29 C6 6E 6F 43 50 10   .......[.).noCP.
00030:  20 F7 5F 89 00 00                                  ._...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
23      4.348   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329445890-3329447349, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF671; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329445890-3329447349, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 71 00 00 1D 06 87 A8 0A 4B 01 82 0A 4B   ...q.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 50 02 00 5B D0 EE 50 10   ...]...sP..[..P.
00030:  20 00 2D 9E 00 00 30 30 34 39 30 31 44 45 4D 33    .-...004901DEM3
00040:  31 31 20 20 20 20 30 30 30 30 30 30 30 30 30 30   11    0000000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
24      4.349   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329447350-3329448809, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF672; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329447350-3329448809, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 72 00 00 1D 06 87 A7 0A 4B 01 82 0A 4B   ...r.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 55 B6 00 5B D0 EE 50 10   ...]...sU..[..P.
00030:  20 00 3E 1B 00 00 20 30 30 30 30 30 30 30 30 30    .>... 000000000
00040:  30 33 35 2B 30 30 30 30 30 30 32 34 35 32 36 33   035+000000245263

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
25      4.350   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329448810, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x62AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329448810, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 62 AA 40 00 80 06 7E 23 0A 4B 03 EB 0A 4B   .(b.@...~#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 5B 6A 50 10   .....].[...s[jP.
00030:  22 38 68 0D 00 00                                 "8h...          

page 7


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt


************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
26      4.351   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329448810-3329450269, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF673; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329448810-3329450269, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 73 00 00 1D 06 87 A6 0A 4B 01 82 0A 4B   ...s.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 5B 6A 00 5B D0 EE 50 10   ...]...s[j.[..P.
00030:  20 00 2A 8C 00 00 30 30 30 30 30 30 30 30 30 30    .*...0000000000
00040:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
27      4.351   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329450270, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x63AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329450270, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 63 AA 40 00 80 06 7D 23 0A 4B 03 EB 0A 4B   .(c.@...}#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 61 1E 50 10   .....].[...sa.P.
00030:  22 38 62 59 00 00                                 "8bY..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
28      4.352   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329450270-3329451729, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF674; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329450270-3329451729, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 74 00 00 1D 06 87 A5 0A 4B 01 82 0A 4B   ...t.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 61 1E 00 5B D0 EE 50 10   ...]...sa..[..P.
00030:  20 00 8B 91 00 00 30 30 30 30 30 30 30 30 30 2B    .....000000000+
00040:  30 30 30 30 30 30 30 33 36 35 30 30 2B 30 30 30   000000036500+000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
29      4.354   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329451730-3329453189, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF675; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329451730-3329453189, ack:   6017262, win: 8192, src: 2653  dst: 3592 

page 8


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt


00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 75 00 00 1D 06 87 A4 0A 4B 01 82 0A 4B   ...u.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 66 D2 00 5B D0 EE 50 10   ...]...sf..[..P.
00030:  20 00 28 94 00 00 30 30 30 30 33 30 30 2D 30 30    .(...0000300-00
00040:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
30      4.354   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329453190, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x64AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329453190, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 64 AA 40 00 80 06 7C 23 0A 4B 03 EB 0A 4B   .(d.@...|#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 6C 86 50 10   .....].[...sl.P.
00030:  22 38 56 F1 00 00                                 "8V...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
31      4.356   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329453190-3329454649, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF676; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329453190-3329454649, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 76 00 00 1D 06 87 A3 0A 4B 01 82 0A 4B   ...v.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 6C 86 00 5B D0 EE 50 10   ...]...sl..[..P.
00030:  20 00 D2 00 00 00 30 30 30 30 30 2B 0D 0A 0D 0A    .....00000+....
00040:  30 30 34 39 32 31 45 55 52 34 30 33 52 44 20 20   004921EUR403RD  

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
32      4.356   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329454650, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x65AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329454650, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 65 AA 40 00 80 06 7B 23 0A 4B 03 EB 0A 4B   .(e.@...{#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 72 3A 50 10   .....].[...sr:P.
00030:  22 38 51 3D 00 00                                 "8Q=..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
33      4.357   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329454650-3329456109, ack:   6017262, win tandem.xtra.nl  CI000291        IP

page 9


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt


+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF677; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329454650-3329456109, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 77 00 00 1D 06 87 A2 0A 4B 01 82 0A 4B   ...w.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 72 3A 00 5B D0 EE 50 10   ...]...sr:.[..P.
00030:  20 00 6F 6D 00 00 31 45 55 52 31 30 32 41 48 20    .om..1EUR102AH 
00040:  20 30 30 30 30 30 31 39 37 36 35 33 34 2D 30 30    000001976534-00

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
34      4.358   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329456110-3329457569, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF678; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329456110-3329457569, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 78 00 00 1D 06 87 A1 0A 4B 01 82 0A 4B   ...x.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 77 EE 00 5B D0 EE 50 10   ...]...sw..[..P.
00030:  20 00 62 E5 00 00 30 30 30 31 34 38 33 32 2D 30    .b...00014832-0
00040:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
35      4.358   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329457570, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x66AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329457570, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 66 AA 40 00 80 06 7A 23 0A 4B 03 EB 0A 4B   .(f.@...z#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 7D A2 50 10   .....].[...s}.P.
00030:  22 38 45 D5 00 00                                 "8E...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
36      4.359   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329457570-3329459029, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF679; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329457570-3329459029, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 79 00 00 1D 06 87 A0 0A 4B 01 82 0A 4B   ...y.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 7D A2 00 5B D0 EE 50 10   ...]...s}..[..P.

page 10


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00030:  20 00 6B A0 00 00 33 31 31 35 39 36 2B 30 30 30    .k...311596+000
00040:  30 30 30 33 30 39 35 38 30 2B 30 30 30 30 30 30   000309580+000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
37      4.359   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329459030, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x67AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329459030, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 67 AA 40 00 80 06 79 23 0A 4B 03 EB 0A 4B   .(g.@...y#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 83 56 50 10   .....].[...s.VP.
00030:  22 38 40 21 00 00                                 "8@!..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
38      4.361   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329459030-3329460489, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF67A; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329459030-3329460489, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 7A 00 00 1D 06 87 9F 0A 4B 01 82 0A 4B   ...z.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 83 56 00 5B D0 EE 50 10   ...]...s.V.[..P.
00030:  20 00 AE E5 00 00 30 30 30 30 2B 30 30 30 30 31    .....0000+00001
00040:  33 35 32 36 32 31 33 2D 30 30 30 30 30 30 30 30   3526213-00000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
39      4.362   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329460490-3329461949, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF67B; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329460490-3329461949, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 7B 00 00 1D 06 87 9E 0A 4B 01 82 0A 4B   ...{.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 89 0A 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 72 6C 00 00 30 30 2B 30 30 30 30 30 30 30    .rl..00+0000000
00040:  30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 35 31   00000+....004951

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
40      4.362   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329461950, win: 5 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol

page 11


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

+ IP: ID = 0x68AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329461950, win: 5840, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 68 AA 40 00 80 06 78 23 0A 4B 03 EB 0A 4B   .(h.@...x#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 8E BE 50 10   .....].[...s..P.
00030:  16 D0 40 21 00 00                                 ..@!..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
41      4.363   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329461950-3329463409, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF67C; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329461950-3329463409, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 7C 00 00 1D 06 87 9D 0A 4B 01 82 0A 4B   ...|.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 8E BE 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 A6 47 00 00 2B 0D 0A 0D 0A 30 30 34 39 35    ..G..+....00495
00040:  31 45 55 52 31 30 38 46 4F 52 20 30 30 30 30 30   1EUR108FOR 00000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
42      4.365   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329463410-3329464869, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF67D; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329463410-3329464869, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 7D 00 00 1D 06 87 9C 0A 4B 01 82 0A 4B   ...}.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 94 72 00 5B D0 EE 50 10   ...]...s.r.[..P.
00030:  20 00 EC 8A 00 00 31 32 45 4C 53 20 30 30 30 30    .....12ELS 0000
00040:  30 30 30 31 34 38 30 30 2D 30 30 30 30 30 30 30   00014800-0000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
43      4.365   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329464870, win: 2 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x69AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329464870, win: 2920, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 69 AA 40 00 80 06 77 23 0A 4B 03 EB 0A 4B   .(i.@...w#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 9A 26 50 10   .....].[...s.&P.
00030:  0B 68 40 21 00 00                                 .h@!..          

************************************************************************************************************************************************************

page 12


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
44      4.366   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329464870-3329466329, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF67E; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329464870-3329466329, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 7E 00 00 1D 06 87 9B 0A 4B 01 82 0A 4B   ...~.......K...K
00020:  03 EB 0A 5D 0E 08 C6 73 9A 26 00 5B D0 EE 50 10   ...]...s.&.[..P.
00030:  20 00 D8 CB 00 00 39 37 36 2B 30 30 30 30 30 30    .....976+000000
00040:  30 30 30 30 30 30 2B 30 30 30 30 35 35 39 36 34   000000+000055964

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
45      4.367   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329466330-3329467789, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF67F; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329466330-3329467789, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 7F 00 00 1D 06 87 9A 0A 4B 01 82 0A 4B   ..........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 9F DA 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 BE 9E 00 00 30 2B 30 30 30 30 30 30 30 30    .....0+00000000
00040:  30 30 30 30 2B 30 30 30 30 30 30 30 36 39 34 33   0000+00000006943

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
46      4.367   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329467790, win:   CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x6AAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329467790, win:    0, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 6A AA 40 00 80 06 76 23 0A 4B 03 EB 0A 4B   .(j.@...v#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 A5 8E 50 10   .....].[...s..P.
00030:  00 00 40 21 00 00                                 ..@!..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
47      4.389   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329467790, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x6BAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329467790, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.

page 13


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00010:  00 28 6B AA 40 00 80 06 75 23 0A 4B 03 EB 0A 4B   .(k.@...u#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 A5 8E 50 10   .....].[...s..P.
00030:  22 38 1D E9 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
48      4.393   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329467790-3329469249, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF680; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329467790-3329469249, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 80 00 00 1D 06 87 99 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 A5 8E 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 C1 35 00 00 30 30 30 30 30 31 32 31 37 30    ..5..0000012170
00040:  30 30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B   00+000000000000+

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
49      4.394   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329469250-3329470709, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF681; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329469250-3329470709, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 81 00 00 1D 06 87 98 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 AB 42 00 5B D0 EE 50 10   ...]...s.B.[..P.
00030:  20 00 0D 03 00 00 30 30 30 30 30 30 30 30 30 30    .....0000000000
00040:  2B 0D 0A 0D 0A 30 30 34 39 36 31 45 55 52 31 30   +....004961EUR10

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
50      4.394   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329470710, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x6CAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329470710, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 6C AA 40 00 80 06 74 23 0A 4B 03 EB 0A 4B   .(l.@...t#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 B0 F6 50 10   .....].[...s..P.
00030:  22 38 12 81 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
51      4.395   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329470710-3329472169, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties

page 14


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF682; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329470710-3329472169, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 82 00 00 1D 06 87 97 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 B0 F6 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 F7 A7 00 00 30 30 34 39 36 31 45 55 52 31    .....004961EUR1
00040:  30 34 56 50 4B 20 30 30 30 30 30 30 30 37 35 30   04VPK 0000000750

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
52      4.396   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329472170, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x6DAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329472170, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 6D AA 40 00 80 06 73 23 0A 4B 03 EB 0A 4B   .(m.@...s#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 B6 AA 50 10   .....].[...s..P.
00030:  22 38 0C CD 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
53      4.397   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329472170-3329473629, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF683; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329472170-3329473629, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 83 00 00 1D 06 87 96 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 B6 AA 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 FD 7A 00 00 20 30 30 30 30 30 30 30 34 34    ..z.. 000000044
00040:  36 34 37 2D 30 30 30 30 30 30 30 30 30 30 30 30   647-000000000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
54      4.398   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329473630-3329475089, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF684; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329473630-3329475089, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 84 00 00 1D 06 87 95 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 BC 5E 00 5B D0 EE 50 10   ...]...s.^.[..P.
00030:  20 00 0C AD 00 00 30 30 30 30 30 30 30 30 30 30    .....0000000000
00040:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0

page 15


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt


************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
55      4.398   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329475090, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x6EAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329475090, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 6E AA 40 00 80 06 72 23 0A 4B 03 EB 0A 4B   .(n.@...r#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 C2 12 50 10   .....].[...s..P.
00030:  22 38 01 65 00 00                                 "8.e..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
56      4.399   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329475090-3329476549, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF685; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329475090-3329476549, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 85 00 00 1D 06 87 94 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 C2 12 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 14 49 00 00 30 30 30 30 30 30 30 30 30 2B    ..I..000000000+
00040:  30 30 30 30 30 30 34 31 31 39 32 35 2D 30 30 30   000000411925-000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
57      4.400   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329476550, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x6FAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329476550, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 6F AA 40 00 80 06 71 23 0A 4B 03 EB 0A 4B   .(o.@...q#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 C7 C6 50 10   .....].[...s..P.
00030:  22 38 FB B0 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
58      4.401   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329476550-3329478009, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF686; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329476550-3329478009, ack:   6017262, win: 8192, src: 2653  dst: 3592 


page 16


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 86 00 00 1D 06 87 93 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 C7 C6 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 32 1F 00 00 36 37 32 33 33 34 32 2D 30 30    .2...6723342-00
00040:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
59      4.402   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329478010-3329479469, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF687; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329478010-3329479469, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 87 00 00 1D 06 87 92 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 CD 7A 00 5B D0 EE 50 10   ...]...s.z.[..P.
00030:  20 00 26 9B 00 00 30 30 30 30 30 2B 0D 0A 0D 0A    .&...00000+....
00040:  30 30 34 39 37 31 45 55 52 31 30 31 56 44 58 20   004971EUR101VDX 

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
60      4.402   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329479470, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x70AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329479470, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 70 AA 40 00 80 06 70 23 0A 4B 03 EB 0A 4B   .(p.@...p#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 D3 2E 50 10   .....].[...s..P.
00030:  22 38 F0 48 00 00                                 "8.H..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
61      4.404   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329479470-3329480929, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF688; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329479470-3329480929, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 88 00 00 1D 06 87 91 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 D3 2E 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 A8 1C 00 00 31 45 55 52 31 30 38 41 4B 5A    .....1EUR108AKZ
00040:  20 30 30 30 30 30 31 34 32 32 32 32 38 2D 30 30    000001422228-00

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
62      4.404   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329480930, win: 8 CI000291        tandem.xtra.nl  IP

page 17


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt


+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x71AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329480930, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 71 AA 40 00 80 06 6F 23 0A 4B 03 EB 0A 4B   .(q.@...o#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 D8 E2 50 10   .....].[...s..P.
00030:  22 38 EA 94 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
63      4.405   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329480930-3329482389, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF689; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329480930-3329482389, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 89 00 00 1D 06 87 90 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 D8 E2 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 10 2F 00 00 30 30 32 34 36 34 37 35 2D 30    ../..00246475-0
00040:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
64      4.406   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329482390-3329483849, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF68A; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329482390-3329483849, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 8A 00 00 1D 06 87 8F 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 DE 96 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 32 B6 00 00 30 30 30 30 30 30 2B 30 30 30    .2...000000+000
00040:  30 30 30 30 32 30 30 30 30 2B 30 30 30 30 30 30   000020000+000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
65      4.406   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329483850, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x72AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329483850, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 72 AA 40 00 80 06 6E 23 0A 4B 03 EB 0A 4B   .(r.@...n#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 E4 4A 50 10   .....].[...s.JP.

page 18


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00030:  22 38 DF 2C 00 00                                 "8.,..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
66      4.408   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329483850-3329485309, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF68B; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329483850-3329485309, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 8B 00 00 1D 06 87 8E 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 E4 4A 00 5B D0 EE 50 10   ...]...s.J.[..P.
00030:  20 00 16 A9 00 00 30 30 30 30 2B 30 30 30 30 30    .....0000+00000
00040:  30 33 35 30 30 30 30 2B 30 30 30 30 30 30 30 30   0350000+00000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
67      4.408   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329485310, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x73AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329485310, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 73 AA 40 00 80 06 6D 23 0A 4B 03 EB 0A 4B   .(s.@...m#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 E9 FE 50 10   .....].[...s..P.
00030:  22 38 D9 78 00 00                                 "8.x..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
68      4.409   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329485310-3329486769, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF68C; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329485310-3329486769, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 8C 00 00 1D 06 87 8D 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 E9 FE 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 B1 13 00 00 30 30 2D 30 30 30 30 30 30 30    .....00-0000000
00040:  30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 38 31   00000+....004981

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
69      4.410   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329486770-3329488229, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF68D; Proto = TCP; Len: 1500

page 19


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

+ TCP: .A...., len: 1460, seq:3329486770-3329488229, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 8D 00 00 1D 06 87 8C 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 EF B2 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 9B E1 00 00 2B 0D 0A 0D 0A 30 30 34 39 38    .....+....00498
00040:  31 45 55 52 31 30 39 46 4F 52 20 30 30 30 30 30   1EUR109FOR 00000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
70      4.410   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329488230, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x74AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329488230, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 74 AA 40 00 80 06 6C 23 0A 4B 03 EB 0A 4B   .(t.@...l#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 F5 66 50 10   .....].[...s.fP.
00030:  22 38 CE 10 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
71      4.411   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329488230-3329489689, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF68E; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329488230-3329489689, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 8E 00 00 1D 06 87 8B 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 F5 66 00 5B D0 EE 50 10   ...]...s.f.[..P.
00030:  20 00 FC F2 00 00 31 34 20 20 20 20 30 30 30 30    .....14    0000
00040:  30 30 30 36 32 31 31 34 2D 30 30 30 30 30 30 30   00062114-0000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
72      4.412   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329489690, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x75AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329489690, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 75 AA 40 00 80 06 6B 23 0A 4B 03 EB 0A 4B   .(u.@...k#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 73 FB 1A 50 10   .....].[...s..P.
00030:  22 38 C8 5C 00 00                                 "8.\..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr

page 20


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

73      4.413   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329489690-3329491149, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF68F; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329489690-3329491149, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 8F 00 00 1D 06 87 8A 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 73 FB 1A 00 5B D0 EE 50 10   ...]...s...[..P.
00030:  20 00 20 D8 00 00 35 30 30 2D 30 30 30 30 30 35    . ...500-000005
00040:  38 34 37 35 30 30 2B 30 30 30 30 32 34 32 35 30   847500+000024250

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
74      4.414   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329491150-3329492609, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF690; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329491150-3329492609, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 90 00 00 1D 06 87 89 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 00 CE 00 5B D0 EE 50 10   ...]...t...[..P.
00030:  20 00 16 99 00 00 30 2B 30 30 30 30 30 30 30 30    .....0+00000000
00040:  30 30 30 30 2B 30 30 30 30 30 36 31 31 34 30 30   0000+00000611400

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
75      4.414   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329492610, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x76AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329492610, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 76 AA 40 00 80 06 6A 23 0A 4B 03 EB 0A 4B   .(v.@...j#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 06 82 50 10   .....].[...t..P.
00030:  22 38 BC F4 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
76      4.415   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329492610-3329494069, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF691; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329492610-3329494069, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 91 00 00 1D 06 87 88 0A 4B 01 82 0A 4B   ...........K...K

page 21


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00020:  03 EB 0A 5D 0E 08 C6 74 06 82 00 5B D0 EE 50 10   ...]...t...[..P.
00030:  20 00 76 33 00 00 30 30 30 30 30 30 30 32 32 34    .v3..0000000224
00040:  37 33 2D 30 30 30 30 30 30 30 30 30 30 30 30 2B   73-000000000000+

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
77      4.415   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329494070, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x77AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329494070, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 77 AA 40 00 80 06 69 23 0A 4B 03 EB 0A 4B   .(w.@...i#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 0C 36 50 10   .....].[...t.6P.
00030:  22 38 B7 40 00 00                                 "8.@..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
78      4.417   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329494070-3329495529, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF692; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329494070-3329495529, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 92 00 00 1D 06 87 87 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 0C 36 00 5B D0 EE 50 10   ...]...t.6.[..P.
00030:  20 00 EC C7 00 00 30 30 30 30 30 30 30 30 30 30    .....0000000000
00040:  2B 0D 0A 0D 0A 30 30 34 39 39 31 45 55 52 34 30   +....004991EUR40

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
79      4.418   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329495530-3329496989, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF693; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329495530-3329496989, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 93 00 00 1D 06 87 86 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 11 EA 00 5B D0 EE 50 10   ...]...t...[..P.
00030:  20 00 EE BC 00 00 30 30 34 39 41 31 45 55 52 31    .....0049A1EUR1
00040:  30 38 47 54 4E 20 30 30 30 30 30 30 30 30 32 38   08GTN 0000000028

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
80      4.418   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329496990, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties

page 22


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x78AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329496990, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 78 AA 40 00 80 06 68 23 0A 4B 03 EB 0A 4B   .(x.@...h#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 17 9E 50 10   .....].[...t..P.
00030:  22 38 AB D8 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
81      4.419   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329496990-3329498449, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF694; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329496990-3329498449, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 94 00 00 1D 06 87 85 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 17 9E 00 5B D0 EE 50 10   ...]...t...[..P.
00030:  20 00 B7 51 00 00 20 30 30 30 30 35 31 32 34 31    ..Q.. 000051241
00040:  35 30 30 2B 30 30 30 30 38 34 36 35 33 35 30 30   500+000084653500

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
82      4.419   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329498450, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x79AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329498450, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 79 AA 40 00 80 06 67 23 0A 4B 03 EB 0A 4B   .(y.@...g#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 1D 52 50 10   .....].[...t.RP.
00030:  22 38 A6 24 00 00                                 "8.$..          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
83      4.420   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329498450-3329499909, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF695; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329498450-3329499909, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 95 00 00 1D 06 87 84 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 1D 52 00 5B D0 EE 50 10   ...]...t.R.[..P.
00030:  20 00 E9 96 00 00 30 30 30 30 30 30 30 30 30 30    .....0000000000
00040:  30 2B 30 30 30 30 30 30 30 30 30 30 30 30 2B 30   0+000000000000+0


page 23


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
84      4.422   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329499910-3329501369, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF696; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329499910-3329501369, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 96 00 00 1D 06 87 83 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 23 06 00 5B D0 EE 50 10   ...]...t#..[..P.
00030:  20 00 F9 31 00 00 30 30 30 30 30 30 30 30 30 2B    ..1..000000000+
00040:  30 30 30 30 30 30 30 30 30 37 32 36 2D 30 30 30   000000000726-000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
85      4.422   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329501370, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x7AAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329501370, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 7A AA 40 00 80 06 66 23 0A 4B 03 EB 0A 4B   .(z.@...f#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 28 BA 50 10   .....].[...t(.P.
00030:  22 38 9A BC 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
86      4.423   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329501370-3329502829, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF697; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329501370-3329502829, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 97 00 00 1D 06 87 82 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 28 BA 00 5B D0 EE 50 10   ...]...t(..[..P.
00030:  20 00 CE B0 00 00 30 36 34 31 39 32 32 2D 30 30    .....0641922-00
00040:  30 30 30 30 30 30 30 30 30 30 2B 0D 0A 0D 0A 30   0000000000+....0

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
87      4.423   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329502830, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x7BAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329502830, win: 8760, src: 3592  dst: 2653 


page 24


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 7B AA 40 00 80 06 65 23 0A 4B 03 EB 0A 4B   .({.@...e#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 2E 6E 50 10   .....].[...t.nP.
00030:  22 38 95 08 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
88      4.424   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329502830-3329504289, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF698; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329502830-3329504289, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 98 00 00 1D 06 87 81 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 2E 6E 00 5B D0 EE 50 10   ...]...t.n.[..P.
00030:  20 00 97 01 00 00 30 30 30 30 30 2B 0D 0A 0D 0A    .....00000+....
00040:  30 30 34 39 43 31 45 55 52 31 30 38 46 54 49 20   0049C1EUR108FTI 

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
89      4.425   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329504290-3329505749, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF699; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329504290-3329505749, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 99 00 00 1D 06 87 80 0A 4B 01 82 0A 4B   ...........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 34 22 00 5B D0 EE 50 10   ...]...t4".[..P.
00030:  20 00 18 69 00 00 31 45 55 52 31 31 30 43 4F 52    ..i..1EUR110COR
00040:  53 30 30 30 30 30 30 30 30 31 34 33 39 2D 30 30   S000000001439-00

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
90      4.426   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329505750, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x7CAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329505750, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 7C AA 40 00 80 06 64 23 0A 4B 03 EB 0A 4B   .(|.@...d#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 39 D6 50 10   .....].[...t9.P.
00030:  22 38 89 A0 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
91      4.427   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329505750-3329507209, ack:   6017262, win tandem.xtra.nl  CI000291        IP


page 25


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF69A; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329505750-3329507209, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 9A 00 00 1D 06 87 7F 0A 4B 01 82 0A 4B   ..........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 39 D6 00 5B D0 EE 50 10   ...]...t9..[..P.
00030:  20 00 DC C1 00 00 30 30 35 32 39 33 34 37 2B 30    .....00529347+0
00040:  30 30 30 30 30 30 30 30 30 30 30 2B 30 30 30 30   00000000000+0000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
92      4.427   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329507210, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x7DAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329507210, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 7D AA 40 00 80 06 63 23 0A 4B 03 EB 0A 4B   .(}.@...c#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 3F 8A 50 10   .....].[...t?.P.
00030:  22 38 83 EC 00 00                                 "8....          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
93      4.428   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329507210-3329508669, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF69B; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329507210-3329508669, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 9B 00 00 1D 06 87 7E 0A 4B 01 82 0A 4B   .........~.K...K
00020:  03 EB 0A 5D 0E 08 C6 74 3F 8A 00 5B D0 EE 50 10   ...]...t?..[..P.
00030:  20 00 06 99 00 00 30 30 30 30 30 30 2B 30 30 30    .....000000+000
00040:  30 30 30 30 30 30 30 30 30 2B 30 30 30 30 30 30   000000000+000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
94      4.429   AMBR6K2        CI000291       TCP       .A...., len: 1460, seq:3329508670-3329510129, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF69C; Proto = TCP; Len: 1500
+ TCP: .A...., len: 1460, seq:3329508670-3329510129, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 DC F6 9C 00 00 1D 06 87 7D 0A 4B 01 82 0A 4B   .........}.K...K
00020:  03 EB 0A 5D 0E 08 C6 74 45 3E 00 5B D0 EE 50 10   ...]...tE>.[..P.
00030:  20 00 DE E7 00 00 30 30 30 30 2B 30 30 30 30 30    .....0000+00000

page 26


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

00040:  34 32 39 34 38 30 30 2D 30 30 30 30 30 30 30 30   4294800-00000000

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
95      4.429   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329510130, win: 8 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x7EAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329510130, win: 8760, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 7E AA 40 00 80 06 62 23 0A 4B 03 EB 0A 4B   .(~.@...b#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 4A F2 50 10   .....].[...tJ.P.
00030:  22 38 78 84 00 00                                 "8x...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
96      4.433   AMBR6K2        CI000291       TCP       .AP..., len: 1295, seq:3329510130-3329511424, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF69D; Proto = TCP; Len: 1335
+ TCP: .AP..., len: 1295, seq:3329510130-3329511424, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  05 37 F6 9D 00 00 1D 06 88 21 0A 4B 01 82 0A 4B   .7.......!.K...K
00020:  03 EB 0A 5D 0E 08 C6 74 4A F2 00 5B D0 EE 50 18   ...]...tJ..[..P.
00030:  20 00 60 DE 00 00 30 36 2D 30 30 30 30 30 30 30    .`...06-0000000
00040:  30 30 30 30 30 2B 0D 0A 0D 0A 30 30 34 39 5A 31   00000+....0049Z1

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
97      4.433   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329511425, win: 7 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x7FAA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329511425, win: 7465, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 7F AA 40 00 80 06 61 23 0A 4B 03 EB 0A 4B   .(.@...a#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 50 01 50 10   .....].[...tP.P.
00030:  1D 29 78 84 00 00                                 .)x...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
98      4.442   AMBR6K2        CI000291       FTP       Resp. to Port 3590, '226 Transfer complete.'                      tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF69E; Proto = TCP; Len: 64
+ TCP: .AP..., len:   24, seq:3329126211-3329126234, ack:   6017321, win: 8192, src:   21 (FTP)  dst: 3590 

page 27


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt

+ FTP: Resp. to Port 3590, '226 Transfer complete.'

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 40 F6 9E 00 00 1D 06 8D 17 0A 4B 01 82 0A 4B   .@.........K...K
00020:  03 EB 00 15 0E 06 C6 6E 6F 43 00 5B D1 29 50 18   .......noC.[.)P.
00030:  20 00 91 6A 00 00 32 32 36 20 54 72 61 6E 73 66    ..j..226 Transf
00040:  65 72 20 63 6F 6D 70 6C 65 74 65 2E 0D 0A         er complete...  

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
99      4.444   AMBR6K2        CI000291       TCP       .A...F, len:    0, seq:3329511425-3329511425, ack:   6017262, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF69F; Proto = TCP; Len: 40
+ TCP: .A...F, len:    0, seq:3329511425-3329511425, ack:   6017262, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 28 F6 9F 00 00 1D 06 8D 2E 0A 4B 01 82 0A 4B   .(.........K...K
00020:  03 EB 0A 5D 0E 08 C6 74 50 01 00 5B D0 EE 50 11   ...]...tP..[..P.
00030:  20 00 75 AC 00 00 31 31 32 20 20 31                .u...112  1    

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
100     4.444   CI000291       AMBR6KX        TCP       .A...., len:    0, seq:   6017262-6017262, ack:3329511426, win: 7 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x80AA; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:   6017262-6017262, ack:3329511426, win: 7465, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 80 AA 40 00 80 06 60 23 0A 4B 03 EB 0A 4B   .(..@...`#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 50 02 50 10   .....].[...tP.P.
00030:  1D 29 78 83 00 00                                 .)x...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
101     4.445   CI000291       AMBR6KX        TCP       .A...F, len:    0, seq:   6017262-6017262, ack:3329511426, win: 7 CI000291        tandem.xtra.nl  IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x81AA; Proto = TCP; Len: 40
+ TCP: .A...F, len:    0, seq:   6017262-6017262, ack:3329511426, win: 7465, src: 3592  dst: 2653 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 81 AA 40 00 80 06 5F 23 0A 4B 03 EB 0A 4B   .(..@..._#.K...K
00020:  01 82 0E 08 0A 5D 00 5B D0 EE C6 74 50 02 50 11   .....].[...tP.P.
00030:  1D 29 78 82 00 00                                 .)x...          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
102     4.445   CI000291       AMBR6KX        TCP       ...R.., len:    0, seq:   6017321-6017321, ack:3329511426, win:   CI000291        tandem.xtra.nl  IP

page 28


Network Monitor trace  Wed 06/28/00 12:24:10  D:\TEMP\overview.txt


+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0x82AA; Proto = TCP; Len: 40
+ TCP: ...R.., len:    0, seq:   6017321-6017321, ack:3329511426, win:    0, src: 3590  dst:   21 (FTP) 

00000:  00 00 0C 07 AC 15 00 50 DA 41 36 C7 08 00 45 00   .......P.A6...E.
00010:  00 28 82 AA 40 00 80 06 5E 23 0A 4B 03 EB 0A 4B   .(..@...^#.K...K
00020:  01 82 0E 06 00 15 00 5B D1 29 C6 74 50 02 50 04   .......[.).tP.P.
00030:  00 00 9F C7 00 00                                 ......          

************************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
103     4.447   AMBR6K2        CI000291       TCP       .A...., len:    0, seq:3329511426-3329511426, ack:   6017263, win tandem.xtra.nl  CI000291        IP

+ FRAME: Base frame properties
+ ETHERNET: ETYPE = 0x0800 : Protocol = IP:  DOD Internet Protocol
+ IP: ID = 0xF6A0; Proto = TCP; Len: 40
+ TCP: .A...., len:    0, seq:3329511426-3329511426, ack:   6017263, win: 8192, src: 2653  dst: 3592 

00000:  00 50 DA 41 36 C7 00 50 54 F5 CE 00 08 00 45 00   .P.A6..PT.....E.
00010:  00 28 F6 A0 00 00 1D 06 8D 2D 0A 4B 01 82 0A 4B   .(.......-.K...K
00020:  03 EB 0A 5D 0E 08 C6 74 50 02 00 5B D0 EF 50 10   ...]...tP..[..P.
00030:  20 00 75 AB 00 00 20 20 20 20 20 20                .u...          

***********************************************************************************************************************************************************
Frame   Time    Src MAC Addr   Dst MAC Addr   Protocol  Description                                                       Src Other Addr  Dst Other Addr  Type Other Addr
104     0.000   000000000000   000000000000   STATS     Number of Frames Captured = 103                                                                    

+ FRAME: Base frame properties
+ ETHERNET: 802.3 Length = 124
+ LLC: UI DSAP=0xAA SSAP=0xAA C
+ SNAP: ETYPE = 0x1984
+ TRAIL: FRAME TYPE = Capture Statistics
+ STATS: Number of Frames Captured = 103

00000:  00 00 00 00 00 00 00 00 00 00 00 00 00 6E AA AA   .............n..
00010:  03 00 00 00 19 84 24 4D 53 54 00 00 00 00 67 00   ......$MST....g.
00020:  00 00 50 00 00 00 00 00 1B 54 00 00 67 00 00 00   ..P......T..g...
00030:  CA 1A 01 00 67 00 00 00 92 17 01 00 0A 01 00 00   ....g...........
00040:  C4 90 01 00 35 00 00 00 1A 00 00 00 00 00 00 00   ....5...........













page 29
