How do I use the SQL Response client across domains?
ztuner
Posts: 31
Hi,
I follow your instructions from http://www.red-gate.com/supportcenter/Content.aspx?p=SQL%20Response&c=knowledgebase%5CSQL_Response%5CKB200904000378.htm
but for some reason it does not work. Here is the error msg I get after few minutes SQLResponse client is trying to connect:
Is it possible to help with this? I use the 1.3 version on both client and server side.
Server config.xml file:
<?xml version="1.0" encoding="utf-8"?>
<SqlResponseConfig>
<TcpPort>7398</TcpPort>
<DataDirectory>C:\SQL Response Repository\</DataDirectory>
<ServiceType>local</ServiceType>
<ServiceStart>1</ServiceStart>
<SecureRemoting>False</SecureRemoting>
<!-- This will affect the polling frequency for these recommendations; No backup exists for database, Full backup overdue, Log backup overdue, Integrity check overdue and Page Verification is off- setting to 5 hourly -->
<DatabaseRecommendationCheckTime>18000</DatabaseRecommendationCheckTime>
<!-- This will affect the polling frequency for these recommendations; Transaction Log has excessive free space and Data file has excessive free space- setting to 5 hourly -->
<DBFileTime>18000</DBFileTime>
<!-- This will affect the polling frequency for these alerts; Computer unreachable, Computer Login Failure, SQL Server Lgon failure and SQL Server unreachable - setting to every 5 minutes -->
<WmiPingTime>300</WmiPingTime>
<!-- This will affect the polling frequency for these alerts; Job Failure, Job did not start, Job duration unusual and SQL Server agent not running - setting to every minute -->
<JobInfoTime>60</JobInfoTime>
<!-- This will affect the polling frequency for these alerts; Low physical memory and CPU utilization unusual and also affect the wmi get machine statistics and sql get machine statics calls- setting to every 30 seconds -->
<PerfMonTime>30</PerfMonTime>
<!-- This will affect the polling frequency for this alert; Low disk space - setting to every 2 minutes -->
<DiskInfoTime>120</DiskInfoTime>
<!-- This will affect the polling frequency for these alerts; Long running query and Blocked SQL Process - setting to every 45 seconds-->
<SysProcessesTime>45</SysProcessesTime>
<!-- This will affect the polling frequency for these alerts; SQL Deadlock and SQL Server error log entry - setting to every minute -->
<SqlErrorLogTime>60</SqlErrorLogTime>
<!-- This will affect the polling frequency for checking the clock time skew of the machine - setting to every 2 minutes -->
<ClockSkewTime>120</ClockSkewTime>
<!-- This will affect the polling frequency for checking for cluster fail over - setting to every minute -->
<ClusterActiveNodeTime>60</ClusterActiveNodeTime>
<!-- This will affect the polling frequency for checking for databases changing state - setting to every 2 minutes -->
<DatabaseStateTime>120</DatabaseStateTime>
<!-- This will affect the polling frequency for checking for Index Fragmentation - setting to every 5 Hours, however the IndexSchedule tag will override this-->
<DatabaseIndexTime>18000</DatabaseIndexTime>
<!-- This will affect the Scheduling for Index fragmentation checking - setting to occur at 04:00 am on Sunday (UTC) -->
<!-- Monday=1, Tuesday=2,Wednesday=3,Thursday=4,Friday=5,Saturday=6,Sunday=7 -->
<!-- Currently there are only schedules of type Weekly supported. -->
<!--<IndexSchedule type="Weekly" day="7" time="04:00"/>-->
</SqlResponseConfig>
Client ClientSettings.dat file:
<?xml version="1.0"?>
<root>
<persistRoot version="1" isObject="true">
<Type>Settings</Type>
<MainFormX>154</MainFormX>
<MainFormY>154</MainFormY>
<MainFormWidth>680</MainFormWidth>
<MainFormHeight>530</MainFormHeight>
<MainFormWindowState>2</MainFormWindowState>
<MRUServers>tcp://spiral:7398/MonitorService,tcp://suez.rsc-network.org:7398/MonitorService,tcp://spiral.rsc-network.org:7398/MonitorService,tcp://pc733.rsc-network.org:7398/MonitorService,tcp://ipmonitor.rsc.org:7398/MonitorService</MRUServers>
<PerformanceGraphColors>
</PerformanceGraphColors>
<IncidentCachePath>
</IncidentCachePath>
<MaxIncidentCacheBytes>104857600</MaxIncidentCacheBytes>
<TimeFrameIndex>1</TimeFrameIndex>
<UseIncidentSummaryDiskCache>False</UseIncidentSummaryDiskCache>
<CommentUsername>
</CommentUsername>
<AlertView>Active alerts</AlertView>
<RecommendationView>
</RecommendationView>
<GroupByServer>True</GroupByServer>
<ShowAlerts>True</ShowAlerts>
<CacheTimestampMargin>1000</CacheTimestampMargin>
<SecureRemoting>False</SecureRemoting>
<AlertRepositoryVersion>1.2.0.219</AlertRepositoryVersion>
<AskToUpgradeAlertRepository>False</AskToUpgradeAlertRepository>
</persistRoot>
</root>
I follow your instructions from http://www.red-gate.com/supportcenter/Content.aspx?p=SQL%20Response&c=knowledgebase%5CSQL_Response%5CKB200904000378.htm
but for some reason it does not work. Here is the error msg I get after few minutes SQLResponse client is trying to connect:
Is it possible to help with this? I use the 1.3 version on both client and server side.
Server config.xml file:
<?xml version="1.0" encoding="utf-8"?>
<SqlResponseConfig>
<TcpPort>7398</TcpPort>
<DataDirectory>C:\SQL Response Repository\</DataDirectory>
<ServiceType>local</ServiceType>
<ServiceStart>1</ServiceStart>
<SecureRemoting>False</SecureRemoting>
<!-- This will affect the polling frequency for these recommendations; No backup exists for database, Full backup overdue, Log backup overdue, Integrity check overdue and Page Verification is off- setting to 5 hourly -->
<DatabaseRecommendationCheckTime>18000</DatabaseRecommendationCheckTime>
<!-- This will affect the polling frequency for these recommendations; Transaction Log has excessive free space and Data file has excessive free space- setting to 5 hourly -->
<DBFileTime>18000</DBFileTime>
<!-- This will affect the polling frequency for these alerts; Computer unreachable, Computer Login Failure, SQL Server Lgon failure and SQL Server unreachable - setting to every 5 minutes -->
<WmiPingTime>300</WmiPingTime>
<!-- This will affect the polling frequency for these alerts; Job Failure, Job did not start, Job duration unusual and SQL Server agent not running - setting to every minute -->
<JobInfoTime>60</JobInfoTime>
<!-- This will affect the polling frequency for these alerts; Low physical memory and CPU utilization unusual and also affect the wmi get machine statistics and sql get machine statics calls- setting to every 30 seconds -->
<PerfMonTime>30</PerfMonTime>
<!-- This will affect the polling frequency for this alert; Low disk space - setting to every 2 minutes -->
<DiskInfoTime>120</DiskInfoTime>
<!-- This will affect the polling frequency for these alerts; Long running query and Blocked SQL Process - setting to every 45 seconds-->
<SysProcessesTime>45</SysProcessesTime>
<!-- This will affect the polling frequency for these alerts; SQL Deadlock and SQL Server error log entry - setting to every minute -->
<SqlErrorLogTime>60</SqlErrorLogTime>
<!-- This will affect the polling frequency for checking the clock time skew of the machine - setting to every 2 minutes -->
<ClockSkewTime>120</ClockSkewTime>
<!-- This will affect the polling frequency for checking for cluster fail over - setting to every minute -->
<ClusterActiveNodeTime>60</ClusterActiveNodeTime>
<!-- This will affect the polling frequency for checking for databases changing state - setting to every 2 minutes -->
<DatabaseStateTime>120</DatabaseStateTime>
<!-- This will affect the polling frequency for checking for Index Fragmentation - setting to every 5 Hours, however the IndexSchedule tag will override this-->
<DatabaseIndexTime>18000</DatabaseIndexTime>
<!-- This will affect the Scheduling for Index fragmentation checking - setting to occur at 04:00 am on Sunday (UTC) -->
<!-- Monday=1, Tuesday=2,Wednesday=3,Thursday=4,Friday=5,Saturday=6,Sunday=7 -->
<!-- Currently there are only schedules of type Weekly supported. -->
<!--<IndexSchedule type="Weekly" day="7" time="04:00"/>-->
</SqlResponseConfig>
Client ClientSettings.dat file:
<?xml version="1.0"?>
<root>
<persistRoot version="1" isObject="true">
<Type>Settings</Type>
<MainFormX>154</MainFormX>
<MainFormY>154</MainFormY>
<MainFormWidth>680</MainFormWidth>
<MainFormHeight>530</MainFormHeight>
<MainFormWindowState>2</MainFormWindowState>
<MRUServers>tcp://spiral:7398/MonitorService,tcp://suez.rsc-network.org:7398/MonitorService,tcp://spiral.rsc-network.org:7398/MonitorService,tcp://pc733.rsc-network.org:7398/MonitorService,tcp://ipmonitor.rsc.org:7398/MonitorService</MRUServers>
<PerformanceGraphColors>
</PerformanceGraphColors>
<IncidentCachePath>
</IncidentCachePath>
<MaxIncidentCacheBytes>104857600</MaxIncidentCacheBytes>
<TimeFrameIndex>1</TimeFrameIndex>
<UseIncidentSummaryDiskCache>False</UseIncidentSummaryDiskCache>
<CommentUsername>
</CommentUsername>
<AlertView>Active alerts</AlertView>
<RecommendationView>
</RecommendationView>
<GroupByServer>True</GroupByServer>
<ShowAlerts>True</ShowAlerts>
<CacheTimestampMargin>1000</CacheTimestampMargin>
<SecureRemoting>False</SecureRemoting>
<AlertRepositoryVersion>1.2.0.219</AlertRepositoryVersion>
<AskToUpgradeAlertRepository>False</AskToUpgradeAlertRepository>
</persistRoot>
</root>
Comments
The 'failed to respond' error is a network transport level thing. Either a firewall/NAT is blocking the connection, the Alert Repository isn't running or the IP address you are using isn't correct.
--
Daniel
I can ping the server,
and the port 7398 is open.
Everything looks ok.
What credential will be used when connecting to the Response service on a different domain? Should I see a login screen or something?
Thanks for help
There are a few things that I think I can rule out. Since the connection problem seems to be that there is no response rather than the destination computer refusing the connection, you can probably rule out a firewall on the computer or anything happening on the TCP stack of the computer. The packets being sent are just never making it to their destination, or being ignored completely. That leaves firewall appliances and misconfigured networks as possible causes. The mystery is that you can get a ping back from the server, so the network is allowing ICMP, but not port 7398.
The most obvious thing to check is that the repository service is actually running on the repository computer.
After that, I'd say that your best bet would be to employ a port scanner to see if it will give any analysis about why the traffic is being blocked.
on client machine, will I be able to connect to repository on different domains including the same domain where the client is or shall I need to change the setting on the client again?
Thanks
I believe that the net effect of disabling the secure remoting on the connection simply stops the Windows credentials from being sent from the client and instructs the server not to bother looking for them. I'd assume that the connection would then work the same way whether or not the client and server are on different domains.
.net remoting can operate in two modes:
- Secure - The connection is encrypted using the users credentials the Client is running as. This requires that both the client and AR machine recognise the credentials. This would work if both ends are on the same domain, or different domains with a trust link between them.
- Non Secure - The connection is not secured or authenticated in any way
The two modes are not compatible. A Client configured to use secure remoting will not connect to an AR configured to use non secure remoting and vis-a-versa.--
Daniel
That means I can't connect from my PC to two repositories on different domains without changing config settings. It does not look very good if that is the case.
How I'm supposed to connect to different repositories and monitor servers on different domains from a single client (my PC)?
Thanks
If i configure repository with <SecureRemoting>false</SecureRemoting>
and client with <SecureRemoting>False</SecureRemoting> on the same machine, I still cannot conenct. What credential will be used to if SecureRemoting is set to false? Do I get login windows or something. Once I get this one working I can try it on different domains.
Please help
1. Repository service is running
2. Port 7398 is open and I can telent to repository server using port 7398
3. I can connect from client to SQL Server running on server using Database Management Studio
4. <SecureRemoting>False</SecureRemoting> on client and server
Am I missing something? Still can't connect.
Any idea?
Thanks
I suppose you could install WireShark and send us the trace file. Hopefully we can notice something in that.
here is the trace from Sharkwire. Something is definetley hathe ppening on port 7398 as I get some entries when trying to connect from client on differenet domain. Thanks
No. Time Source Destination Protocol Info
1 0.000000 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [SYN] Seq=0 Win=65535 Len=0 MSS=1380
Frame 1 (62 bytes on wire, 62 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.274412000
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 62 bytes
Capture Length: 62 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 48
Identification: 0xaa53 (43603)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x8962 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 0, Len: 0
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 0 (relative sequence number)
Header length: 28 bytes
Flags: 0x02 (SYN)
Window size: 65535
Checksum: 0x7fc5 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Options: (8 bytes)
No. Time Source Destination Protocol Info
2 0.000048 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460
Frame 2 (62 bytes on wire, 62 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.274460000
[Time delta from previous captured frame: 0.000048000 seconds]
[Time delta from previous displayed frame: 0.000048000 seconds]
[Time since reference or first frame: 0.000048000 seconds]
Frame Number: 2
Frame Length: 62 bytes
Capture Length: 62 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 48
Identification: 0x0c6f (3183)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x6647 [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 0, Ack: 1, Len: 0
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 28 bytes
Flags: 0x12 (SYN, ACK)
Window size: 16384
Checksum: 0x7eb1 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Options: (8 bytes)
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
3 0.000544 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [ACK] Seq=1 Ack=1 Win=65535 Len=0
Frame 3 (60 bytes on wire, 60 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.274956000
[Time delta from previous captured frame: 0.000496000 seconds]
[Time delta from previous displayed frame: 0.000496000 seconds]
[Time since reference or first frame: 0.000544000 seconds]
Frame Number: 3
Frame Length: 60 bytes
Capture Length: 60 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 40
Identification: 0xaa54 (43604)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x8969 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 1, Ack: 1, Len: 0
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
Window size: 65535
Checksum: 0xeb75 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
4 0.000597 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=97
Frame 4 (151 bytes on wire, 151 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.275009000
[Time delta from previous captured frame: 0.000053000 seconds]
[Time delta from previous displayed frame: 0.000053000 seconds]
[Time since reference or first frame: 0.000597000 seconds]
Frame Number: 4
Frame Length: 151 bytes
Capture Length: 151 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 137
Identification: 0xaa55 (43605)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x8907 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 1, Ack: 1, Len: 97
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
[Next sequence number: 98 (relative sequence number)]
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65535
Checksum: 0xe07f [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (97 bytes)
0000 2e 4e 45 54 01 00 00 00 00 00 b1 00 00 00 04 00 .NET............
0010 01 01 29 00 00 00 74 63 70 3a 2f 2f 31 33 35 2e ..)...[url=tcp://135]tcp://135[/url].
0020 31 39 36 2e 32 31 30 2e 31 39 33 3a 37 33 39 38 196.210.193:7398
0030 2f 4d 6f 6e 69 74 6f 72 53 65 72 76 69 63 65 06 /MonitorService.
0040 00 01 01 18 00 00 00 61 70 70 6c 69 63 61 74 69 .......applicati
0050 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 00 on/octet-stream.
0060 00 .
Data: 2E4E4554010000000000B100000004000101290000007463...
[Length: 97]
No. Time Source Destination Protocol Info
5 0.000608 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [PSH, ACK] Seq=98 Ack=1 Win=65535 Len=177
Frame 5 (231 bytes on wire, 231 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.275020000
[Time delta from previous captured frame: 0.000011000 seconds]
[Time delta from previous displayed frame: 0.000011000 seconds]
[Time since reference or first frame: 0.000608000 seconds]
Frame Number: 5
Frame Length: 231 bytes
Capture Length: 231 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 217
Identification: 0xaa56 (43606)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x88b6 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 98, Ack: 1, Len: 177
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 98 (relative sequence number)
[Next sequence number: 275 (relative sequence number)]
Acknowledgement number: 1 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65535
Checksum: 0xbffa [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (177 bytes)
0000 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ................
0010 00 15 11 00 00 00 12 0b 67 65 74 5f 56 65 72 73 ........get_Vers
0020 69 6f 6e 12 8a 01 52 65 64 47 61 74 65 2e 53 71 ion...RedGate.Sq
0030 6c 52 65 73 70 6f 6e 73 65 2e 43 6f 6d 6d 6f 6e lResponse.Common
0040 2e 49 4d 6f 6e 69 74 6f 72 53 65 72 76 69 63 65 .IMonitorService
0050 2c 20 52 65 64 47 61 74 65 2e 53 71 6c 52 65 73 , RedGate.SqlRes
0060 70 6f 6e 73 65 2e 43 6f 6d 6d 6f 6e 2c 20 56 65 ponse.Common, Ve
0070 72 73 69 6f 6e 3d 31 2e 33 2e 30 2e 35 38 2c 20 rsion=1.3.0.58,
0080 43 75 6c 74 75 72 65 3d 6e 65 75 74 72 61 6c 2c Culture=neutral,
0090 20 50 75 62 6c 69 63 4b 65 79 54 6f 6b 65 6e 3d PublicKeyToken=
00a0 37 66 34 36 35 61 31 63 31 35 36 64 34 64 35 37 7f465a1c156d4d57
00b0 0b .
Data: 00000000000000000001000000000000001511000000120B...
[Length: 177]
No. Time Source Destination Protocol Info
6 0.000621 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [ACK] Seq=1 Ack=275 Win=65261 Len=0
Frame 6 (54 bytes on wire, 54 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.275033000
[Time delta from previous captured frame: 0.000013000 seconds]
[Time delta from previous displayed frame: 0.000013000 seconds]
[Time since reference or first frame: 0.000621000 seconds]
Frame Number: 6
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 40
Identification: 0x0c70 (3184)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x264e [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 1, Ack: 275, Len: 0
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 275 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
Window size: 65261
Checksum: 0xc82c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
7 0.001467 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [PSH, ACK] Seq=1 Ack=275 Win=65261 Len=16
Frame 7 (70 bytes on wire, 70 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.275879000
[Time delta from previous captured frame: 0.000846000 seconds]
[Time delta from previous displayed frame: 0.000846000 seconds]
[Time since reference or first frame: 0.001467000 seconds]
Frame Number: 7
Frame Length: 70 bytes
Capture Length: 70 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 56
Identification: 0x0c71 (3185)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x263d [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 1, Ack: 275, Len: 16
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 1 (relative sequence number)
[Next sequence number: 17 (relative sequence number)]
Acknowledgement number: 275 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65261
Checksum: 0xc83c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (16 bytes)
0000 2e 4e 45 54 01 00 02 00 00 00 74 00 00 00 00 00 .NET......t.....
Data: 2E4E4554010002000000740000000000
[Length: 16]
No. Time Source Destination Protocol Info
8 0.001506 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [PSH, ACK] Seq=17 Ack=275 Win=65261 Len=116
Frame 8 (170 bytes on wire, 170 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.275918000
[Time delta from previous captured frame: 0.000039000 seconds]
[Time delta from previous displayed frame: 0.000039000 seconds]
[Time since reference or first frame: 0.001506000 seconds]
Frame Number: 8
Frame Length: 170 bytes
Capture Length: 170 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 156
Identification: 0x0c72 (3186)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x25d8 [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 17, Ack: 275, Len: 116
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 17 (relative sequence number)
[Next sequence number: 133 (relative sequence number)]
Acknowledgement number: 275 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65261
Checksum: 0xc8a0 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (116 bytes)
0000 00 01 00 00 00 ff ff ff ff 01 00 00 00 00 00 00 ................
0010 00 16 11 10 00 00 10 01 00 00 00 01 00 00 00 09 ................
0020 02 00 00 00 04 02 00 00 00 0e 53 79 73 74 65 6d ..........System
0030 2e 56 65 72 73 69 6f 6e 04 00 00 00 06 5f 4d 61 .Version....._Ma
0040 6a 6f 72 06 5f 4d 69 6e 6f 72 06 5f 42 75 69 6c jor._Minor._Buil
0050 64 09 5f 52 65 76 69 73 69 6f 6e 00 00 00 00 08 d._Revision.....
0060 08 08 08 01 00 00 00 03 00 00 00 00 00 00 00 3a ...............:
0070 00 00 00 0b ....
Data: 0001000000FFFFFFFF010000000000000016111000001001...
[Length: 116]
No. Time Source Destination Protocol Info
9 0.001678 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [ACK] Seq=275 Ack=133 Win=65403 Len=0
Frame 9 (60 bytes on wire, 60 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276090000
[Time delta from previous captured frame: 0.000172000 seconds]
[Time delta from previous displayed frame: 0.000172000 seconds]
[Time since reference or first frame: 0.001678000 seconds]
Frame Number: 9
Frame Length: 60 bytes
Capture Length: 60 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 40
Identification: 0xaa57 (43607)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x8966 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 275, Ack: 133, Len: 0
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 275 (relative sequence number)
Acknowledgement number: 133 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
Window size: 65403
Checksum: 0xea63 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
10 0.001781 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [PSH, ACK] Seq=275 Ack=133 Win=65403 Len=97
Frame 10 (151 bytes on wire, 151 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276193000
[Time delta from previous captured frame: 0.000103000 seconds]
[Time delta from previous displayed frame: 0.000103000 seconds]
[Time since reference or first frame: 0.001781000 seconds]
Frame Number: 10
Frame Length: 151 bytes
Capture Length: 151 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 137
Identification: 0xaa58 (43608)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x8904 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 275, Ack: 133, Len: 97
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 275 (relative sequence number)
[Next sequence number: 372 (relative sequence number)]
Acknowledgement number: 133 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65403
Checksum: 0xce6d [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (97 bytes)
0000 2e 4e 45 54 01 00 00 00 00 00 c2 00 00 00 04 00 .NET............
0010 01 01 29 00 00 00 74 63 70 3a 2f 2f 31 33 35 2e ..)...[url=tcp://135]tcp://135[/url].
0020 31 39 36 2e 32 31 30 2e 31 39 33 3a 37 33 39 38 196.210.193:7398
0030 2f 4d 6f 6e 69 74 6f 72 53 65 72 76 69 63 65 06 /MonitorService.
0040 00 01 01 18 00 00 00 61 70 70 6c 69 63 61 74 69 .......applicati
0050 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 00 on/octet-stream.
0060 00 .
Data: 2E4E4554010000000000C200000004000101290000007463...
[Length: 97]
No. Time Source Destination Protocol Info
11 0.001879 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [PSH, ACK] Seq=372 Ack=133 Win=65403 Len=194
Frame 11 (248 bytes on wire, 248 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276291000
[Time delta from previous captured frame: 0.000098000 seconds]
[Time delta from previous displayed frame: 0.000098000 seconds]
[Time since reference or first frame: 0.001879000 seconds]
Frame Number: 11
Frame Length: 248 bytes
Capture Length: 248 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 234
Identification: 0xaa59 (43609)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x88a2 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 372, Ack: 133, Len: 194
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 372 (relative sequence number)
[Next sequence number: 566 (relative sequence number)]
Acknowledgement number: 133 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65403
Checksum: 0xbce5 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (194 bytes)
0000 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ................
0010 00 15 11 00 00 00 12 1c 67 65 74 5f 4d 69 6e 69 ........get_Mini
0020 6d 75 6d 43 6f 6d 70 61 74 69 62 6c 65 56 65 72 mumCompatibleVer
0030 73 69 6f 6e 12 8a 01 52 65 64 47 61 74 65 2e 53 sion...RedGate.S
0040 71 6c 52 65 73 70 6f 6e 73 65 2e 43 6f 6d 6d 6f qlResponse.Commo
0050 6e 2e 49 4d 6f 6e 69 74 6f 72 53 65 72 76 69 63 n.IMonitorServic
0060 65 2c 20 52 65 64 47 61 74 65 2e 53 71 6c 52 65 e, RedGate.SqlRe
0070 73 70 6f 6e 73 65 2e 43 6f 6d 6d 6f 6e 2c 20 56 sponse.Common, V
0080 65 72 73 69 6f 6e 3d 31 2e 33 2e 30 2e 35 38 2c ersion=1.3.0.58,
0090 20 43 75 6c 74 75 72 65 3d 6e 65 75 74 72 61 6c Culture=neutral
00a0 2c 20 50 75 62 6c 69 63 4b 65 79 54 6f 6b 65 6e , PublicKeyToken
00b0 3d 37 66 34 36 35 61 31 63 31 35 36 64 34 64 35 =7f465a1c156d4d5
00c0 37 0b 7.
Data: 00000000000000000001000000000000001511000000121C...
[Length: 194]
No. Time Source Destination Protocol Info
12 0.001906 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [ACK] Seq=133 Ack=566 Win=64970 Len=0
Frame 12 (54 bytes on wire, 54 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276318000
[Time delta from previous captured frame: 0.000027000 seconds]
[Time delta from previous displayed frame: 0.000027000 seconds]
[Time since reference or first frame: 0.001906000 seconds]
Frame Number: 12
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 40
Identification: 0x0c73 (3187)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x264b [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 133, Ack: 566, Len: 0
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 133 (relative sequence number)
Acknowledgement number: 566 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
Window size: 64970
Checksum: 0xc82c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
13 0.002094 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [PSH, ACK] Seq=133 Ack=566 Win=64970 Len=16
Frame 13 (70 bytes on wire, 70 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276506000
[Time delta from previous captured frame: 0.000188000 seconds]
[Time delta from previous displayed frame: 0.000188000 seconds]
[Time since reference or first frame: 0.002094000 seconds]
Frame Number: 13
Frame Length: 70 bytes
Capture Length: 70 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 56
Identification: 0x0c74 (3188)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x263a [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 133, Ack: 566, Len: 16
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 133 (relative sequence number)
[Next sequence number: 149 (relative sequence number)]
Acknowledgement number: 566 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 64970
Checksum: 0xc83c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (16 bytes)
0000 2e 4e 45 54 01 00 02 00 00 00 74 00 00 00 00 00 .NET......t.....
Data: 2E4E4554010002000000740000000000
[Length: 16]
No. Time Source Destination Protocol Info
14 0.002122 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [PSH, ACK] Seq=149 Ack=566 Win=64970 Len=116
Frame 14 (170 bytes on wire, 170 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276534000
[Time delta from previous captured frame: 0.000028000 seconds]
[Time delta from previous displayed frame: 0.000028000 seconds]
[Time since reference or first frame: 0.002122000 seconds]
Frame Number: 14
Frame Length: 170 bytes
Capture Length: 170 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 156
Identification: 0x0c75 (3189)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x25d5 [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 149, Ack: 566, Len: 116
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 149 (relative sequence number)
[Next sequence number: 265 (relative sequence number)]
Acknowledgement number: 566 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 64970
Checksum: 0xc8a0 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (116 bytes)
0000 00 01 00 00 00 ff ff ff ff 01 00 00 00 00 00 00 ................
0010 00 16 11 10 00 00 10 01 00 00 00 01 00 00 00 09 ................
0020 02 00 00 00 04 02 00 00 00 0e 53 79 73 74 65 6d ..........System
0030 2e 56 65 72 73 69 6f 6e 04 00 00 00 06 5f 4d 61 .Version....._Ma
0040 6a 6f 72 06 5f 4d 69 6e 6f 72 06 5f 42 75 69 6c jor._Minor._Buil
0050 64 09 5f 52 65 76 69 73 69 6f 6e 00 00 00 00 08 d._Revision.....
0060 08 08 08 01 00 00 00 00 00 00 00 00 00 00 00 9a ................
0070 06 00 00 0b ....
Data: 0001000000FFFFFFFF010000000000000016111000001001...
[Length: 116]
No. Time Source Destination Protocol Info
15 0.002305 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [ACK] Seq=566 Ack=265 Win=65271 Len=0
Frame 15 (60 bytes on wire, 60 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276717000
[Time delta from previous captured frame: 0.000183000 seconds]
[Time delta from previous displayed frame: 0.000183000 seconds]
[Time since reference or first frame: 0.002305000 seconds]
Frame Number: 15
Frame Length: 60 bytes
Capture Length: 60 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 40
Identification: 0xaa5a (43610)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x8963 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 566, Ack: 265, Len: 0
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 566 (relative sequence number)
Acknowledgement number: 265 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
Window size: 65271
Checksum: 0xe940 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
16 0.002498 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [PSH, ACK] Seq=566 Ack=265 Win=65271 Len=97
Frame 16 (151 bytes on wire, 151 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276910000
[Time delta from previous captured frame: 0.000193000 seconds]
[Time delta from previous displayed frame: 0.000193000 seconds]
[Time since reference or first frame: 0.002498000 seconds]
Frame Number: 16
Frame Length: 151 bytes
Capture Length: 151 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 137
Identification: 0xaa5b (43611)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x8901 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 566, Ack: 265, Len: 97
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 566 (relative sequence number)
[Next sequence number: 663 (relative sequence number)]
Acknowledgement number: 265 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65271
Checksum: 0x0f4a [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (97 bytes)
0000 2e 4e 45 54 01 00 00 00 00 00 80 01 00 00 04 00 .NET............
0010 01 01 29 00 00 00 74 63 70 3a 2f 2f 31 33 35 2e ..)...[url=tcp://135]tcp://135[/url].
0020 31 39 36 2e 32 31 30 2e 31 39 33 3a 37 33 39 38 196.210.193:7398
0030 2f 4d 6f 6e 69 74 6f 72 53 65 72 76 69 63 65 06 /MonitorService.
0040 00 01 01 18 00 00 00 61 70 70 6c 69 63 61 74 69 .......applicati
0050 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 00 on/octet-stream.
0060 00 .
Data: 2E4E45540100000000008001000004000101290000007463...
[Length: 97]
No. Time Source Destination Protocol Info
17 0.002527 172.70.110.127 172.70.1.6 TCP 37240 > 7398 [PSH, ACK] Seq=663 Ack=265 Win=65271 Len=384
Frame 17 (438 bytes on wire, 438 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276939000
[Time delta from previous captured frame: 0.000029000 seconds]
[Time delta from previous displayed frame: 0.000029000 seconds]
[Time since reference or first frame: 0.002527000 seconds]
Frame Number: 17
Frame Length: 438 bytes
Capture Length: 438 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e), Dst: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Destination: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.110.127 (172.70.110.127), Dst: 172.70.1.6 (172.70.1.6)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 424
Identification: 0xaa5c (43612)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x87e1 [correct]
[Good: True]
[Bad : False]
Source: 172.70.110.127 (172.70.110.127)
Destination: 172.70.1.6 (172.70.1.6)
Transmission Control Protocol, Src Port: 37240 (37240), Dst Port: 7398 (7398), Seq: 663, Ack: 265, Len: 384
Source port: 37240 (37240)
Destination port: 7398 (7398)
[Stream index: 0]
Sequence number: 663 (relative sequence number)
[Next sequence number: 1047 (relative sequence number)]
Acknowledgement number: 265 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65271
Checksum: 0xebc0 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (384 bytes)
0000 00 01 00 00 00 ff ff ff ff 01 00 00 00 00 00 00 ................
0010 00 15 14 00 00 00 12 0a 47 65 74 53 65 72 76 69 ........GetServi
0020 63 65 12 64 53 79 73 74 65 6d 2e 49 53 65 72 76 ce.dSystem.IServ
0030 69 63 65 50 72 6f 76 69 64 65 72 2c 20 6d 73 63 iceProvider, msc
0040 6f 72 6c 69 62 2c 20 56 65 72 73 69 6f 6e 3d 32 orlib, Version=2
0050 2e 30 2e 30 2e 30 2c 20 43 75 6c 74 75 72 65 3d .0.0.0, Culture=
0060 6e 65 75 74 72 61 6c 2c 20 50 75 62 6c 69 63 4b neutral, PublicK
0070 65 79 54 6f 6b 65 6e 3d 62 37 37 61 35 63 35 36 eyToken=b77a5c56
0080 31 39 33 34 65 30 38 39 10 01 00 00 00 01 00 00 1934e089........
0090 00 09 02 00 00 00 04 02 00 00 00 1f 53 79 73 74 ............Syst
00a0 65 6d 2e 55 6e 69 74 79 53 65 72 69 61 6c 69 7a em.UnitySerializ
00b0 61 74 69 6f 6e 48 6f 6c 64 65 72 03 00 00 00 04 ationHolder.....
00c0 44 61 74 61 09 55 6e 69 74 79 54 79 70 65 0c 41 Data.UnityType.A
00d0 73 73 65 6d 62 6c 79 4e 61 6d 65 01 00 01 08 06 ssemblyName.....
00e0 03 00 00 00 32 52 65 64 47 61 74 65 2e 53 71 6c ....2RedGate.Sql
00f0 52 65 73 70 6f 6e 73 65 2e 43 6f 6d 6d 6f 6e 2e Response.Common.
0100 49 53 71 6c 52 65 67 69 73 74 72 61 74 69 6f 6e ISqlRegistration
0110 53 65 72 76 69 63 65 04 00 00 00 06 04 00 00 00 Service.........
0120 5e 52 65 64 47 61 74 65 2e 53 71 6c 52 65 73 70 ^RedGate.SqlResp
0130 6f 6e 73 65 2e 43 6f 6d 6d 6f 6e 2c 20 56 65 72 onse.Common, Ver
0140 73 69 6f 6e 3d 31 2e 33 2e 30 2e 35 38 2c 20 43 sion=1.3.0.58, C
0150 75 6c 74 75 72 65 3d 6e 65 75 74 72 61 6c 2c 20 ulture=neutral,
0160 50 75 62 6c 69 63 4b 65 79 54 6f 6b 65 6e 3d 37 PublicKeyToken=7
0170 66 34 36 35 61 31 63 31 35 36 64 34 64 35 37 0b f465a1c156d4d57.
Data: 0001000000FFFFFFFF01000000000000001514000000120A...
[Length: 384]
No. Time Source Destination Protocol Info
18 0.002541 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [ACK] Seq=265 Ack=1047 Win=64489 Len=0
Frame 18 (54 bytes on wire, 54 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.276953000
[Time delta from previous captured frame: 0.000014000 seconds]
[Time delta from previous displayed frame: 0.000014000 seconds]
[Time since reference or first frame: 0.002541000 seconds]
Frame Number: 18
Frame Length: 54 bytes
Capture Length: 54 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 40
Identification: 0x0c76 (3190)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x2648 [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 265, Ack: 1047, Len: 0
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 265 (relative sequence number)
Acknowledgement number: 1047 (relative ack number)
Header length: 20 bytes
Flags: 0x10 (ACK)
Window size: 64489
Checksum: 0xc82c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
19 0.002900 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [PSH, ACK] Seq=265 Ack=1047 Win=64489 Len=16
Frame 19 (70 bytes on wire, 70 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.277312000
[Time delta from previous captured frame: 0.000359000 seconds]
[Time delta from previous displayed frame: 0.000359000 seconds]
[Time since reference or first frame: 0.002900000 seconds]
Frame Number: 19
Frame Length: 70 bytes
Capture Length: 70 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 56
Identification: 0x0c77 (3191)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x2637 [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 265, Ack: 1047, Len: 16
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 265 (relative sequence number)
[Next sequence number: 281 (relative sequence number)]
Acknowledgement number: 1047 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 64489
Checksum: 0xc83c [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (16 bytes)
0000 2e 4e 45 54 01 00 02 00 00 00 47 04 00 00 00 00 .NET......G.....
Data: 2E4E4554010002000000470400000000
[Length: 16]
No. Time Source Destination Protocol Info
20 0.002926 172.70.1.6 172.70.110.127 TCP 7398 > 37240 [PSH, ACK] Seq=281 Ack=1047 Win=64489 Len=1095
Frame 20 (1149 bytes on wire, 1149 bytes captured)
Arrival Time: Jul 28, 2009 11:25:45.277338000
[Time delta from previous captured frame: 0.000026000 seconds]
[Time delta from previous displayed frame: 0.000026000 seconds]
[Time since reference or first frame: 0.002926000 seconds]
Frame Number: 20
Frame Length: 1149 bytes
Capture Length: 1149 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp:data]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Vmware_a3:4f:90 (00:50:56:a3:4f:90), Dst: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Destination: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
Address: Intel_9e:d2:5e (00:0e:0c:9e:d2:5e)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Source: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
Address: Vmware_a3:4f:90 (00:50:56:a3:4f:90)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 172.70.1.6 (172.70.1.6), Dst: 172.70.110.127 (172.70.110.127)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Total Length: 1135
Identification: 0x0c78 (3192)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x21ff [correct]
[Good: True]
[Bad : False]
Source: 172.70.1.6 (172.70.1.6)
Destination: 172.70.110.127 (172.70.110.127)
Transmission Control Protocol, Src Port: 7398 (7398), Dst Port: 37240 (37240), Seq: 281, Ack: 1047, Len: 1095
Source port: 7398 (7398)
Destination port: 37240 (37240)
[Stream index: 0]
Sequence number: 281 (relative sequence number)
[Next sequence number: 1376 (relative sequence number)]
Acknowledgement number: 1047 (relative ack number)
Header length: 20 bytes
Flags: 0x18 (PSH, ACK)
Window size: 64489
Checksum: 0xcc73 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
[SEQ/ACK analysis]
Data (1095 bytes)
0000 00 01 00 00 00 ff ff ff ff 01 00 00 00 00 00 00 ................
0010 00 16 11 10 00 00 10 01 00 00 00 01 00 00 00 09 ................
0020 02 00 00 00 04 02 00 00 00 1e 53 79 73 74 65 6d ..........System
0030 2e 52 75 6e 74 69 6d 65 2e 52 65 6d 6f 74 69 6e .Runtime.Remotin
0040 67 2e 4f 62 6a 52 65 66 05 00 00 00 03 75 72 69 g.ObjRef.....uri
0050 0b 6f 62 6a 72 65 66 46 6c 61 67 73 08 74 79 70 .objrefFlags.typ
0060 65 49 6e 66 6f 09 65 6e 76 6f 79 49 6e 66 6f 0b eInfo.envoyInfo.
0070 63 68 61 6e 6e 65 6c 49 6e 66 6f 01 00 03 03 03 channelInfo.....
0080 08 20 53 79 73 74 65 6d 2e 52 75 6e 74 69 6d 65 . System.Runtime
0090 2e 52 65 6d 6f 74 69 6e 67 2e 54 79 70 65 49 6e .Remoting.TypeIn
00a0 66 6f 22 53 79 73 74 65 6d 2e 52 75 6e 74 69 6d fo"System.Runtim
00b0 65 2e 52 65 6d 6f 74 69 6e 67 2e 49 45 6e 76 6f e.Remoting.IEnvo
00c0 79 49 6e 66 6f 23 53 79 73 74 65 6d 2e 52 75 6e yInfo#System.Run
00d0 74 69 6d 65 2e 52 65 6d 6f 74 69 6e 67 2e 43 68 time.Remoting.Ch
00e0 61 6e 6e 65 6c 49 6e 66 6f 06 03 00 00 00 44 2f annelInfo.....D/
00f0 66 32 31 32 35 63 65 37 5f 30 63 66 36 5f 34 35 f2125ce7_0cf6_45
0100 35 38 5f 39 39 34 65 5f 35 61 62 31 32 62 30 34 58_994e_5ab12b04
0110 34 36 38 34 2f 6d 78 30 64 68 71 72 31 61 75 70 4684/mx0dhqr1aup
0120 71 73 6b 6f 78 6a 69 36 70 36 79 69 79 5f 31 2e qskoxji6p6yiy_1.
0130 72 65 6d 00 00 00 00 09 04 00 00 00 0a 09 05 00 rem.............
0140 00 00 04 04 00 00 00 20 53 79 73 74 65 6d 2e 52 ....... System.R
0150 75 6e 74 69 6d 65 2e 52 65 6d 6f 74 69 6e 67 2e untime.Remoting.
0160 54 79 70 65 49 6e 66 6f 03 00 00 00 0a 73 65 72 TypeInfo.....ser
0170 76 65 72 54 79 70 65 0f 73 65 72 76 65 72 48 69 verType.serverHi
0180 65 72 61 72 63 68 79 15 69 6e 74 65 72 66 61 63 erarchy.interfac
0190 65 73 49 6d 70 6c 65 6d 65 6e 74 65 64 01 06 06 esImplemented...
01a0 06 06 00 00 00 6b 61 79 2c 20 52 65 64 47 61 74 .....kay, RedGat
01b0 65 2e 53 71 6c 52 65 73 70 6f 6e 73 65 2e 41 6c e.SqlResponse.Al
01c0 65 72 74 52 65 70 6f 73 69 74 6f 72 79 2c 20 56 ertRepository, V
01d0 65 72 73 69 6f 6e 3d 31 2e 33 2e 30 2e 35 38 2c ersion=1.3.0.58,
01e0 20 43 75 6c 74 75 72 65 3d 6e 65 75 74 72 61 6c Culture=neutral
01f0 2c 20 50 75 62 6c 69 63 4b 65 79 54 6f 6b 65 6e , PublicKeyToken
0200 3d 37 66 34 36 35 61 31 63 31 35 36 64 34 64 35 =7f465a1c156d4d5
0210 37 0a 09 07 00 00 00 04 05 00 00 00 23 53 79 73 7...........#Sys
0220 74 65 6d 2e 52 75 6e 74 69 6d 65 2e 52 65 6d 6f tem.Runtime.Remo
0230 74 69 6e 67 2e 43 68 61 6e 6e 65 6c 49 6e 66 6f ting.ChannelInfo
0240 01 00 00 00 0b 63 68 61 6e 6e 65 6c 44 61 74 61 .....channelData
0250 05 09 08 00 00 00 11 07 00 00 00 01 00 00 00 06 ................
0260 09 00 00 00 92 01 52 65 64 47 61 74 65 2e 53 71 ......RedGate.Sq
0270 6c 52 65 73 70 6f 6e 73 65 2e 43 6f 6d 6d 6f 6e lResponse.Common
0280 2e 49 53 71 6c 52 65 67 69 73 74 72 61 74 69 6f .ISqlRegistratio
0290 6e 53 65 72 76 69 63 65 2c 20 52 65 64 47 61 74 nService, RedGat
02a0 65 2e 53 71 6c 52 65 73 70 6f 6e 73 65 2e 43 6f e.SqlResponse.Co
02b0 6d 6d 6f 6e 2c 20 56 65 72 73 69 6f 6e 3d 31 2e mmon, Version=1.
02c0 33 2e 30 2e 35 38 2c 20 43 75 6c 74 75 72 65 3d 3.0.58, Culture=
02d0 6e 65 75 74 72 61 6c 2c 20 50 75 62 6c 69 63 4b neutral, PublicK
02e0 65 79 54 6f 6b 65 6e 3d 37 66 34 36 35 61 31 63 eyToken=7f465a1c
02f0 31 35 36 64 34 64 35 37 10 08 00 00 00 02 00 00 156d4d57........
0300 00 09 0a 00 00 00 09 0b 00 00 00 04 0a 00 00 00 ................
0310 33 53 79 73 74 65 6d 2e 52 75 6e 74 69 6d 65 2e 3System.Runtime.
0320 52 65 6d 6f 74 69 6e 67 2e 43 68 61 6e 6e 65 6c Remoting.Channel
0330 73 2e 43 72 6f 73 73 41 70 70 44 6f 6d 61 69 6e s.CrossAppDomain
0340 44 61 74 61 03 00 00 00 0a 5f 43 6f 6e 74 65 78 Data....._Contex
0350 74 49 44 09 5f 44 6f 6d 61 69 6e 49 44 0c 5f 70 tID._DomainID._p
0360 72 6f 63 65 73 73 47 75 69 64 02 00 01 08 08 08 rocessGuid......
0370 b8 7f 14 00 01 00 00 00 06 0c 00 00 00 24 32 38 .............$28
0380 32 64 37 38 61 66 5f 30 38 38 65 5f 34 61 30 65 2d78af_088e_4a0e
0390 5f 38 66 31 61 5f 61 36 61 36 63 38 61 36 35 64 _8f1a_a6a6c8a65d
03a0 61 66 04 0b 00 00 00 31 53 79 73 74 65 6d 2e 52 af.....1System.R
03b0 75 6e 74 69 6d 65 2e 52 65 6d 6f 74 69 6e 67 2e untime.Remoting.
03c0 43 68 61 6e 6e 65 6c 73 2e 43 68 61 6e 6e 65 6c Channels.Channel
03d0 44 61 74 61 53 74 6f 72 65 02 00 00 00 0c 5f 63 DataStore....._c
03e0 68 61 6e 6e 65 6c 55 52 49 73 0a 5f 65 78 74 72 hannelURIs._extr
03f0 61 44 61 74 61 06 03 24 53 79 73 74 65 6d 2e 43 aData..$System.C
0400 6f 6c 6c 65 63 74 69 6f 6e 73 2e 44 69 63 74 69 ollections.Dicti
0410 6f 6e 61 72 79 45 6e 74 72 79 5b 5d 09 0d 00 00 onaryEntry[]....
0420 00 0a 11 0d 00 00 00 01 00 00 00 06 0e 00 00 00 ................
0430 15 74 63 70 3a 2f 2f 31 37 32 2e 37 30 2e 31 2e .[url=tcp://172.70.1]tcp://172.70.1[/url].
0440 36 3a 37 33 39 38 0b 6:7398.
Data: 0001000000FFFFFFFF010000000000000016111000001001...