Página siguiente Página anterior Índice general

9. Análisis real (Apéndice B)

El Apéndice B no es mas ni menos que un ejemplo 100% práctico y analizado. Se trata de una conexión del portátil con un 7110 a Internet....con Eresmas mismo. Alla vamos....

Voy a desmenuzar una trama antes que nada.

19:18:01.847849 = Hora

i:rsp = Tipo de trama:Flag C/R. Si 1 cmd, si 0 rsp.

< = sentido de la comunicación

ca=1e = ?????

pf=1 = bandera poll/final

nr=1  = trama que se espera

ns=7  = número de trama

LM slsap=04 dlsap=10 TTP credits=1 = nivel superior TinyTP y SAP

(19) = tamaño del campo de información, creo.

NOTA: Decir que el contenido de la trama que muestra el irdadump viene en hexadecimal primero y en ascii en la linea inferior y que no muestra todo el contenido del paquete. No es un sniffer.


[ Empezamos con las típicas señales de difusión con paquetes U de tipo XID ]

19:17:56.046160 xid:cmd 1a6a9e08 > ffffffff S=6 s=0 (14) 
        ff3f01089e6a1affffffff010000
         . ? . . . j . . . . . . . .
19:17:56.136126 xid:cmd 1a6a9e08 > ffffffff S=6 s=1 (14) 
        ff3f01089e6a1affffffff010100
         . ? . . . j . . . . . . . .
19:17:56.226120 xid:cmd 1a6a9e08 > ffffffff S=6 s=2 (14) 
        ff3f01089e6a1affffffff010200
         . ? . . . j . . . . . . . .
19:17:56.316120 xid:cmd 1a6a9e08 > ffffffff S=6 s=3 (14) 
        ff3f01089e6a1affffffff010300
         . ? . . . j . . . . . . . .
19:17:56.400635 xid:rsp 1a6a9e08 < ab580000 S=6 s=3 Nokia 7110 hint=b125 [ PnP 
Modem Fax Telephony IrCOMM IrOBEX ] (27) 
        febf01000058ab089e6a1a010300b125004e6f6b69612037313130
         . . . . . X . . . j . . . . . % . N o k i a   7 1 1 0


[ Respuesta del Nokia con otro XID y el bit C/R cambiado ]


19:17:56.406121 xid:cmd 1a6a9e08 > ffffffff S=6 s=4 (14) 
        ff3f01089e6a1affffffff010400
         . ? . . . j . . . . . . . .
19:17:56.496120 xid:cmd 1a6a9e08 > ffffffff S=6 s=5 (14) 
        ff3f01089e6a1affffffff010500
         . ? . . . j . . . . . . . .
19:17:56.586121 xid:cmd 1a6a9e08 > ffffffff S=6 s=* annapurna hint=8404 [ 
Computer IrCOMM ] (26) 
        ff3f01089e6a1affffffff01ff00840400616e6e617075726e61
         . ? . . . j . . . . . . . . . . . a n n a p u r n a

[ Aquí es donde el PC ha visto la contestación del Nokia, antes habia soltado
dos señales de difusión mas. El PC anuncia en el campo I su nombre y el protocolo IrCOMM de
nivel superior ] 


19:17:56.601954 snrm:cmd ca=fe pf=1 1a6a9e08 > ab580000 new-ca=1e (33) 
        ff93089e6a1a000058ab1e0102fe0182010183013f84017f8501ff8601070801
         . . . . j . . . X . . . . . . . . . . . ? . . . . . . . . . . .
19:17:56.741781 ua:rsp ca=1e pf=1 1a6a9e08 < ab580000 (31) 
        1e73000058ab089e6a1a01013e8201018301028401018501fc860107080107
         . s . . X . . . j . . . > . . . . . . . . . . . . . . . . . .

[ Paquete SNRM con la respuesta UA. Ahora se reinician los registros NR Y NS para
empezar la comunicación. Hemos pasado de NDM a NRM ]



19:17:56.741839 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:17:56.750896 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .

[ Veis, el nr de los dos está a 0. Estamos ya con tramas Supervisor, el PF es el
bit Poll/final. ]



19:17:56.750911 i:cmd  > ca=1e pf=1 nr=0 ns=0 LM slsap=11 dlsap=00 CONN_CMD (6) 
        1f1080110100
         . . . . . .
19:17:56.760470 i:rsp  < ca=1e pf=1 nr=1 ns=0 LM slsap=00 dlsap=11 CONN_RSP (6) 
        1e3091008100
         . 0 . . . .
19:17:56.760489 i:cmd  > ca=1e pf=1 nr=1 ns=1 LM slsap=11 dlsap=00 
GET_VALUE_BY_CLASS: "IrDA:IrCOMM" "Parameters" (28) 
        1f320011840b497244413a4972434f4d4d0a506172616d6574657273
         . 2 . . . . I r D A : I r C O M M . P a r a m e t e r s
19:17:56.775481 i:rsp  < ca=1e pf=1 nr=2 ns=1 LM slsap=00 dlsap=11 
GET_VALUE_BY_CLASS: Success N/A (19) 
        1e521100840000010004020006000104010101
         . R . . . . . . . . . . . . . . . . .
19:17:56.775496 i:cmd  > ca=1e pf=1 nr=2 ns=2 LM slsap=11 dlsap=00 DISC (6) 
        1f5480110201
         . T . . . .
19:17:56.783205 rr:rsp < ca=1e pf=1 nr=3 (2) 
        1e71
         . q

[ Acabamos de negociar el IrCOMM ]


19:17:56.783218 i:cmd  > ca=1e pf=1 nr=2 ns=3 LM slsap=12 dlsap=00 CONN_CMD (6) 
        1f5680120100
         . V . . . .
19:17:56.792779 i:rsp  < ca=1e pf=1 nr=4 ns=2 LM slsap=00 dlsap=12 CONN_RSP (6) 
        1e9492008100
         . . . . . .
19:17:56.792794 i:cmd  > ca=1e pf=1 nr=3 ns=4 LM slsap=12 dlsap=00 
GET_VALUE_BY_CLASS: "IrDA:IrCOMM" "IrDA:TinyTP:LsapSel" (37) 
        1f780012840b497244413a4972434f4d4d13497244413a54696e7954503a4c73
         . x . . . . I r D A : I r C O M M . I r D A : T i n y T P : L s
19:17:56.807427 i:rsp  < ca=1e pf=1 nr=5 ns=3 LM slsap=00 dlsap=12 
GET_VALUE_BY_CLASS: Success Integer: 04 (15) 
        1eb612008400000100040100000004
         . . . . . . . . . . . . . . .
19:17:56.807438 i:cmd  > ca=1e pf=1 nr=4 ns=5 LM slsap=12 dlsap=00 DISC (6) 
        1f9a80120201
         . . . . . .

19:17:56.815513 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .

[ Hemos negociado el Tiny TP con el SAP. Fijaros que ahora los paquetes 
incorporarán mas info ]


19:17:56.815522 i:cmd  > ca=1e pf=1 nr=4 ns=6 LM slsap=10 dlsap=04 CONN_CMD TTP 
credits=0(7) 
        1f9c841001000e
         . . . . . . .
19:17:56.825177 i:rsp  < ca=1e pf=1 nr=7 ns=4 LM slsap=04 dlsap=10 CONN_RSP TTP 
credits=0(7) 
        1ef89004810005
         . . . . . . .

[ Habría que mirar especificaciones del TinyTP para entender este par de
paquetes ]


19:17:56.825196 rr:cmd > ca=1e pf=1 nr=5 (2) 
        1fb1
         . .
19:17:56.834064 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .
19:17:56.834072 i:cmd  > ca=1e pf=1 nr=5 ns=7 LM slsap=10 dlsap=04 TTP credits=0 
(24) 
        1fbe0410001200010410040000258011011312010420010c
         . . . . . . . . . . . . . % . . . . . . .   . .
19:17:56.843203 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:17:56.843211 rr:cmd > ca=1e pf=1 nr=5 (2) 
        1fb1
         . .
19:17:56.855087 i:rsp  < ca=1e pf=1 nr=0 ns=5 LM slsap=04 dlsap=10 TTP credits=1 
(32) 
        1e1a1004011a010101100400004b0011010312013f1302111314021311210130
         . . . . . . . . . . . . . K . . . . . . ? . . . . . . . . ! . 0
19:17:56.855115 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:17:56.866899 i:rsp  < ca=1e pf=1 nr=0 ns=6 LM slsap=04 dlsap=10 TTP credits=0 
(9) 
        1e1c10040003210130
         . . . . . . ! . 0
19:17:56.866918 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:17:56.875511 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:17:56.916120 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:17:56.926282 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:17:57.026120 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:17:57.037053 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:17:57.186119 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:17:57.193977 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:17:57.386119 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:17:57.397065 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:17:57.646119 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .

[ Mala comunicación. Mil perdones, estoy en el coche haciendo la prueba]


19:18:01.686119 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:18:01.694030 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:01.776296 i:cmd  > ca=1e pf=1 nr=7 ns=0 LM slsap=10 dlsap=04 TTP credits=2 
(7) 
        1ff0041002000d
         . . . . . . .
19:18:01.786340 rr:rsp < ca=1e pf=1 nr=1 (2) 
        1e31
         . 1
19:18:01.786348 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:18:01.795571 rr:rsp < ca=1e pf=1 nr=1 (2) 
        1e31
         . 1
19:18:01.836119 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:18:01.847849 i:rsp  < ca=1e pf=1 nr=1 ns=7 LM slsap=04 dlsap=10 TTP credits=1 
(19) 
        1e3e100401000d0a4f4b0d0a0d0a4f4b0d0a0d
         . > . . . . . . O K . . . . O K . . .
19:18:01.847866 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:01.855573 rr:rsp < ca=1e pf=1 nr=1 (2) 
        1e31
         . 1
19:18:01.855595 i:cmd  > ca=1e pf=1 nr=0 ns=1 LM slsap=10 dlsap=04 DISC (6) 
        1f1284100201
         . . . . . .
19:18:01.864802 rr:rsp < ca=1e pf=1 nr=2 (2) 
        1e51
         . Q

[ MMMMm....prometí que era real el registro, así que ahora se ve que ha fallado algo
porque decide volver a empezar ]


19:18:01.864811 i:cmd  > ca=1e pf=1 nr=0 ns=2 LM slsap=14 dlsap=00 CONN_CMD (6) 
        1f1480140100
         . . . . . .
19:18:01.874376 i:rsp  < ca=1e pf=1 nr=3 ns=0 LM slsap=00 dlsap=14 CONN_RSP (6) 
        1e7094008100
         . p . . . .
19:18:01.874394 i:cmd  > ca=1e pf=1 nr=1 ns=3 LM slsap=14 dlsap=00 
GET_VALUE_BY_CLASS: "IrDA:IrCOMM" "Parameters" (28) 
        1f360014840b497244413a4972434f4d4d0a506172616d6574657273
         . 6 . . . . I r D A : I r C O M M . P a r a m e t e r s
19:18:01.889388 i:rsp  < ca=1e pf=1 nr=4 ns=1 LM slsap=00 dlsap=14 
GET_VALUE_BY_CLASS: Success N/A (19) 
        1e921400840000010004020006000104010101
         . . . . . . . . . . . . . . . . . . .
19:18:01.889401 i:cmd  > ca=1e pf=1 nr=2 ns=4 LM slsap=14 dlsap=00 DISC (6) 
        1f5880140201
         . X . . . .
19:18:01.897110 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:18:01.897121 i:cmd  > ca=1e pf=1 nr=2 ns=5 LM slsap=15 dlsap=00 CONN_CMD (6) 
        1f5a80150100
         . Z . . . .
19:18:01.906683 i:rsp  < ca=1e pf=1 nr=6 ns=2 LM slsap=00 dlsap=15 CONN_RSP (6) 
        1ed495008100
         . . . . . .
19:18:01.906694 i:cmd  > ca=1e pf=1 nr=3 ns=6 LM slsap=15 dlsap=00 
GET_VALUE_BY_CLASS: "IrDA:IrCOMM" "IrDA:TinyTP:LsapSel" (37) 
        1f7c0015840b497244413a4972434f4d4d13497244413a54696e7954503a4c73
         . | . . . . I r D A : I r C O M M . I r D A : T i n y T P : L s
19:18:01.921331 i:rsp  < ca=1e pf=1 nr=7 ns=3 LM slsap=00 dlsap=15 
GET_VALUE_BY_CLASS: Success Integer: 04 (15) 
        1ef615008400000100040100000004
         . . . . . . . . . . . . . . .
19:18:01.921341 i:cmd  > ca=1e pf=1 nr=4 ns=7 LM slsap=15 dlsap=00 DISC (6) 
        1f9e80150201
         . . . . . .
19:18:01.929417 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:01.929426 i:cmd  > ca=1e pf=1 nr=4 ns=0 LM slsap=13 dlsap=04 CONN_CMD TTP 
credits=0(7) 
        1f90841301000e
         . . . . . . .
19:18:01.939083 i:rsp  < ca=1e pf=1 nr=1 ns=4 LM slsap=04 dlsap=13 CONN_RSP TTP 
credits=0(7) 
        1e389304810005
         . 8 . . . . .
19:18:01.939103 rr:cmd > ca=1e pf=1 nr=5 (2) 
        1fb1
         . .
19:18:01.947880 rr:rsp < ca=1e pf=1 nr=1 (2) 
        1e31
         . 1
19:18:01.947888 i:cmd  > ca=1e pf=1 nr=5 ns=1 LM slsap=13 dlsap=04 TTP credits=0 
(24) 
        1fb20413001200010410040000258011011312010420010c
         . . . . . . . . . . . . . % . . . . . . .   . .
19:18:01.957111 rr:rsp < ca=1e pf=1 nr=2 (2) 
        1e51
         . Q
19:18:01.957119 i:cmd  > ca=1e pf=1 nr=5 ns=2 LM slsap=13 dlsap=04 TTP credits=0 
(11) 
        1fb4041300000d0d0d0d0d
         . . . . . . . . . . .
19:18:01.968995 i:rsp  < ca=1e pf=1 nr=3 ns=5 LM slsap=04 dlsap=13 TTP credits=1 
(32) 
        1e7a1304011a010101100400004b0011010312013f1302111314021311210130
         . z . . . . . . . . . . . K . . . . . . ? . . . . . . . . ! . 0
19:18:01.969024 i:cmd  > ca=1e pf=1 nr=6 ns=3 LM slsap=13 dlsap=04 TTP credits=0 
(21) 
        1fd60413000f100400002580110113120104200100
         . . . . . . . . . . % . . . . . . .   . .
19:18:01.980806 i:rsp  < ca=1e pf=1 nr=4 ns=6 LM slsap=04 dlsap=13 TTP credits=0 
(9) 
        1e9c13040003210130
         . . . . . . ! . 0
19:18:01.980821 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .

[ Parece que ahora va bien. Las banderas de slsap y dlsap están por encima del
IrLAP. O son del Tiny TP a nivel de transporte o pertenecen al SAP también en
ese nivel. Vamos a observar estas tramas que vienen ]


19:18:01.989420 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:02.036120 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:18:02.045604 i:rsp  < ca=1e pf=1 nr=4 ns=7 LM slsap=04 dlsap=13 TTP credits=2 
(11) 
        1e9e130402000d0d0d0d0d
         . . . . . . . . . . .
19:18:02.045616 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:02.054036 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:02.096119 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:02.104804 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:02.196119 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:02.206346 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:02.356119 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:02.363269 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:02.456140 i:cmd  > ca=1e pf=1 nr=0 ns=4 LM slsap=13 dlsap=04 TTP credits=3 
(21) 
        1f180413030f10040000258011011312013f20010c
         . . . . . . . . . . % . . . . . . ?   . .
19:18:02.469426 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:18:02.469434 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:02.478655 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:18:02.478663 i:cmd  > ca=1e pf=1 nr=0 ns=5 LM slsap=13 dlsap=04 TTP credits=0 
(11) 
        1f1a041300000d0d0d0d0d
         . . . . . . . . . . .
19:18:02.487886 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:02.487894 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:02.497117 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:02.546119 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:02.557637 i:rsp  < ca=1e pf=1 nr=6 ns=0 LM slsap=04 dlsap=13 TTP credits=2 
(11) 
        1ed0130402000d0d0d0d0d
         . . . . . . . . . . .
19:18:02.557648 rr:cmd > ca=1e pf=1 nr=1 (2) 
        1f31
         . 1
19:18:02.566348 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:02.616119 rr:cmd > ca=1e pf=1 nr=1 (2) 
        1f31
         . 1
19:18:02.626349 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:02.656234 i:cmd  > ca=1e pf=1 nr=1 ns=6 LM slsap=13 dlsap=04 TTP credits=1 
(10) 
        1f3c0413010041545a0d
         . < . . . . A T Z .
19:18:02.667980 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .


[ ¡Kirooooooopa! este ATZ me suena....... inicialización del módem]




19:18:02.667988 rr:cmd > ca=1e pf=1 nr=1 (2) 
        1f31
         . 1
19:18:02.677736 i:rsp  < ca=1e pf=1 nr=7 ns=1 LM slsap=04 dlsap=13 TTP credits=1 
(9) 
        1ef213040103210112
         . . . . . . ! . .
19:18:02.677750 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:02.686442 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .
19:18:02.736119 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:02.747584 i:rsp  < ca=1e pf=1 nr=7 ns=2 LM slsap=04 dlsap=13 TTP credits=0 
(16) 
        1ef41304000041545a0d0d0a4f4b0d0a
         . . . . . . A T Z . . . O K . .


[ El módem contesta, todo OK.]


19:18:02.747595 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:02.755672 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .
19:18:02.796119 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:02.806442 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .
19:18:02.846547 i:cmd  > ca=1e pf=1 nr=3 ns=7 LM slsap=13 dlsap=04 TTP credits=2 
(21) 
        1f7e0413020041544454203930383235303235300d
         . ~ . . . . A T D T   9 0 8 2 5 0 2 5 0 .

[ Marcamoooooooos. ¿Eresmas?....Atención al detalle de a continuación, que me
sirve para explicar algo muy bien. ]


19:18:02.857121 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:02.857129 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:02.866351 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:02.916119 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:02.928028 i:rsp  < ca=1e pf=1 nr=0 ns=3 LM slsap=04 dlsap=13 TTP credits=1 
(21) 
        1e161304010041544454203930383235303235300d
         . . . . . . A T D T   9 0 8 2 5 0 2 5 0 .

[Aquí es donde uno se da cuenta que el infrarrojo falla mas que una escopeta de
feria. Normal, tengo el portátil encima de mis piernas, el móvil a un lado
apollado en el posabrazos del coche y estoy en un parking XDDDD. 
Analizo la secuencia, fijaros en los nr ns. Lo represento como un cuento:
el primer ATDT está en la trama 7 y espera la 3.
El otro, que creo que está sordo, nos contesta con la cero: Hola, soy 0.
No no melón, espero 3. (que sordo esta el cabrón)
Si, je, soy cero. 
La puta, espero el 3!!!! (cago en la leche que soooordo)
Hostias, mandando la 3. ]

19:18:02.928042 rr:cmd > ca=1e pf=1 nr=4 (2) 
        1f91
         . .
19:18:02.935584 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:02.976119 rr:cmd > ca=1e pf=1 nr=4 (2) 
        1f91
         . .
19:18:02.986362 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .

[ y mas rr:cmp, rr:rsp seguidos, es que estoy en medio del coche sorry ]



19:18:07.256119 rr:cmd > ca=1e pf=1 nr=4 (2) 
        1f91
         . .
19:18:07.264147 i:rsp  < ca=1e pf=1 nr=0 ns=4 LM slsap=04 dlsap=13 TTP credits=0 
(9) 
        1e1813040003210132
         . . . . . . ! . 2
19:18:07.264172 rr:cmd > ca=1e pf=1 nr=5 (2) 
        1fb1
         . .
19:18:07.274087 i:rsp  < ca=1e pf=1 nr=0 ns=5 LM slsap=04 dlsap=13 TTP credits=0 
(17) 
        1e1a130400000d0a434152524945520d0a
         . . . . . . . . C A R R I E R . .


[ Ale, ya tenemos línea ]



19:18:07.274101 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:18:07.281991 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:07.326119 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:18:07.337374 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:07.436119 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:18:07.443529 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:07.586119 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .

[ ............ y mas todavía de rr:cdm, rr:rsp ..........]



19:18:23.193761 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:23.686132 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:18:23.697464 i:rsp  < ca=1e pf=1 nr=0 ns=6 LM slsap=04 dlsap=13 TTP credits=0 
(9) 
        1e1c130400032101b8
         . . . . . . ! . .
19:18:23.697516 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:18:23.707839 i:rsp  < ca=1e pf=1 nr=0 ns=7 LM slsap=04 dlsap=13 TTP credits=0 
(22) 
        1e1e130400000d0a434f4e4e45435420393630300d0a
         . . . . . . . . C O N N E C T   9 6 0 0 . .

[ Conectamos, cómo no..... a 9600 ]


19:18:23.707890 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:23.715302 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:23.756149 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:23.766081 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:23.856130 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:18:23.867616 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:24.016147 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .

[ ......... nada interesante hasta que ..............]



19:18:26.376135 rr:cmd > ca=1e pf=1 nr=1 (2) 
        1f31
         . 1
19:18:26.387650 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:26.536129 rr:cmd > ca=1e pf=1 nr=1 (2) 
        1f31
         . 1
19:18:26.551641 i:rsp  < ca=1e pf=1 nr=4 ns=1 LM slsap=04 dlsap=13 TTP credits=0 
(60) 
        1e92130400007eff7d23c0217d212e7d207d397d227d267d207d2a7d207d207d
         . . . . . . ~ . } # . ! } ! . }   } 9 } " } & }   } * }   }   }


[ Empieza la negociación del PPP. Joer que lento es esto. ]


19:18:26.551681 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:26.563121 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:26.606136 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:26.613803 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:26.706139 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:26.715346 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:26.856140 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:26.867657 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:18:26.976157 i:cmd  > ca=1e pf=1 nr=2 ns=4 LM slsap=13 dlsap=04 TTP credits=1 
(24) 
        1f580413011220010c10040000258011011312013f20010c
         . X . . . .   . . . . . . % . . . . . . ?   . .
19:18:26.987659 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:18:26.987696 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:26.996889 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:18:27.032719 i:cmd  > ca=1e pf=1 nr=2 ns=5 LM slsap=13 dlsap=04 TTP credits=0 
(53) 
        1f5a041300007eff7d23c0217d217d217d207d347d227d267d207d207d207d20
         . Z . . . . ~ . } # . ! } ! } ! }   } 4 } " } & }   }   }   }  


[ Siiiigueeee negociando ]




19:18:27.047662 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:27.047699 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:27.056892 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:27.106148 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:27.116891 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:27.216149 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:27.227666 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:27.376140 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:27.384587 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:27.576136 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:27.587668 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:27.836144 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:18:27.852402 i:rsp  < ca=1e pf=1 nr=6 ns=2 LM slsap=04 dlsap=13 TTP credits=2 
(53) 
        1ed4130402007eff7d23c0217d227d217d207d347d227d267d207d207d207d20
         . . . . . . ~ . } # . ! } " } ! }   } 4 } " } & }   }   }   }  


[ ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ ]


19:18:27.852467 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:27.859983 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:27.906142 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:27.915364 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:28.006145 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:28.016902 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:28.166143 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:28.173830 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:28.366151 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:28.376908 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:28.626143 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:18:28.642251 i:rsp  < ca=1e pf=1 nr=6 ns=3 LM slsap=04 dlsap=13 TTP credits=0 
(59) 
        1ed6130400007eff7d23c0217d212f7d207d397d227d267d207d2a7d207d207d
         . . . . . . ~ . } # . ! } ! / }   } 9 } " } & }   } * }   }   }
19:18:28.642294 rr:cmd > ca=1e pf=1 nr=4 (2) 
        1f91
         . .
19:18:28.653836 rr:rsp < ca=1e pf=1 nr=6 (2) 
        1ed1
         . .
19:18:28.653876 i:cmd  > ca=1e pf=1 nr=4 ns=6 LM slsap=13 dlsap=04 TTP credits=2 
(59) 
        1f9c041302007eff7d23c0217d222f7d207d397d227d267d207d2a7d207d207d
         . . . . . . ~ . } # . ! } " / }   } 9 } " } & }   } * }   }   }
19:18:28.672387 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .
19:18:28.672420 rr:cmd > ca=1e pf=1 nr=4 (2) 
        1f91
         . .
19:18:28.681615 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .
19:18:28.726135 rr:cmd > ca=1e pf=1 nr=4 (2) 
        1f91
         . .
19:18:28.737005 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .

[ .......... blablabla y .........]


19:18:29.480099 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .
19:18:29.480149 i:cmd  > ca=1e pf=1 nr=5 ns=7 LM slsap=13 dlsap=04 TTP credits=1 
(42) 
        1fbe04130100c2230260001f1017175ff6dded3f92d9f17f50069944e3747540
         . . . . . . . # . ` . . . . . _ . . . ? . . . . P . . D . t u @


[ Páralo POOOOOOOOOOL. Aquí, aunque parezca mentira, estoy enviado la contraseña, el
famoso tu@eresmas ]


19:18:29.493849 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:18:29.493891 rr:cmd > ca=1e pf=1 nr=5 (2) 
        1fb1
         . .
19:18:29.503079 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .


[ ..... ZZ ZZ ZZ zz zz zz zz ZZ ZZ ZZ .......]



19:20:38.575350 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:20:38.816130 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:20:38.824588 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:20:39.116129 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:20:39.130874 i:rsp  < ca=1e pf=1 nr=0 ns=6 LM slsap=04 dlsap=13 TTP credits=1 
(72) 
        1e1c130401007e214500003ca79240002e061a73d8ef23653e52501000508000
         . . . . . . ~ ! E . . < . . @ . . . . s . . # e > R P . . P . .
19:20:39.130928 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:20:39.138443 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:20:39.138475 i:cmd  > ca=1e pf=1 nr=7 ns=0 LM slsap=13 dlsap=04 TTP credits=1 
(63) 
        1ff0041301007e2145000034dd6940004006d2a33e525010d8ef236580000050
         . . . . . . ~ ! E . . 4 . i @ . @ . . . > R P . . . # e . . . P
19:20:39.152284 rr:rsp < ca=1e pf=1 nr=1 (2) 
        1e31
         . 1
19:20:39.152309 i:cmd  > ca=1e pf=1 nr=7 ns=1 LM slsap=13 dlsap=04 TTP credits=0 
(130) 
        1ff2041300002145000163dd6a40004006d1733e525010d8ef23658000005085
         . . . . . . ! E . . c . j @ . @ . . s > R P . . . # e . . . P .
19:20:39.170743 rr:rsp < ca=1e pf=1 nr=2 (2) 
        1e51
         . Q


[ Abrimos el navegador yyyyyyyyyyy...... ]


19:20:39.170772 i:cmd  > ca=1e pf=1 nr=7 ns=2 LM slsap=13 dlsap=04 TTP credits=0 
(130) 
        1ff4041300003436360d0a486f73743a207777772e676f6f676c652e636f6d0d
         . . . . . . 4 6 6 . . H o s t :   w w w . g o o g l e . c o m .
19:20:39.189205 rr:rsp < ca=1e pf=1 nr=3 (2) 
        1e71
         . q
19:20:39.189232 i:cmd  > ca=1e pf=1 nr=7 ns=3 LM slsap=13 dlsap=04 TTP credits=0 
(117) 
        1ff604130000742d4c616e67756167653a20656e0d0a4163636570742d456e63
         . . . . . . t - L a n g u a g e :   e n . . A c c e p t - E n c
19:20:39.207918 i:rsp  < ca=1e pf=1 nr=4 ns=7 LM slsap=04 dlsap=13 TTP credits=4 
(5) 
        1e9e130404
         . . . . .


[ jejejejee, efectivamente buscamos algo en google.com, ¿por qué no? ]



19:20:39.207953 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .
19:20:39.216901 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:20:39.266138 rr:cmd > ca=1e pf=1 nr=0 (2) 
        1f11
         . .


[ ......un poco lento si es si....ZZZZZ ....]


19:20:40.695991 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:20:40.707686 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:20:40.756128 rr:cmd > ca=1e pf=1 nr=2 (2) 
        1f51
         . Q
19:20:40.779123 i:rsp  < ca=1e pf=1 nr=4 ns=2 LM slsap=04 dlsap=13 TTP credits=0 
(130) 
        1e94130400000d0a436f6e74656e742d547970653a20746578742f68746d6c0d
         . . . . . . . . C o n t e n t - T y p e :   t e x t / h t m l .
19:20:40.779180 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:20:40.790771 rr:rsp < ca=1e pf=1 nr=4 (2) 
        1e91
         . .
19:20:40.790805 i:cmd  > ca=1e pf=1 nr=3 ns=4 LM slsap=13 dlsap=04 TTP credits=3 
(63) 
        1f78041303007e2145000034dd6b40004006d2a13e525010d8ef236580000050
         . x . . . . ~ ! E . . 4 . k @ . @ . . . > R P . . . # e . . . P
19:20:40.804613 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:20:40.804645 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:20:40.813846 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:20:40.856141 rr:cmd > ca=1e pf=1 nr=3 (2) 
        1f71
         . q
19:20:40.875959 i:rsp  < ca=1e pf=1 nr=5 ns=3 LM slsap=04 dlsap=13 TTP credits=1 
(130) 
        1eb6130401001996d54c0000dd213c68746d6c3e3c686561643e3c4d45544120
         . . . . . . . . . L . . . ! < h t m l > < h e a d > < M E T A  
19:20:40.876038 rr:cmd > ca=1e pf=1 nr=4 (2) 
        1f91
         . .
19:20:40.887700 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:20:40.936128 rr:cmd > ca=1e pf=1 nr=4 (2) 
        1f91
         . .
19:20:40.963891 i:rsp  < ca=1e pf=1 nr=5 ns=4 LM slsap=04 dlsap=13 TTP credits=0 
(130) 
        1eb8130400000a626f64792c74642c612c702c2e687b666f6e742d66616d696c
         . . . . . . . b o d y , t d , a , p , . h { f o n t - f a m i l
19:20:40.963937 rr:cmd > ca=1e pf=1 nr=5 (2) 
        1fb1
         . .
19:20:40.975377 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:20:41.016128 rr:cmd > ca=1e pf=1 nr=5 (2) 
        1fb1
         . .
19:20:41.026153 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:20:41.126137 rr:cmd > ca=1e pf=1 nr=5 (2) 
        1fb1
         . .
19:20:41.148073 i:rsp  < ca=1e pf=1 nr=5 ns=5 LM slsap=04 dlsap=13 TTP credits=0 
(130) 
        1eba130400000a3c212d2d0a66756e6374696f6e20736628297b646f63756d65
         . . . . . . . < ! - - . f u n c t i o n   s f ( ) { d o c u m e
19:20:41.148118 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:20:41.155379 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .
19:20:41.196128 rr:cmd > ca=1e pf=1 nr=6 (2) 
        1fd1
         . .
19:20:41.217589 i:rsp  < ca=1e pf=1 nr=5 ns=6 LM slsap=04 dlsap=13 TTP credits=0 
(130) 
        1ebc13040000756d656e742e662e712e76616c75652e6c656e677468296c6f63
         . . . . . . u m e n t . f . q . v a l u e . l e n g t h ) l o c
19:20:41.217638 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:20:41.229226 rr:rsp < ca=1e pf=1 nr=5 (2) 
        1eb1
         . .

[ Todo esto nos sirve como referencia para ver la rapidez de envío/recepción de
las tramas, otra petición si eso................]

         . .
19:21:05.901502 i:cmd  > ca=1e pf=1 nr=0 ns=5 LM slsap=13 dlsap=04 TTP credits=0 
(130) 
        1f1a0413000021450001b3d2f640004006d7973e525010d8ef27658001005085
         . . . . . . ! E . . . . . @ . @ . . . > R P . . . ' e . . . P .
19:21:05.927221 i:rsp  < ca=1e pf=1 nr=6 ns=0 LM slsap=04 dlsap=13 TTP credits=1 
(63) 
        1ed0130401007e214500003461e240002e065c2bd8ef27653e52501000508001
         . . . . . . ~ ! E . . 4 a . @ . . . \ + . . ' e > R P . . P . .
19:21:05.927284 i:cmd  > ca=1e pf=1 nr=1 ns=6 LM slsap=13 dlsap=04 TTP credits=0 
(130) 
        1f3c0413000020687474703a2f2f7777772e676f6f676c652e636f6d2f0d0a43
         . < . . . .   h t t p : / / w w w . g o o g l e . c o m / . . C
19:21:05.949613 rr:rsp < ca=1e pf=1 nr=7 (2) 
        1ef1
         . .
19:21:05.949646 i:cmd  > ca=1e pf=1 nr=1 ns=7 LM slsap=13 dlsap=04 TTP credits=0 
(130) 
        1f3e041300006c612f352e3020285831313b20553b204c696e757820322e342e
         . > . . . . l a / 5 . 0   ( X 1 1 ;   U ;   L i n u x   2 . 4 .
19:21:05.967983 rr:rsp < ca=1e pf=1 nr=0 (2) 
        1e11
         . .
19:21:05.968013 i:cmd  > ca=1e pf=1 nr=1 ns=0 LM slsap=13 dlsap=04 TTP credits=0 
(73) 
        1f3004130000652c636f6d70726573732c6964656e746974790d0a4b6565702d
         . 0 . . . . e , c o m p r e s s , i d e n t i t y . . K e e p -
19:21:05.982073 i:rsp  < ca=1e pf=1 nr=1 ns=1 LM slsap=04 dlsap=13 TTP credits=4 
(5) 
        1e32130404
         . 2 . . .
19:21:05.982090 i:cmd  > ca=1e pf=1 nr=2 ns=1 LM slsap=13 dlsap=04 TTP credits=1 
(63) 
        1f52041301002145000034d2f740004006d9153e525010d8ef27658001005085
         . R . . . . ! E . . 4 . . @ . @ . . . > R P . . . ' e . . . P .

[ ..... colguemos ..... ]


19:37:56.856123 rr:cmd > ca=1e pf=1 nr=7 (2) 
        1ff1
         . .
19:37:56.866967 rr:rsp < ca=1e pf=1 nr=1 (2) 
        1e31
         . 1
19:37:56.976127 disc:cmd > ca=0x1e pf=1 (2) 
        1f53
         . S
19:37:57.006146 ua:rsp ca=1e pf=1 1a6a9e08 < ab580000 (10) 
        1e73000058ab089e6a1a
         . s . . X . . . j .

24280 packets received by filter


Página siguiente Página anterior Índice general