Ethereal-users: [Ethereal-users] Weird Data

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Michael A. Painter Jr." <mapainter@xxxxxxxx>
Date: 30 Oct 2002 09:03:43 -0500
Hi all,
	I'm getting some weird data at night that I can't seem to find on the
net.  I'll paste it below.  Maybe someone will know what this stuff is. 
I see a lot of it a work.  But I have yet to see any ip traffic.




Frame 5 (52 on wire, 52 captured)
    Arrival Time: Oct 30, 2002 05:00:35.691604000
    Time delta from previous packet: 299.528390000 seconds
    Time relative to first packet: 1019.529702000 seconds
    Frame Number: 5
    Packet Length: 52 bytes
    Capture Length: 52 bytes
IEEE 802.3 Ethernet 
    Destination: 8b:2c:74:30:06:00 (8b:2c:74:30:06:00)
    Source: 5d:2e:7d:40:87:b6 (5d:2e:7d:40:87:b6)
    Length: 38
Logical-Link Control
    DSAP: Unknown (0x6c)
    IG Bit: Group
    SSAP: Unknown (0x40)
    CR Bit: Response
    Control field: I, N(R) = 32, N(S) = 75 (0x4096)
        0100 000. .... .... = N(R) = 32
        .... .... 1001 011. = N(S) = 75
        .... .... .... ...0 = Information frame
Data (34 bytes)

0000  8b 2c 74 30 06 00 5d 2e 7d 40 87 b6 00 26 6d 41   .,t0..].}@...&mA
0010  96 40 dd 91 a8 89 28 17 0a 42 24 47 5d 91 62 09   .@....(..B$G].b.
0020  8d a6 fb 7d 94 c8 c1 05 a6 06 c2 95 b1 8b 00 96   ...}............
0030  04 a2 5b 1a                                       ..[.

Frame 6 (52 on wire, 52 captured)
    Arrival Time: Oct 30, 2002 05:00:35.695581000
    Time delta from previous packet: 0.003977000 seconds
    Time relative to first packet: 1019.533679000 seconds
    Frame Number: 6
    Packet Length: 52 bytes
    Capture Length: 52 bytes
IEEE 802.3 Ethernet 
    Destination: 8a:da:56:4e:30:82 (8a:da:56:4e:30:82)
    Source: d5:56:56:e4:92:77 (d5:56:56:e4:92:77)
    Length: 38
Logical-Link Control
    DSAP: Unknown (0x90)
    IG Bit: Group
    SSAP: Unknown (0x40)
    CR Bit: Command
    Control field: I P, N(R) = 104, N(S) = 75 (0xD196)
        1101 000. .... .... = N(R) = 104
        .... .... 1001 011. = N(S) = 75
        .... ...1 .... .... = Poll
        .... .... .... ...0 = Information frame
Data (34 bytes)

0000  8a da 56 4e 30 82 d5 56 56 e4 92 77 00 26 91 40   ..VN0..VV..w.&.@
0010  96 d1 b5 27 8d 68 a2 93 f5 68 14 e2 fc 68 a4 c7   ...'.h...h...h..
0020  75 41 96 51 fd 82 01 32 48 fd 2b e6 01 c4 e6 60   uA.Q...2H.+....`
0030  88 48 4e 00                                       .HN.

Frame 13 (74 on wire, 74 captured)
    Arrival Time: Oct 30, 2002 05:35:48.964228000
    Time delta from previous packet: 252.800898000 seconds
    Time relative to first packet: 3132.802326000 seconds
    Frame Number: 13
    Packet Length: 74 bytes
    Capture Length: 74 bytes
IEEE 802.3 Ethernet 
    Destination: 2b:32:57:78:be:9b (2b:32:57:78:be:9b)
    Source: 7d:a9:cb:f9:12:35 (7d:a9:cb:f9:12:35)
    Length: 60
Logical-Link Control
    DSAP: Unknown (0x48)
    IG Bit: Group
    SSAP: Unknown (0xb6)
    CR Bit: Response
    Control field: U F, func = RD (0x53)
        ...1 .... = Final
        010. 00.. = Request Disconnect
        .... ..11 = Unnumbered frame
Data (57 bytes)

0000  2b 32 57 78 be 9b 7d a9 cb f9 12 35 00 3c 49 b7   +2Wx..}....5.<I.
0010  53 d3 b9 f2 43 01 5f 34 8a 74 00 5c c7 ab 7f 65   S...C._4.t.\...e
0020  2b 27 03 9e 00 b1 de 96 6b 47 0f 1a 09 b7 77 6f   +'......kG....wo
0030  7b aa a4 44 01 80 5b f4 1d fb df ba 48 17 33 32   {..D..[.....H.32
0040  85 c8 4c 6d 47 35 22 7a 61 10                     ..LmG5"za.

Frame 20 (94 on wire, 94 captured)
    Arrival Time: Oct 30, 2002 06:17:02.955086000
    Time delta from previous packet: 566.792641000 seconds
    Time relative to first packet: 5606.793184000 seconds
    Frame Number: 20
    Packet Length: 94 bytes
    Capture Length: 94 bytes
IEEE 802.3 Ethernet 
    Destination: 14:40:96:58:51:40 (14:40:96:58:51:40)
    Source: 88:44:96:58:d9:44 (88:44:96:58:d9:44)
    Length: 80
Logical-Link Control
    DSAP: Unknown (0x92)
    IG Bit: Individual
    SSAP: TCP/IP (0x06)
    CR Bit: Response
    Control field: I, N(R) = 85, N(S) = 85 (0xAAAA)
        1010 101. .... .... = N(R) = 85
        .... .... 1010 101. = N(S) = 85
        .... .... .... ...0 = Information frame
Data (76 bytes)

0000  14 40 96 58 51 40 88 44 96 58 d9 44 00 50 92 07   .@.XQ@.D.X.D.P..
0010  aa aa 03 00 40 96 00 00 00 4a 40 81 00 40 56 34   ....@....J@..@V4
0020  d9 c4 e9 ca 56 2c 30 df b0 5f 0a 65 a4 84 ac f4   ....V,0.._.e....
0030  a6 76 31 e5 4c 83 cc 06 00 80 48 00 00 00 0a 01   .v1.L.....H.....
0040  02 8b 04 00 12 b5 87 bd 54 45 52 2d 5f d8 20 57   ........TER-_. W
0050  2e 56 2e 57 2e 53 2e 00 00 00 00 d9 86 07         .V.W.S........

Frame 29 (83 on wire, 83 captured)
    Arrival Time: Oct 30, 2002 07:01:53.051560000
    Time delta from previous packet: 376.888286000 seconds
    Time relative to first packet: 8296.889658000 seconds
    Frame Number: 29
    Packet Length: 83 bytes
    Capture Length: 83 bytes
IEEE 802.3 Ethernet 
    Destination: 01:80:c2:00:00:00 (01:80:c2:00:00:00)
    Source: 00:40:96:40:95:f9 (Ciron_40:95:f9)
    Length: 69
Logical-Link Control
    DSAP: NULL LSAP (0x00)
    IG Bit: Individual
    SSAP: Unknown (0x40)
    CR Bit: Command
    Control field: I, N(R) = 32, N(S) = 75 (0x4096)
        0100 000. .... .... = N(R) = 32
        .... .... 1001 011. = N(S) = 75
        .... .... .... ...0 = Information frame
Data (65 bytes)

0000  01 80 c2 00 00 00 00 40 96 40 95 f9 00 45 00 40   .......@.@...E.@
0010  96 40 95 f9 42 42 03 00 00 00 00 00 80 00 00 07   .@..BB..........
0020  50 85 9f 00 00 00 00 cc 80 00 00 40 96 11 68 f9   P..........@..h.
0030  80 07 03 00 14 00 02 00 0f 9d 1d d3 48 80 07 02   ............H...
0040  00 14 00 02 00 0f 00 08 00 1e 48 68 00 00 46 02   ..........Hh..F.
0050  01 40 96                                          .@.

Frame 34 (119 on wire, 119 captured)
    Arrival Time: Oct 30, 2002 07:27:36.564098000
    Time delta from previous packet: 480.401416000 seconds
    Time relative to first packet: 9840.402196000 seconds
    Frame Number: 34
    Packet Length: 119 bytes
    Capture Length: 119 bytes
IEEE 802.3 Ethernet 
    Destination: db:62:82:4e:fc:f8 (db:62:82:4e:fc:f8)
    Source: 00:40:c7:06:d8:84 (RUBY_06:d8:84)
    Length: 105
Logical-Link Control
    DSAP: NULL LSAP (0x00)
    IG Bit: Group
    SSAP: Unknown (0xa6)
    CR Bit: Command
    Control field: I, N(R) = 120, N(S) = 10 (0xF014)
        1111 000. .... .... = N(R) = 120
        .... .... 0001 010. = N(S) = 10
        .... .... .... ...0 = Information frame
Data (101 bytes)

0000  db 62 82 4e fc f8 00 40 c7 06 d8 84 00 69 01 a6   .b.N...@.....i..
0010  14 f0 c5 aa c5 bc 94 a2 eb 92 64 cc a0 6b 50 e4   ..........d..kP.
0020  95 ff 95 de 06 ff ff 04 52 26 13 f9 f0 01 07 26   ........R&.....&
0030  15 8a 45 83 c2 00 02 05 5e 21 4c 45 b4 24 30 32   ..E.....^!LE.$02
0040  30 30 30 32 38 35 60 0f 33 00 a8 16 00 4a 59 01   000285`.3....JY.
0050  00 00 00 00 00 00 00 00 00 00 00 00 8a 86 00 00   ................
0060  00 00 00 00 00 dd c9 f8 f2 26 13 f9 f2 00 04 00   .........&......
0070  14 8a 45 83 c2 00 01                              ..E....

Frame 39 (568 on wire, 568 captured)
    Arrival Time: Oct 30, 2002 07:47:44.646807000
    Time delta from previous packet: 248.483714000 seconds
    Time relative to first packet: 11048.484905000 seconds
    Frame Number: 39
    Packet Length: 568 bytes
    Capture Length: 568 bytes
IEEE 802.3 Ethernet 
    Destination: 6c:c4:29:76:8d:d6 (6c:c4:29:76:8d:d6)
    Source: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
    Length: 554
Logical-Link Control
    DSAP: NULL LSAP (0x00)
    IG Bit: Individual
    SSAP: Unknown (0x50)
    CR Bit: Command
    Control field: U P, func = XID (0xBF)
        ...1 .... = Poll
        101. 11.. = Exchange identification
        .... ..11 = Unnumbered frame
Data (551 bytes)

0000  6c c4 29 76 8d d6 ff ff ff ff ff ff 02 2a 00 50   l.)v.........*.P
0010  bf 5d 45 0b d1 1b 08 26 50 6c a2 94 65 83 cd c2   .]E....&Pl..e...
0020  2e 93 05 30 9b 11 34 53 0a 01 01 3a e7 ec 7f 55   ...0..4S...:...U
0030  f8 1e a8 8d 4a a9 1b 00 06 88 0e 6c 0a ee 12 00   ....J......l....
0040  02 30 9b 68 d7 6c f0 dd 82 9c 78 01 62 02 15 f0   .0.h.l....x.b...
0050  c5 9c d5 69 d2 6c 80 48 00 00 00 00 c0 6c 00 00   ...i.l.H.....l..
0060  00 00 00 00 00 00 00 00 00 00 00 a8 16 00 19 b5   ................
0070  7f 8c 00 00 00 00 00 00 00 00 db c8 01 00 00 28   ...............(
0080  5e 00 00 00 00 00 00 00 00 51 fd 00 00 00 21 c2   ^........Q....!.
0090  00 00 00 00 00 00 a2 d8 00 00 00 00 11 d9 09 9c   ................
00a0  00 c0 6c c0 6c 00 00 00 00 00 00 00 00 39 87 00   ..l.l........9..
00b0  00 00 00 48 68 00 00 00 a4 7c 00 f0 78 8b 01 00   ...Hh....|..x...
00c0  00 00 00 00 00 00 00 00 00 00 00 00 30 1b a1 8a   ............0...
00d0  02 82 00 00 e0 7e 00 00 00 00 c0 6c 12 38 01 00   .....~.....l.8..
00e0  00 00 00 00 00 00 00 00 00 00 00 00 00 ee 25 09   ..............%.
00f0  6c 12 00 00 00 00 00 20 12 00 00 00 30 1b 00 00   l...... ....0...
0100  00 00 00 00 00 00 00 30 31 6f 29 16 68 f0 cf f2   .......01o).h...
0110  c4 00 ee 96 00 00 00 00 00 00 00 00 00 00 00 6e   ...............n
0120  de 20 fc 96 00 00 2e fa 9a 8f 80 c8 f8 53 20 12   . ...........S .
0130  5d 24 01 02 9b 95 80 48 cc 06 00 6d 3f fd 1d 00   ]$.....H...m?...
0140  db c8 01 39 87 00 00 80 48 00 00 00 80 7c 3d 00   ...9....H....|=.
0150  a2 6b 73 bd b8 1f 00 00 00 00 00 00 00 00 00 00   .ks.............
0160  00 c0 6c 00 00 00 00 00 00 00 00 00 00 00 00 00   ..l.............
0170  00 00 00 00 00 00 00 00 00 00 80 48 00 00 00 00   ...........H....
0180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0190  00 00 00 00 82 ca 00 00 00 00 00 00 00 00 00 00   ................
01a0  00 00 00 00 00 00 00 00 00 00 00 39 87 00 00 00   ...........9....
01b0  00 30 1b ec 14 00 00 00 71 5c 60 55 01 00 00 00   .0......q\`U....
01c0  80 48 2e 49 01 00 00 cb da 20 72 6b 67 72 6f 75   .H.I..... rkgrou
01d0  70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   p...............
01e0  00 00 00 00 00 61 7c ee 55 6d 20 55 00 00 30 1b   .....a|.Um U..0.
01f0  29 3f 30 01 51 fd 00 00 00 00 00 00 4c 4e c0 6c   )?0.Q.......LN.l
0200  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0210  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0220  00 00 00 00 31 1b 00 a8 16 00 00 00 a2 6b 01 00   ....1........k..
0230  11 bd f9 bf 72 d2 b1 02                           ....r...

Frame 44 (66 on wire, 66 captured)
    Arrival Time: Oct 30, 2002 08:16:49.682564000
    Time delta from previous packet: 553.520063000 seconds
    Time relative to first packet: 12793.520662000 seconds
    Frame Number: 44
    Packet Length: 66 bytes
    Capture Length: 66 bytes
IEEE 802.3 Ethernet 
    Destination: e2:7b:09:88:04:93 (e2:7b:09:88:04:93)
    Source: 00:bc:8b:ae:b0:f8 (00:bc:8b:ae:b0:f8)
    Length: 52
Logical-Link Control
    DSAP: Unknown (0x78)
    IG Bit: Individual
    SSAP: Unknown (0x34)
    CR Bit: Response
    Control field: I, N(R) = 85, N(S) = 85 (0xAAAA)
        1010 101. .... .... = N(R) = 85
        .... .... 1010 101. = N(S) = 85
        .... .... .... ...0 = Information frame
Data (48 bytes)

0000  e2 7b 09 88 04 93 00 bc 8b ae b0 f8 00 34 78 35   .{...........4x5
0010  aa aa 03 00 28 5e 08 00 cd 24 b0 8f 80 1a 0a e4   ....(^...$......
0020  86 bf 3f b3 0e b0 00 ca bb 98 05 34 0b d9 06 50   ..?........4...P
0030  a1 86 b7 b2 a8 67 38 f3 50 10 0b 68 cf 8c 25 01   .....g8.P..h..%.
0040  74 20                                             t 

Frame 45 (56 on wire, 56 captured)
    Arrival Time: Oct 30, 2002 08:17:42.261991000
    Time delta from previous packet: 52.579427000 seconds
    Time relative to first packet: 12846.100089000 seconds
    Frame Number: 45
    Packet Length: 56 bytes
    Capture Length: 56 bytes
IEEE 802.3 Ethernet 
    Destination: 89:48:07:ff:ff:ff (89:48:07:ff:ff:ff)
    Source: e0:3e:96:40:95:f9 (e0:3e:96:40:95:f9)
    Length: 42
Logical-Link Control
    DSAP: NULL LSAP (0x00)
    IG Bit: Individual
    SSAP: NULL LSAP (0x00)
    CR Bit: Command
    Control field: U, func = Unknown (0x0B)
        000. 10.. = Unknown
        .... ..11 = Unnumbered frame
Data (39 bytes)

0000  89 48 07 ff ff ff e0 3e 96 40 95 f9 00 2a 00 00   .H.....>.@...*..
0010  0b 73 f3 af aa aa 03 00 00 00 80 f3 00 01 80 9b   .s..............
0020  06 04 00 60 55 01 c5 44 f2 af 00 ff f4 83 00 00   ...`U..D........
0030  00 00 00 00 00 3f 6c ed                           .....?l.

Frame 46 (568 on wire, 568 captured)
    Arrival Time: Oct 30, 2002 08:18:34.828404000
    Time delta from previous packet: 52.566413000 seconds
    Time relative to first packet: 12898.666502000 seconds
    Frame Number: 46
    Packet Length: 568 bytes
    Capture Length: 568 bytes
IEEE 802.3 Ethernet 
    Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
    Source: 1b:40:96:08:fd:f9 (1b:40:96:08:fd:f9)
    Length: 554
Logical-Link Control
    DSAP: Unknown (0x8a)
    IG Bit: Individual
    SSAP: Unknown (0xd6)
    CR Bit: Command
    Control field: I, N(R) = 80, N(S) = 119 (0xA0EE)
        1010 000. .... .... = N(R) = 80
        .... .... 1110 111. = N(S) = 119
        .... .... .... ...0 = Information frame
Data (550 bytes)

0000  ff ff ff ff ff ff 1b 40 96 08 fd f9 02 2a 8a d6   .......@.....*..
0010  ee a0 2b 12 22 8e 11 00 6a c8 7f 5c 45 02 33 1d   ..+."...j..\E.3.
0020  41 05 00 b1 03 b1 b6 9b 0a 01 01 32 6f 74 ff ff   A..........2ot..
0030  ca 95 61 ad ac bc d8 88 00 00 00 00 00 30 1b 00   ..a..........0..
0040  73 ef 00 00 58 97 f0 77 00 00 00 00 e8 16 35 a8   s...X..w......5.
0050  16 08 4c 00 00 00 00 21 c2 00 00 e9 51 01 d9 f9   ..L....!....Q...
0060  f0 75 82 00 8a 35 01 00 00 00 00 00 00 9f 2a 7f   .u...5........*.
0070  00 00 00 30 1b 00 00 61 55 01 99 dd 00 00 00 00   ...0...aU.......
0080  fc 18 45 01 00 00 80 48 00 00 00 00 00 00 00 00   ..E....H........
0090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 b1 30   ...............0
00a0  01 30 f5 cb 24 01 00 00 00 00 00 00 00 00 00 00   .0..$...........
00b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00c0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00d0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00e0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00f0  00 00 00 00 00 9a 3c 01 00 00 00 00 00 00 00 00   ......<.........
0100  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0110  00 5d 5e f0 00 00 02 02 48 ee 5a 06 00 00 00 00   .]^.....H.Z.....
0120  00 00 00 00 00 00 00 00 00 00 00 00 00 ee bf 8e   ................
0130  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0140  00 00 00 00 00 00 00 00 00 00 00 00 00 a8 16 00   ................
0150  00 00 00 6a 4b 01 00 00 00 00 00 00 00 00 00 00   ...jK...........
0160  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0170  00 00 00 00 00 00 30 1b 99 dd 00 00 00 00 00 00   ......0.........
0180  00 00 00 00 00 00 00 00 00 00 00 6e de 00 51 4e   ...........n..QN
0190  31 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00   1...............
01a0  00 00 00 00 00 00 00 00 00 00 00 00 20 12 00 00   ............ ...
01b0  00 00 00 48 79 d9 ce 84 00 00 00 00 00 00 00 00   ...Hy...........
01c0  a0 5a 00 00 00 00 00 00 77 6f 72 6b 85 8e 6f 75   .Z......work..ou
01d0  70 00 a2 d8 00 00 00 00 00 00 00 00 00 30 1b 00   p............0..
01e0  00 00 00 00 00 00 00 00 00 ee 25 01 00 00 00 00   ..........%.....
01f0  00 00 00 00 00 00 00 00 00 ee a2 8e 01 00 00 00   ................
0200  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0210  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08   ................
0220  4c 00 00 00 01 cf e7 01 00 80 48 00 00 0d 09 01   L.........H.....
0230  ff 43 4f b9 53 10 b1 ec                           .CO.S...

Frame 49 (66 on wire, 66 captured)
    Arrival Time: Oct 30, 2002 08:20:51.330518000
    Time delta from previous packet: 75.167312000 seconds
    Time relative to first packet: 13035.168616000 seconds
    Frame Number: 49
    Packet Length: 66 bytes
    Capture Length: 66 bytes
IEEE 802.3 Ethernet 
    Destination: ee:26:ff:ff:ff:ff (ee:26:ff:ff:ff:ff)
    Source: b1:70:97:40:95:f9 (b1:70:97:40:95:f9)
    Length: 52
Logical-Link Control
    DSAP: Unknown (0xd6)
    IG Bit: Group
    SSAP: NetWare (0xe0)
    CR Bit: Command
    Control field: I, N(R) = 85, N(S) = 85 (0xAAAA)
        1010 101. .... .... = N(R) = 85
        .... .... 1010 101. = N(S) = 85
        .... .... .... ...0 = Information frame
Data (48 bytes)

0000  ee 26 ff ff ff ff b1 70 97 40 95 f9 00 34 d7 e0   .&.....p.@...4..
0010  aa aa 03 00 00 00 08 06 00 01 08 51 e0 13 00 ef   ...........Q....
0020  d5 ec f9 45 f2 e1 09 01 01 08 ff ff ff ff ff b3   ...E............
0030  9e f8 01 df 71 01 00 00 00 00 00 00 00 00 00 00   ....q...........
0040  a2 3a                                             .:

Frame 50 (568 on wire, 568 captured)
    Arrival Time: Oct 30, 2002 08:25:34.873824000
    Time delta from previous packet: 283.543306000 seconds
    Time relative to first packet: 13318.711922000 seconds
    Frame Number: 50
    Packet Length: 568 bytes
    Capture Length: 568 bytes
IEEE 802.3 Ethernet 
    Destination: 23:20:cf:55:7c:b7 (23:20:cf:55:7c:b7)
    Source: 6d:7f:97:31:2b:b7 (6d:7f:97:31:2b:b7)
    Length: 554
Logical-Link Control
    DSAP: Remote Program Load (0xf8)
    IG Bit: Group
    SSAP: Unknown (0x78)
    CR Bit: Command
    Control field: SRR, func = P, N(R) = 39 (0x4F81)
        0100 111. .... .... = N(R) = 39
        .... ...1 .... .... = Poll
        .... .... .... 00.. = Supervisory frame - Receiver ready
        .... .... .... ..01 = Supervisory frame
Data (550 bytes)

0000  23 20 cf 55 7c b7 6d 7f 97 31 2b b7 02 2a f9 78   # .U|.m..1+..*.x
0010  81 4f 13 04 9b ab 03 30 93 06 10 3c e5 8a 02 1c   .O.....0...<....
0020  54 0e 6b 7d 00 e7 bb 3c 5b 2e 42 f1 ff ff ff ff   T.k}...<[.B.....
0030  04 01 ea 64 02 08 00 00 04 00 00 51 cd 1b ee 96   ...d.......Q....
0040  02 00 00 00 00 00 00 00 00 00 00 00 42 30 32 00   ............B02.
0050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0060  00 00 00 00 00 00 ee 96 00 00 00 00 00 00 00 00   ................
0070  00 00 00 00 00 b1 83 00 00 00 00 00 00 00 00 00   ................
0080  00 00 00 00 00 00 00 30 1b 00 00 00 00 00 00 00   .......0........
0090  00 00 00 00 e9 e2 00 00 00 b0 53 00 00 7e d7 00   ..........S..~..
00a0  00 00 00 00 2c 78 00 00 00 00 00 00 00 ee 25 01   ....,x........%.
00b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e2   ................
00c0  fc 20 12 00 4c 4e 00 00 00 d9 f9 00 00 00 6d 8c   . ..LN........m.
00d0  b0 53 00 00 00 00 00 00 b1 10 df 06 00 00 00 00   .S..............
00e0  00 00 00 00 00 00 00 00 00 ec 14 9d fb 00 00 00   ................
00f0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 1d   ................
0100  00 00 00 00 00 08 4c 5d 97 00 00 cb c1 01 00 00   ......L]........
0110  00 00 00 00 00 00 00 00 00 1a c7 00 00 00 00 00   ................
0120  00 00 30 1b 00 00 00 00 00 00 00 00 00 00 00 00   ..0.............
0130  7d 36 01 00 00 00 00 00 00 00 00 00 51 3d 6e 82   }6..........Q=n.
0140  00 00 00 00 20 12 00 00 00 00 00 00 aa 27 01 00   .... ........'..
0150  00 e2 6f 13 00 00 00 00 cc 06 a2 d8 00 00 00 00   ..o.............
0160  00 00 00 00 00 00 00 12 8b 00 00 00 00 00 00 00   ................
0170  00 00 00 00 00 00 00 a0 5a 00 00 00 00 00 00 00   ........Z.......
0180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0190  00 12 8b 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
01a0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 04   ................
01b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
01c0  00 00 00 00 00 00 00 00 57 6f 72 6b 67 72 6f 75   ........Workgrou
01d0  70 00 00 00 00 48 68 00 00 00 00 00 00 00 00 00   p....Hh.........
01e0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
01f0  00 00 00 00 00 4c 4e 00 00 00 00 00 00 00 00 a0   .....LN.........
0200  5a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   Z...............
0210  00 00 00 00 00 00 00 00 00 00 00 21 d4 7f e7 00   ...........!....
0220  00 00 00 00 01 c0 6c 00 00 00 00 00 00 00 00 00   ......l.........
0230  ff 2b f9 bf 53 10 fd 02                           .+..S...

Frame 53 (83 on wire, 83 captured)
    Arrival Time: Oct 30, 2002 08:42:04.118405000
    Time delta from previous packet: 627.955495000 seconds
    Time relative to first packet: 14307.956503000 seconds
    Frame Number: 53
    Packet Length: 83 bytes
    Capture Length: 83 bytes
IEEE 802.3 Ethernet 
    Destination: 26:5b:96:ea:02:1a (26:5b:96:ea:02:1a)
    Source: 01:80:c2:00:00:00 (01:80:c2:00:00:00)
    Length: 69
Logical-Link Control
    DSAP: NULL LSAP (0x00)
    IG Bit: Group
    SSAP: Unknown (0x40)
    CR Bit: Command
    Control field: I, N(R) = 32, N(S) = 75 (0x4096)
        0100 000. .... .... = N(R) = 32
        .... .... 1001 011. = N(S) = 75
        .... .... .... ...0 = Information frame
Data (65 bytes)

0000  26 5b 96 ea 02 1a 01 80 c2 00 00 00 00 45 01 40   &[...........E.@
0010  96 40 95 f9 42 42 03 b0 53 00 00 00 80 00 00 07   .@..BB..S.......
0020  50 85 9f 00 00 f0 87 bb 99 ea eb 54 58 c4 59 ff   P..........TX.Y.
0030  80 be 1c 00 14 00 02 00 0f 00 08 00 00 04 00 c0   ................
0040  6c 00 00 00 00 02 00 00 00 00 00 00 00 00 cc 06   l...............
0050  00 42 31                                          .B1

Frame 56 (59 on wire, 59 captured)
    Arrival Time: Oct 30, 2002 08:44:10.657330000
    Time delta from previous packet: 34.494712000 seconds
    Time relative to first packet: 14434.495428000 seconds
    Frame Number: 56
    Packet Length: 59 bytes
    Capture Length: 59 bytes
IEEE 802.3 Ethernet 
    Destination: 00:40:96:58:d9:44 (Ciron_58:d9:44)
    Source: 00:60:84:40:95:f9 (DIGITAL_40:95:f9)
    Length: 45
Logical-Link Control
    DSAP: Unknown (0x8c)
    IG Bit: Individual
    SSAP: ISO 8208 (X.25 over 802.2) (0x7e)
    CR Bit: Command
    Control field: I, N(R) = 85, N(S) = 85 (0xAAAA)
        1010 101. .... .... = N(R) = 85
        .... .... 1010 101. = N(S) = 85
        .... .... .... ...0 = Information frame
Data (41 bytes)

0000  00 40 96 58 d9 44 00 60 84 40 95 f9 00 2d 8c 7e   .@.X.D.`.@...-.~
0010  aa aa 03 08 00 07 80 9b 00 27 00 00 00 00 e6 fa   .........'......
0020  ff 98 27 eb a9 00 ed 25 17 00 0b 05 d9 00 00 00   ..'....%........
0030  14 00 00 01 b5 c2 91 07 48 68 68                  ........Hhh

Frame 57 (149 on wire, 149 captured)
    Arrival Time: Oct 30, 2002 08:44:31.750479000
    Time delta from previous packet: 21.093149000 seconds
    Time relative to first packet: 14455.588577000 seconds
    Frame Number: 57
    Packet Length: 149 bytes
    Capture Length: 149 bytes
IEEE 802.3 Ethernet 
    Destination: 6c:c0:de:58:d9:74 (6c:c0:de:58:d9:74)
    Source: 09:00:07:ff:ff:ff (09:00:07:ff:ff:ff)
    Length: 135
Logical-Link Control
    DSAP: Unknown (0x8c)
    IG Bit: Individual
    SSAP: ISO 8208 (X.25 over 802.2) (0x7e)
    CR Bit: Command
    Control field: I, N(R) = 53, N(S) = 4 (0x6A08)
        0110 101. .... .... = N(R) = 53
        .... .... 0000 100. = N(S) = 4
        .... .... .... ...0 = Information frame
Data (131 bytes)

0000  6c c0 de 58 d9 74 09 00 07 ff ff ff 00 87 8c 7e   l..X.t.........~
0010  08 6a 0e 60 30 1c 80 9b 00 81 d2 54 01 5d db 6e   .j.`0......T.].n
0020  c6 1f 27 27 af a2 68 01 70 00 a9 5f d9 00 00 00   ..''..h.p.._....
0030  14 00 00 02 97 00 00 00 00 01 01 00 28 00 03 ff   ............(...
0040  65 e4 f1 5d 24 09 7c 1b 50 00 0a 88 04 00 00 09   e..]$.|.P.......
0050  f9 6f 46 01 11 02 ff 0c 00 ff ff ff ff 00 dd 6c   .oF............l
0060  01 00 00 00 00 02 79 00 00 01 b5 c0 6c 00 00 00   ......y.....l...
0070  00 00 0c ff 06 e6 38 00 01 00 0a ff ad ff 38 01   ......8.......8.
0080  53 01 0c 00 70 00 12 00 63 00 65 00 78 00 6f 00   S...p...c.e.x.o.
0090  63 00 6f 00 78                                    c.o.x

Frame 58 (67 on wire, 67 captured)
    Arrival Time: Oct 30, 2002 08:45:13.805814000
    Time delta from previous packet: 42.055335000 seconds
    Time relative to first packet: 14497.643912000 seconds
    Frame Number: 58
    Packet Length: 67 bytes
    Capture Length: 67 bytes
IEEE 802.3 Ethernet 
    Destination: 00:40:96:58:d9:44 (Ciron_58:d9:44)
    Source: 09:00:07:ff:ff:ff (09:00:07:ff:ff:ff)
    Length: 53
Logical-Link Control
    DSAP: NULL LSAP (0x00)
    IG Bit: Individual
    SSAP: SNA Path Control (0x04)
    CR Bit: Response
    Control field: I, N(R) = 67, N(S) = 1 (0x8602)
        1000 011. .... .... = N(R) = 67
        .... .... 0000 001. = N(S) = 1
        .... .... .... ...0 = Information frame
Data (49 bytes)

0000  00 40 96 58 d9 44 09 00 07 ff ff ff 00 35 00 05   .@.X.D.......5..
0010  02 86 8c 7e aa aa 03 08 00 07 80 9b 00 27 00 00   ...~.........'..
0020  00 00 c6 e8 ff 98 27 27 af 00 03 00 16 00 0b 05   ......''........
0030  d9 00 00 00 14 00 00 04 6f 00 00 00 00 00 db 01   ........o.......
0040  62 01 03                                          b..

Frame 59 (560 on wire, 560 captured)
    Arrival Time: Oct 30, 2002 08:47:20.085803000
    Time delta from previous packet: 126.279989000 seconds
    Time relative to first packet: 14623.923901000 seconds
    Frame Number: 59
    Packet Length: 560 bytes
    Capture Length: 560 bytes
IEEE 802.3 Ethernet 
    Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
    Source: 00:40:96:40:95:f9 (Ciron_40:95:f9)
    Length: 546
Logical-Link Control
    DSAP: Unknown (0xc2)
    IG Bit: Group
    SSAP: Unknown (0x34)
    CR Bit: Response
    Control field: I, N(R) = 85, N(S) = 85 (0xAAAA)
        1010 101. .... .... = N(R) = 85
        .... .... 1010 101. = N(S) = 85
        .... .... .... ...0 = Information frame
Data (542 bytes)

0000  ff ff ff ff ff ff 00 40 96 40 95 f9 02 22 c3 35   .......@.@...".5
0010  aa aa a1 d8 00 00 08 00 45 00 02 1c ba 1f 08 4c   ........E......L
0020  80 11 93 36 67 8d 09 c1 82 c9 5e a5 04 01 ea 44   ...6g.....^....D
0030  10 08 18 45 04 00 00 00 00 00 1a c7 02 00 71 ef   ...E..........q.
0040  00 00 00 00 00 00 00 ec 56 6d 16 cd 06 00 00 00   ........Vm......
0050  00 00 00 00 00 00 00 00 00 19 15 d3 02 24 01 30   .............$.0
0060  1b 00 08 28 4c 6f 5e 00 a1 17 48 01 00 00 00 00   ...(Lo^...H.....
0070  00 00 11 e2 05 00 71 df 1b 00 88 04 7d 87 8d 66   ......q.....}..f
0080  74 0b f4 c3 75 00 30 32 3d 10 d9 00 00 00 51 6e   t...u.02=.....Qn
0090  13 00 00 00 00 1e 52 01 00 00 00 ce 37 4d 4e 00   ......R.....7MN.
00a0  00 00 00 00 00 00 00 cc 06 00 00 00 00 00 00 00   ................
00b0  a2 d8 00 00 00 00 00 00 00 00 00 80 d2 8f 00 00   ................
00c0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00d0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00e0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 ee 25   ...............%
00f0  01 00 00 00 00 00 00 00 00 00 00 9a 8f 20 12 00   ............. ..
0100  00 00 00 00 00 00 00 9d 48 01 00 ee 25 01 00 00   ........H...%...
0110  00 00 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00   ................
0120  00 00 00 00 00 00 00 00 30 1b 00 00 12 2a 58 e7   ........0....*X.
0130  00 00 c0 6c 00 00 00 00 4c 4e 00 00 00 00 00 00   ...l....LN......
0140  00 c0 f1 fb 4a 59 18 26 01 00 00 00 00 00 00 00   ....JY.&........
0150  00 00 00 00 e0 3b 61 01 00 00 00 00 00 00 00 00   .....;a.........
0160  00 31 cb 00 00 00 a1 8a 00 b0 53 00 00 00 00 00   .1........S.....
0170  00 00 00 00 b1 83 00 00 00 00 00 ec 14 00 00 00   ................
0180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0190  00 00 00 d2 e5 80 31 01 00 00 00 00 00 00 00 00   ......1.........
01a0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
01b0  00 c2 ee 00 00 00 00 20 a2 d3 48 00 00 00 00 00   ....... ..H.....
01c0  00 00 00 00 57 6f 72 6b 67 72 6f 75 70 9e f8 fd   ....Workgroup...
01d0  00 00 00 20 12 00 00 00 6e cf d9 00 00 00 00 00   ... ....n.......
01e0  00 00 00 00 00 00 00 00 48 68 00 00 00 00 00 00   ........Hh......
01f0  00 39 34 01 00 fc 1d 00 00 00 00 00 00 00 00 00   .94.............
0200  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0210  00 00 19 ae 05 00 8a 35 01 00 00 00 00 00 00 00   .......5........
0220  01 00 00 00 00 00 00 00 00 00 00 00 ff 2b f9 bf   .............+..

Frame 60 (135 on wire, 135 captured)
    Arrival Time: Oct 30, 2002 08:47:30.687857000
    Time delta from previous packet: 10.602054000 seconds
    Time relative to first packet: 14634.525955000 seconds
    Frame Number: 60
    Packet Length: 135 bytes
    Capture Length: 135 bytes
IEEE 802.3 Ethernet 
    Destination: 01:40:96:41:4c:44 (01:40:96:41:4c:44)
    Source: 09:00:5d:1c:ff:ff (09:00:5d:1c:ff:ff)
    Length: 121
Logical-Link Control
    DSAP: NULL LSAP (0x00)
    IG Bit: Individual
    SSAP: SNA Path Control (0x04)
    CR Bit: Response
    Control field: I P, N(R) = 53, N(S) = 1 (0x6B02)
        0110 101. .... .... = N(R) = 53
        .... .... 0000 001. = N(S) = 1
        .... ...1 .... .... = Poll
        .... .... .... ...0 = Information frame
Data (117 bytes)

0000  01 40 96 41 4c 44 09 00 5d 1c ff ff 00 79 00 05   .@.ALD..]....y..
0010  02 6b fb 83 b7 aa 03 08 00 07 80 9b 00 6b 00 00   .k...........k..
0020  0c 6a ff 6f ff 98 27 27 af 00 03 00 5a 00 0b 05   .j.o..''....Z...
0030  d9 05 d4 00 14 00 00 08 c7 00 00 00 00 01 06 01   ................
0040  b8 01 01 07 c0 1f f0 3f f8 6e 3f c5 d1 86 c0 b2   .......?.n?.....
0050  83 81 02 83 82 87 c2 ee dd 3f a1 3e f8 1f f0 07   .........?.>....
0060  48 04 00 07 c0 1f bc 71 f8 7f fc 7f 55 8a ff fd   H......q....U...
0070  7c ff fe ff ce e4 ec 47 fd 7f fc 97 ee 1f f0 07   |......G........
0080  78 1f 00 00 07 00 b6                              x......

Frame 61 (59 on wire, 59 captured)
    Arrival Time: Oct 30, 2002 08:49:26.454742000
    Time delta from previous packet: 115.766885000 seconds
    Time relative to first packet: 14750.292840000 seconds
    Frame Number: 61
    Packet Length: 59 bytes
    Capture Length: 59 bytes
IEEE 802.3 Ethernet 
    Destination: 09:00:07:ff:ff:ff (09:00:07:ff:ff:ff)
    Source: 00:40:96:40:95:f9 (Ciron_40:95:f9)
    Length: 45
Logical-Link Control
    DSAP: Unknown (0x8c)
    IG Bit: Individual
    SSAP: ISO 8208 (X.25 over 802.2) (0x7e)
    CR Bit: Command
    Control field: I, N(R) = 69, N(S) = 85 (0x8AAA)
        1000 101. .... .... = N(R) = 69
        .... .... 1010 101. = N(S) = 85
        .... .... .... ...0 = Information frame
Data (41 bytes)

0000  09 00 07 ff ff ff 00 40 96 40 95 f9 00 2d 8c 7e   .......@.@...-.~
0010  aa 8a 11 a8 5a 07 80 9b 00 27 00 00 00 00 ff 6f   ....Z....'.....o
0020  ff 98 27 36 76 00 03 fc 0b 00 0b 05 d9 00 31 00   ..'6v.........1.
0030  14 00 00 0e 6e 25 01 00 00 00 5d                  ....n%....]

Frame 62 (106 on wire, 106 captured)
    Arrival Time: Oct 30, 2002 08:53:48.873895000
    Time delta from previous packet: 262.419153000 seconds
    Time relative to first packet: 15012.711993000 seconds
    Frame Number: 62
    Packet Length: 106 bytes
    Capture Length: 106 bytes
IEEE 802.3 Ethernet 
    Destination: d3:4a:36:40:96:1a (d3:4a:36:40:96:1a)
    Source: e4:7f:b7:ff:77:fb (e4:7f:b7:ff:77:fb)
    Length: 92
Logical-Link Control
    DSAP: Unknown (0x48)
    IG Bit: Individual
    SSAP: Unknown (0xe8)
    CR Bit: Command
    Control field: I, N(R) = 27, N(S) = 1 (0x3602)
        0011 011. .... .... = N(R) = 27
        .... .... 0000 001. = N(S) = 1
        .... .... .... ...0 = Information frame
Data (88 bytes)

0000  d3 4a 36 40 96 1a e4 7f b7 ff 77 fb 00 5c 48 e8   .J6@......w..\H.
0010  02 36 31 3e 0b 20 03 00 51 fd 08 00 45 00 00 4e   .61>. ..Q...E..N
0020  75 55 de 8d 80 dd ab 8d d4 3f b0 f6 8c 5a 01 ff   uU.......?...Z..
0030  00 89 00 89 00 3a 52 d6 87 c8 5c 07 30 72 8a 35   .....:R...\.0r.5
0040  01 00 00 b1 10 47 46 5c 69 0c 24 ef ad de f0 fa   .....GF\i.$.....
0050  21 44 4f e9 d5 43 41 43 8f c7 c1 99 b9 46 41 43   !DO..CAC.....FAC
0060  50 29 40 41 af 27 e9 d8 e2 fd                     P)@A.'....

Frame 65 (106 on wire, 106 captured)
    Arrival Time: Oct 30, 2002 08:57:40.245700000
    Time delta from previous packet: 124.082377000 seconds
    Time relative to first packet: 15244.083798000 seconds
    Frame Number: 65
    Packet Length: 106 bytes
    Capture Length: 106 bytes
IEEE 802.3 Ethernet 
    Destination: f3:32:62:fe:ff:ff (f3:32:62:fe:ff:ff)
    Source: 00:40:96:e9:e0:f8 (Ciron_e9:e0:f8)
    Length: 92
Logical-Link Control
    DSAP: NULL LSAP (0x00)
    IG Bit: Individual
    SSAP: Unknown (0x50)
    CR Bit: Command
    Control field: U P, func = XID (0xBF)
        ...1 .... = Poll
        101. 11.. = Exchange identification
        .... ..11 = Unnumbered frame
Data (89 bytes)

0000  f3 32 62 fe ff ff 00 40 96 e9 e0 f8 00 5c 00 50   .2b....@.....\.P
0010  bf 5d 5a c6 93 d6 6a 00 82 ca 38 1b c5 c0 4c ea   .]Z...j...8...L.
0020  2b 57 00 00 80 3b 9a 64 9c 01 01 bc 0a 01 13 6d   +W...;.d.......m
0030  95 e4 3f 88 00 3a 59 17 01 5c 01 10 00 01 00 00   ..?..:Y..\......
0040  dd 6c 01 00 20 46 46 45 83 43 4c 45 4f 45 50 e6   .l.. FFE.CLEOEP.
0050  22 5e 4f cb 45 43 41 43 41 eb 57 43 41 43 41 c9   "^O.ECACA.WCACA.
0060  9e 41 d9 9c 41 00 00 20 00 73                     .A..A.. .s