SESSION TCP
Purpose
This report shows traffic for a TCP session.
Format
CTRACE COMP(SYSTCPDA) SUB((TCPCS)) SHORT OPTIONS((SESSION TCP))-------------------------------------------------------------------------------
1 2 packets summarized
Local Ip Address: FEC9:C2D4::6:2900:EDC:217C
Remote Ip Address: FEC9:C2D4::9:67:115:17
Host: Local, Remote
Client or Server: CLIENT, SERVER
Port: 1027, 21
Application: , ftp
Link speed (parm): 10, 10 Megabits/s
2 Connection:
First timestamp: 19:55:46.934032
Last timestamp: 19:55:46.934989
Duration: 00:00:00.000957
Average Round-Trip-Time: 0.000 sec
Final Round-Trip-Time: 0.000 sec
Final state: CLOSED (PASSIVE RESET)
Out-of-order timestamps: 0
3 Data Quantity & Throughput: Inbound, Outbound
Application data bytes: 0, 0
Sequence number delta: 0, 1
Total bytes Sent: 0, 0
Bytes retransmitted: 0, 0
Throughput: 0, 0 Kilobytes/s
Bandwidth utilization: 0.00%, 0.00%
Delay ACK Threshold: 200, 200 ms
Minimum Ack Time: 0.000957, 0.000000
Average Ack Time: 0.000957, 0.000000
Maximum Ack Time: 0.000957, 0.000000
4 Data Segment Stats: Inbound, Outbound
Number of data segments: 0, 0
Maximum segment size: 1432, 0
Largest segment size: 0, 0
Average segment size: 0, 0
Smallest segment size: 0, 0
Segments/window: 0.0, 0.0
Average bytes/window: 0, 0
Most bytes/window: 0, 0
Offload Sends: 3 ( 50%)
Offload Segments: 6
Offload Bytes: 43616 (72.69%)
Total Packets(normal + offload): 18 (83.33%)
5 Window Stats: Inbound, Outbound
Number of windows: 0, 0
Maximum window size: 0, 0
Largest window advertised: 0, 32768
Average window advertised: 0, 32768
Smallest window advertised: 0, 32768
Window scale factor: 0, 0
Window frequency: 0, 0 Windows/s
Time Stamp updates: 0, 0
Total Round Trip Time: 0.000000, 0.000000 ( 0%), ( 0%)
Average Round Trip Time: 0.000000, 0.000000 6 Number of: Inbound, Outbound
Packets: 1, 1
(x) Untraced Packets: 0, 0
(.) In-order data: 0, 0 ( 0.00%), ( 0.00%)
(a) Acknowledgments: 1, 0 (100.00%), ( 0.00%)
(+) Data and ACK: 0, 0 ( 0.00%), ( 0.00%)
(u) Duplicate ACKs: 0, 0 ( 0.00%), ( 0.00%)
(w) Window size updates: 0, 0 ( 0.00%), ( 0.00%)
(z) Zero window sizes: 0, 0 ( 0.00%), ( 0.00%)
(p) Window probes: 0, 0 ( 0.00%), ( 0.00%)
(k) Keepalive segments: 0, 0 ( 0.00%), ( 0.00%)
(r) Retransmissions: 0, 0 ( 0.00%), ( 0.00%)
(o) Out-of-order: 0, 0 ( 0.00%), ( 0.00%)
(d) Delayed ACKs: 0, 0 ( 0.00%), ( 0.00%)
(f) Fragments: 0, 0 ( 0.00%), ( 0.00%)
7 Time Spent on: Inbound, Outbound
(.) In-order data: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(a) Acknowledgments: 00:00:00.000957, 00:00:00.000000 (106.33%), ( 0.00%)
(+) Data and ACK: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(u) Duplicate ACKs: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(w) Window size updates: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(z) Zero window sizes: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(p) Window probes: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(k) Keepalive segments: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(r) Retransmissions: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(o) Out-of-order: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(d) Delayed ACKs: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
(f) Fragments: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
8 Number of: Inbound, Outbound
( S ) SYN: 0, 1 ( 0.00%), (100.00%)
( A S ) ACK SYN: 0, 0 ( 0.00%), ( 0.00%)
( F) FIN: 0, 0 ( 0.00%), ( 0.00%)
( A F) ACK FIN: 0, 0 ( 0.00%), ( 0.00%)
( R ) RST: 1, 0 (100.00%), ( 0.00%)
(U ) URG: 0, 0 ( 0.00%), ( 0.00%)
9 Time Spent on: Inbound, Outbound
( S ) SYN: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
( A S ) ACK SYN: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
( F) FIN: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
( A F) ACK FIN: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)
( R ) RST: 00:00:00.000957, 00:00:00.000000 (106.33%), ( 0.00%)
(U ) URG: 00:00:00.000000, 00:00:00.000000 ( 0.00%), ( 0.00%)Messages:
2) The largest inbound window is less than twice the inbound MSS.
2) This may reduce inbound throughput for bulk data transfers.
2) It is usually desirable for the window size to be at twice the MSS.
3) The outbound side of the connection appears to be a bulk data transfer.
I - Inbound packet
O - Outbound packet
10 TcpHdr IO F Seq Ack RcvWnd Data Delta Time TimeStamp RcdNr State Inf Ip_id Rtt TimeStmpV Time
S O 29260429 0 32768 0 0.000000 19:55:46.934032 101 SYN_SENT 4 0028 0.00 0.000 316250
A R I a 0 29260430 0 0 0.000957 19:55:46.934989 102 CLOSED 4 0014 0.00 0.000 316250- 1
- Host
The number of packets records for this session; the IP addresses and port of the session.
- 2
- Connection
The first and last time of the session, the length of the session, the final value of RRT, and the final state of the session.
- 3
- Data Quality & Throughput
These statistics are about the quantity of data transmitted. The number of bytes received inbound and the number of bytes send outbound.
- 4
- Data Segment Stats
These statistics are about the segments, the number of segments, and the sizes of the segments. The maximum segment size is captured from the SYN packet. Offload statistics appear only when there were any offloaded packets. These values reflect the number of offload packets, the number segments in these offloaded packets, the number of bytes in offloaded packets, and the total number of segments that are sent from the interface.
- 5
- Window Stats
These statistics are about the window changes. The Window scale factor is captured from the SYN packet. The Time Stamp updates are captured from the Tcp header options.
- 6
- Number of Packets
These statistics are about the number of data packets that flow for carrying data. The percentages are based on the number of packets.
- 7
- Time Spent on:
These statistics are about the delta times of data packets that flow for carrying data. The percentages are based on the duration of the session.
- 8
- Number of
These statistics are about the number of control packets that flow for starting and ending a session. The percentages are based on the number of packets.
- 9
- Time Spent on
These statistics are about the delta times of control packets that flow for starting and ending a session. The percentages are based on the duration of the session.
- 10
- Details TcpHdr The flags from the TCP header
- *
- This packet is reassembled.
- A
- This packet is an acknowledgment.
- P
- This packet has the PUSH flag set.
- U
- This packet is urgent.
- S
- This packet is a syn.
- F
- This packet is a fin.
- R
- This packet is a reset.
The type of data packet has one of the following flags:- .
- The packet flowed in order as per its sequence number.
- x
- There is a gap in the sequence number and it looks like there is untraced data.
- a
- The packet is a stand-alone acknowledgment of previously received data.
- +
- The packet is an acknowledgment of previously received data and also contains data.
- u
- The packet is an acknowledgment of data previously acknowledged.
- w
- The packet updated the window size.
- z
- The packet changed the window size to zero.
- p
- The packet was a window probe.
- k
- The packet was a keepalive packet.
- r
- The packet was retransmission.
- o
- The packet arrived out of order.
- d
- The packet exceeded the delay time threshold.
- f
- The packet was a fragment of a complete IP packet.
- !
- A dropped packet that had a checksum error, that was a fragment, or that was discarded.