=== ch05.docx
[chap]5́@Wireshark̍xȋ@\

Wireshark̊{IȎg}X^[ÃXebvł͉͂ƃOt@\wт܂B̏͂ł́AGh|Cg[Conversation]EBhEAȌڍׁAvgŔ̕AXg[tH[AIOOtȂǂ܂ދ͂ȋ@\̈ꕔĂ܂B

lbg[NGh|CgƑΘb
lbg[NʐMsɂ́AŒł2̋@̊ԂŃf[^ĂKv܂BuGh|CgvƂ́Albg[NŃf[^𑗎M@w܂BƂTCP/IPʐMł́A2̃Gh|Cg܂B192.168.1.25192.168.1.30̂悤ȁAf[^𑗎MVXeIPAhXłB
ɃC2ŁAINICƂMACAhX̊ԂŃR~jP[VsĂƂ܂傤Bf[^𑗎MNIC̃AhX00:ff:ac:ce:0b:de00:ff:ac:e0:dc:0f̏ꍇA}5-1Ɏ悤ɁÃAhXGh|CgƂȂ܂B

}5-1@lbg[ÑGh|Cg
ʐMA
Gh|CgA@Gh|CgB
ʐMB
Gh|CgA@Gh|CgB

lbg[ŃuΘbv́Al̉b̂悤2̃zXgiGh|Cgj̊Ԃōs܂BƂ΁u₟ACHvuCBȂ́HvȕȂCIvƂWƃT[̉bA192.168.1.5̃Rs[^192.168.0.8̃Rs[^̑ΘbɒuƁAuSNYvuSYN/ACKvuACKvƂȂ܂iTCP/IP̒ʐMɂĂ̏ڍׂ6͂Ŋwт܂jB

Gh|Cg
Gh|Cg̖s|CgŃpPbg͂邱Ƃł܂B[Endpoints]EBhE[Statistics][Endpoints]IƁAeGh|Cg̃AhXAMpPbgAoCgȂǂ邱Ƃł܂i}5-2jB
EBhȄ㕔ɂ^uŁAGh|CgvgRƂɕ\邱Ƃł܂B[Name resolution]`FbN{bNXIɂƁAOLɂ邱Ƃł܂B
[Endpoints]EBhÉApPbgꗗ̃yC̃pPbgtB^ƂĎgp邱Ƃł܂BGh|CgENbNƁA̃IvV\܂BAIGh|Cg܂ށA܂͏gtBbN\tB^쐬邱Ƃł܂B܂AIGh|CgF邱Ƃ\łiF[ɂĂ3͂ŐĂ܂jB

}5-2@[Endpoints]EBhEeGh|Cg\

lbg[NΘb
[Statics][Conversations]IƐ}5-3̂悤[Conversations]EBhEJAuAddress AvсuAddress BvƂĈꗗꂽΘbɊ֘AGh|Cg̃AhXƁAeRs[^MoCg\܂B
EBhE㕔ɂ^uŁÃEBhEɃXgAbvꂽΘbvgRʂɕ邱Ƃł܂B̑ΘbENbNƁAGh|CgÃgtBbN݂̂\AGh|CgBMgtBbN݂̂\AGh|CgABԂ̃gtBbN݂̂\ƂAtB^쐬邱Ƃł܂B

}5-3@[Conversations]EBhEłꂼ̑Θb\

Gh|CgёΘbEBhẼguV[eBO
guV[eBOɂāA[Endpoints][Conversations]EBhE͔ɏdvłBɃlbg[N̂Ȃ̗ʂ̃gtBbÑ\[Xm߂Aǂ̃T[oł̃R~jP[VƂȂǂ𔻒f肷ۂɕsƂȂ܂B
Ƃ΁Alotsofweb.pcapƂt@CJƁÃNCAgC^[lbguEWOĂ邱ƂAʂHTTPgtBbNڂɓ܂B[Endpoints]EBhEJ΁AݖڂɂĂgtBbNɕ͂łB
Ipv4^uƁi}5-4jAoCgŕނꍇɈԏɕ\AhX̓[J172.16.16.128łAꂪlbg[NōłR~jP[V𑽂sĂ邱Ƃ܂B2Ԗڂ̃AhXł74.125.103.163̓[JAhXł͂Ȃ̂ŁA̒iKł́AЂƂ̃NCAgIPAhXɂȂ̃f[^𑗐MĂ̂A邢͕NCAgf[^MĂƐł܂BWHOISihttp://whois.arin.net/ui/j΂IPAhXGooglê̂łƕApPbg𒲂ׂ΂ꂪYouTubẽgtBbNłƕł傤B

@IPAhX蓖ẮAnIꏊɂĈقȂGeBeBǗ܂B̗łAmerican Registry for Internet NumbersiARINjgĂAARIN͕čюӍɂIPAhX蓖ĂSĂ܂Bʏ͂IPAhXǗĂgDWebTCgŁAIPWHOISs܂Bݒn炸AԈo^TCgŌƁAۂɓo^ĂTCg\܂BAhXo^sĂgDɂ́AAfriNICiAtJjARIPEiBjAAPNICiAWAmj܂B

}5-4@[Endpoints]EBhEłǂ̃zXg̒ʐMʂԑ

̏񂪂΁Aԏɕ\ꂽGh|Cg̒ʐMʂłƉ肵Ăvł傤Hx[Conversations]EBhEIPv4^uJAoCgʕނŌ؂܂BƃgtBbÑ_E[hƈvĂ邱Ƃ܂BAhXAi74.125.103.163j瑗MĂoCgAAhXBi172.16.16.128j瑗MĂoCgȂ葽łi}5-5jB

}5-5@[Conversations]EBhEŌ݂̒ʐMʂƂGh|CgmFł

[Endpoints][Conversations]EBhEۂ̏ʂłǂ̂悤ɎǵÂقǐ܂B


vgRKwv
ȃLv`t@C͂ƂAƂ΃Lv`pPbĝp[ZgTCPŁAp[ZgIPAp[ZgDHCPȂǁAevgRǂ̂悤ȔzɂȂĂ邩mKvꍇ܂B̍ہApPbg11Kv͂܂B[Protocol Hierarchy Statistics]EBhE΂悢̂łB̃EBhE̓lbg[Ñx`}[Nm̂ɖ𗧂܂BƂΕiARP̃gtBbNŜ10Ȃ̂ɁAꂪ50ɂȂĂA肪NĂƗ\ł܂B
lotsofweb.pcapt@C܂JĂ邱ƂmFACj[[Statistics][Protocol Hierarchy]IāA[Protocol Hierarchy Statistics]EBhEJ܂i}5-6jBv100ɂȂȂꍇ܂BLv`ʂ傫ȂƁAŏPʈȉ̊ɂȂĂ܂vgRoĂĂ܂ăJEgȂȂ̂ŁApPbg̑ƃvgR̊vȂȂĂ܂łBłAvgR̔z͂Ȃ萳mƂ܂B

}5-6@[Protocol Hierarchy Statistics]EBhEł͊evgR̔z\

gtBbN𒲂ׂۂɍŏɌ̂̂ЂƂ[Protocol Hierarchy Statistics]EBhEłB̃EBhE΁A݃lbg[NŉNĂ邩悭邩łBgtBbNɐʂ悤ɂȂƁAvgR̔z邾ŁAlbg[Ñ[U[@̊Tv悤ɂȂ܂BMҎgAlbg[NZOg̃gtBbN΁Ãlbg[NZOgǂ̊Ǘɂ邩قڑɔfł܂BICMPSNMPȂǂ̊ǗvgR݂ITASMTPgtBbNʂΎ󒍏A邢͖ȃC^[Q[ɖɂȂĂƂɁB

O
lbg[Ñf[^00:16:CE:6E:8B:24Ƃ悤ȁAoɂp̃AhXgē]Ă܂BOƂ́AevgRgpAhXʂ̂̂ɕϊvZX̂ƂłBƂ00:16:CE:6E:8B:24ƂMACAhX́ADNSARPɂMarketing-2.domain.comƂOɕϊ܂BÍ̂悤ȃAhXǂ݂₷AhXɕϊ邱ƂɂāARs[^ʂ₷悤ɂĂ̂łB

OLɂ
Cj[[Capture][Options]I[Capture Options]_CAO\ĂB}5-7̂悤ɁAWiresharkɂ3ނ̖O[܂B

MACAhX̖O
ARPgāA00:09:5B:01:02:03Ƃ悤MACAhX10.100.12.1Ƃ悤IPAhXɕϊ܂BIPAhXɕϊłȂꍇ́AWireshark̓vOfBNgetherst@Cgĕϊ݂܂BɂsƁAMACAhX̐擪3oCgNetgear_01:02:03Ƃ悤IEEE߂[J[ɕϊ܂B

IPAhX̖O
192.168.1.50Ƃ悤IPAhXADNS𗘗pMarketingPCI.domain.comƂ悤ȓǂ݂₷Oɕϊ܂B

|[gԍ̖O
|[gԍ𖼑Oɕϊ܂BƂ80ԃ|[ghttpɕϊ܂B

}5-7@[Capture Options]_CAO疼OLɂ

OgāALv`t@Cǂ݂₷΁A͂̎Ԃߖ񂷂邱Ƃł܂BƂDNS̖Og΁ApPbg̑M̃Rs[^eՂɎʂ邱Ƃł܂B


Ǒ_
O͂ƂÂ̂悤Ɍ܂Aȉ̂悤Ȍ_܂B
El[T[oNGXgꂽOłȂ΁AO͂ł܂B
EȌ̓Lv`t@CɕۑȂ߁ALv`t@CJтɖOsKv܂B̂߃Lv`t@CJƂɃl[T[oɐڑłȂΖOł܂B
EDNS̃pPbgLv`t@Cɒǉ邽߁ALv`t@CɂȂ邩܂B̖͂ĂƂɂ͎̃gtBbN͌Ȃ̂łB
EÔ߂̏ԂKvɂȂ܂BȃLv`t@CĂăsĂƂɂ́AO͍sȂق悢܂B


vgR̕
Wireshark̓vgRƂ͋̕@\ĂA̋@\găvgR܂܂ȗvfɕ邱ƂŁA͂₷悤ɂĂ܂BƂΐ̃pPbgICMP͋̕@\gāAICMPL̊ewb_f[^ɕĕ\ƂłB
͋@\́ÃpPbgvgRƂWiresharkɕ\|@̂悤Ȃ̂łBWiresharkvgR͋̕@\Ă΁ÃvgRT|[gĂƂ܂i܂CPythongĎŋLq邱Ƃ\łjB
Wireshark͊epPbĝɕ̃vgR͋̕@\gp܂Bǂ͋̕@\gp邩́AvOꂽ_琄܂B

͋@\̕ύX
cOȂAWiresharkł͋@\IƂ͌܂BftHg̃|[ggpȂvgR͓ɊԈႦ₷łilbg[NǗ҂ɂăZLeBxƂĐݒ肳ꂽA܂͏]ƈɂăANZXǗꂽ肷邱Ƃ܂jBƂɂ́Agp镪͋@\ύX邱Ƃł܂B
Ƃ΁Awrongdissector.pcapJĂ݂ĂB̃t@Cɂ2̃Rs[^ԂłSSLgʐML^Ă܂BSSLSecure Socket LayervgR̗ŁAzXgԂł̈ÍꂽSȒʐM̂߂Ɏgp܂Bʂ̏󋵂ł΁ASSL͈ÍĂ邽߁AWiresharkŃ`FbNĂ܂Lvȏ͓܂BȂ牽͖̂炩łBpPbgNbNăoCĩyCĂ݂΁AvCeLXg̃gtBbN邱ƂɂɋCtł傤BہA4Ԗڂ̃pPbgł́AFileZilla FTPT[oAvP[VɂČyĂ̂܂B܂̂̃pPbǵA[U[ƃpX[hɑ΂郊NGXgƃX|X𖾂炩ɎĂ܂B
ꂪ{SSLgtBbNȂApPbgɊ܂܂Ăf[^͈ؓǂ߂Ȃ͂ŁAMĂ郆[U[pX[h͌Ȃ͂łi}5-8jBɎĂA͂炭SSLgtBbNł͂ȂAFTPgtBbNłƉ肵ĖȂł傤BFTPgtBbNHTTPSiHTTP over SSLj̕Wł443ԃ|[ggĂ邽߂ɁASSLƕ͂Ă܂̂łB

}5-8@vCeLXg̃[U[ƃpX[hBSSLł͂ȂFTP̃gtBbN

̖邽߂ɂ́AFTP͋̕@\g悤WiresharkɎwȂ΂Ȃ܂Bȉ̎菇ɏ]Đݒ肵ĂB

1DSSLpPbgENbN[Decode As]I܂Bǂ̃vgR͋̕@\gI_CAO\܂B
2D[Transport]^uŃhbv_Ej[[destination (443)]IA[FTP]NbN܂BŁA443ԃ|[g̃gtBbNFTP͋̕@\p܂i}5-9jB

}5-9@[Decode As]_CAOŕ͋@\w肷

3D[OK]{^NbN΁ALv`t@CɑɕύXKp܂B

pPbgꗗ̃yCA͂Ă邩ǂmFĂB

@͋@\̕ύX̓Lv`t@Cɂ͕ۑꂸAWiresharkIƎ܂BLv`t@CJтɁA͋@\ύXKv܂B

1̃Lv`t@CłȂAύXJԂsƂł܂B̃Lv`t@CĂƂɕ͋@\̕ύXoĂȂł傤AWiresharkɊoĂĂ܂B[Decode As]_CAO[Show Current]{^NbN΁A܂łɍsύẌꗗ邱Ƃł܂i}5-10jB[Clear]{^ƂŁA̕ύXNA邱Ƃ\łB

}5-10@[Show Current]{^ƍ܂łɍsύẌꗗ\

͋@\̃\[XR[h
I[v\[XAvP[Vg햡́ANĂ̂킩ȂȂƂA\[XR[h΂̌邱ƂłB̃vgRԈĕ͂Ă闝R𔻒fƂɂ͓ɕ֗łB
WiresharkWebTCgŁA[Develop]̃N̏Ƀ}EXĂA[Browse the Code]NbN΁AvgR͋@\̃\[XR[h𒲂ׂ邱Ƃł܂BWireshark̃Tuo[W̃|WgւƈړÃ݂o[W̃R[hƁAȑÕo[W̃R[h܂B[releases]tH_NbNƁAׂĂ̌WiresharkiEtherealj̃XgAォÂɕ\܂Bׂo[WIƁAepan/dissectorstH_ɃvgR͋@\͂łBe͋@\ɂwithpackets-protocolname.cƂx\Ă܂B
t@C͂ƕGłAWIȃev[g̗pĂALxȃRgĂ邱ƂɋCÂł傤BCɏڂȂĂA͋@\̊{Iȋ@\͗ł܂BWireshark̓eɐ[Ȃ΁APȋ@\̃vgR͋̕@\ĂƂ߂܂B

TCPXg[̕\
Wireshark̂Ƃɗ@\1ATCPXg[ǂ݂₷tH[}bgւƕϊ̂łBNCAgT[oɑMׂf[^̔jЂAFollow TCP Stream@\̓f[^܂Ƃ߂Č₷Ă܂BHTTPFTPȂǂ̃vCeLXg̃AvP[VCvgRۂɓɗLvłïʓIȃvgR̋@\ɂĂ͎͂ŏڂĂ܂jB
ȒPHTTPgUNVlĂ݂܂傤Bhttp_google.pcapt@CJAt@CTCP܂HTTPpPbĝǂꂩNbNAt@CENbNāA[Follow TCP Stream]I܂Bƕʂ̃EBhETCPXg[\܂i}5-11jB

}5-11@ǂ݂₷tH[}bgŒʐM\[Follow TCP Stream]EBhE

̃EBhẼeLXg2FɐFĂ܂BԂ͑M父ւ̃gtBbNA͔ΕA܂舶悩瑗Mւ̃gtBbNĂ܂Bǂ炩甭MꂽŐFĂ̂łBƂ΂̗ł́ANCAgWebT[o֌ĐڑJnĂ̂ŁAԂŕ\Ă܂B
TCPXg[ł́A2̃zXgԂł̒ʐM̂قƂǂ邱Ƃł܂BʐMWeb[gfBN^i/jւGETNGXgŎn܂AT[o̓NGXg󂯎ƂHTTP/1.1 200 OK̃tH[ŕԂĂ܂BNCAgX̃t@CNGXgAT[oɑ΂ĉƂAl̃p^[Xg[ŌJԂĂ܂B̓[U[ۂGooglez[y[WŌĂ̂A猩Ă̂łB
TCPXg[́AEBhEŐ̃f[^ƂČ邾łȂAeLXgAeLXgt@CƂĕۑ܂͈肷邱Ƃł܂B܂ASCIIAEBCDICA16iAC̔zɕϊ邱Ƃ\łB̃IvV[Follow TCP Stream]EBhẺɂ܂B
TCPXg[̕\́ÃvgRƂɔɖ𗧂ł傤B

pPbg
ЂƂ̃pPbg܂͂ЂƂ܂Ƃ߂̃pPbg̃TCYɂāA󋵂܂BʓIȏ󋵂ł΁AC[Tlbg̍őt[TCY1518oCgłB̐lC[TlbgAIPATCPwb_1460oCgcAC7vgRwb_܂̓f[^MɎgƂł܂B𓪂ɓꂽŁApPbg̕zgāALv`gtBbNɂčlĂ݂܂傤Bdownload-slow.pcapt@CJA[Statistics][Packet Lengths]IA[Create Stat]NbN܂BƐ}5-12̂悤ȃEBhE\܂B

}5-12@Lv`t@C̃gtBbNɖ𗧂[Packet Lengths]EBhE

TCY1280oCg2559oCg̃pPbg̓vĂ镔nCCgĂ܂BTCY̑傫ȃpPbg͒ʏf[^]AȃpPbg̓vgR̃V[PXĂ܂Bł́A傫ȃpPbg̔䗦Ȃ傫ȂĂ܂i66.43p[ZgjB̂߃t@C̒̃pPbgȂĂALv`t@Cɂ͂P܂͕̃f[^]܂܂Ă邱Ƃ킩܂B܂肱HTTP_E[hFTPAbv[hA邢̓zXgԂŃf[^]sĂ邻̑̃lbgʐMƂƂɂȂ܂B
c̃pPbgi33.44p[ZgĵقƂǂ̃TCÝA40oCg79oCgłB̃TCỸpPbg͒ʏAf[^܂܂ȂTCPpPbgłBʓIȃvgRwb_̃TCYlĂ݂܂傤BC[Tlbgwb_14oCgivX4oCgCRCjAIPwb_͍ŏ20oCgAăf[^IvV̂ȂTCPpPbg20oCgłB܂WITCPpPbgiSYNAACKARSTAFINȂǁj54oCgxłA͈̔͂Ɏ܂邱ƂɂȂ܂BIPTCPIvV΃TCY͑܂B
pPbg𒲂ׂƁALv`t@C̑Si悭܂BTCY̑傫ȃpPbg񂠂΁Af[^]ĂƍlĂ悢ł傤B܂pPbg̑唼TCYȂAf[^]܂sĂȂAvgR䖽߂ō\Ăƍl܂B͊mȃ[ł͂܂񂪁Aɍׂ͂sOɁA𗧂ĂĂ̂Lvȏꍇ܂B

Ot
Ot͕͂̊{łAf[^Zbg̊Tv𓾂œK̕@̂ЂƂłBWiresharkł̓Lv`f[^̗邢̃Ot@\܂ÂЂƂIOOt@\łB

IOOt
Wiresharkł́A[IO Graphs]EBhEőMĂf[^̃Ot邱Ƃł܂B̃OtŊevgR̃X[vbgălbg[N̓ÂmFAptH[}X̃OAf[^Xg[r肷邱Ƃł܂B
C^[lbgt@C_E[hƂIOOt̗ɂ́Adownload-fast.pcapJĂBTCPpPbgNbNănCCgA[Statistics][IO Graphs]I܂B
[IO Graphs]EBhEŁALv`t@C̃f[^̗AOtƂČ邱Ƃł܂B}5-13̗ł́A1b500pPbg̓]ŏŌ܂łقړ悤ɑAŌɉĂ邱ƂOt番܂B

}5-13@肵_E[hIOOt

𑬓x̒x_E[hƔrĂ݂܂傤B݂̃t@C͊J܂܂ɂAWireshark̕ʂ̃CX^XJāAdownload-slow.pcapJ܂Bx_E[hIOOtɂĂ݂ƁA}5-14̂悤ɈႢ͂Ƃ킩܂B

}5-14@肵ĂȂx_E[hIOOt

̃_E[h̃f[^][g1b0100pPbgŁA肩͒A1b̃pPbgق0ɂȂĂ鎞܂B2̃_E[h̃OtׂĂ݂ƁA̕s肳͈ڗđRłi}5-15jB

}5-15@IOOtׂƈႢ̎ʂɖ𗧂

̃EBhẺɔr̃IvV̂܂Bō5܂ŃtB^쐬łi6͂7͂Ő܂A\Lv`ɂ\g܂jAtB^Fł܂BƂ΁AARPԁADHCPŕ\tB^쐬A܂Otŕ\΁A2̃vgRɂX[vbǧXȒPɌ邱Ƃ\łB

Ehgbv^COt
Wiresharkɂ́ALv`t@C̃Ehgbv^C\łOt@\܂BEhgbv^CiRTTjƂ́ApPbg̎MmF܂łɂ鎞Ԃw܂B܂pPbgʂ̃Rs[^ɓ͂A̕ԓԂĂ̂ɂԂłBRTT͂̕ɂAʐMxꂽ|Cg{glbNACeV킩܂B
̋@\gĂ݂܂傤Bdownload-fastt@CJĂBTCPpPbgIсA[Statistics][TCP Stream Graph]A[Round Trip Time Graph]IƁA}5-16̂悤RTTOt\܂B

}5-16@̃_E[hRTTOt͂قڈ肵ĂAl̕U͂킸Ȃ

Ot̂ꂼ̓_pPbgRTT\Ă܂BftHgł̓V[PXԍɂĕނꂽl\܂BOt̓_NbNƁApPbgꗗ̃yC̊YpPbgɒڈړł܂B
RTTOtƁA_E[hRTTl͂ق0.05bȉŁAxꍇł0.10b0.25bxł邱Ƃ܂Be͈͂𒴂Ăl킸ɂ̂́ARTTl̂قƂǂ͖肪Ȃ̂ŁAt@C̃_E[hƂĂ͖ȂƂ݂Ȃł傤B

t[Ot
ڑoAԌo߂ɂf[^̗\̂ɁAt[Ot@\͔ɕ֗łBt[Ot͊{IɁAzXgԂ̐ڑ\Jr[ƂȂĂAĂɂ킩悤AgtBbNĂ܂B
t[Ot쐬ɂ́Ahttp_google.pcapt@CJA[Statistics][Flow Graph]I܂BƏspPbgɊւ邢̃IvVƁAt[̃^Cvȃ_CAO\܂B̗ł̓ftHĝ܂܂ŖȂ̂ŁA[OK]@NbNAt[Ot쐬܂i}5-17jB

}5-17@TCPt[OtŐڑoł

GLXp[g
Wireshark̃vgR͂ł́ApPbgłԂꍇɌxĂ悤AuGLXp[gvݒ肷邱Ƃł܂B̏Ԃ4ɕ邱Ƃł܂B

`bg@ʐM̊{
m[g@ʏʐM̈ꕔłƎvُȃpPbg
x@ʏʐM̈ꕔƂ͎vȂُȃpPbg
G[@pPbg̃G[A܂͕͂ŃG[Ɣfꂽꍇ

ł͗Ă݂܂傤Bdownload-slow.pcapt@CJA[Analyze]NbNA[Expert Info Composite]IāA[Expert Infos]EBhE\܂i}5-18jB

}5-18@[Expert Infos]EBhE̓GLXp[gVXȅ\

EBhEɂ͕ނꂽ񂲂ƂɃ^uAG[̓[Ax3Am[g18A`bg3邱Ƃ킩܂B^uɎꂽJbR̊O̐̓bZ[W̌AJbR̐̓bZ[W̑Ă܂B
̃Lv`t@C̃bZ[WׂTCP֘AȂ̂́A͂̕Ă鎞_ł́ÃvgRɃGLXp[gVXeĂȂłBɂTCP֘A14̃GLXp[g񃁃bZ[ẂAguV[eBOɔɖ𗧂܂B̏𖞂ƁAX̃pPbgɃtO𗧂ĂĂ邩łB

`bgbZ[W
Window Update@TCPMEBhẼTCYςƂ𑗐M҂ɒm点ʒmM҂ɂđB

m[gbZ[W
TCP Retransmission@pPbǧʁBACKdĎMꂽA܂̓pPbg̍đ^C}[^CAEgƂȂꍇB
Duplicate ACK@zXg̃V[PXԍ󂯎ȂꍇAMŌ̃f[^̏dACK𐶐B
Zero Window Probe@[EBhEpPbgMꂽATCPMEBhȄԂj^[̂Ɏgi9͂ŐjB
Keep Alive ACK@L[vACupPbgɉ𑗂B
Zero Window Probe ACK@[EBhEv[upPbgɉ𑗂B
Window is Full@M҂TCPMEBhEς̏Ԃł邱ƂAM̃zXgɒm点ۂɎgB

xbZ[W
Previous Segment Lost@pPbgӖBf[^Xg[ɂăV[PXԍƂ񂾏ꍇɋNB
ACKed Lost Packet@ACKpPbĝ́AFȂꍇɋNB
Keep Alive@ڑ̃L[vACupPbgꍇɃgKB
Zero Window@TCPMEBhẼTCYlɒBA[EBhEʒmAM҂Ƀf[^M~悤vꍇɌB
Out-of-Order@V[PXԍ𗘗pāAԍOꂽpPbgMꂽ𒲂ׂB
Fast Retransmission@dACK20~bȓɋNđMB

G[bZ[W
No Error Messages

6͂TCPwKA9͂Œxlbg[ÑguV[eBOɂĊwׂ΁ÃbZ[ẄӖmɂȂł傤B
{͂Ő̋@\́A߂ɋNȂ󋵂łgȂ悤Ɍ邩܂񂪁Avȏɗp邱ƂɂȂł傤B̃EBhEƃIvVɊĂĂB̌̏͂ŉxG邱ƂɂȂ܂B


