=== ch05.docx
[chap]5́@Wireshark̍xȋ@\

Wireshark̊{ICƂŁÃXebvƂĉ͂ƃOt@\CB̏͂ł́AGh|Cg[Conversation]EBhEAȌڍׁAvgŔ̕AXg[̃tH[AIOOtȂǂ܂ދ͂ȋ@\̈[Ă܂B

lbg[ÑGh|CgƑΘb
lbg[NʐMsł́AŒł2̋@ԂŃf[^Ƃ肳ĂKv܂BuGh|CgvƂ́Albg[Nɂf[^𑗎M@܂BƂTCP/IPʐMɂ́A2̃Gh|Cg܂B192.168.1.25192.168.1.30ƂAf[^𑗎MzXgIPAhXłB
ɑ2wŁA2̕NICMACAhXԂŒʐMsĂꍇlĂ݂܂Bf[^𑗎MNIC̃AhX00:ff:ac:ce:0b:de00:ff:ac:e0:dc:0f̏ꍇA}5-1Ɏ悤ɁÃAhXGh|CgƂȂ܂B

}5-1@lbg[ÑGh|Cg
ʐMA
Gh|CgA@Gh|CgB
ʐMB
Gh|CgA@Gh|CgB

lbg[ŃuΘbv́Al̉b̂悤2̃zXgiGh|CgjԂōs܂BƂ΁u₟ACHvuC!Ȃ?vuƂĂC!vƂWƃT[̉bA192.168.1.5̃zXg192.168.0.8̃zXg̑ΘbɒuƁAuSNYvuSYN/ACKvuACKvƂȂ܂iTCP/IPʐMɂĂ̏ڍׂ6͂Ŋwт܂jB

Gh|CgQƂ
gtBbN͂ۂɁAlbg[N̓̃Gh|CgɃgui荞߂ꍇł傤B[Statistics][Endpoints]IWiresharkEndpointsEBhE\AeGh|Cg̃AhXAMpPbgAoCgƂLpȏQƂ邱Ƃł܂i}5-2jBEBhE㕔ɂe^uł́Ã݂Lv`t@Cɂ邷ׂĂ̔F\ȃGh|Cg\܂B̃vgRɂẴGh|CgQƂꍇ́A^uNbNĂB[Endpoints]EBhE[Name resolution]`FbN{bNXIɂƁAOLɂȂ܂B
[Endpoints]EBhÉAPacket ListyCœ̃pPbĝ݂\邽߂̃tB^ƂĎgp邱Ƃł܂BGh|CgENbNƁAIGh|Cĝ݂܂ށA͏OgtBbN\tB^쐬ƂIvV\܂B܂AIGh|CgɐF[𒼐ړKp邱Ƃ\łiF[ɂĂ3͂ŐĂ܂jB

}5-2@[Endpoints]EBhELv`t@C̊eGh|Cg\

lbg[N̑Θb
[Statistics][Conversations]IƐ}5-3̂悤[Conversations]EBhE\AuAddress AvƁuAddress BvƂ`őΘbsĂGh|Cg̃AhXƁAezXgMpPbgAoCg\܂B
Θb̓vgRʂɕ\ĂA EBhE㕔ɂ^uŐ؂ւ邱Ƃł܂BΘbENbNƁAGh|CgÃgtBbN݂̂\AGh|CgBMgtBbN݂̂\AGh|CgABԂ̃gtBbN݂̂\ƂAtB^쐬邱Ƃł܂B

}5-3@[Conversations]EBhEłꂼ̑Θb\

Gh|CgёΘbEBhEpguV[eBO
guV[eBOɂāA[Endpoints][Conversations]EBhE͔ɏdvłBɃlbg[Nőʂ̃gtBbN̔˂~߂AʐMʂƂT[omFƂۂɂ͕słB
Ƃ΁Alotsofweb.pcapƂt@CJƁA̃NCAgC^[lbguEWOĂ邱ƂAʂHTTPgtBbNڂɓ܂B[Endpoints]EBhEJ΁AݖڂɂĂgtBbNɕ͂łB
IPv4^uƁi}5-4jAoCgɃ\[gčŏɕ\AhX̓[J172.16.16.128łAꂪlbg[NłƂׂȁiʐMʂƂj@ł邱Ƃ܂B2Ԗڂ̃AhXł74.125.103.163̓[JAhXł͂Ȃ̂ŁA̒iKł́ANCAgIPAhXɑʂ̃f[^𑗐MĂ̂A邢͕̃NCAg炻Ȃ̗ʂ̃f[^MĂ͕̂܂BWHOISihttp://whois.arin.net/ui/j΂IPAhXGooglê̂łƕApPbg𒲂ׂ΂ꂪYouTubẽgtBbNłƕł傤B

@IPAhX̊蓖ẮAnɂĈقȂgDiWXgjǗ܂BL̗łAmerican Registry for Internet NumbersiARINjgĂ܂AARIN͕čюӍɂIPAhX蓖ĂSĂ܂B{IIPAhXǗĂgDWebTCgŁAIPWHOISsĂBn悪悭ȂƂɁAsK؂ȃWXgŌsƁAK؂Ȓn悪\܂BAhXo^sĂ郌WXgɂ́AAfriNICiAtJjARIPEiBjAAPNICiAWAmjȂǂ܂B

}5-4@[Endpoints]EBhEłǂ̃zXg̒ʐMʂԑ

̏񂾂ŁAԒʐMsĂGh|CgԑΘbsĂƍlĂvł傤Bx[Conversations]EBhEIPv4^uJAoCg̃\[gŊmFĂ݂܂傤BƃgtBbÑ_E[hƊ֘AĂ邱Ƃ܂BAhXAi74.125.103.163j瑗MĂoCgAAhXBi172.16.16.128j瑗MĂoCgȂ葽łi}5-5jB

}5-5@[Conversations]EBhEŁAƂʐMʂ̑Gh|Cg2݂ɒʐMĂ邱ƂmFł

[Endpoints][Conversations]EBhEłǂ̂悤ɎǵÂقǐ܂B


vgRKwv
ȃLv`t@C͂ƂɁAƂ΃Lv`pPbĝp[ZgTCPŁAp[ZgIPAp[ZgDHCPȂǁAevgRǂ̂悤ȔzɂȂĂ邩c邱ƂKvȏꍇ܂B̍ہApPbg11Kv͂܂B[Protocol Hierarchy Statistics]EBhE΂悢̂łB̃EBhE̓lbg[Ñx`}[NcۂɂƂĂ𗧂܂BƂΕiARP̃gtBbNŜ10Ȃ̂ɁAꂪ50ɂȂĂA肪NĂƗ\ł܂B
lotsofweb.pcapt@CJACj[[Statistics][Protocol Hierarchy]IāA[Protocol Hierarchy Statistics]EBhEJĂ݂܂傤i}5-6jBp[Zgl̍v100傤ǂɂȂȂꍇ܂B̃pPbgɂ͂܂܂ȑwł̃vgR܂܂Ă邽߁ApPbg̍vƃvgR̃p[Zgl̍v͈قȂꍇ܂BƂ͂ALv`t@CɂvgR̊ƂẮAȂ萳mȒlmFł܂B


}5-6@[Protocol Hierarchy Statistics]EBhEł͊evgR̊\io[W1.8.0j
(Figure05-6.tiff)

gtBbN𒲍ۂɍŏɎQƂ邱Ƃ̑EBhÊЂƂ[Protocol Hierarchy Statistics]EBhEłB̃EBhE΁Albg[NŔĂ鎖ۂ̑S̑悭邩łBgtBbNɐʂ悤ɂȂƁAgĂvgR̊邾ŁAlbg[Ñ[U@̊T悤ɂȂ܂BMҎgAlbg[NZOg̃gtBbN΁AƂICMPSNMPȂǂ̊ǗvgR݂ITASMTPgtBbN̗ʂΎ󒍏AuWorld of WarcraftiĖ󒍁FICQ[jṽgtBbNт͖ȃC^[p̋ƂɁÃlbg[NZOgǂ̂̂̕𑦎ɔfł邱Ƃ΂΂łB

O
lbg[Ñf[^́A00:16:CE:6E:8B:24ƂAhX̂悤ɁAoɂ͒p̃AhX̌npĒʐMĂ܂BOƂ́AvgRm̃AhXʂ̃AhXɕϊ邽߂ɗp鏈̂ƂłBƂ00:16:CE:6E:8B:24ƂMACAhX̋@́ADNSARPvgRɂMarketing-2.domain.comƂOŎQƂ\ƂȂ肵܂BÍ̂悤ȃAhXǂ݂₷AhXɕϊ邱ƂɂāA@ʂ₷悤ɂ킯łB

OLɂ
OLɂɂ́ACj[[Capture][Options]I[Capture Options]_CAO\ĂB}5-7̂悤ɁAWiresharkɂ3ނ̖O\łB

MACw̖O
ARPvgRgāA00:09:5B:01:02:03Ƃ2wMACAhX10.100.12.1Ƃ3w̃AhXɕϊ܂BϊłȂꍇAWireshark̓vO̒uꂽfBNgɂetherst@Cgĕϊ݂܂BɂsƁANetgear_01:02:03̂悤MACAhX̐擪3oCgIEEE߂[J[ɕϊ܂B

lbg[Nw̖O
IPAhX192.168.1.50Ƃ3w̃AhXAMarketingPC1.domain.comƂǂ݂₷DNSɕϊ܂B

gX|[gw̖O
|[gԍ𖼑Oɕϊ܂BƂ80ԃ|[ghttpɕϊ܂B

}5-7@[Capture Options]_CAOŖOLɂ

O@\̗͂؂ăLv`t@Cǂ݂₷邱ƂŁA͂ɗv鎞ԂIɐߖłꍇ܂BƂDNS̖Og΁ApPbg̑MƂē肵zXg̖OuŊmF邱Ƃł܂B


Ǒ_
O͂悢ƂÂ̂悤Ɍ܂Aȉ̂悤Ȍ_܂B
ENG̃l[T[oOłȂƂRŁAOɎs邱Ƃ܂B
EO̓Lv`t@CɕۑȂ߁ALv`t@CJтɖOsȂ܂B̂߃Lv`t@CJƂɃl[T[oɐڑłȂΖOł܂B
EDNSɈˑ邱ƂɂȂ邽߁A]ȃpPbg܂BDNS̖OgtBbN邽߁ALv`t@CɂȂ邩܂BoAgu͂ĂƂɂ͎g̃gtBbN͌Ȃ̂łB
EÔ߂ɗ]ȏ܂BȃLv`t@CĂăsĂƂɂ́AVXe\[XLp邽߂ɖO͍sȂق悢ł傤B


vgR͋@\
Wiresharkł́AvgR͋@\iprotocol dissectorjɂAvgR܂܂ȗvfɕĉ͉\ȏԂɐ`Ă܂BƂ΁AICMP̃vgR͋@\́AWiresharklbg[N擾f[^ICMPpPbgƂĐ`ĕ\܂B
͋@\́Albg[N𗬂鐶̃pPbgWiresharkƂ̊Ԃ̖|@̂悤Ȃ̂łBWiresharkvgRT|[gł́ÃvgR͋̕@\WiresharkɓĂKv܂i邢CꂩPythongĎŋLqKv܂jBWireshark͊epPbg𕪐͂ۂɁA͋̕@\sėp܂Bgp镪͋@\̓vÕWbNɂ鐄Ō肳܂B

͋@\̕ύX
cOȂAWireshark͋@\IƂ͌܂B͓Ɂilbg[NǗ҂ɂăZLeB΍ƂĐݒ肳ꂽA]ƈɂăANZXI񂷂邽߂ɍsꂽ肳jW̃|[g̎gpƂAʓIłȂݒ肪sĂۂɌ邱ƂłBKȂƂɁAWiresharkI͋@\ύX邱Ƃ\łB
wrongdissector.pcapJĂ݂܂傤B̃t@Cɂ2̃zXgԂł̑ʂSSLʐML^Ă܂BSSLSecure Socket LayervgR̗ŁARs[^Ԃł̈ÍꂽSȒʐM̂߂Ɏgp܂Bʂ̏󋵂ł΁ASSL͈ÍĂ邽߁AWiresharkŃgtBbNQƂĂ܂Lvȏ͓܂BȂ牽͖̂炩łBpPbgNbNāAPacket BytesyCQƂāÃpPbg̓e悭Ă݂ƁÃgtBbN邱ƂɂCÂł傤BA4Ԗڂ̃pPbg݂ƁAFileZillaƂFTPT[õAvP[VɊւ镶񂪑݂Ă邱Ƃ܂BɑpPbgł́A[UƃpX[hɊւ郊NGXgƃX|XĂɕ\Ă܂B
ꂪ{SSLgtBbNł΁ApPbgɊ܂܂Ăf[^͈ؓǂ߂Ȃ͂ŁAMĂ郆[UpX[hmɕ\Ȃ͂łi}5-8jBɎĂA͂炭SSLgtBbNł͂ȂAFTPgtBbNłƉ肵ĖȂł傤BFTPgtBbNHTTPSiHTTP over SSLj̕Wł443ԃ|[ggĂ邽߂ɁÂ悤ȎԂĂ܂̂łB

}5-8@̃[UƃpX[hccSSLł͂ȂFTP̂悤!

̖邽߂ɂ́AFTP͋̕@\g悤WiresharkɎwKv܂Bȉ̎菇ɏ]Đݒ肵ĂB

1DSSLpPbĝЂƂENbN[Decode As]I܂Bǂ̃vgR͋̕@\gI_CAO\܂B
2D[Transport]^uŃhbv_Ej[[destination(443)]IiĖ󒍁F1ŃT[oNCAg̃pPbgIꍇ́Ahbv_Ej[[source(443)]I܂jA[FTP]I܂BŁATCP̑M|[g443Ԃ̃gtBbNŁiĖ󒍁FuM|[gv́u|[gv̌LƎv܂jFTP͋̕@\p܂i}5-9jB

}5-9@[Decode As]_CAOŕ͋@\w肷

3D[OK]{^NbN΁ALv`t@CɑɕύXKp܂B

f[^K؂ɉ͂ĂAoCgmFȂĂAPacket ListyC邾ŁApPbg͂ł͂łB

@͋@\̕ύX̓Lv`t@Cɂ͕ۑꂸAWiresharkIƎ܂BLv`t@CJтɁA͋@\ύXKv܂B

Lv`t@Cŕ͋@\̕ύXxsĂ\܂BLv`t@Cŕ͋@\̕ύXxsĂ܂ƁAoĂ̂ςɂȂ܂AWiresharkɊoĂĂ܂B[Decode As]_CAO[Show Current]{^NbN΁A܂łɍsύẌꗗ\܂i}5-10jB[Clear]{^ƂŁA̕ύX邱Ƃ\łiĖ󒍁F{Ė󎞓_ōŐV1.8.0ŊmFƂA}5-10̂悤[Save]Ƃ{^ǉĂ܂BIɕ͋@\̕ύX̃C|[gAGNX|[g\zƎv܂A{Ė󎞓_ł͂̃{^͋@\ĂȂ悤ŁAĂ삵܂łjB

}5-10@[Show Current]{^ƍ܂łɍsύẌꗗ\io[W1.8.0j
(Figure05-10.tiff)

͋@\̃\[XR[h
I[v\[XAvP[Vg햡́AȂȂĂ̂ȂȂƂA\[XR[hĂ̌𖾊mɊmFł邱ƂłB́ÃvgRԈĕ͂Ă闝RmFƂɓɕ֗łB

vgR͋@\̃\[XR[hmFɂ́AWiresharkWebTCgŁA[Develop]̃N̏Ƀ}EXĂA[Browse the Code]NbN܂BWiresharksubversion|WgւƈړAo[W̃\[XR[hłȂAȑÕo[W̃\[XR[h܂B[releases]tH_NbNƁAׂĂ̌WiresharkiEtherealj[ẌꗗAÂɕ\܂BmF[XIƁAepan/dissectorstH_ɃvgR͋@\͂łBe͋@\packets-vgR.cƂ̂ɂȂĂ܂B
t@C̒g͂ƕGłAWIȃev[g̗pĂALxȃRgĂ邱ƂɋCÂł傤BCɏڂȂĂA͋@\̊{Iȋ@\͗ł܂BWiresharkŎQƂłe[Ȃ΁APȃvgRł悢̂ŁAŒ͋@\ƗĂƂ߂܂B

TCPXg[̕\
Wireshark̂Ƃɗ@\̂ЂƂ́ATCPXg[ǂ݂₷`ɐ`Ă@\łBNCAgT[oɑMꂽf[^ʂ̏f[^ƂČɁA[Follow TCP Stream]@\f[^܂Ƃ߂Č₷Ă܂B́AHTTPFTPȂǂ̃̕AvP[VwvgRQƂۂɓɗLvłiʓIȃvgR̓ɂĂ͎͂ŏڂĂ܂jB
ȒPHTTPgUNVlĂ݂܂傤Bhttp_google.pcapt@CJAt@CTCP܂HTTPpPbĝǂꂩNbNAt@CENbNāA[Follow TCP Stream]I܂BƓƗEBhETCPXg[\܂i}5-11jB

}5-11@ǂ݂₷`ŒʐM\[Follow TCP Stream]EBhE

̃EBhẼeLXg2FɐFĂ܂BԂ͑M父ւ̃gtBbNA͔ΕA܂舶悩瑗Mւ̃gtBbNĂ܂Bǂ炩甭MꂽŐFĂ̂łB̗ł́ANCAgWebT[oɑ΂ăRlNVJnĂ̂ŁAԂŕ\Ă܂B
TCPXg[ł́A2̃zXgԂł̒ʐM̂قƂǂ邱Ƃł܂BʐMWeb̃[gfBNgi/jւGETNGXgŎn܂AT[o̓NGXg󂯎ƂHTTP/1.1 200 OKƂ`ŕԂĂ܂Bȍ~ł́ANCAgt@CNGXgAT[oɑ΂ĉƂAl̃p^[Xg[ŌJԂĂ܂B̓[UۂGooglez[y[WuEYĂƂłA[UĂ̂A猩Ă̂łB
TCPXg[́AEBhEŐ̃f[^ƂČ邾łȂAeLXgAeLXgt@CƂĕۑ܂͈肷邱Ƃł܂B܂ASCIIAEBCDICA16iAC̔zɕϊ邱Ƃ\łB̃IvV[Follow TCP Stream]EBhẺɂ܂B
TCPXg[̕\́ÃvgRۂɔɖ𗧂ł傤B

pPbg
ṔA͂̃pPbgQ̃TCY炳܂܂ȂƂ܂BʓIȏ󋵂ł΁AC[Tlbg̍őt[TCY1518oCgłB̐lC[TlbgAIPATCP̃wb_1460oCg7w̃vgRwb_уf[^̂ƂɎgƂł܂B𓪂ɓꂽŁApPbg̕zALv`gtBbNɂĐĂ݂܂傤Bdownload-slow.pcapt@CJA[Statistics][Packet Lengths]IāA[Create Stat]NbNƁA}5-12̂悤ȃEBhE\܂B

}5-12@Lv`t@C̃gtBbN̐ɖ𗧂[Packet Lengths]EBhE

ł̓TCY1280oCg2559oCg̃pPbg̓vĂ镔nCCgĂ܂BTCY̑傫ȃpPbg͒ʏf[^]AȃpPbg̓vgR̃V[PXĂ܂Bł́A傫ȃpPbg̔䗦Ȃ傫ȂĂ܂i66.43%jB̂߃t@C̒̃pPbgȂĂALv`t@Cɂ1ȏ̃f[^]܂܂Ă邱Ƃ킩܂B܂肱HTTP_E[hFTPAbv[hA邢͂̑̃zXgԂŃf[^]sʐMƂƂɂȂ܂B
c̃pPbg̑唼i33.44%j́ATCY40oCg79oCgłB̃TCỸpPbǵAʏf[^܂܂ȂTCPpPbgłBʓIȃvgRwb_̃TCYlĂ݂܂傤BC[Tlbgwb_14oCgivX4oCgCRCjAIPwb_͍ŏ20oCgAăf[^IvV̂ȂTCPpPbg20oCgłB܂WITCPpPbgiSYNAACKARSTAFINȂǁj54oCgxłA͈̔͂Ɏ܂邱ƂɂȂ܂BIPTCPIvVtĂ΃TCY͑܂B
pPbg𒲂ׂƁALv`̑S̑悭܂BTCY̑傫ȃpPbg񂠂΁Af[^]ĂƍlĂ悢ł傤B܂pPbg̑唼TCYȂAf[^]܂sĂȂAvgR䖽߂ō\Ăƍl܂B͊mȋKł͂܂񂪁Aɍׂ͂sOɁA𗧂ĂĂ̂LvȏꍇX܂B

Ot\
Ot͕͂̊{łAf[^̊TvcœKȕ@̂ЂƂłBWiresharkł̓Lv`f[^̔cOt@\܂ÂЂƂIOOt@\łB

IOOt
Wiresharkł́A[IO Graphs]EBhEőMĂf[^̃X[vbgOt邱Ƃł܂Bł̓f[^̃X[vbgɂXpCN⏬NԂmFAevgR̃ptH[}XxmFÃf[^Xg[𓯎ɔr肷邱Ƃ\łB

IOOt̗ƂāAC^[lbg̃t@C̃_E[hĂ݂܂傤Bdownload-fast.pcapJāATCPpPbĝǂꂩNbNănCCgA[Statistics][IO Graphs]I܂B
[IO Graphs]EBhEł́ALv`t@C̃f[^̗AOtƂČ邱Ƃł܂B}5-13̗ł́A_E[hɂ蕽500pPbg/b̓]pIɑAŌɌĂ邱ƂOt番܂B

}5-13@肵_E[hIOOt

𑬓x̒x_E[ĥ̂ƔrĂ݂܂傤B݂̃t@CJ܂܁AWireshark̕ʂ̃CX^XJāAdownload-slow.pcapJ܂B̃_E[hIOOtɂĂ݂ƁA}5-14̂悤ɈႢ͂Ƃ킩܂B

}5-14@肵ĂȂx_E[hIOOt

̃_E[h̃f[^][g0100pPbg/bŁA肩͒A1b̃pPbgق0ɂȂĂ鎞܂B2̃_E[h̃OtׂĂ݂ƁA̕s肳͈ڗđRłi}5-15jB

}5-15@IOOtׂƈႢ̎ʂɖ𗧂

EBhẺɂݒIvV݂܂Bő5܂ł̃tB^쐬łi6͂7͂Ő܂A\Lv`ł\g܂jAtB^̐Fł܂BƂ΁AARPԁADHCPŕ\tB^쐬āAԂƐ̐܂Otŕ\΁A2̃vgR̃X[vbgȒPɌ邱Ƃ\łB

Ehgbv^COt
Wiresharkɂ́ALv`t@C̃Ehgbv^C\Ot@\Ă܂BEhgbv^CiRTTjƂ́ApPbg̎MmF܂łɂ鎞Ԃw܂B́ApPbgɓ͂A̕ԓɖ߂Ă̂ɂԂłBRTT͂́̕AʐM̒x|Cg{glbNāAx̗LmF邽߂ɂ悭s܂B

̋@\gĂ݂܂傤Bdownload-fast.pcapt@CJāATCPpPbĝꂩIłA[Statistics][TCP Stream Graph][Round Trip Time Graph]IƁA}5-16̂悤RTTOt\܂B

}5-16@̃_E[hRTTOt͂قڈ肵ĂAl̕U͂킸Ȃ

Ot̂ꂼ̓_epPbgRTT\Ă܂BftHgł̓V[PXԍɂă\[gꂽl\܂BOt̓_NbNƁAPacket ListyC̊YpPbgɒڈړł܂B
RTTOtƁA_E[hRTTl͂ق0.05bȉŁAxꍇł0.10b0.25bxł邱Ƃ܂Be͈͂𒴂Ăl킸ɂ̂́ARTTl̂قƂǂ͖肪Ȃ̂ŁAt@C̃_E[hƂĂ͖ȂRTTƂ݂Ȃł傤B

t[Ot
RlNVoĎԌo߂ɔf[^̗̂ƂāAt[Ot@\͔ɕ֗łBt[Ot́A{IɃzXgԂ̃RlNVJr[ƂȂĂAoIɃgtBbNcł悤ɁAgtBbNĂ܂B
t[Ot쐬ɂ́Ahttp_google.pcapt@CJA[Statistics][Flow Graph]I܂BΏۂ̃pPbgƃt[̃^CvɂẴIvVI鏬ȃ_CAO\܂ÃTvł̓ftHĝ܂܂ŖȂ̂ŁA[OK]@NbNăt[Ot쐬܂i}5-17jB

}5-17@TCPt[OtŃRlNVoł

GLXp[g
Wireshark̊evgR͋@\ł́ÃvgR̃pPbg̏ԂƂȂۂɌx邽߂ɗpuGLXp[gvݒ肷邱Ƃł܂BԂ͈ȉ4ɕ邱Ƃł܂B

Chat@ʐM̊{
Note@ʏ̒ʐM̈ꕔłƍlُȃpPbg
Warning@ʏ̒ʐM̈ꕔłƂ͍lȂُȃpPbg
Error@pPbg͂͂͋@\ŃG[

TvĂ݂܂傤Bdownload-slow.pcapt@CJA[Analyze][Expert Info Composite]IāiĖ󒍁F1.8.0ł[Expert Info]I܂jA[Expert Infos]EBhE\܂i}5-18jB

}5-18@[Expert Infos]EBhE̓vgR͋@\ɂGLXp[gVXȅ\

EBhEɂ͕ނꂽԂƂɃ^uAError̓[AWarning3ANote18AChat3邱Ƃ킩܂B^uɎꂽJbR̊O̐͏dȂbZ[W̌AJbR̐͏d̂܂߂bZ[W̌Ă܂B
̃Lv`t@C̃bZ[WׂTCP֘AƂȂĂ̂́AM_ł́ÃvgRɃGLXp[gVXeĂȂ߂łBM_łTCP֘A14̃GLXp[g񃁃bZ[W݂AguV[eBO̍ۂɔɗLpłB̃bZ[ẂAȉɎ𖞂ۂɁAX̃pPbgɃtO𗧂ĂĂ܂B

ChatbZ[W
Window Update@TCPMEBhẼTCYύXꂽƂ𑗐M҂ɒʒm邽߂ɁAM҂ɂđM

NotebZ[W
TCP Retransmission@pPbǧʂƂĔBACKdĎMꂽA܂̓pPbg̍đ^C}[^CAEgƂȂꍇɔ
Duplicate ACK@zXgɊ҂V[PXԍ󂯎ȂꍇAŌɎMf[^̏dACK𐶐
Zero Window Probe@[EBhEpPbgMꂽɁATCPMEBhȄԂĎ̂Ɏgi9͂Őj
Keep Alive ACK@L[vACupPbgɉMꂽ
Zero Window Probe ACK@Zero Window ProbepPbgɉMꂽ
Window is Full@M҂TCPMEBhEς̏Ԃł邱ƂAM̃zXgɒm点ۂɎg

WarningbZ[W
Previous Segment Lost@pPbgӖBf[^Xg[ɂĊ҂V[PXԍXLbvꂽꍇɔ
ACKed Lost Packet@ACKpPbgɂđBmFꂽ͂̃pPbgĂȂꍇɔ
Keep Alive@RlNṼL[vACupPbgmFꂽ
Zero Window@TCPMEBhẼTCYlɒBAZero WindowʒmāAM҂Ƀf[^M~悤vꂽꍇɔ
Out-of-Order@V[PXԍɂAMpPbg̃V[PX̗ꂪmꂽ
Fast Retransmission@dACK20~bȓɔđM

ErrorbZ[W
ɂȂ

6͂TCPwKA9͂Œxlbg[ÑguV[eBOɂĊwׂ΁ÃbZ[ẄӖmɂȂł傤B
{͂Ő̋@\́A߂ɋNȂ󋵂łgȂ悤Ɍ邩܂񂪁Azȏɂɗp邱ƂɂȂƎv܂BŐEBhEƃIvVɊĂĂB̌̏͂ŉxG邱ƂɂȂ܂B


