public inbox for cygwin-xfree@sourceware.org
help / color / mirror / Atom feed
* Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
@ 2011-01-28 19:23 Alexander Pokluda
2011-01-28 20:16 ` Jon TURNEY
0 siblings, 1 reply; 11+ messages in thread
From: Alexander Pokluda @ 2011-01-28 19:23 UTC (permalink / raw)
To: cygwin-xfree
Hi,
I've been trying for a while to get Cygwin/X working with XDMCP for
quite a while without any success; however, I am able to conenct
without any any problem using Xming 6.9. I'm using a Windows 7 PC to
connect to a different Linux VMs running CentOS 5.5. After starting
XWin from the command line (either directly or using startxdmcp.bat),
a window opens up that contains nothing but black. At first when I
move the cursor over the winodow, it just disappears but after a
while, the cursor will appear as an X and the following shows up in
the log file:
[266377.900] winProcEstablishConnection - Hello
[266377.900] winProcEstablishConnection - ProcEstablishConnection
failed, bailing.
[266385.653] winAboutDlgProc - WM_COMMAND - IDOK or IDCANCEL
[266489.784] XDM: too many retransmissions, declaring session dead
Any help would be greatly appreciated. I've included part of the log
from one attempt to connect to one of the CentOS 5.5 VMs that I can
connect to with Xming using XDMCP.
Sincerely,
Alexander Pokluda
------------------------------
--------------
Welcome to the XWin X Server
Vendor: The Cygwin/X Project
Release: 1.9.3.0 (10903000)
Package version 1.9.3-2 built 2011-01-05
XWin was started with the following command line:
xwin -query 10.3.147.100
ddxProcessArgument - Initializing default screens
winInitializeScreenDefaults - primary monitor w 1680 h 1050
winInitializeDefaultScreens - native DPI x 96 y 96
[266361.832] winInitializeScreens - 1
[266361.832] winInitializeScreen - 0
[266361.832] (II) xorg.conf is not supported
[266361.832] (II) See http://x.cygwin.com/docs/faq/cygwin-x-faq.html
for more information
[266361.832] LoadPreferences: /cygdrive/c/Users/alpokluda/.XWinrc not found
[266361.832] LoadPreferences: Loading /etc/X11/system.XWinrc
[266361.832] LoadPreferences: Done parsing the configuration file...
[266361.832] winGetDisplay: DISPLAY=:0.0
[266361.832] winDetectSupportedEngines - Windows NT/2000/XP
[266361.863] winDetectSupportedEngines - DirectDraw installed
[266361.863] winDetectSupportedEngines - Allowing PrimaryDD
[266361.863] winDetectSupportedEngines - DirectDraw4 installed
[266361.894] winDetectSupportedEngines - Returning, supported engines 0000001f
[266361.894] winSetEngine - Using Shadow DirectDraw NonLocking
[266361.894] winScreenInit - Using Windows display depth of 32 bits per pixel
[266362.019] winFinishScreenInitFB - Masks: 00ff0000 0000ff00 000000ff
[266362.019] Screen 0 added at virtual desktop coordinate (1680,0).
[266362.019] MIT-SHM extension disabled due to lack of kernel support
[266362.035] XFree86-Bigfont extension local-client optimization
disabled due to lack of shared memory support in the kernel
[266362.081] (II) AIGLX: Loaded and initialized /usr/lib/dri/swrast_dri.so
[266362.081] (II) GLX: Initialized DRISWRAST GL provider for screen 0
[266362.097] [dix] Could not init font path element
/usr/share/fonts/TTF/, removing from list!
[266362.097] [dix] Could not init font path element
/usr/share/fonts/OTF/, removing from list!
[266362.097] [dix] Could not init font path element
/usr/share/fonts/Type1/, removing from list!
[266362.440] winPointerWarpCursor - Discarding first warp: 837 496
[266362.440] (--) 3 mouse buttons found
[266362.440] (--) Setting autorepeat to delay=500, rate=31
[266362.440] (--) Windows keyboard layout: "00000409" (00000409) "US", type 4
[266362.440] (--) Found matching XKB configuration "English (USA)"
[266362.440] (--) Model = "pc105" Layout = "us" Variant = "none"
Options = "none"
[266362.440] Rules = "base" Model = "pc105" Layout = "us" Variant =
"none" Options = "none"
[266377.900] winProcEstablishConnection - Hello
[266377.900] winProcEstablishConnection - ProcEstablishConnection
failed, bailing.
[266385.653] winAboutDlgProc - WM_COMMAND - IDOK or IDCANCEL
[266489.784] XDM: too many retransmissions, declaring session dead
[266489.940] 5 XSELINUXs still allocated at reset
[266489.940] SCREEN: 0 objects of 72 bytes = 0 total bytes 0 private allocs
[266489.940] DEVICE: 4 objects of 16 bytes = 64 total bytes 0 private allocs
[266489.940] CLIENT: 0 objects of 140 bytes = 0 total bytes 0 private allocs
[266489.940] WINDOW: 0 objects of 64 bytes = 0 total bytes 0 private allocs
[266489.940] PIXMAP: 1 objects of 28 bytes = 28 total bytes 0 private allocs
[266489.940] GC: 0 objects of 52 bytes = 0 total bytes 0 private allocs
[266489.940] CURSOR: 0 objects of 4 bytes = 0 total bytes 0 private allocs
[266489.940] CURSOR_BITS: 0 objects of 4 bytes = 0 total bytes 0 private allocs
[266489.940] DBE_WINDOW: 0 objects of 12 bytes = 0 total bytes 0 private allocs
[266489.940] TOTAL: 5 objects, 92 bytes, 0 allocs
[266489.940] 4 DEVICEs still allocated at reset
[266489.940] DEVICE: 4 objects of 16 bytes = 64 total bytes 0 private allocs
[266489.940] CLIENT: 0 objects of 140 bytes = 0 total bytes 0 private allocs
[266489.940] WINDOW: 0 objects of 64 bytes = 0 total bytes 0 private allocs
[266489.940] PIXMAP: 1 objects of 28 bytes = 28 total bytes 0 private allocs
[266489.940] GC: 0 objects of 52 bytes = 0 total bytes 0 private allocs
[266489.940] CURSOR: 0 objects of 4 bytes = 0 total bytes 0 private allocs
[266489.940] CURSOR_BITS: 0 objects of 4 bytes = 0 total bytes 0 private allocs
[266489.940] DBE_WINDOW: 0 objects of 12 bytes = 0 total bytes 0 private allocs
[266489.940] TOTAL: 5 objects, 92 bytes, 0 allocs
[266489.940] 1 PIXMAPs still allocated at reset
[266489.940] PIXMAP: 1 objects of 28 bytes = 28 total bytes 0 private allocs
[266489.940] GC: 0 objects of 52 bytes = 0 total bytes 0 private allocs
[266489.940] CURSOR: 0 objects of 4 bytes = 0 total bytes 0 private allocs
[266489.940] CURSOR_BITS: 0 objects of 4 bytes = 0 total bytes 0 private allocs
[266489.940] DBE_WINDOW: 0 objects of 12 bytes = 0 total bytes 0 private allocs
[266489.940] TOTAL: 1 objects, 28 bytes, 0 allocs
[266489.940] (II) xorg.conf is not supported
[266489.940] (II) See http://x.cygwin.com/docs/faq/cygwin-x-faq.html
for more information
[266489.940] LoadPreferences: /cygdrive/c/Users/alpokluda/.XWinrc not found
[266489.940] LoadPreferences: Loading /etc/X11/system.XWinrc
[266489.940] LoadPreferences: Done parsing the configuration file...
[266489.940] winGetDisplay: DISPLAY=:0.0
[266489.940] winDetectSupportedEngines - Windows NT/2000/XP
[266489.971] winDetectSupportedEngines - DirectDraw installed
[266489.971] winDetectSupportedEngines - Allowing PrimaryDD
[266489.971] winDetectSupportedEngines - DirectDraw4 installed
[266490.002] winDetectSupportedEngines - Returning, supported engines 0000001f
[266490.002] winSetEngine - Using Shadow DirectDraw NonLocking
[266490.002] winScreenInit - Using command line depth of 32 bpp
[266490.174] winFinishScreenInitFB - Masks: 00ff0000 0000ff00 000000ff
[266490.174] Screen 0 added at virtual desktop coordinate (1680,0).
[266490.174] MIT-SHM extension disabled due to lack of kernel support
[266490.189] XFree86-Bigfont extension local-client optimization
disabled due to lack of shared memory support in the kernel
[266490.236] (II) AIGLX: Loaded and initialized /usr/lib/dri/swrast_dri.so
[266490.236] (II) GLX: Initialized DRISWRAST GL provider for screen 0
[266490.236] [dix] Could not init font path element
/usr/share/fonts/TTF/, removing from list!
[266490.236] [dix] Could not init font path element
/usr/share/fonts/OTF/, removing from list!
[266490.236] [dix] Could not init font path element
/usr/share/fonts/Type1/, removing from list!
[266490.611] (--) 3 mouse buttons found
[266490.611] (--) Setting autorepeat to delay=500, rate=31
[266490.611] (--) Windows keyboard layout: "00000409" (00000409) "US", type 4
[266490.611] (--) Found matching XKB configuration "English (USA)"
[266490.611] (--) Model = "pc105" Layout = "us" Variant = "none"
Options = "none"
[266490.611] Rules = "base" Model = "pc105" Layout = "us" Variant =
"none" Options = "none"
[266616.722] XDM: too many retransmissions, declaring session dead
[...]
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-01-28 19:23 Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log Alexander Pokluda
@ 2011-01-28 20:16 ` Jon TURNEY
2011-01-28 20:23 ` Alexander Pokluda
0 siblings, 1 reply; 11+ messages in thread
From: Jon TURNEY @ 2011-01-28 20:16 UTC (permalink / raw)
To: cygwin-xfree; +Cc: apokluda
On 28/01/2011 19:19, Alexander Pokluda wrote:
> I've been trying for a while to get Cygwin/X working with XDMCP for
> quite a while without any success; however, I am able to conenct
> without any any problem using Xming 6.9. I'm using a Windows 7 PC to
> connect to a different Linux VMs running CentOS 5.5. After starting
> XWin from the command line (either directly or using startxdmcp.bat),
> a window opens up that contains nothing but black. At first when I
> move the cursor over the winodow, it just disappears but after a
> while, the cursor will appear as an X and the following shows up in
> the log file:
>
> [266377.900] winProcEstablishConnection - Hello
> [266377.900] winProcEstablishConnection - ProcEstablishConnection
> failed, bailing.
> [266385.653] winAboutDlgProc - WM_COMMAND - IDOK or IDCANCEL
> [266489.784] XDM: too many retransmissions, declaring session dead
>
> Any help would be greatly appreciated. I've included part of the log
> from one attempt to connect to one of the CentOS 5.5 VMs that I can
> connect to with Xming using XDMCP.
> [266616.722] XDM: too many retransmissions, declaring session dead
Possibly you need to use -query 10.3.147.100 -from <corresponding local IP for
the subnet containing that IP address>
Xming has a patch applied which adds some more intelligence to the way the
local IP address is chosen, but unfortunately that is written to use the
winsock API directly, so can't be used directly in XWin.
--
Jon TURNEY
Volunteer Cygwin/X X Server maintainer
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-01-28 20:16 ` Jon TURNEY
@ 2011-01-28 20:23 ` Alexander Pokluda
2011-02-02 16:00 ` Jon TURNEY
0 siblings, 1 reply; 11+ messages in thread
From: Alexander Pokluda @ 2011-01-28 20:23 UTC (permalink / raw)
To: cygwin-xfree
The Windows PC that I'm using is on a different subnet from the VMs
that I need to connect to (10.3.20.159/24), so does that mean it's not
possible to use Cygwin/X in this case? (Changing either subnet is not
an option).
On Fri, Jan 28, 2011 at 3:16 PM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
> On 28/01/2011 19:19, Alexander Pokluda wrote:
>> I've been trying for a while to get Cygwin/X working with XDMCP for
>> quite a while without any success; however, I am able to conenct
>> without any any problem using Xming 6.9. I'm using a Windows 7 PC to
>> connect to a different Linux VMs running CentOS 5.5. After starting
>> XWin from the command line (either directly or using startxdmcp.bat),
>> a window opens up that contains nothing but black. At first when I
>> move the cursor over the winodow, it just disappears but after a
>> while, the cursor will appear as an X and the following shows up in
>> the log file:
>>
>> [266377.900] winProcEstablishConnection - Hello
>> [266377.900] winProcEstablishConnection - ProcEstablishConnection
>> failed, bailing.
>> [266385.653] winAboutDlgProc - WM_COMMAND - IDOK or IDCANCEL
>> [266489.784] XDM: too many retransmissions, declaring session dead
>>
>> Any help would be greatly appreciated. I've included part of the log
>> from one attempt to connect to one of the CentOS 5.5 VMs that I can
>> connect to with Xming using XDMCP.
>
>> [266616.722] XDM: too many retransmissions, declaring session dead
>
> Possibly you need to use -query 10.3.147.100 -from <corresponding local IP for
> the subnet containing that IP address>
>
> Xming has a patch applied which adds some more intelligence to the way the
> local IP address is chosen, but unfortunately that is written to use the
> winsock API directly, so can't be used directly in XWin.
>
> --
> Jon TURNEY
> Volunteer Cygwin/X X Server maintainer
>
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-01-28 20:23 ` Alexander Pokluda
@ 2011-02-02 16:00 ` Jon TURNEY
2011-02-08 22:01 ` Alexander Pokluda
0 siblings, 1 reply; 11+ messages in thread
From: Jon TURNEY @ 2011-02-02 16:00 UTC (permalink / raw)
To: cygwin-xfree; +Cc: apokluda
On 28/01/2011 20:23, Alexander Pokluda wrote:
> The Windows PC that I'm using is on a different subnet from the VMs
> that I need to connect to (10.3.20.159/24), so does that mean it's not
> possible to use Cygwin/X in this case? (Changing either subnet is not
> an option).
Ah, I had assumed that you were running the VMs locally with some form of
virtual networking.
It certainly should be possible to configure XWin to work in your case.
If you have multiple network interfaces on your PC, then it's probably just a
question of using the -from option to ensure traffic is sent with the correct
source address.
If that doesn't fix it, perhaps you could provide a wireshark trace of the
connection attempt and some more details of the networking configuration (e.g.
output of 'ipconfig' and 'route print')
> On Fri, Jan 28, 2011 at 3:16 PM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
>> On 28/01/2011 19:19, Alexander Pokluda wrote:
>>> I've been trying for a while to get Cygwin/X working with XDMCP for
>>> quite a while without any success; however, I am able to conenct
>>> without any any problem using Xming 6.9. I'm using a Windows 7 PC to
>>> connect to a different Linux VMs running CentOS 5.5. After starting
>>> XWin from the command line (either directly or using startxdmcp.bat),
>>> a window opens up that contains nothing but black. At first when I
>>> move the cursor over the winodow, it just disappears but after a
>>> while, the cursor will appear as an X and the following shows up in
>>> the log file:
>>>
>>> [266377.900] winProcEstablishConnection - Hello
>>> [266377.900] winProcEstablishConnection - ProcEstablishConnection
>>> failed, bailing.
>>> [266385.653] winAboutDlgProc - WM_COMMAND - IDOK or IDCANCEL
>>> [266489.784] XDM: too many retransmissions, declaring session dead
>>>
>>> Any help would be greatly appreciated. I've included part of the log
>>> from one attempt to connect to one of the CentOS 5.5 VMs that I can
>>> connect to with Xming using XDMCP.
>>
>>> [266616.722] XDM: too many retransmissions, declaring session dead
>>
>> Possibly you need to use -query 10.3.147.100 -from <corresponding local IP for
>> the subnet containing that IP address>
>>
>> Xming has a patch applied which adds some more intelligence to the way the
>> local IP address is chosen, but unfortunately that is written to use the
>> winsock API directly, so can't be used directly in XWin.
--
Jon TURNEY
Volunteer Cygwin/X X Server maintainer
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-02-02 16:00 ` Jon TURNEY
@ 2011-02-08 22:01 ` Alexander Pokluda
2011-02-09 15:36 ` Alexander Pokluda
0 siblings, 1 reply; 11+ messages in thread
From: Alexander Pokluda @ 2011-02-08 22:01 UTC (permalink / raw)
To: cygwin-xfree
[-- Attachment #1: Type: text/plain, Size: 11247 bytes --]
Sorry for the delay in my response.
No, I am not runnig the VMs locally. These VMs are being run and
managed in a lab that I don't have access to, but I am expected to use
VMs in the lab for development and testing on a new project.
I have one physical network adapter in my computer and several virtual
adapters since I do have VMware Workstation and Virtual Box installed.
The IP address of the physical adapter is a static IP address set to
10.3.20.159 with /24 subnet mask. The VM that I've been trying to
connect to has IP address 10.3.147.100 and /24 subnet mask. Running
XWin -from 10.3.20.159 -query 10.3.147.100
doesn't work. A blank window opens and eventually closes and re-opens.
This goes on indefinitely. In the attached Wireshark trace, you can
see a cycle of query-willing-request-request...-query-willing-request-request
after running this command in Cygwin:
No. Time Source Destination Protocol Info
3219 253.037685 10.3.20.159 10.3.147.100 XDMCP Query
No. Time Source Destination Protocol Info
3220 253.043332 10.3.147.100 10.3.20.159 XDMCP Willing
No. Time Source Destination Protocol Info
3331 254.061501 10.3.20.159 10.3.147.100 XDMCP Request
No. Time Source Destination Protocol Info
3361 257.044353 10.3.20.159 10.3.147.100 XDMCP Request
[...]
I've also attached a Wireshark trace capturing when using XLaunch to
start an XDMCP session using Xming. In this trace, you can see the
expected query-willing-request-accept sequence:
No. Time Source Destination Protocol Info
129 14.553230 10.3.20.159 10.3.147.100 XDMCP Query
No. Time Source Destination Protocol Info
130 14.554923 10.3.147.100 10.3.20.159 XDMCP Willing
No. Time Source Destination Protocol Info
135 15.226412 10.3.20.159 10.3.147.100 XDMCP Request
No. Time Source Destination Protocol Info
136 15.231235 10.3.147.100 10.3.20.159 XDMCP Accept
Here is the output of ipconfig:
C:\Users\alpokluda>ipconfig
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::71ea:6924:9397:cfc5%14
IPv4 Address. . . . . . . . . . . : 10.3.20.159
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.3.20.1
Ethernet adapter VMware Network Adapter VMnet1:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::39b9:7291:332c:73ee%16
IPv4 Address. . . . . . . . . . . : 192.168.245.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
Ethernet adapter VMware Network Adapter VMnet8:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::91b6:e77b:7aef:6d88%18
IPv4 Address. . . . . . . . . . . : 192.168.127.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
Ethernet adapter VirtualBox Host-Only Network:
Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::7cf6:24ee:7c05:7c06%22
IPv4 Address. . . . . . . . . . . : 192.168.68.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
Tunnel adapter isatap.{9D67124F-C8D9-45C5-9AC5-FCF5D2D8625F}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter isatap.{D64E1692-0777-4BA9-AD59-6BC4B536D5AB}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter isatap.{95AFDF32-DF73-4F97-A9E6-122D78033AED}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Tunnel adapter isatap.{31D1B58C-F013-4228-B2B6-C75660B9C6AA}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
and 'route print':
C:\Users\alpokluda>route print
===========================================================================
Interface List
14...1c c1 de 5d bb 1b ......Intel(R) 82578DM Gigabit Network Connection
16...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
18...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
22...08 00 27 00 58 7b ......VirtualBox Host-Only Ethernet Adapter
1...........................Software Loopback Interface 1
24...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
17...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
21...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.3.20.1 10.3.20.159 266
10.3.20.0 255.255.255.0 On-link 10.3.20.159 266
10.3.20.159 255.255.255.255 On-link 10.3.20.159 266
10.3.20.255 255.255.255.255 On-link 10.3.20.159 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.68.0 255.255.255.0 On-link 192.168.68.1 276
192.168.68.1 255.255.255.255 On-link 192.168.68.1 276
192.168.68.255 255.255.255.255 On-link 192.168.68.1 276
192.168.127.0 255.255.255.0 On-link 192.168.127.1 276
192.168.127.1 255.255.255.255 On-link 192.168.127.1 276
192.168.127.255 255.255.255.255 On-link 192.168.127.1 276
192.168.245.0 255.255.255.0 On-link 192.168.245.1 276
192.168.245.1 255.255.255.255 On-link 192.168.245.1 276
192.168.245.255 255.255.255.255 On-link 192.168.245.1 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.3.20.159 266
224.0.0.0 240.0.0.0 On-link 192.168.68.1 276
224.0.0.0 240.0.0.0 On-link 192.168.245.1 276
224.0.0.0 240.0.0.0 On-link 192.168.127.1 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.3.20.159 266
255.255.255.255 255.255.255.255 On-link 192.168.68.1 276
255.255.255.255 255.255.255.255 On-link 192.168.245.1 276
255.255.255.255 255.255.255.255 On-link 192.168.127.1 276
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 10.3.20.1 Default
===========================================================================
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
14 266 fe80::/64 On-link
22 276 fe80::/64 On-link
16 276 fe80::/64 On-link
18 276 fe80::/64 On-link
16 276 fe80::39b9:7291:332c:73ee/128
On-link
14 266 fe80::71ea:6924:9397:cfc5/128
On-link
22 276 fe80::7cf6:24ee:7c05:7c06/128
On-link
18 276 fe80::91b6:e77b:7aef:6d88/128
On-link
1 306 ff00::/8 On-link
14 266 ff00::/8 On-link
22 276 ff00::/8 On-link
16 276 ff00::/8 On-link
18 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
Please let me know if you need more information.
On Wed, Feb 2, 2011 at 11:00 AM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
> On 28/01/2011 20:23, Alexander Pokluda wrote:
>> The Windows PC that I'm using is on a different subnet from the VMs
>> that I need to connect to (10.3.20.159/24), so does that mean it's not
>> possible to use Cygwin/X in this case? (Changing either subnet is not
>> an option).
>
> Ah, I had assumed that you were running the VMs locally with some form of
> virtual networking.
>
> It certainly should be possible to configure XWin to work in your case.
>
> If you have multiple network interfaces on your PC, then it's probably just a
> question of using the -from option to ensure traffic is sent with the correct
> source address.
>
> If that doesn't fix it, perhaps you could provide a wireshark trace of the
> connection attempt and some more details of the networking configuration (e.g.
> output of 'ipconfig' and 'route print')
>
>> On Fri, Jan 28, 2011 at 3:16 PM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
>>> On 28/01/2011 19:19, Alexander Pokluda wrote:
>>>> I've been trying for a while to get Cygwin/X working with XDMCP for
>>>> quite a while without any success; however, I am able to conenct
>>>> without any any problem using Xming 6.9. I'm using a Windows 7 PC to
>>>> connect to a different Linux VMs running CentOS 5.5. After starting
>>>> XWin from the command line (either directly or using startxdmcp.bat),
>>>> a window opens up that contains nothing but black. At first when I
>>>> move the cursor over the winodow, it just disappears but after a
>>>> while, the cursor will appear as an X and the following shows up in
>>>> the log file:
>>>>
>>>> [266377.900] winProcEstablishConnection - Hello
>>>> [266377.900] winProcEstablishConnection - ProcEstablishConnection
>>>> failed, bailing.
>>>> [266385.653] winAboutDlgProc - WM_COMMAND - IDOK or IDCANCEL
>>>> [266489.784] XDM: too many retransmissions, declaring session dead
>>>>
>>>> Any help would be greatly appreciated. I've included part of the log
>>>> from one attempt to connect to one of the CentOS 5.5 VMs that I can
>>>> connect to with Xming using XDMCP.
>>>
>>>> [266616.722] XDM: too many retransmissions, declaring session dead
>>>
>>> Possibly you need to use -query 10.3.147.100 -from <corresponding local IP for
>>> the subnet containing that IP address>
>>>
>>> Xming has a patch applied which adds some more intelligence to the way the
>>> local IP address is chosen, but unfortunately that is written to use the
>>> winsock API directly, so can't be used directly in XWin.
>
> --
> Jon TURNEY
> Volunteer Cygwin/X X Server maintainer
>
[-- Attachment #2: Xming XDMCP Connection Wireshark Trace.txt --]
[-- Type: text/plain, Size: 63820 bytes --]
No. Time Source Destination Protocol Info
129 14.553230 10.3.20.159 10.3.147.100 XDMCP Query
Frame 129: 49 bytes on wire (392 bits), 49 bytes captured (392 bits)
Arrival Time: Feb 8, 2011 16:28:41.110268000 Eastern Standard Time
Epoch Time: 1297200521.110268000 seconds
[Time delta from previous captured frame: 0.065072000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 14.553230000 seconds]
Frame Number: 129
Frame Length: 49 bytes (392 bits)
Capture Length: 49 bytes (392 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 57941 (57941), Dst Port: xdmcp (177)
Source port: 57941 (57941)
Destination port: xdmcp (177)
Length: 15
Checksum: 0x60bc [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Query (0x0002)
Message length: 1
Authentication names (0)
No. Time Source Destination Protocol Info
130 14.554923 10.3.147.100 10.3.20.159 XDMCP Willing
Frame 130: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Arrival Time: Feb 8, 2011 16:28:41.111961000 Eastern Standard Time
Epoch Time: 1297200521.111961000 seconds
[Time delta from previous captured frame: 0.001693000 seconds]
[Time delta from previous displayed frame: 0.001693000 seconds]
[Time since reference or first frame: 14.554923000 seconds]
Frame Number: 130
Frame Length: 92 bytes (736 bits)
Capture Length: 92 bytes (736 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
User Datagram Protocol, Src Port: xdmcp (177), Dst Port: 57941 (57941)
Source port: xdmcp (177)
Destination port: 57941 (57941)
Length: 58
Checksum: 0x840a [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Willing (0x0005)
Message length: 44
Authentication name:
Hostname: dev01.xxx.net
Status: Linux 2.6.18-194.32.1.el5
No. Time Source Destination Protocol Info
135 15.226412 10.3.20.159 10.3.147.100 XDMCP Request
Frame 135: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits)
Arrival Time: Feb 8, 2011 16:28:41.783450000 Eastern Standard Time
Epoch Time: 1297200521.783450000 seconds
[Time delta from previous captured frame: 0.146583000 seconds]
[Time delta from previous displayed frame: 0.671489000 seconds]
[Time since reference or first frame: 15.226412000 seconds]
Frame Number: 135
Frame Length: 129 bytes (1032 bits)
Capture Length: 129 bytes (1032 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 57941 (57941), Dst Port: xdmcp (177)
Source port: 57941 (57941)
Destination port: xdmcp (177)
Length: 95
Checksum: 0x830f [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 81
Display number: 0
Connections (1)
Authentication name:
Authentication data (0 bytes)
Authorization names (3)
Manufacturer display ID:
No. Time Source Destination Protocol Info
136 15.231235 10.3.147.100 10.3.20.159 XDMCP Accept
Frame 136: 94 bytes on wire (752 bits), 94 bytes captured (752 bits)
Arrival Time: Feb 8, 2011 16:28:41.788273000 Eastern Standard Time
Epoch Time: 1297200521.788273000 seconds
[Time delta from previous captured frame: 0.004823000 seconds]
[Time delta from previous displayed frame: 0.004823000 seconds]
[Time since reference or first frame: 15.231235000 seconds]
Frame Number: 136
Frame Length: 94 bytes (752 bits)
Capture Length: 94 bytes (752 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
User Datagram Protocol, Src Port: xdmcp (177), Dst Port: 57941 (57941)
Source port: xdmcp (177)
Destination port: 57941 (57941)
Length: 60
Checksum: 0x44d6 [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Accept (0x0008)
Message length: 46
Session ID: 0x39e15653
Authentication name:
Authentication data (0 bytes)
Authorization name: MIT-MAGIC-COOKIE-1
Authorization data (16 bytes)
No. Time Source Destination Protocol Info
137 15.231381 10.3.20.159 10.3.147.100 XDMCP Manage
Frame 137: 71 bytes on wire (568 bits), 71 bytes captured (568 bits)
Arrival Time: Feb 8, 2011 16:28:41.788419000 Eastern Standard Time
Epoch Time: 1297200521.788419000 seconds
[Time delta from previous captured frame: 0.000146000 seconds]
[Time delta from previous displayed frame: 0.000146000 seconds]
[Time since reference or first frame: 15.231381000 seconds]
Frame Number: 137
Frame Length: 71 bytes (568 bits)
Capture Length: 71 bytes (568 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 57941 (57941), Dst Port: xdmcp (177)
Source port: 57941 (57941)
Destination port: xdmcp (177)
Length: 37
Checksum: 0xa9a9 [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Manage (0x000a)
Message length: 23
Session ID: 0x39e15653
Display number: 0
Display class: MIT-unspecified
No. Time Source Destination Protocol Info
140 15.620933 10.3.147.100 10.3.20.159 TCP 44876 > x11 [SYN] Seq=0 Win=5840 Len=0 MSS=1380 SACK_PERM=1 TSV=1575904876 TSER=0 WS=7
Frame 140: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Arrival Time: Feb 8, 2011 16:28:42.177971000 Eastern Standard Time
Epoch Time: 1297200522.177971000 seconds
[Time delta from previous captured frame: 0.043879000 seconds]
[Time delta from previous displayed frame: 0.389552000 seconds]
[Time since reference or first frame: 15.620933000 seconds]
Frame Number: 140
Frame Length: 74 bytes (592 bits)
Capture Length: 74 bytes (592 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 0, Len: 0
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 0 (relative sequence number)
Header length: 40 bytes
Flags: 0x02 (SYN)
Window size: 5840
Checksum: 0xeca2 [validation disabled]
Options: (20 bytes)
No. Time Source Destination Protocol Info
141 15.621094 10.3.20.159 10.3.147.100 TCP x11 > 44876 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=4034 WS=8 SACK_PERM=1 TSV=11371858 TSER=1575904876
Frame 141: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Arrival Time: Feb 8, 2011 16:28:42.178132000 Eastern Standard Time
Epoch Time: 1297200522.178132000 seconds
[Time delta from previous captured frame: 0.000161000 seconds]
[Time delta from previous displayed frame: 0.000161000 seconds]
[Time since reference or first frame: 15.621094000 seconds]
Frame Number: 141
Frame Length: 74 bytes (592 bits)
Capture Length: 74 bytes (592 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP SYN/FIN]
[Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 0, Ack: 1, Len: 0
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 0 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 40 bytes
Flags: 0x12 (SYN, ACK)
Window size: 8192
Checksum: 0x45ee [validation disabled]
Options: (20 bytes)
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
142 15.621840 10.3.147.100 10.3.20.159 TCP 44876 > x11 [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=1575904877 TSER=11371858
Frame 142: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Arrival Time: Feb 8, 2011 16:28:42.178878000 Eastern Standard Time
Epoch Time: 1297200522.178878000 seconds
[Time delta from previous captured frame: 0.000746000 seconds]
[Time delta from previous displayed frame: 0.000746000 seconds]
[Time since reference or first frame: 15.621840000 seconds]
Frame Number: 142
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 1, Ack: 1, Len: 0
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 1 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 5888 (scaled)
Checksum: 0x9e9a [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
143 15.621953 10.3.147.100 10.3.20.159 X11 Initial connection request
Frame 143: 114 bytes on wire (912 bits), 114 bytes captured (912 bits)
Arrival Time: Feb 8, 2011 16:28:42.178991000 Eastern Standard Time
Epoch Time: 1297200522.178991000 seconds
[Time delta from previous captured frame: 0.000113000 seconds]
[Time delta from previous displayed frame: 0.000113000 seconds]
[Time since reference or first frame: 15.621953000 seconds]
Frame Number: 143
Frame Length: 114 bytes (912 bits)
Capture Length: 114 bytes (912 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 1, Ack: 1, Len: 48
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 1 (relative sequence number)
[Next sequence number: 49 (relative sequence number)]
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 5888 (scaled)
Checksum: 0x7a5e [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Request, Initial connection request
byte-order: 0x6c (Little-endian)
unused
protocol-major-version: 11
protocol-minor-version: 0
authorization-protocol-name-length: 18
authorization-protocol-data-length: 16
unused
authorization-protocol-name: MIT-MAGIC-COOKIE-1
authorization-protocol-data: ...W>${....1.7.0
No. Time Source Destination Protocol Info
144 15.622227 10.3.20.159 10.3.147.100 X11 Initial connection reply
Frame 144: 1042 bytes on wire (8336 bits), 1042 bytes captured (8336 bits)
Arrival Time: Feb 8, 2011 16:28:42.179265000 Eastern Standard Time
Epoch Time: 1297200522.179265000 seconds
[Time delta from previous captured frame: 0.000274000 seconds]
[Time delta from previous displayed frame: 0.000274000 seconds]
[Time since reference or first frame: 15.622227000 seconds]
Frame Number: 144
Frame Length: 1042 bytes (8336 bits)
Capture Length: 1042 bytes (8336 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 1, Ack: 49, Len: 976
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 1 (relative sequence number)
[Next sequence number: 977 (relative sequence number)]
Acknowledgement number: 49 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65536 (scaled)
Checksum: 0xd667 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Reply, Initial connection reply
success: 1
unused
protocol-major-version: 11
protocol-minor-version: 0
replylength: 242
release-number: 60900031
resource-id-base: 0x00200000
resource-id-mask: 0x001fffff
motion-buffer-size: 256
length-of-vendor: 14
maximum-request-length: 65535
number-of-screens-in-roots: 1
number-of-formats-in-pixmap-formats: 7
image-byte-order: 0x00 (LSBFirst)
bitmap-format-bit-order: 0x00 (LSBFirst)
bitmap-format-scanline-unit: 32
bitmap-format-scanline-pad: 32
min-keycode: 8
max-keycode: 255
unused
vendor: Colin Harrison
undecoded
No. Time Source Destination Protocol Info
145 15.623024 10.3.147.100 10.3.20.159 TCP 44876 > x11 [ACK] Seq=49 Ack=977 Win=7808 Len=0 TSV=1575904878 TSER=11371858
Frame 145: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Arrival Time: Feb 8, 2011 16:28:42.180062000 Eastern Standard Time
Epoch Time: 1297200522.180062000 seconds
[Time delta from previous captured frame: 0.000797000 seconds]
[Time delta from previous displayed frame: 0.000797000 seconds]
[Time since reference or first frame: 15.623024000 seconds]
Frame Number: 145
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 49, Ack: 977, Len: 0
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 49 (relative sequence number)
Acknowledgement number: 977 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 7808 (scaled)
Checksum: 0x9a8a [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
146 15.623037 10.3.147.100 10.3.20.159 X11 Requests: CreateGC, QueryExtension, GetProperty
Frame 146: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits)
Arrival Time: Feb 8, 2011 16:28:42.180075000 Eastern Standard Time
Epoch Time: 1297200522.180075000 seconds
[Time delta from previous captured frame: 0.000013000 seconds]
[Time delta from previous displayed frame: 0.000013000 seconds]
[Time since reference or first frame: 15.623037000 seconds]
Frame Number: 146
Frame Length: 130 bytes (1040 bits)
Capture Length: 130 bytes (1040 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 49, Ack: 977, Len: 64
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 49 (relative sequence number)
[Next sequence number: 113 (relative sequence number)]
Acknowledgement number: 977 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 7808 (scaled)
Checksum: 0x01a0 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Request, opcode: 55 (CreateGC)
opcode: 55 (CreateGC)
unused
request-length: 5
cid: 0x00200000
drawable: 0x0000005b
gc-value-mask: 0x00000008
background: 0x00ffffff
X11, Request, opcode: 98 (QueryExtension)
opcode: 98 (QueryExtension)
unused
request-length: 5
name-length: 12
unused
name: BIG-REQUESTS
X11, Request, opcode: 20 (GetProperty)
opcode: 20 (GetProperty)
delete: False
request-length: 6
window: 0x0000005b
property: 23 (RESOURCE_MANAGER)
get-property-type: 31 (STRING)
long-offset: 0
long-length: 100000000
No. Time Source Destination Protocol Info
147 15.623128 10.3.20.159 10.3.147.100 X11 Reply: GetInputFocus, BIG-REQUESTS-Enable
Frame 147: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits)
Arrival Time: Feb 8, 2011 16:28:42.180166000 Eastern Standard Time
Epoch Time: 1297200522.180166000 seconds
[Time delta from previous captured frame: 0.000091000 seconds]
[Time delta from previous displayed frame: 0.000091000 seconds]
[Time since reference or first frame: 15.623128000 seconds]
Frame Number: 147
Frame Length: 130 bytes (1040 bits)
Capture Length: 130 bytes (1040 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 977, Ack: 113, Len: 64
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 977 (relative sequence number)
[Next sequence number: 1041 (relative sequence number)]
Acknowledgement number: 113 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65536 (scaled)
Checksum: 0x4f1d [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Reply, opcode: 43 (GetInputFocus)
reply: 1
revert-to: Unknown (142)
sequencenumber: 2 (GetInputFocus)
replylength: 0
focus: 33793
unused
X11, Reply, opcode: 132 (BIG-REQUESTS)
reply: 1
unused
sequencenumber: 3 (bigreq-Enable)
replylength: 0
maximum_request_length: 0x00000000 (0)
undecoded
No. Time Source Destination Protocol Info
148 15.623755 10.3.147.100 10.3.20.159 X11 Requests: BIG-REQUESTS-Enable
Frame 148: 70 bytes on wire (560 bits), 70 bytes captured (560 bits)
Arrival Time: Feb 8, 2011 16:28:42.180793000 Eastern Standard Time
Epoch Time: 1297200522.180793000 seconds
[Time delta from previous captured frame: 0.000627000 seconds]
[Time delta from previous displayed frame: 0.000627000 seconds]
[Time since reference or first frame: 15.623755000 seconds]
Frame Number: 148
Frame Length: 70 bytes (560 bits)
Capture Length: 70 bytes (560 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 113, Ack: 1041, Len: 4
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 113 (relative sequence number)
[Next sequence number: 117 (relative sequence number)]
Acknowledgement number: 1041 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 7808 (scaled)
Checksum: 0x14fd [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Request, opcode: 132 (BIG-REQUESTS)
opcode: 132 (BIG-REQUESTS)
extension-minor: 0 (Enable)
request-length: 1
No. Time Source Destination Protocol Info
149 15.623862 10.3.20.159 10.3.147.100 X11 Reply: GetInputFocus
Frame 149: 98 bytes on wire (784 bits), 98 bytes captured (784 bits)
Arrival Time: Feb 8, 2011 16:28:42.180900000 Eastern Standard Time
Epoch Time: 1297200522.180900000 seconds
[Time delta from previous captured frame: 0.000107000 seconds]
[Time delta from previous displayed frame: 0.000107000 seconds]
[Time since reference or first frame: 15.623862000 seconds]
Frame Number: 149
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 1041, Ack: 117, Len: 32
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 1041 (relative sequence number)
[Next sequence number: 1073 (relative sequence number)]
Acknowledgement number: 117 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65536 (scaled)
Checksum: 0x63f3 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Reply, opcode: 43 (GetInputFocus)
reply: 1
revert-to: Unknown (128)
sequencenumber: 4 (GetInputFocus)
replylength: 0
focus: 4194303
unused
No. Time Source Destination Protocol Info
150 15.624490 10.3.147.100 10.3.20.159 X11 Requests: QueryExtension
Frame 150: 86 bytes on wire (688 bits), 86 bytes captured (688 bits)
Arrival Time: Feb 8, 2011 16:28:42.181528000 Eastern Standard Time
Epoch Time: 1297200522.181528000 seconds
[Time delta from previous captured frame: 0.000628000 seconds]
[Time delta from previous displayed frame: 0.000628000 seconds]
[Time since reference or first frame: 15.624490000 seconds]
Frame Number: 150
Frame Length: 86 bytes (688 bits)
Capture Length: 86 bytes (688 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 117, Ack: 1073, Len: 20
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 117 (relative sequence number)
[Next sequence number: 137 (relative sequence number)]
Acknowledgement number: 1073 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 7808 (scaled)
Checksum: 0xa481 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Request, opcode: 98 (QueryExtension)
opcode: 98 (QueryExtension)
unused
request-length: 5
name-length: 9
unused
name: XKEYBOARD
unused
No. Time Source Destination Protocol Info
151 15.624590 10.3.20.159 10.3.147.100 X11 Reply: GetInputFocus
Frame 151: 98 bytes on wire (784 bits), 98 bytes captured (784 bits)
Arrival Time: Feb 8, 2011 16:28:42.181628000 Eastern Standard Time
Epoch Time: 1297200522.181628000 seconds
[Time delta from previous captured frame: 0.000100000 seconds]
[Time delta from previous displayed frame: 0.000100000 seconds]
[Time since reference or first frame: 15.624590000 seconds]
Frame Number: 151
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 1073, Ack: 137, Len: 32
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 1073 (relative sequence number)
[Next sequence number: 1105 (relative sequence number)]
Acknowledgement number: 137 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65536 (scaled)
Checksum: 0x1b69 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Reply, opcode: 43 (GetInputFocus)
reply: 1
revert-to: Unknown (219)
sequencenumber: 5 (GetInputFocus)
replylength: 0
focus: 2421458945
unused
No. Time Source Destination Protocol Info
152 15.625090 10.3.147.100 10.3.20.159 X11 Requests: XKEYBOARD-UseExtension
Frame 152: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Arrival Time: Feb 8, 2011 16:28:42.182128000 Eastern Standard Time
Epoch Time: 1297200522.182128000 seconds
[Time delta from previous captured frame: 0.000500000 seconds]
[Time delta from previous displayed frame: 0.000500000 seconds]
[Time since reference or first frame: 15.625090000 seconds]
Frame Number: 152
Frame Length: 74 bytes (592 bits)
Capture Length: 74 bytes (592 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 137, Ack: 1105, Len: 8
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 137 (relative sequence number)
[Next sequence number: 145 (relative sequence number)]
Acknowledgement number: 1105 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 7808 (scaled)
Checksum: 0x0e9f [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Request, opcode: 136 (XKEYBOARD)
opcode: 136 (XKEYBOARD)
extension-minor: 0 (UseExtension)
request-length: 2
wantedMajor: 0x0001 (1)
wantedMinor: 0x0000 (0)
No. Time Source Destination Protocol Info
153 15.625194 10.3.20.159 10.3.147.100 X11 Reply: GetInputFocus
Frame 153: 98 bytes on wire (784 bits), 98 bytes captured (784 bits)
Arrival Time: Feb 8, 2011 16:28:42.182232000 Eastern Standard Time
Epoch Time: 1297200522.182232000 seconds
[Time delta from previous captured frame: 0.000104000 seconds]
[Time delta from previous displayed frame: 0.000104000 seconds]
[Time since reference or first frame: 15.625194000 seconds]
Frame Number: 153
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 1105, Ack: 145, Len: 32
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 1105 (relative sequence number)
[Next sequence number: 1137 (relative sequence number)]
Acknowledgement number: 145 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65536 (scaled)
Checksum: 0x7031 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Reply, opcode: 43 (GetInputFocus)
reply: 1
revert-to: 1 (PointerRoot)
sequencenumber: 6 (GetInputFocus)
replylength: 0
focus: 1 (PointerRoot)
unused
No. Time Source Destination Protocol Info
154 15.626298 10.3.147.100 10.3.20.159 X11 Requests: OpenFont, QueryExtension
Frame 154: 102 bytes on wire (816 bits), 102 bytes captured (816 bits)
Arrival Time: Feb 8, 2011 16:28:42.183336000 Eastern Standard Time
Epoch Time: 1297200522.183336000 seconds
[Time delta from previous captured frame: 0.001104000 seconds]
[Time delta from previous displayed frame: 0.001104000 seconds]
[Time since reference or first frame: 15.626298000 seconds]
Frame Number: 154
Frame Length: 102 bytes (816 bits)
Capture Length: 102 bytes (816 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 145, Ack: 1137, Len: 36
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 145 (relative sequence number)
[Next sequence number: 181 (relative sequence number)]
Acknowledgement number: 1137 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 7808 (scaled)
Checksum: 0xaa20 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Request, opcode: 45 (OpenFont)
opcode: 45 (OpenFont)
unused
request-length: 5
fid: 0x00200001
name-length: 6
unused
name: cursor
unused
X11, Request, opcode: 98 (QueryExtension)
opcode: 98 (QueryExtension)
unused
request-length: 4
name-length: 6
unused
name: RENDER
unused
No. Time Source Destination Protocol Info
155 15.626441 10.3.20.159 10.3.147.100 X11 Reply: GetInputFocus
Frame 155: 98 bytes on wire (784 bits), 98 bytes captured (784 bits)
Arrival Time: Feb 8, 2011 16:28:42.183479000 Eastern Standard Time
Epoch Time: 1297200522.183479000 seconds
[Time delta from previous captured frame: 0.000143000 seconds]
[Time delta from previous displayed frame: 0.000143000 seconds]
[Time since reference or first frame: 15.626441000 seconds]
Frame Number: 155
Frame Length: 98 bytes (784 bits)
Capture Length: 98 bytes (784 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 1137, Ack: 181, Len: 32
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 1137 (relative sequence number)
[Next sequence number: 1169 (relative sequence number)]
Acknowledgement number: 181 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65280 (scaled)
Checksum: 0x1b17 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Reply, opcode: 43 (GetInputFocus)
reply: 1
revert-to: 0 (None)
sequencenumber: 8 (GetInputFocus)
replylength: 0
focus: 2751500545
unused
No. Time Source Destination Protocol Info
156 15.627162 10.3.147.100 10.3.20.159 X11 Requests: RENDER-QueryVersion, RENDER-QueryPictFormats
Frame 156: 82 bytes on wire (656 bits), 82 bytes captured (656 bits)
Arrival Time: Feb 8, 2011 16:28:42.184200000 Eastern Standard Time
Epoch Time: 1297200522.184200000 seconds
[Time delta from previous captured frame: 0.000721000 seconds]
[Time delta from previous displayed frame: 0.000721000 seconds]
[Time since reference or first frame: 15.627162000 seconds]
Frame Number: 156
Frame Length: 82 bytes (656 bits)
Capture Length: 82 bytes (656 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 181, Ack: 1169, Len: 16
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 181 (relative sequence number)
[Next sequence number: 197 (relative sequence number)]
Acknowledgement number: 1169 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 7808 (scaled)
Checksum: 0x6926 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Request, opcode: 145 (RENDER)
opcode: 145 (RENDER)
extension-minor: 0 (QueryVersion)
request-length: 3
client_major_version: 0x00000000 (0)
client_minor_version: 0x0000000a (10)
X11, Request, opcode: 145 (RENDER)
opcode: 145 (RENDER)
extension-minor: 1 (QueryPictFormats)
request-length: 1
No. Time Source Destination Protocol Info
157 15.627326 10.3.20.159 10.3.147.100 X11 Reply: RENDER-QueryVersion, RENDER-QueryPictFormats
Frame 157: 1070 bytes on wire (8560 bits), 1070 bytes captured (8560 bits)
Arrival Time: Feb 8, 2011 16:28:42.184364000 Eastern Standard Time
Epoch Time: 1297200522.184364000 seconds
[Time delta from previous captured frame: 0.000164000 seconds]
[Time delta from previous displayed frame: 0.000164000 seconds]
[Time since reference or first frame: 15.627326000 seconds]
Frame Number: 157
Frame Length: 1070 bytes (8560 bits)
Capture Length: 1070 bytes (8560 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 1169, Ack: 197, Len: 1004
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 1169 (relative sequence number)
[Next sequence number: 2173 (relative sequence number)]
Acknowledgement number: 197 (relative ack number)
Header length: 32 bytes
Flags: 0x18 (PSH, ACK)
Window size: 65280 (scaled)
Checksum: 0x1da8 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
X11, Reply, opcode: 145 (RENDER)
reply: 1
unused
sequencenumber: 9 (render-QueryVersion)
replylength: 0
major_version: 0x00000000 (0)
minor_version: 0x0000000a (10)
unused
X11, Reply, opcode: 145.1 (RENDER)
reply: 1
unused
sequencenumber: 10 (render-QueryPictFormats)
replylength: 235
num_formats: 0x00000016 (22)
num_screens: 0x00000001 (1)
num_depths: 0x00000007 (7)
num_visuals: 0x00000020 (32)
num_subpixel: 0x00000001 (1)
unused
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTFORMINFO
PICTSCREEN
subpixels
No. Time Source Destination Protocol Info
158 15.629927 10.3.147.100 10.3.20.159 X11 Requests: CreatePixmap, CreateGC
Frame 158: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Arrival Time: Feb 8, 2011 16:28:42.186965000 Eastern Standard Time
Epoch Time: 1297200522.186965000 seconds
[Time delta from previous captured frame: 0.002601000 seconds]
[Time delta from previous displayed frame: 0.002601000 seconds]
[Time since reference or first frame: 15.629927000 seconds]
Frame Number: 158
Frame Length: 1434 bytes (11472 bits)
Capture Length: 1434 bytes (11472 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 197, Ack: 2173, Len: 1368
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 197 (relative sequence number)
[Next sequence number: 1565 (relative sequence number)]
Acknowledgement number: 2173 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 9856 (scaled)
Checksum: 0x2abb [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
TCP segment data (1336 bytes)
X11, Request, opcode: 53 (CreatePixmap)
opcode: 53 (CreatePixmap)
depth: 32
request-length: 4
pid: 0x00200002
drawable: 0x0000005b
width: 39
height: 26
X11, Request, opcode: 55 (CreateGC)
opcode: 55 (CreateGC)
unused
request-length: 4
cid: 0x00200003
drawable: 0x00200002
gc-value-mask: 0x00000000
No. Time Source Destination Protocol Info
159 15.629970 10.3.147.100 10.3.20.159 TCP [TCP segment of a reassembled PDU]
Frame 159: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Arrival Time: Feb 8, 2011 16:28:42.187008000 Eastern Standard Time
Epoch Time: 1297200522.187008000 seconds
[Time delta from previous captured frame: 0.000043000 seconds]
[Time delta from previous displayed frame: 0.000043000 seconds]
[Time since reference or first frame: 15.629970000 seconds]
Frame Number: 159
Frame Length: 1434 bytes (11472 bits)
Capture Length: 1434 bytes (11472 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 1565, Ack: 2173, Len: 1368
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 1565 (relative sequence number)
[Next sequence number: 2933 (relative sequence number)]
Acknowledgement number: 2173 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 9856 (scaled)
Checksum: 0xf862 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
[Reassembled PDU in frame: 162]
TCP segment data (1368 bytes)
No. Time Source Destination Protocol Info
160 15.630025 10.3.20.159 10.3.147.100 TCP x11 > 44876 [ACK] Seq=2173 Ack=2933 Win=65536 Len=0 TSV=11371859 TSER=1575904885
Frame 160: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Arrival Time: Feb 8, 2011 16:28:42.187063000 Eastern Standard Time
Epoch Time: 1297200522.187063000 seconds
[Time delta from previous captured frame: 0.000055000 seconds]
[Time delta from previous displayed frame: 0.000055000 seconds]
[Time since reference or first frame: 15.630025000 seconds]
Frame Number: 160
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 2173, Ack: 2933, Len: 0
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 2173 (relative sequence number)
Acknowledgement number: 2933 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 65536 (scaled)
Checksum: 0x89cf [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
161 15.630829 10.3.147.100 10.3.20.159 TCP [TCP segment of a reassembled PDU]
Frame 161: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Arrival Time: Feb 8, 2011 16:28:42.187867000 Eastern Standard Time
Epoch Time: 1297200522.187867000 seconds
[Time delta from previous captured frame: 0.000804000 seconds]
[Time delta from previous displayed frame: 0.000804000 seconds]
[Time since reference or first frame: 15.630829000 seconds]
Frame Number: 161
Frame Length: 1434 bytes (11472 bits)
Capture Length: 1434 bytes (11472 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 2933, Ack: 2173, Len: 1368
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 2933 (relative sequence number)
[Next sequence number: 4301 (relative sequence number)]
Acknowledgement number: 2173 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 9856 (scaled)
Checksum: 0xaf2a [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
[Reassembled PDU in frame: 162]
TCP segment data (1368 bytes)
No. Time Source Destination Protocol Info
162 15.630890 10.3.147.100 10.3.20.159 X11 Requests: PutImage
Frame 162: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Arrival Time: Feb 8, 2011 16:28:42.187928000 Eastern Standard Time
Epoch Time: 1297200522.187928000 seconds
[Time delta from previous captured frame: 0.000061000 seconds]
[Time delta from previous displayed frame: 0.000061000 seconds]
[Time since reference or first frame: 15.630890000 seconds]
Frame Number: 162
Frame Length: 1434 bytes (11472 bits)
Capture Length: 1434 bytes (11472 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 4301, Ack: 2173, Len: 1368
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 4301 (relative sequence number)
[Next sequence number: 5669 (relative sequence number)]
Acknowledgement number: 2173 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 9856 (scaled)
Checksum: 0x2bf1 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
TCP segment data (8 bytes)
TCP segment data (1268 bytes)
[Reassembled TCP Segments (4080 bytes): #158(1336), #159(1368), #161(1368), #162(8)]
X11, Request, opcode: 72 (PutImage)
opcode: 72 (PutImage)
image-format: 2 (ZPixmap)
request-length: 1020
drawable: 0x00200002
gc: 0x00200003
width: 39
height: 26
dst-x: 0
dst-y: 0
left-pad: 0
depth: 32
unused
data: 000000000000000000000000000000000000000000000000...
X11, Request, opcode: 60 (FreeGC)
opcode: 60 (FreeGC)
unused
request-length: 2
gc: 0x00200003
X11, Request, opcode: 145 (RENDER)
opcode: 145 (RENDER)
extension-minor: 4 (CreatePicture)
request-length: 5
pid: 0x00200004
drawable: 0x00200002
format: 0x00000045
undecoded
X11, Request, opcode: 54 (FreePixmap)
opcode: 54 (FreePixmap)
unused
request-length: 2
pixmap: 0x00200002
X11, Request, opcode: 145 (RENDER)
opcode: 145 (RENDER)
extension-minor: 27 (CreateCursor)
request-length: 4
cid: 0x00200005
source: 0x00200004
x: 0x0009 (9)
y: 0x0002 (2)
X11, Request, opcode: 145 (RENDER)
opcode: 145 (RENDER)
extension-minor: 7 (FreePicture)
request-length: 2
picture: 0x00200004
X11, Request, opcode: 53 (CreatePixmap)
opcode: 53 (CreatePixmap)
depth: 32
request-length: 4
pid: 0x00200006
drawable: 0x0000005b
width: 39
height: 26
X11, Request, opcode: 55 (CreateGC)
opcode: 55 (CreateGC)
unused
request-length: 4
cid: 0x00200007
drawable: 0x00200006
gc-value-mask: 0x00000000
No. Time Source Destination Protocol Info
163 15.630913 10.3.20.159 10.3.147.100 TCP x11 > 44876 [ACK] Seq=2173 Ack=5669 Win=65536 Len=0 TSV=11371859 TSER=1575904886
Frame 163: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Arrival Time: Feb 8, 2011 16:28:42.187951000 Eastern Standard Time
Epoch Time: 1297200522.187951000 seconds
[Time delta from previous captured frame: 0.000023000 seconds]
[Time delta from previous displayed frame: 0.000023000 seconds]
[Time since reference or first frame: 15.630913000 seconds]
Frame Number: 163
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 2173, Ack: 5669, Len: 0
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 2173 (relative sequence number)
Acknowledgement number: 5669 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 65536 (scaled)
Checksum: 0x7f1e [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
164 15.631008 10.3.147.100 10.3.20.159 TCP [TCP segment of a reassembled PDU]
Frame 164: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Arrival Time: Feb 8, 2011 16:28:42.188046000 Eastern Standard Time
Epoch Time: 1297200522.188046000 seconds
[Time delta from previous captured frame: 0.000095000 seconds]
[Time delta from previous displayed frame: 0.000095000 seconds]
[Time since reference or first frame: 15.631008000 seconds]
Frame Number: 164
Frame Length: 1434 bytes (11472 bits)
Capture Length: 1434 bytes (11472 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 5669, Ack: 2173, Len: 1368
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 5669 (relative sequence number)
[Next sequence number: 7037 (relative sequence number)]
Acknowledgement number: 2173 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 9856 (scaled)
Checksum: 0x07fe [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
[Reassembled PDU in frame: 167]
TCP segment data (1368 bytes)
No. Time Source Destination Protocol Info
165 15.631863 10.3.147.100 10.3.20.159 TCP [TCP segment of a reassembled PDU]
Frame 165: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Arrival Time: Feb 8, 2011 16:28:42.188901000 Eastern Standard Time
Epoch Time: 1297200522.188901000 seconds
[Time delta from previous captured frame: 0.000855000 seconds]
[Time delta from previous displayed frame: 0.000855000 seconds]
[Time since reference or first frame: 15.631863000 seconds]
Frame Number: 165
Frame Length: 1434 bytes (11472 bits)
Capture Length: 1434 bytes (11472 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 7037, Ack: 2173, Len: 1368
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 7037 (relative sequence number)
[Next sequence number: 8405 (relative sequence number)]
Acknowledgement number: 2173 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 9856 (scaled)
Checksum: 0x792e [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
[Reassembled PDU in frame: 167]
TCP segment data (1368 bytes)
No. Time Source Destination Protocol Info
166 15.631934 10.3.20.159 10.3.147.100 TCP x11 > 44876 [ACK] Seq=2173 Ack=8405 Win=65536 Len=0 TSV=11371859 TSER=1575904886
Frame 166: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Arrival Time: Feb 8, 2011 16:28:42.188972000 Eastern Standard Time
Epoch Time: 1297200522.188972000 seconds
[Time delta from previous captured frame: 0.000071000 seconds]
[Time delta from previous displayed frame: 0.000071000 seconds]
[Time since reference or first frame: 15.631934000 seconds]
Frame Number: 166
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 2173, Ack: 8405, Len: 0
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 2173 (relative sequence number)
Acknowledgement number: 8405 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 65536 (scaled)
Checksum: 0x746e [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
No. Time Source Destination Protocol Info
167 15.632054 10.3.147.100 10.3.20.159 X11 Requests: PutImage
Frame 167: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Arrival Time: Feb 8, 2011 16:28:42.189092000 Eastern Standard Time
Epoch Time: 1297200522.189092000 seconds
[Time delta from previous captured frame: 0.000120000 seconds]
[Time delta from previous displayed frame: 0.000120000 seconds]
[Time since reference or first frame: 15.632054000 seconds]
Frame Number: 167
Frame Length: 1434 bytes (11472 bits)
Capture Length: 1434 bytes (11472 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp:x11:x11]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 8405, Ack: 2173, Len: 1368
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 8405 (relative sequence number)
[Next sequence number: 9773 (relative sequence number)]
Acknowledgement number: 2173 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 9856 (scaled)
Checksum: 0x8714 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
TCP segment data (76 bytes)
TCP segment data (1200 bytes)
[Reassembled TCP Segments (4080 bytes): #162(1268), #164(1368), #165(1368), #167(76)]
X11, Request, opcode: 72 (PutImage)
opcode: 72 (PutImage)
image-format: 2 (ZPixmap)
request-length: 1020
drawable: 0x00200006
gc: 0x00200007
width: 39
height: 26
dst-x: 0
dst-y: 0
left-pad: 0
depth: 32
unused
data: 000000000000000000000000000000000000000000000000...
X11, Request, opcode: 60 (FreeGC)
opcode: 60 (FreeGC)
unused
request-length: 2
gc: 0x00200007
X11, Request, opcode: 145 (RENDER)
opcode: 145 (RENDER)
extension-minor: 4 (CreatePicture)
request-length: 5
pid: 0x00200008
drawable: 0x00200006
format: 0x00000045
undecoded
X11, Request, opcode: 54 (FreePixmap)
opcode: 54 (FreePixmap)
unused
request-length: 2
pixmap: 0x00200006
X11, Request, opcode: 145 (RENDER)
opcode: 145 (RENDER)
extension-minor: 27 (CreateCursor)
request-length: 4
cid: 0x00200009
source: 0x00200008
x: 0x0009 (9)
y: 0x0002 (2)
X11, Request, opcode: 145 (RENDER)
opcode: 145 (RENDER)
extension-minor: 7 (FreePicture)
request-length: 2
picture: 0x00200008
X11, Request, opcode: 53 (CreatePixmap)
opcode: 53 (CreatePixmap)
depth: 32
request-length: 4
pid: 0x0020000a
drawable: 0x0000005b
width: 39
height: 26
X11, Request, opcode: 55 (CreateGC)
opcode: 55 (CreateGC)
unused
request-length: 4
cid: 0x0020000b
drawable: 0x0020000a
gc-value-mask: 0x00000000
No. Time Source Destination Protocol Info
168 15.632072 10.3.147.100 10.3.20.159 TCP [TCP segment of a reassembled PDU]
Frame 168: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits)
Arrival Time: Feb 8, 2011 16:28:42.189110000 Eastern Standard Time
Epoch Time: 1297200522.189110000 seconds
[Time delta from previous captured frame: 0.000018000 seconds]
[Time delta from previous displayed frame: 0.000018000 seconds]
[Time since reference or first frame: 15.632072000 seconds]
Frame Number: 168
Frame Length: 1434 bytes (11472 bits)
Capture Length: 1434 bytes (11472 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
Transmission Control Protocol, Src Port: 44876 (44876), Dst Port: x11 (6000), Seq: 9773, Ack: 2173, Len: 1368
Source port: 44876 (44876)
Destination port: x11 (6000)
[Stream index: 20]
Sequence number: 9773 (relative sequence number)
[Next sequence number: 11141 (relative sequence number)]
Acknowledgement number: 2173 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 9856 (scaled)
Checksum: 0x23d1 [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
[Reassembled PDU in frame: 171]
TCP segment data (1368 bytes)
No. Time Source Destination Protocol Info
169 15.632098 10.3.20.159 10.3.147.100 TCP x11 > 44876 [ACK] Seq=2173 Ack=11141 Win=65536 Len=0 TSV=11371859 TSER=1575904887
Frame 169: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Arrival Time: Feb 8, 2011 16:28:42.189136000 Eastern Standard Time
Epoch Time: 1297200522.189136000 seconds
[Time delta from previous captured frame: 0.000026000 seconds]
[Time delta from previous displayed frame: 0.000026000 seconds]
[Time since reference or first frame: 15.632098000 seconds]
Frame Number: 169
Frame Length: 66 bytes (528 bits)
Capture Length: 66 bytes (528 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:tcp]
[Coloring Rule Name: TCP]
[Coloring Rule String: tcp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
Transmission Control Protocol, Src Port: x11 (6000), Dst Port: 44876 (44876), Seq: 2173, Ack: 11141, Len: 0
Source port: x11 (6000)
Destination port: 44876 (44876)
[Stream index: 20]
Sequence number: 2173 (relative sequence number)
Acknowledgement number: 11141 (relative ack number)
Header length: 32 bytes
Flags: 0x10 (ACK)
Window size: 65536 (scaled)
Checksum: 0x69bd [validation disabled]
Options: (12 bytes)
[SEQ/ACK analysis]
[-- Attachment #3: XWin XDMCP Connection Wireshark Trace.txt --]
[-- Type: text/plain, Size: 24791 bytes --]
No. Time Source Destination Protocol Info
3219 253.037685 10.3.20.159 10.3.147.100 XDMCP Query
Frame 3219: 49 bytes on wire (392 bits), 49 bytes captured (392 bits)
Arrival Time: Feb 8, 2011 16:22:10.575557000 Eastern Standard Time
Epoch Time: 1297200130.575557000 seconds
[Time delta from previous captured frame: 0.078308000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 253.037685000 seconds]
Frame Number: 3219
Frame Length: 49 bytes (392 bits)
Capture Length: 49 bytes (392 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 15
Checksum: 0x5a50 [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Query (0x0002)
Message length: 1
Authentication names (0)
No. Time Source Destination Protocol Info
3220 253.043332 10.3.147.100 10.3.20.159 XDMCP Willing
Frame 3220: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Arrival Time: Feb 8, 2011 16:22:10.581204000 Eastern Standard Time
Epoch Time: 1297200130.581204000 seconds
[Time delta from previous captured frame: 0.005647000 seconds]
[Time delta from previous displayed frame: 0.005647000 seconds]
[Time since reference or first frame: 253.043332000 seconds]
Frame Number: 3220
Frame Length: 92 bytes (736 bits)
Capture Length: 92 bytes (736 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
User Datagram Protocol, Src Port: xdmcp (177), Dst Port: 59585 (59585)
Source port: xdmcp (177)
Destination port: 59585 (59585)
Length: 58
Checksum: 0x7d9e [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Willing (0x0005)
Message length: 44
Authentication name:
Hostname: dev01.xxx.net
Status: Linux 2.6.18-194.32.1.el5
No. Time Source Destination Protocol Info
3331 254.061501 10.3.20.159 10.3.147.100 XDMCP Request
Frame 3331: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:22:11.599373000 Eastern Standard Time
Epoch Time: 1297200131.599373000 seconds
[Time delta from previous captured frame: 0.227386000 seconds]
[Time delta from previous displayed frame: 1.018169000 seconds]
[Time since reference or first frame: 254.061501000 seconds]
Frame Number: 3331
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
3361 257.044353 10.3.20.159 10.3.147.100 XDMCP Request
Frame 3361: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:22:14.582225000 Eastern Standard Time
Epoch Time: 1297200134.582225000 seconds
[Time delta from previous captured frame: 0.038222000 seconds]
[Time delta from previous displayed frame: 2.982852000 seconds]
[Time since reference or first frame: 257.044353000 seconds]
Frame Number: 3361
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
3388 261.041593 10.3.20.159 10.3.147.100 XDMCP Request
Frame 3388: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:22:18.579465000 Eastern Standard Time
Epoch Time: 1297200138.579465000 seconds
[Time delta from previous captured frame: 0.009517000 seconds]
[Time delta from previous displayed frame: 3.997240000 seconds]
[Time since reference or first frame: 261.041593000 seconds]
Frame Number: 3388
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
3475 269.054027 10.3.20.159 10.3.147.100 XDMCP Request
Frame 3475: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:22:26.591899000 Eastern Standard Time
Epoch Time: 1297200146.591899000 seconds
[Time delta from previous captured frame: 0.043841000 seconds]
[Time delta from previous displayed frame: 8.012434000 seconds]
[Time since reference or first frame: 269.054027000 seconds]
Frame Number: 3475
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
3618 285.054707 10.3.20.159 10.3.147.100 XDMCP Request
Frame 3618: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:22:42.592579000 Eastern Standard Time
Epoch Time: 1297200162.592579000 seconds
[Time delta from previous captured frame: 0.049198000 seconds]
[Time delta from previous displayed frame: 16.000680000 seconds]
[Time since reference or first frame: 285.054707000 seconds]
Frame Number: 3618
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
4096 317.063281 10.3.20.159 10.3.147.100 XDMCP Request
Frame 4096: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:23:14.601153000 Eastern Standard Time
Epoch Time: 1297200194.601153000 seconds
[Time delta from previous captured frame: 0.059151000 seconds]
[Time delta from previous displayed frame: 32.008574000 seconds]
[Time since reference or first frame: 317.063281000 seconds]
Frame Number: 4096
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
4387 349.071782 10.3.20.159 10.3.147.100 XDMCP Request
Frame 4387: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:23:46.609654000 Eastern Standard Time
Epoch Time: 1297200226.609654000 seconds
[Time delta from previous captured frame: 0.024144000 seconds]
[Time delta from previous displayed frame: 32.008501000 seconds]
[Time since reference or first frame: 349.071782000 seconds]
Frame Number: 4387
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
4891 381.087354 10.3.20.159 10.3.147.100 XDMCP Query
Frame 4891: 49 bytes on wire (392 bits), 49 bytes captured (392 bits)
Arrival Time: Feb 8, 2011 16:24:18.625226000 Eastern Standard Time
Epoch Time: 1297200258.625226000 seconds
[Time delta from previous captured frame: 0.027079000 seconds]
[Time delta from previous displayed frame: 32.015572000 seconds]
[Time since reference or first frame: 381.087354000 seconds]
Frame Number: 4891
Frame Length: 49 bytes (392 bits)
Capture Length: 49 bytes (392 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 15
Checksum: 0x5a50 [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Query (0x0002)
Message length: 1
Authentication names (0)
No. Time Source Destination Protocol Info
4892 381.090303 10.3.147.100 10.3.20.159 XDMCP Willing
Frame 4892: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Arrival Time: Feb 8, 2011 16:24:18.628175000 Eastern Standard Time
Epoch Time: 1297200258.628175000 seconds
[Time delta from previous captured frame: 0.002949000 seconds]
[Time delta from previous displayed frame: 0.002949000 seconds]
[Time since reference or first frame: 381.090303000 seconds]
Frame Number: 4892
Frame Length: 92 bytes (736 bits)
Capture Length: 92 bytes (736 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
User Datagram Protocol, Src Port: xdmcp (177), Dst Port: 59585 (59585)
Source port: xdmcp (177)
Destination port: 59585 (59585)
Length: 58
Checksum: 0x7d9e [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Willing (0x0005)
Message length: 44
Authentication name:
Hostname: dev01.xxx.net
Status: Linux 2.6.18-194.32.1.el5
No. Time Source Destination Protocol Info
4893 381.125728 10.3.20.159 10.3.147.100 XDMCP Query
Frame 4893: 49 bytes on wire (392 bits), 49 bytes captured (392 bits)
Arrival Time: Feb 8, 2011 16:24:18.663600000 Eastern Standard Time
Epoch Time: 1297200258.663600000 seconds
[Time delta from previous captured frame: 0.035425000 seconds]
[Time delta from previous displayed frame: 0.035425000 seconds]
[Time since reference or first frame: 381.125728000 seconds]
Frame Number: 4893
Frame Length: 49 bytes (392 bits)
Capture Length: 49 bytes (392 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 15
Checksum: 0x5a50 [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Query (0x0002)
Message length: 1
Authentication names (0)
No. Time Source Destination Protocol Info
4894 381.126579 10.3.147.100 10.3.20.159 XDMCP Willing
Frame 4894: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Arrival Time: Feb 8, 2011 16:24:18.664451000 Eastern Standard Time
Epoch Time: 1297200258.664451000 seconds
[Time delta from previous captured frame: 0.000851000 seconds]
[Time delta from previous displayed frame: 0.000851000 seconds]
[Time since reference or first frame: 381.126579000 seconds]
Frame Number: 4894
Frame Length: 92 bytes (736 bits)
Capture Length: 92 bytes (736 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco_b1:71:40 (00:0b:45:b1:71:40), Dst: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b)
Internet Protocol, Src: 10.3.147.100 (10.3.147.100), Dst: 10.3.20.159 (10.3.20.159)
User Datagram Protocol, Src Port: xdmcp (177), Dst Port: 59585 (59585)
Source port: xdmcp (177)
Destination port: 59585 (59585)
Length: 58
Checksum: 0x7d9e [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Willing (0x0005)
Message length: 44
Authentication name:
Hostname: dev01.xxx.net
Status: Linux 2.6.18-194.32.1.el5
No. Time Source Destination Protocol Info
4946 382.069211 10.3.20.159 10.3.147.100 XDMCP Request
Frame 4946: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:24:19.607083000 Eastern Standard Time
Epoch Time: 1297200259.607083000 seconds
[Time delta from previous captured frame: 0.014956000 seconds]
[Time delta from previous displayed frame: 0.942632000 seconds]
[Time since reference or first frame: 382.069211000 seconds]
Frame Number: 4946
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
4986 384.081431 10.3.20.159 10.3.147.100 XDMCP Request
Frame 4986: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:24:21.619303000 Eastern Standard Time
Epoch Time: 1297200261.619303000 seconds
[Time delta from previous captured frame: 0.006261000 seconds]
[Time delta from previous displayed frame: 2.012220000 seconds]
[Time since reference or first frame: 384.081431000 seconds]
Frame Number: 4986
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
5030 388.087587 10.3.20.159 10.3.147.100 XDMCP Request
Frame 5030: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:24:25.625459000 Eastern Standard Time
Epoch Time: 1297200265.625459000 seconds
[Time delta from previous captured frame: 0.085816000 seconds]
[Time delta from previous displayed frame: 4.006156000 seconds]
[Time since reference or first frame: 388.087587000 seconds]
Frame Number: 5030
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
No. Time Source Destination Protocol Info
5089 396.100924 10.3.20.159 10.3.147.100 XDMCP Request
Frame 5089: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits)
Arrival Time: Feb 8, 2011 16:24:33.638796000 Eastern Standard Time
Epoch Time: 1297200273.638796000 seconds
[Time delta from previous captured frame: 0.032843000 seconds]
[Time delta from previous displayed frame: 8.013337000 seconds]
[Time since reference or first frame: 396.100924000 seconds]
Frame Number: 5089
Frame Length: 268 bytes (2144 bits)
Capture Length: 268 bytes (2144 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:xdmcp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_5d:bb:1b (1c:c1:de:5d:bb:1b), Dst: All-HSRP-routers_14 (00:00:0c:07:ac:14)
Internet Protocol, Src: 10.3.20.159 (10.3.20.159), Dst: 10.3.147.100 (10.3.147.100)
User Datagram Protocol, Src Port: 59585 (59585), Dst Port: xdmcp (177)
Source port: 59585 (59585)
Destination port: xdmcp (177)
Length: 234
Checksum: 0xf61b [validation disabled]
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
[-- Attachment #4: Type: text/plain, Size: 223 bytes --]
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-02-08 22:01 ` Alexander Pokluda
@ 2011-02-09 15:36 ` Alexander Pokluda
2011-02-09 23:37 ` Jon TURNEY
0 siblings, 1 reply; 11+ messages in thread
From: Alexander Pokluda @ 2011-02-09 15:36 UTC (permalink / raw)
To: cygwin-xfree
Here is an excerpt from /var/log/messages on the VM that I'm trying to
connect to with XWin.
This is what appears in the log after running
XWin -from 10.3.20.159 -query 10.3.147.100
Feb 8 11:22:08 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
QUERY from client 10.3.20.159
Feb 8 11:22:08 dev01 gdm[4097]: gdm_xdmcp_handle_query: Opcode 2 from
10.3.20.159
Feb 8 11:22:08 dev01 gdm[4097]: gdm_xdmcp_host_allow:
client->hostname is ci0000001138531.xxx.net
Feb 8 11:22:08 dev01 gdm[4097]: gdm_xdmcp_send_willing: Sending
WILLING to 10.3.20.159
Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
QUERY from client 10.3.20.159
Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_handle_query: Opcode 2 from
10.3.20.159
Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_host_allow:
client->hostname is ci0000001138531.xxx.net
Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_send_willing: Sending
WILLING to 10.3.20.159
Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
QUERY from client 10.3.20.159
Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_handle_query: Opcode 2 from
10.3.20.159
Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_host_allow:
client->hostname is ci0000001138531.xxx.net
Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_send_willing: Sending
WILLING to 10.3.20.159
Feb 8 11:27:45 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
QUERY from client 10.3.20.159
Feb 8 11:27:45 dev01 gdm[4097]: gdm_xdmcp_handle_query: Opcode 2 from
10.3.20.159
Feb 8 11:27:45 dev01 gdm[4097]: gdm_xdmcp_host_allow:
client->hostname is ci0000001138531.xxx.net
Feb 8 11:27:45 dev01 gdm[4097]: gdm_xdmcp_send_willing: Sending
WILLING to 10.3.20.159
[...]
It seems that the "REQUEST" message sent by XWin somehow gets lost.
Although it shows up in the Wireshark trace, it never shows up in the
log on the VM. By contrast, this is what appears in the log when
making a successful connection with XLaunch/Xming:
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
QUERY from client 10.3.20.159
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_handle_query: Opcode 2 from
10.3.20.159
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_host_allow:
client->hostname is ci0000001138531.xxx.net
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_send_willing: Sending
WILLING to 10.3.20.159
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
REQUEST from client 10.3.20.159
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_handle_request: Got REQUEST
from 10.3.20.159
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_host_allow:
client->hostname is ci0000001138531.xxx.net
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_displays_check: Disposing
session id 971069010
Feb 8 11:28:39 dev01 gdm[4097]: gdm_display_dispose: Disposing dev01.xxx.net:2
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_handle_request:
xdmcp_pending=0, MaxPending=4, xdmcp_sessions=0, MaxSessions=16,
ManufacturerID=
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_display_dispose_check
(ci0000001138531.xxx.net:0)
Feb 8 11:28:39 dev01 gdm[4097]: gdm_auth_secure_display: Setting up
access for ci0000001138531.xxx.net:0
Feb 8 11:28:39 dev01 gdm[4097]: gdm_auth_secure_display: Setting up access
Feb 8 11:28:39 dev01 gdm[4097]: gdm_auth_secure_display: Setting up
access for ci0000001138531.xxx.net:0 - 1 entries
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_display_alloc:
display=ci0000001138531.xxx.net:0, session id=971069011,
xdmcp_pending=1
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_send_accept: Sending ACCEPT
to 10.3.20.159 with SessionID=971069011
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
MANAGE from client 10.3.20.159
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_handle_manage: Got MANAGE
from 10.3.20.159
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_host_allow:
client->hostname is ci0000001138531.xxx.net
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_handle_manage: Got
Display=0, SessionID=971069011 Class=MIT-unspecified from 10.3.20.159
Feb 8 11:28:39 dev01 gdm[4097]: gdm_xdmcp_handle_manage: Looked up
ci0000001138531.xxx.net:0
Feb 8 11:28:39 dev01 gdm[4097]: gdm_choose_indirect_lookup: Host
10.3.20.159 not found
Feb 8 11:28:39 dev01 gdm[4097]: gdm_forward_query_lookup: Host
10.3.20.159 not found
Feb 8 11:28:39 dev01 gdm[4097]: gdm_display_manage: Managing
ci0000001138531.xxx.net:0
Feb 8 11:28:39 dev01 gdm[4097]: loop check: last_start 0, last_loop
0, now: 1297182519, retry_count: 0
Feb 8 11:28:39 dev01 gdm[4097]: Resetting counts for loop of death detection
Feb 8 11:28:39 dev01 gdm[4097]: gdm_display_manage: Forked slave: 12208
Feb 8 11:28:39 dev01 gdm[12208]: gdm_slave_start: Starting slave
process for ci0000001138531.xxx.net:0
Feb 8 11:28:39 dev01 gdm[12208]: gdm_slave_start: Loop Thingie
Feb 8 11:28:40 dev01 gdm[12208]: gdm_slave_run: Opening display
ci0000001138531.xxx.net:0
Feb 8 11:28:40 dev01 gdm[12208]: gdm_slave_greeter: Running greeter
on ci0000001138531.xxx.net:0
Feb 8 11:28:40 dev01 gdm[12208]: gdm_slave_greeter: Greeter on pid 12218
[...]
On Tue, Feb 8, 2011 at 5:00 PM, Alexander Pokluda <apokluda@gmail.com> wrote:
> Sorry for the delay in my response.
>
> No, I am not runnig the VMs locally. These VMs are being run and
> managed in a lab that I don't have access to, but I am expected to use
> VMs in the lab for development and testing on a new project.
>
> I have one physical network adapter in my computer and several virtual
> adapters since I do have VMware Workstation and Virtual Box installed.
> The IP address of the physical adapter is a static IP address set to
> 10.3.20.159 with /24 subnet mask. The VM that I've been trying to
> connect to has IP address 10.3.147.100 and /24 subnet mask. Running
>
> XWin -from 10.3.20.159 -query 10.3.147.100
>
> doesn't work. A blank window opens and eventually closes and re-opens.
> This goes on indefinitely. In the attached Wireshark trace, you can
> see a cycle of query-willing-request-request...-query-willing-request-request
> after running this command in Cygwin:
>
> No. Time Source Destination Protocol Info
> 3219 253.037685 10.3.20.159 10.3.147.100 XDMCP Query
>
> No. Time Source Destination Protocol Info
> 3220 253.043332 10.3.147.100 10.3.20.159 XDMCP Willing
>
> No. Time Source Destination Protocol Info
> 3331 254.061501 10.3.20.159 10.3.147.100 XDMCP Request
>
> No. Time Source Destination Protocol Info
> 3361 257.044353 10.3.20.159 10.3.147.100 XDMCP Request
>
> [...]
>
> I've also attached a Wireshark trace capturing when using XLaunch to
> start an XDMCP session using Xming. In this trace, you can see the
> expected query-willing-request-accept sequence:
>
> No. Time Source Destination Protocol Info
> 129 14.553230 10.3.20.159 10.3.147.100 XDMCP Query
>
> No. Time Source Destination Protocol Info
> 130 14.554923 10.3.147.100 10.3.20.159 XDMCP Willing
>
> No. Time Source Destination Protocol Info
> 135 15.226412 10.3.20.159 10.3.147.100 XDMCP Request
>
> No. Time Source Destination Protocol Info
> 136 15.231235 10.3.147.100 10.3.20.159 XDMCP Accept
>
> Here is the output of ipconfig:
>
> C:\Users\alpokluda>ipconfig
>
> Windows IP Configuration
>
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . :
> Link-local IPv6 Address . . . . . : fe80::71ea:6924:9397:cfc5%14
> IPv4 Address. . . . . . . . . . . : 10.3.20.159
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 10.3.20.1
>
> Ethernet adapter VMware Network Adapter VMnet1:
>
> Connection-specific DNS Suffix . :
> Link-local IPv6 Address . . . . . : fe80::39b9:7291:332c:73ee%16
> IPv4 Address. . . . . . . . . . . : 192.168.245.1
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . :
>
> Ethernet adapter VMware Network Adapter VMnet8:
>
> Connection-specific DNS Suffix . :
> Link-local IPv6 Address . . . . . : fe80::91b6:e77b:7aef:6d88%18
> IPv4 Address. . . . . . . . . . . : 192.168.127.1
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . :
>
> Ethernet adapter VirtualBox Host-Only Network:
>
> Connection-specific DNS Suffix . :
> Link-local IPv6 Address . . . . . : fe80::7cf6:24ee:7c05:7c06%22
> IPv4 Address. . . . . . . . . . . : 192.168.68.1
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . :
>
> Tunnel adapter isatap.{9D67124F-C8D9-45C5-9AC5-FCF5D2D8625F}:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
>
> Tunnel adapter isatap.{D64E1692-0777-4BA9-AD59-6BC4B536D5AB}:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
>
> Tunnel adapter isatap.{95AFDF32-DF73-4F97-A9E6-122D78033AED}:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
>
> Tunnel adapter isatap.{31D1B58C-F013-4228-B2B6-C75660B9C6AA}:
>
> Media State . . . . . . . . . . . : Media disconnected
> Connection-specific DNS Suffix . :
>
> and 'route print':
>
> C:\Users\alpokluda>route print
> ===========================================================================
> Interface List
> 14...1c c1 de 5d bb 1b ......Intel(R) 82578DM Gigabit Network Connection
> 16...00 50 56 c0 00 01 ......VMware Virtual Ethernet Adapter for VMnet1
> 18...00 50 56 c0 00 08 ......VMware Virtual Ethernet Adapter for VMnet8
> 22...08 00 27 00 58 7b ......VirtualBox Host-Only Ethernet Adapter
> 1...........................Software Loopback Interface 1
> 24...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
> 17...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
> 19...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
> 21...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
> ===========================================================================
>
> IPv4 Route Table
> ===========================================================================
> Active Routes:
> Network Destination Netmask Gateway Interface Metric
> 0.0.0.0 0.0.0.0 10.3.20.1 10.3.20.159 266
> 10.3.20.0 255.255.255.0 On-link 10.3.20.159 266
> 10.3.20.159 255.255.255.255 On-link 10.3.20.159 266
> 10.3.20.255 255.255.255.255 On-link 10.3.20.159 266
> 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
> 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
> 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
> 192.168.68.0 255.255.255.0 On-link 192.168.68.1 276
> 192.168.68.1 255.255.255.255 On-link 192.168.68.1 276
> 192.168.68.255 255.255.255.255 On-link 192.168.68.1 276
> 192.168.127.0 255.255.255.0 On-link 192.168.127.1 276
> 192.168.127.1 255.255.255.255 On-link 192.168.127.1 276
> 192.168.127.255 255.255.255.255 On-link 192.168.127.1 276
> 192.168.245.0 255.255.255.0 On-link 192.168.245.1 276
> 192.168.245.1 255.255.255.255 On-link 192.168.245.1 276
> 192.168.245.255 255.255.255.255 On-link 192.168.245.1 276
> 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
> 224.0.0.0 240.0.0.0 On-link 10.3.20.159 266
> 224.0.0.0 240.0.0.0 On-link 192.168.68.1 276
> 224.0.0.0 240.0.0.0 On-link 192.168.245.1 276
> 224.0.0.0 240.0.0.0 On-link 192.168.127.1 276
> 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
> 255.255.255.255 255.255.255.255 On-link 10.3.20.159 266
> 255.255.255.255 255.255.255.255 On-link 192.168.68.1 276
> 255.255.255.255 255.255.255.255 On-link 192.168.245.1 276
> 255.255.255.255 255.255.255.255 On-link 192.168.127.1 276
> ===========================================================================
> Persistent Routes:
> Network Address Netmask Gateway Address Metric
> 0.0.0.0 0.0.0.0 10.3.20.1 Default
> ===========================================================================
>
> IPv6 Route Table
> ===========================================================================
> Active Routes:
> If Metric Network Destination Gateway
> 1 306 ::1/128 On-link
> 14 266 fe80::/64 On-link
> 22 276 fe80::/64 On-link
> 16 276 fe80::/64 On-link
> 18 276 fe80::/64 On-link
> 16 276 fe80::39b9:7291:332c:73ee/128
> On-link
> 14 266 fe80::71ea:6924:9397:cfc5/128
> On-link
> 22 276 fe80::7cf6:24ee:7c05:7c06/128
> On-link
> 18 276 fe80::91b6:e77b:7aef:6d88/128
> On-link
> 1 306 ff00::/8 On-link
> 14 266 ff00::/8 On-link
> 22 276 ff00::/8 On-link
> 16 276 ff00::/8 On-link
> 18 276 ff00::/8 On-link
> ===========================================================================
> Persistent Routes:
> None
>
> Please let me know if you need more information.
>
> On Wed, Feb 2, 2011 at 11:00 AM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
>> On 28/01/2011 20:23, Alexander Pokluda wrote:
>>> The Windows PC that I'm using is on a different subnet from the VMs
>>> that I need to connect to (10.3.20.159/24), so does that mean it's not
>>> possible to use Cygwin/X in this case? (Changing either subnet is not
>>> an option).
>>
>> Ah, I had assumed that you were running the VMs locally with some form of
>> virtual networking.
>>
>> It certainly should be possible to configure XWin to work in your case.
>>
>> If you have multiple network interfaces on your PC, then it's probably just a
>> question of using the -from option to ensure traffic is sent with the correct
>> source address.
>>
>> If that doesn't fix it, perhaps you could provide a wireshark trace of the
>> connection attempt and some more details of the networking configuration (e.g.
>> output of 'ipconfig' and 'route print')
>>
>>> On Fri, Jan 28, 2011 at 3:16 PM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
>>>> On 28/01/2011 19:19, Alexander Pokluda wrote:
>>>>> I've been trying for a while to get Cygwin/X working with XDMCP for
>>>>> quite a while without any success; however, I am able to conenct
>>>>> without any any problem using Xming 6.9. I'm using a Windows 7 PC to
>>>>> connect to a different Linux VMs running CentOS 5.5. After starting
>>>>> XWin from the command line (either directly or using startxdmcp.bat),
>>>>> a window opens up that contains nothing but black. At first when I
>>>>> move the cursor over the winodow, it just disappears but after a
>>>>> while, the cursor will appear as an X and the following shows up in
>>>>> the log file:
>>>>>
>>>>> [266377.900] winProcEstablishConnection - Hello
>>>>> [266377.900] winProcEstablishConnection - ProcEstablishConnection
>>>>> failed, bailing.
>>>>> [266385.653] winAboutDlgProc - WM_COMMAND - IDOK or IDCANCEL
>>>>> [266489.784] XDM: too many retransmissions, declaring session dead
>>>>>
>>>>> Any help would be greatly appreciated. I've included part of the log
>>>>> from one attempt to connect to one of the CentOS 5.5 VMs that I can
>>>>> connect to with Xming using XDMCP.
>>>>
>>>>> [266616.722] XDM: too many retransmissions, declaring session dead
>>>>
>>>> Possibly you need to use -query 10.3.147.100 -from <corresponding local IP for
>>>> the subnet containing that IP address>
>>>>
>>>> Xming has a patch applied which adds some more intelligence to the way the
>>>> local IP address is chosen, but unfortunately that is written to use the
>>>> winsock API directly, so can't be used directly in XWin.
>>
>> --
>> Jon TURNEY
>> Volunteer Cygwin/X X Server maintainer
>>
>
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-02-09 15:36 ` Alexander Pokluda
@ 2011-02-09 23:37 ` Jon TURNEY
2011-02-14 14:46 ` Jon TURNEY
0 siblings, 1 reply; 11+ messages in thread
From: Jon TURNEY @ 2011-02-09 23:37 UTC (permalink / raw)
To: cygwin-xfree; +Cc: apokluda
Firstly, thanks very much for taking the time to collect so much detailed
information about this problem.
On 09/02/2011 15:36, Alexander Pokluda wrote:
> Here is an excerpt from /var/log/messages on the VM that I'm trying to
> connect to with XWin.
>
> This is what appears in the log after running
>
> XWin -from 10.3.20.159 -query 10.3.147.100
>
> Feb 8 11:22:08 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
> QUERY from client 10.3.20.159
> Feb 8 11:22:08 dev01 gdm[4097]: gdm_xdmcp_handle_query: Opcode 2 from
> 10.3.20.159
> Feb 8 11:22:08 dev01 gdm[4097]: gdm_xdmcp_host_allow:
> client->hostname is ci0000001138531.xxx.net
> Feb 8 11:22:08 dev01 gdm[4097]: gdm_xdmcp_send_willing: Sending
> WILLING to 10.3.20.159
> Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_decode: Received opcode
> QUERY from client 10.3.20.159
> Feb 8 11:24:16 dev01 gdm[4097]: gdm_xdmcp_handle_query: Opcode 2 from
> 10.3.20.159
[snip]
> It seems that the "REQUEST" message sent by XWin somehow gets lost.
> Although it shows up in the Wireshark trace, it never shows up in the
> log on the VM.
The other alternative is that the REQUEST arrives at the VM, but gdm doesn't
like the contents for some reason. Possibly you could check that by
wiresharking at that end.
> On Tue, Feb 8, 2011 at 5:00 PM, Alexander Pokluda <apokluda@gmail.com> wrote:
>> Sorry for the delay in my response.
>>
>> No, I am not runnig the VMs locally. These VMs are being run and
>> managed in a lab that I don't have access to, but I am expected to use
>> VMs in the lab for development and testing on a new project.
>>
>> I have one physical network adapter in my computer and several virtual
>> adapters since I do have VMware Workstation and Virtual Box installed.
>> The IP address of the physical adapter is a static IP address set to
>> 10.3.20.159 with /24 subnet mask. The VM that I've been trying to
>> connect to has IP address 10.3.147.100 and /24 subnet mask. Running
>>
>> XWin -from 10.3.20.159 -query 10.3.147.100
>>
>> doesn't work. A blank window opens and eventually closes and re-opens.
>> This goes on indefinitely. In the attached Wireshark trace, you can
>> see a cycle of query-willing-request-request...-query-willing-request-request
>> after running this command in Cygwin:
>>
>> No. Time Source Destination Protocol Info
>> 3219 253.037685 10.3.20.159 10.3.147.100 XDMCP Query
>>
>> No. Time Source Destination Protocol Info
>> 3220 253.043332 10.3.147.100 10.3.20.159 XDMCP Willing
>>
>> No. Time Source Destination Protocol Info
>> 3331 254.061501 10.3.20.159 10.3.147.100 XDMCP Request
>>
>> No. Time Source Destination Protocol Info
>> 3361 257.044353 10.3.20.159 10.3.147.100 XDMCP Request
>>
>> [...]
>>
>> I've also attached a Wireshark trace capturing when using XLaunch to
>> start an XDMCP session using Xming. In this trace, you can see the
>> expected query-willing-request-accept sequence:
>>
>> No. Time Source Destination Protocol Info
>> 129 14.553230 10.3.20.159 10.3.147.100 XDMCP Query
>>
>> No. Time Source Destination Protocol Info
>> 130 14.554923 10.3.147.100 10.3.20.159 XDMCP Willing
>>
>> No. Time Source Destination Protocol Info
>> 135 15.226412 10.3.20.159 10.3.147.100 XDMCP Request
>>
>> No. Time Source Destination Protocol Info
>> 136 15.231235 10.3.147.100 10.3.20.159 XDMCP Accept
I wonder if you could send me privately the Wireshark .pcap files for these
traces, I'd like to examine them further.
A significant difference is in the Connections data sent in the REQUEST packet
(which is a list of network addresses the requestor knows for itself)
Xming 6.9:
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 81
Display number: 0
Connections (1)
Authentication name:
Authentication data (0 bytes)
Authorization names (3)
Manufacturer display ID:
vs.
XWin
X Display Manager Control Protocol
Version: 1
Opcode: Request (0x0007)
Message length: 220
Display number: 0
Connections (9)
Authentication name:
Authentication data (0 bytes)
Authorization names (2)
Manufacturer display ID:
I could understand 8 (the total number of IPv4 and IPv6 interfaces your host
has), if you weren't using -from, but 9 is a bit confusing.
I would expect Xming 6.9 to report fewer interfaces, since it was built
without IPv6 support, but I'm not sure why it's only reporting 1, if you
aren't using -from.
It seems likely that IPv6 support in XWin is the difference which prevents
things from working correctly.
--
Jon TURNEY
Volunteer Cygwin/X X Server maintainer
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-02-09 23:37 ` Jon TURNEY
@ 2011-02-14 14:46 ` Jon TURNEY
2011-02-15 13:17 ` Alexander Pokluda
0 siblings, 1 reply; 11+ messages in thread
From: Jon TURNEY @ 2011-02-14 14:46 UTC (permalink / raw)
To: cygwin-xfree; +Cc: Alexander Pokluda
> On Wed, Feb 9, 2011 at 6:37 PM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
>> I wonder if you could send me privately the Wireshark .pcap files for these
>> traces, I'd like to examine them further.
On 11/02/2011 18:45, Alexander Pokluda wrote:
> I've attached a zip archive containing a number of files. The pcap
> files were created by running Wireshark on both ends while attempting
> to establish an XDMCP session between the hosts. Here is a description
> of the files:
Thanks very much for these.
Unfortunately, these seem to show that the XDMCP request packet leaves the
machine running XWin, but doesn't arrive at the VM.
I've no idea why that might be, but that suggests to me they are being dropped
in your network, or between the host running the VM and the guest VM?
> After I took the above screenshot, I realized that I had a VirtualBox
> adapter with IPv6 enabled, so I disabled the VirtualBox adapter and
> ran the XWin command again, capturing packets on both ends. These
> files contain the captured packets. One interesting thing to note is
> that the request packet sent from XWin contains my IPv4 address
> converted to an IPv6 address even when IPv6 is disabled on my physical
> adapter.
These look like link-local IPv6 addresses (prefix fe80::) to me, rather than
IPv6 mapped IPv4 addresses (prefix ::ffff:)?
However, this does look like a bug (or at least the code not doing what it
says it does): when the -from option is used, the XDMCP request contains the
specified address *and* any other addresses we have of different address
families to the specified address (e.g., if we specify an IPv4 address, we get
only that IPv4 address, but all the IPv6 addresses as well)
I've built a snapshot which contains a change which modifies the behaviour of
-from so only the specified address is included in the XDMCP request, and
uploaded it at [1].
With this change, the XDMCP request sent by XWin and XMing should be nearly
identical. Perhaps you could try that out and see if that makes a difference.
ftp://cygwin.com/pub/cygwinx/XWin.20110214-git-d593beaadac1371e.exe.bz2
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-02-14 14:46 ` Jon TURNEY
@ 2011-02-15 13:17 ` Alexander Pokluda
2011-03-05 18:15 ` Jon TURNEY
0 siblings, 1 reply; 11+ messages in thread
From: Alexander Pokluda @ 2011-02-15 13:17 UTC (permalink / raw)
To: cygwin-xfree
Hi Jon,
I don't have any idea why the XDMCP request packets from XWin would be
dropped by the network either.
What I thought was interesting is that the value of Connection 4 in
the XDMCP REQUEST packet from XWin in the Wireshark trace is
fe80::5efe:a03:149f. I'm still familiarizing myself with IPv6, but the
handy tool at ip-lookup.net shows this for that address:
This IPv6 address contains an IPv4 address:
IPv6 compressed : FE80::5EFE:A03:149F
IPv6 uncompressed : FE80:0:0:0:0:5EFE:A03:149F
IPv6 fully uncompressed : FE80:0000:0000:0000:0000:5EFE:0A03:149F
IP v4:
decimal : 10.3.20.159
binary : 00001010000000110001010010011111
octal : 012.03.024.0237
hexadecimal : 0x0A.0x03.0x14.0x9F
long : 167974047
IP v6 :
6 to 4 address : 2002:A03:149F:0:0:0:0:0
: 2002:A03:149F::
IPv4-mapped address : 0:0:0:0:0:FFFF:10.3.20.159
: ::FFFF:10.3.20.159
: ::FFFF:0A03:149F
IPv4-compatibility address : 0:0:0:0:0:0:10.3.20.159
: ::10.3.20.159
: ::0A03:149F
It seems there are some interesting things going on here, but, the
modified XWin you link to at the bottom of your email works
perfectly!!
Thanks for all of your help :-)
On Mon, Feb 14, 2011 at 9:46 AM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
>
> > On Wed, Feb 9, 2011 at 6:37 PM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
> >> I wonder if you could send me privately the Wireshark .pcap files for these
> >> traces, I'd like to examine them further.
>
> On 11/02/2011 18:45, Alexander Pokluda wrote:
> > I've attached a zip archive containing a number of files. The pcap
> > files were created by running Wireshark on both ends while attempting
> > to establish an XDMCP session between the hosts. Here is a description
> > of the files:
>
> Thanks very much for these.
>
> Unfortunately, these seem to show that the XDMCP request packet leaves the
> machine running XWin, but doesn't arrive at the VM.
>
> I've no idea why that might be, but that suggests to me they are being dropped
> in your network, or between the host running the VM and the guest VM?
>
> > After I took the above screenshot, I realized that I had a VirtualBox
> > adapter with IPv6 enabled, so I disabled the VirtualBox adapter and
> > ran the XWin command again, capturing packets on both ends. These
> > files contain the captured packets. One interesting thing to note is
> > that the request packet sent from XWin contains my IPv4 address
> > converted to an IPv6 address even when IPv6 is disabled on my physical
> > adapter.
>
> These look like link-local IPv6 addresses (prefix fe80::) to me, rather than
> IPv6 mapped IPv4 addresses (prefix ::ffff:)?
>
> However, this does look like a bug (or at least the code not doing what it
> says it does): when the -from option is used, the XDMCP request contains the
> specified address *and* any other addresses we have of different address
> families to the specified address (e.g., if we specify an IPv4 address, we get
> only that IPv4 address, but all the IPv6 addresses as well)
>
> I've built a snapshot which contains a change which modifies the behaviour of
> -from so only the specified address is included in the XDMCP request, and
> uploaded it at [1].
>
> With this change, the XDMCP request sent by XWin and XMing should be nearly
> identical. Perhaps you could try that out and see if that makes a difference.
>
> ftp://cygwin.com/pub/cygwinx/XWin.20110214-git-d593beaadac1371e.exe.bz2
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-02-15 13:17 ` Alexander Pokluda
@ 2011-03-05 18:15 ` Jon TURNEY
2011-03-07 4:35 ` Alexander Pokluda
0 siblings, 1 reply; 11+ messages in thread
From: Jon TURNEY @ 2011-03-05 18:15 UTC (permalink / raw)
To: cygwin-xfree; +Cc: Alexander Pokluda
On 15/02/2011 13:16, Alexander Pokluda wrote:
> I don't have any idea why the XDMCP request packets from XWin would be
> dropped by the network either.
>
> What I thought was interesting is that the value of Connection 4 in
> the XDMCP REQUEST packet from XWin in the Wireshark trace is
> fe80::5efe:a03:149f. I'm still familiarizing myself with IPv6, but the
> handy tool at ip-lookup.net shows this for that address:
>
> This IPv6 address contains an IPv4 address:
Oh yes, this appears to be an ISATAP address.
> It seems there are some interesting things going on here, but, the
> modified XWin you link to at the bottom of your email works
> perfectly!!
Thanks for testing.
I'll include this change in the next release, since it seems to be doing the
correct thing.
--
Jon TURNEY
Volunteer Cygwin/X X Server maintainer
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log
2011-03-05 18:15 ` Jon TURNEY
@ 2011-03-07 4:35 ` Alexander Pokluda
0 siblings, 0 replies; 11+ messages in thread
From: Alexander Pokluda @ 2011-03-07 4:35 UTC (permalink / raw)
To: cygwin-xfree
Thanks for all of your work Jon :)
On Sat, Mar 5, 2011 at 1:15 PM, Jon TURNEY <jon.turney@dronecode.org.uk> wrote:
> On 15/02/2011 13:16, Alexander Pokluda wrote:
>> I don't have any idea why the XDMCP request packets from XWin would be
>> dropped by the network either.
>>
>> What I thought was interesting is that the value of Connection 4 in
>> the XDMCP REQUEST packet from XWin in the Wireshark trace is
>> fe80::5efe:a03:149f. I'm still familiarizing myself with IPv6, but the
>> handy tool at ip-lookup.net shows this for that address:
>>
>> This IPv6 address contains an IPv4 address:
>
> Oh yes, this appears to be an ISATAP address.
>
>> It seems there are some interesting things going on here, but, the
>> modified XWin you link to at the bottom of your email works
>> perfectly!!
>
> Thanks for testing.
>
> I'll include this change in the next release, since it seems to be doing the
> correct thing.
>
> --
> Jon TURNEY
> Volunteer Cygwin/X X Server maintainer
>
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://x.cygwin.com/docs/
FAQ: http://x.cygwin.com/docs/faq/
^ permalink raw reply [flat|nested] 11+ messages in thread
end of thread, other threads:[~2011-03-07 4:35 UTC | newest]
Thread overview: 11+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2011-01-28 19:23 Can't use XDMCP, "winProcEstablishConnection - ProcEstablishConnection failed, bailing" shows in log Alexander Pokluda
2011-01-28 20:16 ` Jon TURNEY
2011-01-28 20:23 ` Alexander Pokluda
2011-02-02 16:00 ` Jon TURNEY
2011-02-08 22:01 ` Alexander Pokluda
2011-02-09 15:36 ` Alexander Pokluda
2011-02-09 23:37 ` Jon TURNEY
2011-02-14 14:46 ` Jon TURNEY
2011-02-15 13:17 ` Alexander Pokluda
2011-03-05 18:15 ` Jon TURNEY
2011-03-07 4:35 ` Alexander Pokluda
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).