D-2004-routed.pcapng - Adverb Analysis

Capture Filename: D-2004-routed.pcapng
Generated from PDML on Wed Jun 27 14:52:16 2018
User ports decoded as AMQP (in addition to 5672): 5672 10010

Page controls

Link to analysis statistics.

View post-run analysis statistics

Show/Hide frames per connection

◊ 10.3.116.47:41238-10.3.116.47:10010- (nFrames=49)

◊ Connection-based Performatives
◊ Session 1: Channels: client: 0, server: 0; Time: start 8.999771, end 9.010026; Counts: frames: 29, performatives: 32

◊ Session-based Performatives

                  ◊ Frame: 53 8.999771   -> begin [0,null]
                  ◊ Frame: 55 9.010026 <-   begin [0,0]
                  ◊ Frame: 64 9.020487 <-   disposition [0] (receiver 0-0)
                  ◊ Frame: 82 9.098978 <-   disposition [0] (receiver 1-1)
                  ◊ Frame: 84 9.099469 <-   disposition [0] (receiver 2-2)
                  ◊ Frame: 98 14.110549 <-   disposition [0] (receiver 3-3)
                  ◊ Frame: 99 14.110636 <-   disposition [0] (receiver 4-4)
                  ◊ Frame: 319 79.118965 <-   disposition [0] (receiver 5-5)

          ◊ Link 1: link_1 client sender undefined; Time: start 8.999771, end 79.124905; SettleModes snd: mixed, rcv: first; Counts: frames: 7, performatives: 9
          ◊ Link 2: link_3 client sender abc.LB.1.testQueue; Time: start 9.031697, end 79.124905; SettleModes snd: mixed, rcv: first; Counts: frames: 6, performatives: 7
          ◊ Link 3: link_5 client receiver abc.LB.1.testQueue; Time: start 9.074238, end 79.118227; SettleModes snd: mixed, rcv: first; Counts: frames: 8, performatives: 8

◊ 10.3.116.47:40776-10.3.116.47:5672- (nFrames=57)

             ◊ Connection-based Performatives
      ◊ Session 1: Channels: client: 0, server: 0; Time: start 8.974942, end 8.975076; Counts: frames: 2, performatives: 2
      ◊ Session 2: Channels: client: 1, server: 1; Time: start 8.990881, end 8.990999; Counts: frames: 27, performatives: 29

◊ Session-based Performatives

                  ◊ Frame: 50 8.990881   -> begin [1,null]
                  ◊ Frame: 51 8.990999 <-   begin [1,1]
                  ◊ Frame: 65 9.020894 <-   disposition [1] (receiver 0-0)
                  ◊ Frame: 83 9.099196 <-   disposition [1] (receiver 1-1)
                  ◊ Frame: 86 9.099647 <-   disposition [1] (receiver 2-2)
                  ◊ Frame: 101 14.110887 <-   disposition [1] (receiver 3-3)
                  ◊ Frame: 102 14.110953 <-   disposition [1] (receiver 4-4)
                  ◊ Frame: 321 79.119249 <-   disposition [1] (receiver 5-5)

          ◊ Link 1: link_0 client sender undefined; Time: start 8.999196, end 79.116560; SettleModes snd: unsettled (modified?), rcv: first; Counts: frames: 6, performatives: 7
          ◊ Link 2: link_2 client sender abc.LB.1.testQueue; Time: start 9.031340, end 9.098101; SettleModes snd: unsettled (modified?), rcv: first; Counts: frames: 4, performatives: 5
          ◊ Link 3: link_4 client receiver abc.LB.1.testQueue; Time: start 9.073710, end 79.118909; SettleModes snd: mixed (overridden), rcv: first; Counts: frames: 9, performatives: 9

AMQP frames

◊ ◊◊ 0.000000 Frame 1 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 3.943125 Frame 3 10.3.116.47:41238 -> 10.3.116.47:10010 -> ??? Undecoded frame

◊ ◊◊ 4.000144 Frame 5 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 8.000508 Frame 7 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 8.924722 Frame 38 10.3.116.47:40776 -> 10.3.116.47:5672 -> init SASL (3): (1.0.0)

◊ ◊◊ 8.926721 Frame 40 10.3.116.47:40776 <- 10.3.116.47:5672 <- init SASL (3): (1.0.0), method Method:

◊ ◊◊ 8.947571 Frame 42 10.3.116.47:40776 -> 10.3.116.47:5672 -> method Method:

◊ ◊◊ 8.947730 Frame 43 10.3.116.47:40776 <- 10.3.116.47:5672 <- method Method:

◊ ◊◊ 8.951038 Frame 44 10.3.116.47:40776 -> 10.3.116.47:5672 -> init AMQP (0): (1.0.0)

◊ ◊◊ 8.951257 Frame 45 10.3.116.47:40776 <- 10.3.116.47:5672 <- init AMQP (0): (1.0.0)

◊ ◊◊ 8.967893 Frame 46 10.3.116.47:40776 -> 10.3.116.47:5672 -> open [0]

◊ ◊◊ 8.968453 Frame 47 10.3.116.47:40776 <- 10.3.116.47:5672 <- open [0]

◊ ◊◊ 8.974942 Frame 48 10.3.116.47:40776 -> 10.3.116.47:5672 -> begin [0,null]

◊ ◊◊ 8.975076 Frame 49 10.3.116.47:40776 <- 10.3.116.47:5672 <- begin [0,0]

◊ ◊◊ 8.990881 Frame 50 10.3.116.47:40776 -> 10.3.116.47:5672 -> begin [1,null]

◊ ◊◊ 8.990999 Frame 51 10.3.116.47:40776 <- 10.3.116.47:5672 <- begin [1,1]

◊ ◊◊ 8.999196 Frame 52 10.3.116.47:40776 -> 10.3.116.47:5672 -> attach [1,0] sender link_0 (source: null, target: null)

◊ ◊◊ 8.999771 Frame 53 10.3.116.47:41238 -> 10.3.116.47:10010 -> begin [0,null], attach [0,0] sender link_1 (source: null, target: null)

◊ ◊◊ 9.010026 Frame 55 10.3.116.47:41238 <- 10.3.116.47:10010 <- begin [0,0]

◊ ◊◊ 9.010093 Frame 57 10.3.116.47:41238 <- 10.3.116.47:10010 <- attach [0,0] receiver link_1 (source: null, target: null), flow [0,0] (0,1000)

◊ attach [0,0] receiver link_1 (source: null, target: null)

◊ flow [0,0] (0,1000)

◊ ◊◊ 9.010282 Frame 59 10.3.116.47:40776 <- 10.3.116.47:5672 <- attach [1,0] receiver link_0 (source: null, target: null)

◊ ◊◊ 9.010336 Frame 60 10.3.116.47:40776 <- 10.3.116.47:5672 <- flow [1,0] (0,1000)

◊ ◊◊ 9.019078 Frame 62 10.3.116.47:40776 -> 10.3.116.47:5672 -> transfer [1,0] (0)

◊ ◊◊ 9.019609 Frame 63 10.3.116.47:41238 -> 10.3.116.47:10010 -> transfer [0,0] (0)

◊ ◊◊ 9.020487 Frame 64 10.3.116.47:41238 <- 10.3.116.47:10010 <- disposition [0] (receiver 0-0)

◊ ◊◊ 9.020894 Frame 65 10.3.116.47:40776 <- 10.3.116.47:5672 <- disposition [1] (receiver 0-0)

◊ ◊◊ 9.031340 Frame 66 10.3.116.47:40776 -> 10.3.116.47:5672 -> attach [1,1] sender link_2 (source: endpoint_1, target: abc.LB.1.testQueue)

◊ attach [1,1] sender link_2 (source: endpoint_1, target: abc.LB.1.testQueue)

◊ ◊◊ 9.031697 Frame 67 10.3.116.47:41238 -> 10.3.116.47:10010 -> attach [0,1] sender link_3 (source: endpoint_1, target: abc.LB.1.testQueue)

◊ ◊◊ 9.062031 Frame 68 10.3.116.47:41238 <- 10.3.116.47:10010 <- attach [0,1] receiver link_3 (source: endpoint_1, target: abc.LB.1.testQueue), flow [0,1] (0,1000)

◊ attach [0,1] receiver link_3 (source: endpoint_1, target: abc.LB.1.testQueue)

◊ flow [0,1] (0,1000)

◊ ◊◊ 9.062298 Frame 69 10.3.116.47:40776 <- 10.3.116.47:5672 <- attach [1,1] receiver link_2 (source: endpoint_1, target: abc.LB.1.testQueue), flow [1,1] (0,1000)

◊ attach [1,1] receiver link_2 (source: endpoint_1, target: abc.LB.1.testQueue)

◊ flow [1,1] (0,1000)

◊ ◊◊ 9.073710 Frame 70 10.3.116.47:40776 -> 10.3.116.47:5672 -> attach [1,2] receiver link_4 (source: abc.LB.1.testQueue, target: null)

◊ ◊◊ 9.074238 Frame 71 10.3.116.47:41238 -> 10.3.116.47:10010 -> attach [0,2] receiver link_5 (source: abc.LB.1.testQueue, target: null)

◊ ◊◊ 9.080334 Frame 72 10.3.116.47:41238 <- 10.3.116.47:10010 <- attach [0,2] sender link_5 (source: abc.LB.1.testQueue, target: null)

◊ ◊◊ 9.080488 Frame 73 10.3.116.47:40776 <- 10.3.116.47:5672 <- attach [1,2] sender link_4 (source: abc.LB.1.testQueue, target: null)

◊ ◊◊ 9.082290 Frame 74 10.3.116.47:40776 -> 10.3.116.47:5672 -> flow [1,2] (0,1000)

◊ ◊◊ 9.082425 Frame 75 10.3.116.47:41238 -> 10.3.116.47:10010 -> flow [0,2] (0,1000)

◊ ◊◊ 9.097380 Frame 76 10.3.116.47:40776 -> 10.3.116.47:5672 -> transfer [1,1] (1)

◊ ◊◊ 9.097741 Frame 78 10.3.116.47:41238 -> 10.3.116.47:10010 -> transfer [0,1] (1)

◊ ◊◊ 9.098101 Frame 80 10.3.116.47:40776 -> 10.3.116.47:5672 -> transfer [1,1] (2)

◊ ◊◊ 9.098397 Frame 81 10.3.116.47:41238 -> 10.3.116.47:10010 -> transfer [0,1] (2)

◊ ◊◊ 9.098978 Frame 82 10.3.116.47:41238 <- 10.3.116.47:10010 <- disposition [0] (receiver 1-1)

◊ ◊◊ 9.099196 Frame 83 10.3.116.47:40776 <- 10.3.116.47:5672 <- disposition [1] (receiver 1-1)

◊ ◊◊ 9.099469 Frame 84 10.3.116.47:41238 <- 10.3.116.47:10010 <- disposition [0] (receiver 2-2)

◊ ◊◊ 9.099647 Frame 86 10.3.116.47:40776 <- 10.3.116.47:5672 <- disposition [1] (receiver 2-2)

◊ ◊◊ 14.101391 Frame 90 10.3.116.47:40776 -> 10.3.116.47:5672 -> flow [1,2] (0,1000)

◊ ◊◊ 14.101593 Frame 91 10.3.116.47:41238 -> 10.3.116.47:10010 -> flow [0,2] (0,1000)

◊ ◊◊ 14.102186 Frame 92 10.3.116.47:41238 <- 10.3.116.47:10010 <- flow [0,2] (1000,0)

◊ ◊◊ 14.102296 Frame 93 10.3.116.47:40776 <- 10.3.116.47:5672 <- flow [1,2] (1000,0)

◊ ◊◊ 14.103079 Frame 94 10.3.116.47:40776 -> 10.3.116.47:5672 -> flow [1,2] (1000,1000)

◊ ◊◊ 14.104823 Frame 95 10.3.116.47:40776 -> 10.3.116.47:5672 -> transfer [1,0] (3..4)

◊ ◊◊ 14.105350 Frame 97 10.3.116.47:41238 -> 10.3.116.47:10010 -> transfer [0,0] (3..4)

◊ ◊◊ 14.110549 Frame 98 10.3.116.47:41238 <- 10.3.116.47:10010 <- disposition [0] (receiver 3-3)

◊ ◊◊ 14.110636 Frame 99 10.3.116.47:41238 <- 10.3.116.47:10010 <- disposition [0] (receiver 4-4)

◊ ◊◊ 14.110887 Frame 101 10.3.116.47:40776 <- 10.3.116.47:5672 <- disposition [1] (receiver 3-3)

◊ ◊◊ 14.110953 Frame 102 10.3.116.47:40776 <- 10.3.116.47:5672 <- disposition [1] (receiver 4-4)

◊ ◊◊ 19.112314 Frame 122 10.3.116.47:40776 -> 10.3.116.47:5672 -> flow [1,2] (1000,1000)

◊ ◊◊ 19.112576 Frame 123 10.3.116.47:41238 -> 10.3.116.47:10010 -> flow [0,2] (1000,0)

◊ ◊◊ 20.001001 Frame 170 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 24.001203 Frame 182 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 24.977355 Frame 184 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 28.001343 Frame 186 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 28.977974 Frame 188 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 32.001625 Frame 193 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 32.978379 Frame 195 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 34.112569 Frame 199 10.3.116.47:40776 <- 10.3.116.47:5672 <- ??? Undecoded frame

◊ ◊◊ 35.000799 Frame 201 10.3.116.47:41238 -> 10.3.116.47:10010 -> ??? Undecoded frame

◊ ◊◊ 36.001801 Frame 203 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 36.978917 Frame 207 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 40.002078 Frame 213 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 40.979266 Frame 215 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 44.002327 Frame 217 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 44.979730 Frame 219 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 48.002470 Frame 224 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 48.980378 Frame 228 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 49.112577 Frame 230 10.3.116.47:40776 <- 10.3.116.47:5672 <- ??? Undecoded frame

◊ ◊◊ 50.001621 Frame 232 10.3.116.47:41238 -> 10.3.116.47:10010 -> ??? Undecoded frame

◊ ◊◊ 52.002766 Frame 242 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 52.980853 Frame 248 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 56.003026 Frame 250 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 56.981344 Frame 252 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 60.003177 Frame 257 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 60.981733 Frame 259 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 64.003432 Frame 284 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 64.111835 Frame 286 10.3.116.47:40776 <- 10.3.116.47:5672 <- ??? Undecoded frame

◊ ◊◊ 64.982321 Frame 288 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 65.001628 Frame 290 10.3.116.47:41238 -> 10.3.116.47:10010 -> ??? Undecoded frame

◊ ◊◊ 68.003818 Frame 293 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 68.982879 Frame 295 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 72.004057 Frame 297 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 72.983243 Frame 299 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 76.004248 Frame 302 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

◊ ◊◊ 76.983941 Frame 304 10.3.116.47:40776 -> 10.3.116.47:5672 -> ??? Undecoded frame

◊ ◊◊ 79.112087 Frame 306 10.3.116.47:40776 <- 10.3.116.47:5672 <- ??? Undecoded frame

◊ ◊◊ 79.112905 Frame 308 10.3.116.47:40776 -> 10.3.116.47:5672 -> detach [1,2]

◊ ◊◊ 79.113092 Frame 310 10.3.116.47:41238 -> 10.3.116.47:10010 -> detach [0,2]

◊ ◊◊ 79.116560 Frame 312 10.3.116.47:40776 -> 10.3.116.47:5672 -> transfer [1,0] (5)

◊ ◊◊ 79.116941 Frame 314 10.3.116.47:41238 -> 10.3.116.47:10010 -> transfer [0,0] (5)

◊ ◊◊ 79.118227 Frame 316 10.3.116.47:41238 <- 10.3.116.47:10010 <- detach [0,2]

◊ ◊◊ 79.118909 Frame 318 10.3.116.47:40776 <- 10.3.116.47:5672 <- detach [1,2]

◊ ◊◊ 79.118965 Frame 319 10.3.116.47:41238 <- 10.3.116.47:10010 <- disposition [0] (receiver 5-5)

◊ ◊◊ 79.119249 Frame 321 10.3.116.47:40776 <- 10.3.116.47:5672 <- disposition [1] (receiver 5-5)

◊ ◊◊ 79.123857 Frame 323 10.3.116.47:40776 -> 10.3.116.47:5672 -> close [0]

◊ ◊◊ 79.123974 Frame 324 10.3.116.47:40776 <- 10.3.116.47:5672 <- close [0]

◊ ◊◊ 79.124049 Frame 325 10.3.116.47:41238 -> 10.3.116.47:10010 -> detach [0,0], detach [0,1]

◊ ◊◊ 79.124905 Frame 329 10.3.116.47:41238 <- 10.3.116.47:10010 <- detach [0,0], detach [0,1]

◊ ◊◊ 84.004698 Frame 401 10.3.116.47:41238 <- 10.3.116.47:10010 <- ??? Undecoded frame

Post-run Analysis Statistics

*Analysis Statistics*
Count	Description
0	Wireshark TCP Expert Info
2	AMQP In-Band Detach/End/Close Errors
4	AMQP Disposition state Accepted
0	AMQP Disposition state Rejected
0	AMQP Disposition state Released
0	AMQP Disposition state Modified
8	AMQP Disposition state Not Specified
0	Link Events
0	Malformed AMQP frames

link Name Index

link_0 - qpid-jms:coordinator:ID:2db219a1-0ce3-44ca-9140-ff63e31e8aa5:1:1
link_1 - qpid-jms:coordinator:ID:2db219a1-0ce3-44ca-9140-ff63e31e8aa5:1:1@ID:3d69a55b-db69-4587-931a-c37153f2af47:1
link_2 - qpid-jms:sender:ID:2db219a1-0ce3-44ca-9140-ff63e31e8aa5:1:1:1:abc.LB.1.testQueue
link_3 - qpid-jms:sender:ID:2db219a1-0ce3-44ca-9140-ff63e31e8aa5:1:1:1:abc.LB.1.testQueue@ID:3d69a55b-db69-4587-931a-c37153f2af47:1
link_4 - qpid-jms:receiver:ID:2db219a1-0ce3-44ca-9140-ff63e31e8aa5:1:1:1:abc.LB.1.testQueue
link_5 - qpid-jms:receiver:ID:2db219a1-0ce3-44ca-9140-ff63e31e8aa5:1:1:1:abc.LB.1.testQueue@ID:3d69a55b-db69-4587-931a-c37153f2af47:1

endpoint Name Index

endpoint_0 - null
endpoint_1 - ID:2db219a1-0ce3-44ca-9140-ff63e31e8aa5:1:1:1
endpoint_2 - abc.LB.1.testQueue

message_data Name Index

message_data_0 - This is a text message1
message_data_1 - This is a text message2

Decode Legend

The decode web page default view shows information about the capture, a view of all the connections with the number frames associated with that connection, and a summary of every AMQP frame. The summary includes:

The capture file frame number. Note that not all frames from the capture file are AMQP frames and that there are normally gaps in the frame number sequence.
The TCP/IP source and destination addresses of the hosts with an arrow indicating the direction of the frame. The frames from the broker to the client have the direction arrow highlighted with a light gray background.
The AMQP 'server' port (either 5672, or one of the decode-as ports) is always on the right
The frame timestamp in seconds relative to the beginning of the capture
The AMQP 1.0 performative(s) and important details:
- open [0] always channel 0
- close [0] always channel 0
- begin [channel,remoteChannel]
- end [channel]
- attach [channel,handle] role name (source: src, target: tgt)
- detach [channel, handle]
- flow [channel,handle](deliveryCount, linkCredit)
- transfer [channel,handle] (id)|(id..id)
- disposition [channel] (role first-last)
AMQP version-independent init details
AMQP 0.x method(s)
Names of links, sources, and targets longer than 25 characters are shortened to the form "name_XX". Generated temporary names may exceed 150 characters and contribute little to understanding the protocol. You can hover over the shortened names in the displayed frames to see the full text in a popup and you may refer to a table of shortened names that appears after the AMQP Frames display to see all the translated names.

Protocol frame expansion

The single lozenge expands to show each performative on a separate line
The double lozenge expands each performative in the frame to expose the full details of the decoded Wireshark trace.

Notes

Close, End, or Detach performatives that indicate errors are highlighted in yellow.
Note that the [channel,handle] fields are highlighted with background colors to make protocol exchanges easier to see.
Wireshark generally displays hex data for AMQP message payloads. Adverb attempts to show transfer frame AMQP-value fields in readable ascii.

Notes on searching

You may use your browser's Ctrl-F search feature to search for text on the screen. However, this search does not find any of the hidden text. You may use the Expand-all page view Page control to expand all the details in every frame. Then use the Ctrl-F to search for text anywhere in the details of each frame.