%! %!PS-Adobe-2.0 % % Ethereal - Network traffic analyzer % By Gerald Combs % Copyright 1998 Gerald Combs % %%Creator: Ethereal %%Title: ethereal.ps %%DocumentFonts: Helvetica Courier %%EndComments %! % % Ghostscript http://ghostscript.com/ can convert postscript to pdf files. % % To convert this postscript file to pdf, type (for US letter format): % ps2pdf filename.ps % % or (for A4 format): % ps2pdf -sPAPERSIZE=a4 filename.ps % % ... and of course replace filename.ps by your current filename. % % The pdfmark's below will help converting to a pdf file, and have no % effect when printing the postscript directly. % % This line is necessary if the file should be printable, and not just used % for distilling into PDF: % /pdfmark where {pop} {userdict /pdfmark /cleartomark load put} ifelse % % This tells PDF viewers to display bookmarks when the document is opened: % [/PageMode /UseOutlines /DOCVIEW pdfmark % Get the Imagable Area of the page clippath pathbbox % Set vmax to the vertical size of the page, % hmax to the horizontal size of the page. /vmax exch def /hmax exch def pop pop % junk % 1-inch margins %/lmargin 72 def %/tmargin vmax 72 sub def %/bmargin 72 def %/pagenumtab hmax 72 sub def % 1/2-inch margins /lmargin 36 def % left margin /tmargin vmax 56 sub def % top margin /bmargin 36 def % bottom margin /pagenumtab hmax 36 sub def % right margin % Counters /vpos vmax 40 sub def /thispagenum 1 def % Strings /pagenostr 7 string def /formfeed { printpagedecorations showpage % we need a new current point after showpage is done lmargin % X vpos % Y moveto /vpos tmargin def } def % Prints text with possible indenting /putline_single { exch 10 mul lmargin add % X vpos % Y moveto show /vpos vpos 10 sub def vpos bmargin le % is vpos <= bottom margin? { formfeed } if % then formfeed and start at top } def % Prints text with possible indenting and line wrap /putline { /text exch def /indent exch def % wrapat = width / sizeof font (remember: monospaced font) /pagewidth pagenumtab bmargin sub def /cwidth (A) stringwidth pop def /wrapat pagewidth cwidth div cvi def text length wrapat le { % print line indent text 0 text length getinterval putline_single }{ % print the lines first part indent text 0 wrapat getinterval putline_single % print wrapped rest indent text wrapat text length wrapat sub getinterval putline } ifelse } def % Prints the page number at the top right /printpagedecorations { gsave % Set the font to 8 point /Helvetica findfont 8 scalefont setfont % title lmargin % X vmax 36 sub % Y moveto eth_pagetitle show % this page number pagenumtab (Page ) stringwidth pop sub thispagenum pagenostr cvs stringwidth pop sub % X vmax 36 sub % Y moveto (Page ) show thispagenum pagenostr cvs show % thispagenum++ /thispagenum thispagenum 1 add def % line at top of page lmargin % X vmax 38 sub % Y moveto pagenumtab % X vmax 38 sub % Y lineto stroke % line at bottom of page lmargin % X bmargin % Y moveto % title pagenumtab % X bmargin % Y lineto stroke grestore } def % Reset the vertical position /vpos tmargin def %% Set the font to 10 point /Courier findfont 10 scalefont setfont %% the page title /eth_pagetitle (C:\\DOCUME~1\\9335~1\\LOCALS~1\\Temp\\etherXXXXSZYJJU - Ethereal) def 0 (No. Time Source Destination Protocol Info) putline [/Dest /__frame21__ /Title ( 21 3.194658 172.16.255.145 193.233.144.5 TCP [TCP segment of a reassembled PDU]) /OUT pdfmark [/View [/XYZ -4 currentpoint matrix currentmatrix matrix defaultmatrix matrix invertmatrix matrix concatmatrix transform exch pop 20 add null] /Dest /__frame21__ /DEST pdfmark 0 ( 21 3.194658 172.16.255.145 193.233.144.5 TCP [TCP segment of a reassembled PDU]) putline 0 () putline 0 (Frame 21 \(669 bytes on wire, 669 bytes captured\)) putline 0 (Ethernet II, Src: 00:19:db:ac:57:d2 \(00:19:db:ac:57:d2\), Dst: Cisco_7e:fc:49 \(00:12:7f:7e:fc:49\)) putline 1 (Destination: Cisco_7e:fc:49 \(00:12:7f:7e:fc:49\)) putline 1 (Source: 00:19:db:ac:57:d2 \(00:19:db:ac:57:d2\)) putline 1 (Type: IP \(0x0800\)) putline 0 (Internet Protocol, Src: 172.16.255.145 \(172.16.255.145\), Dst: 193.233.144.5 \(193.233.144.5\)) putline 1 (Version: 4) putline 1 (Header length: 20 bytes) putline 1 (Differentiated Services Field: 0x00 \(DSCP 0x00: Default; ECN: 0x00\)) putline 1 (Total Length: 655) putline 1 (Identification: 0x2c38 \(11320\)) putline 1 (Flags: 0x04 \(Don't Fragment\)) putline 1 (Fragment offset: 0) putline 1 (Time to live: 128) putline 1 (Protocol: TCP \(0x06\)) putline 1 (Header checksum: 0xce9f [correct]) putline 1 (Source: 172.16.255.145 \(172.16.255.145\)) putline 1 (Destination: 193.233.144.5 \(193.233.144.5\)) putline 0 (Transmission Control Protocol, Src Port: 1169 \(1169\), Dst Port: 8008 \(8008\), Seq: 344, Ack: 1, Len: 615) putline 1 (Source port: 1169 \(1169\)) putline 1 (Destination port: 8008 \(8008\)) putline 1 (Sequence number: 344 \(relative sequence number\)) putline 1 (Next sequence number: 959 \(relative sequence number\)) putline 1 (Acknowledgement number: 1 \(relative ack number\)) putline 1 (Header length: 20 bytes) putline 1 (Flags: 0x0018 \(PSH, ACK\)) putline 2 (0... .... = Congestion Window Reduced \(CWR\): Not set) putline 2 (.0.. .... = ECN-Echo: Not set) putline 2 (..0. .... = Urgent: Not set) putline 2 (...1 .... = Acknowledgment: Set) putline 2 (.... 1... = Push: Set) putline 2 (.... .0.. = Reset: Not set) putline 2 (.... ..0. = Syn: Not set) putline 2 (.... ...0 = Fin: Not set) putline 1 (Window size: 65535) putline 1 (Checksum: 0x11a5 [correct]) putline 1 (TCP segment data \(615 bytes\)) putline % If this is not the first page, then print the page number thispagenum 1 gt % is thispagenum > 1 ? { printpagedecorations } if showpage