various issues using the client API with Beckhoff OPC-UA server

[mdcb]

I'm running the simple src/client demo against a bh server.

• the part that does

          std::vector<std::string> path({"Objects", "Server"});
          server = root.GetChild(path);

is unreliable, it fails maybe 10 out of 1 times. sample output:

◾ ./a.out 
Connecting to: opc.tcp://10.10.1.16:4840
Root node is: Node(QualifiedName(0:Root), ns=0;i=84;)
No match for request
Root node is: Node(QualifiedName(0:Root), ns=0;i=84;)
No match for request
◾ ./a.out 
Connecting to: opc.tcp://10.10.1.16:4840
Root node is: Node(QualifiedName(0:Root), ns=0;i=84;)
No match for request
Root node is: Node(QualifiedName(0:Root), ns=0;i=84;)
No match for request
◾ ./a.out 
Connecting to: opc.tcp://10.10.1.16:4840
Root node is: Node(QualifiedName(0:Root), ns=0;i=84;)
No match for request
Root node is: Node(QualifiedName(0:Root), ns=0;i=84;)
Server node obtained by path: Node(QualifiedName(0:Server), ns=0;i=2253;)
Child of objects node are: 
    Node(QualifiedName(0:Server), ns=0;i=2253;)
    Node(QualifiedName(2:DeviceSet), ns=2;i=5001;)
    Node(QualifiedName(4:PLC1), ns=1;s=PLC1;)
NamespaceArray is: 
    http://opcfoundation.org/UA/
    urn:CP-13333C/Beckhoff/TcOpcUaServer/1
    http://opcfoundation.org/UA/DI/
    http://PLCopen.org/OpcUa/IEC61131-3/
    PLC1

• using the python example, get/set value() appears to work well. if I start the demo with 'create_subscription', it updates fine on connect, but the first monitor will raise:

Not enough data was received from channel.

Is there a specific version in git I can use that is more stable?

Project looks encouraging btw. congrats

[oroulet]

That server has not been tested yet. maybe I should put a list of tested servers/clients. If you can use wireshark we can try to investigate the issue

• the part that does

  std::vector<std::string> path({"Objects", "Server"});
  server = root.GetChild(path);

is unreliable, it fails maybe 10 out of 1 times. sample output:

That sounds crazy. Can you do a wireshark log? A possibility is that the server has a broken implementation of translatepathtonodeids. Does browse works? and read and set values from C++?

• using the python example, get/set value() appears to work well. if I start the demo with 'create_subscription', it updates fine on connect, but the first monitor will raise:

Not enough data was received from channel.

there too we will need to use wireshark

Is there a specific version in git I can use that is more stable?

Unfortunately not. Error are almost always due to a server client implementing new part of the standard or been very rigorous.... But we are now supporting many sdk so we are getting close

Project looks encouraging btw. congrats

Thanks :-) and nice if you can help us add support for a new server type

[mdcb]

Those were captured yesterday with the opcua filter on, for issue1 (translatebrowsepathtonodeid). base64 -d to rebuild the original content. Let me know if you need more to help.

https://gist.github.com/5c4ae4ac21c374279a88.git

the demo code was slightly modified to try until succeed:

      OpcUa::Node root;
      OpcUa::Node server;

      while (true)
      {
        try {

          root= client.GetRootNode();
          std::cout << "Root node is: " << root << std::endl;

          std::vector<std::string> path({"Objects", "Server"});
          server = root.GetChild(path);
          std::cout << "Server node obtained by path: " << server << std::endl;
          break;
        }
        catch (const std::exception& exc)
        {
          std::cout << exc.what() << std::endl;
          sleep(1);
        }
      }

[oroulet]

I cannot see the gist. maybe the file is too big? can you send it per mail as wireshark file?

On 9 October 2014 17:16, mdcb notifications@github.com wrote:

Those were captured yesterday with the opcua filter on, for issue1 (translatebrowsepathtonodeid). base64 -d to rebuild the original content. Let me know if you need more to help.

https://gist.github.com/5c4ae4ac21c374279a88.git

the demo code was slightly modified to try until succeed:

  OpcUa::Node root;
  OpcUa::Node server;

  while (true)
  {
    try {

      root= client.GetRootNode();
      std::cout << "Root node is: " << root << std::endl;

      std::vector<std::string> path({"Objects", "Server"});
      server = root.GetChild(path);
      std::cout << "Server node obtained by path: " << server << std::endl;
      break;
    }
    catch (const std::exception& exc)
    {
      std::cout << exc.what() << std::endl;
      sleep(1);
    }
  }

— Reply to this email directly or view it on GitHub https://github.com/FreeOpcUa/freeopcua/issues/54#issuecomment-58524890.

[mdcb]

I made it 'public' can you try again?

[mdcb]

for the second part, here more finding:

• with two scripts, one monitoring, the other doing the set_value, it works.
• with one script (as I had it yesterday) if I set_value with the subscription on, the issue happens.

the problematic script:

import sys, os
os.environ['PYTHONINSPECT'] = 'True'

import opcua

class SubClient(opcua.SubscriptionClient):
    def __init__(self, *args, **kws):
        super(SubClient,self).__init__(*args,**kws)
    def data_change(self, handle, node, val, attr):
        print("SubClient", handle, node, val, attr)

client = opcua.Client()
client.set_endpoint("opc.tcp://10.10.1.16:4840")
client.connect()
root = client.get_root_node()

var = client.get_node(opcua.NodeID('ns=4;s=MAIN.bMemAlarm1;'))
sclt = SubClient()
sub = client.create_subscription(100, sclt)
handle = sub.subscribe_data_change(var)
#print("Subscribe handle is: ", handle)

once at the pompt:

>>> var.set_value(True,opcua.VariantType.bool)
opcua.StatusCode.Good

Not enough data was received from channel.

the set_value goes through OK, the monitor barfs out.

wireshark dump added to previous gist.

[oroulet]

I just get an empty page, but maybe I have a bad connection and should try at work in a few days.

On 9 October 2014 17:39, mdcb notifications@github.com wrote:

I made it 'public' can you try again?

— Reply to this email directly or view it on GitHub https://github.com/FreeOpcUa/freeopcua/issues/54#issuecomment-58528631.

[mdcb]

you need to % git clone https://gist.github.com/5c4ae4ac21c374279a88.git

[mdcb]

the last trace has:

• run the script that does setup and monitoring
• var.get_value() 3x times
• var.set_value(..)

[mdcb]

'UAExpert' client has no problem so it seems the server itself is behaving.

[oroulet]

To be sure I tested here with different servers and client subscribing and writing in same client works. Can you check with latest master? Alexander just merged a fix which might be related.

[mdcb]

Now I get:

>>> var.set_value(1,opcua.VariantType.bool)
opcua.StatusCode.BadWriteNotSupported

Note I forked freeopcua-python to have a complete list of status, hence what you see printed here. There should be an email on its way that will give you access and manage pull request etc.

[oroulet]

you are probably trying to write to a node that does not has a value :-) Not all nodes can be written to

On 9 October 2014 20:21, mdcb notifications@github.com wrote:

Now I get:

var.set_value(1,opcua.VariantType.bool) opcua.StatusCode.BadWriteNotSupported

Note I forked freeopcua-python to have a complete list of status, hence what you see printed here. There should be an email on its way that will give you access and manage pull request etc.

— Reply to this email directly or view it on GitHub https://github.com/FreeOpcUa/freeopcua/issues/54#issuecomment-58553975.

[mdcb]

I'm newbie with opcua so that might be one thing. On the other hand I can write the value from 'UAExpert' so I would think the node is in fact writable?

[oroulet]

btw, it is my understanding that error condition should be reported using exceptions in python and I thought I wrote code for that. Did you modify node.cpp? Maybe you could use your macro tricks to improve the methods CheckStatusCode to raise the correct exception. That would be very pythonic :-)

I did also wonder if we should just cast LocalizedText to unicode in python... but maybe localizedtext also contains text for many languages ......

On 9 October 2014 20:21, mdcb notifications@github.com wrote:

Now I get:

var.set_value(1,opcua.VariantType.bool) opcua.StatusCode.BadWriteNotSupported

Note I forked freeopcua-python to have a complete list of status, hence what you see printed here. There should be an email on its way that will give you access and manage pull request etc.

— Reply to this email directly or view it on GitHub https://github.com/FreeOpcUa/freeopcua/issues/54#issuecomment-58553975.

[mdcb]

pls. don't hijack my thread, best you open another ticket on python-freeopcua Going back to my issue, is there anything I can do to help debug further? right now I have it as "shows potential but doesn't work".

[mdcb]

doing some investigations and comparing the wireshark traces before / after the recent update, the set_value fails when Value has a source timestamp. I commented out:

  StatusCode Node::SetAttribute(const AttributeID attr, const Variant &value) const
  {
    WriteValue attribute;
    attribute.Node = Id;
    attribute.Attribute = attr;
    DataValue dval(value);
//    dval.SetSourceTimestamp(CurrentDateTime());
    attribute.Data = dval;
    std::vector<StatusCode> codes = Server->Attributes()->Write(std::vector<WriteValue>(1, attribute));
    return codes.front();
  }

and now set_value works.

For completeness, CurrentDateTime() prints out '130574275318168920' adding some debug and show on wireshark as "Oct 10, 2014 08:05:50.753833000 PDT" that looks correct.

[oroulet]

On Oct 10, 2014 4:56 PM, "mdcb" notifications@github.com wrote:

pls. don't hijack my thread,

Your thread is already a mess :-) What is the current status? Do you still get the GetChild that does not work? and SetValue does not work when there is a subscription on same variable?

I tried again to open you wireshark traces today. in your gist there are pcapng.txt files. wireshark refuses to open those files.... even when renaming to pcapng .I have no exdperience with gist. How can I get the wiresharh files for a failing set_value and attempt of GetChild?

the set_value fails when Value has a source timestamp.

These is really interessting. This is normal to set source timestamp. I tested just now with a server from unified automation and settting value works , even when subscribing to same node. I have no idea what the server might expect. I think we will look at the other issues first.

[mdcb]

current status: I'm mainly interested to have reliable set/get/subscribe working.

• getchild issue not much concern as I can work around it with nodeid
• timestamp issue not much of a concern, but I have it commented out to let me work

basically it behaves as it was originally reported. subscription + set_value gets me "Not enough data was received from channel"

turns out I can see this happening, but not consistently, even if the set_value is coming from another client (e.g. from UAExpert).

What I see on wireshark are 2x "Service Fault" coming from the server. Maybe that's what the client API sees as 'not enough data'

[mdcb]

here's a text dump of wireshark

No.     Time           Source                Destination           Protocol Length Info
     32 4.251947000    10.10.1.48            10.10.1.16            OpcUa    123    Hello message

Frame 32: 123 bytes on wire (984 bits), 123 bytes captured (984 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.876895000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.876895000 seconds
    [Time delta from previous captured frame: 0.000229000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 4.251947000 seconds]
    Frame Number: 32
    Frame Length: 123 bytes (984 bits)
    Capture Length: 123 bytes (984 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 109
    Identification: 0x1e6a (7786)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x05ce [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 1, Ack: 1, Len: 57
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 58    (relative sequence number)]
    Acknowledgment number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 229
    [Calculated window size: 29312]
    [Window size scaling factor: 128]
    Checksum: 0xb181 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850656, TSecr 6042533
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850656
            Timestamp echo reply: 6042533
    [SEQ/ACK analysis]
        [Bytes in flight: 57]
    [PDU Size: 57]
OpcUa Binary Protocol
    Message Type: HEL
    Chunk Type: F
    Message Size: 57
    Version: 0
    ReceiveBufferSize: 65536
    SendBufferSize: 65536
    MaxMessageSize: 65536
    MaxChunkCount: 256
    EndPointUrl: opc.tcp://10.10.1.16:4840

No.     Time           Source                Destination           Protocol Length Info
     33 4.253253000    10.10.1.16            10.10.1.48            OpcUa    94     Acknowledge message

Frame 33: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.878201000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.878201000 seconds
    [Time delta from previous captured frame: 0.001306000 seconds]
    [Time delta from previous displayed frame: 0.001306000 seconds]
    [Time since reference or first frame: 4.253253000 seconds]
    Frame Number: 33
    Frame Length: 94 bytes (752 bits)
    Capture Length: 94 bytes (752 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 80
    Identification: 0x5d27 (23847)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x872d [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 1, Ack: 58, Len: 28
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 29    (relative sequence number)]
    Acknowledgment number: 58    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 260
    [Calculated window size: 66560]
    [Window size scaling factor: 256]
    Checksum: 0x6a11 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042533, TSecr 20850656
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042533
            Timestamp echo reply: 20850656
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 32]
        [The RTT to ACK the segment was: 0.001306000 seconds]
        [Bytes in flight: 28]
    [PDU Size: 28]
OpcUa Binary Protocol
    Message Type: ACK
    Chunk Type: F
    Message Size: 28
    Version: 0
    ReceiveBufferSize: 65536
    SendBufferSize: 65536
    MaxMessageSize: 65536
    MaxChunkCount: 256

No.     Time           Source                Destination           Protocol Length Info
     35 4.253419000    10.10.1.48            10.10.1.16            OpcUa    199    OpenSecureChannel message

Frame 35: 199 bytes on wire (1592 bits), 199 bytes captured (1592 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.878367000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.878367000 seconds
    [Time delta from previous captured frame: 0.000085000 seconds]
    [Time delta from previous displayed frame: 0.000166000 seconds]
    [Time since reference or first frame: 4.253419000 seconds]
    Frame Number: 35
    Frame Length: 199 bytes (1592 bits)
    Capture Length: 199 bytes (1592 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 185
    Identification: 0x1e6c (7788)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x0580 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 58, Ack: 29, Len: 133
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 58    (relative sequence number)
    [Next sequence number: 191    (relative sequence number)]
    Acknowledgment number: 29    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 229
    [Calculated window size: 29312]
    [Window size scaling factor: 128]
    Checksum: 0xcbe8 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850657, TSecr 6042533
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850657
            Timestamp echo reply: 6042533
    [SEQ/ACK analysis]
        [Bytes in flight: 133]
    [PDU Size: 133]
OpcUa Binary Protocol
    Message Type: OPN
    Chunk Type: F
    Message Size: 133
    SecureChannelId: 0
    SecurityPolicyUri: http://opcfoundation.org/UA/SecurityPolicy#None
    SenderCertificate: <MISSING>[OpcUa Null ByteString]
    ReceiverCertificateThumbprint: <MISSING>[OpcUa Null ByteString]
    SequenceNumber: 2
    RequestId: 2
    Message : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: OpenSecureChannelRequest (446)
        OpenSecureChannelRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                    NodeId Identifier Numeric: 0
                Timestamp: Oct  9, 2014 08:36:35.878320000 PDT
                RequestHandle: 0
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            ClientProtocolVersion: 0
            SecurityTokenRequestType: Issue (0x00000000)
            MessageSecurityMode: None (0x00000001)
            ClientNonce: 00
            RequestedLifetime: 300000

No.     Time           Source                Destination           Protocol Length Info
     36 4.255085000    10.10.1.16            10.10.1.48            OpcUa    202    OpenSecureChannel message

Frame 36: 202 bytes on wire (1616 bits), 202 bytes captured (1616 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.880033000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.880033000 seconds
    [Time delta from previous captured frame: 0.001666000 seconds]
    [Time delta from previous displayed frame: 0.001666000 seconds]
    [Time since reference or first frame: 4.255085000 seconds]
    Frame Number: 36
    Frame Length: 202 bytes (1616 bits)
    Capture Length: 202 bytes (1616 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 188
    Identification: 0x5d28 (23848)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86c0 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 29, Ack: 191, Len: 136
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 29    (relative sequence number)
    [Next sequence number: 165    (relative sequence number)]
    Acknowledgment number: 191    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 259
    [Calculated window size: 66304]
    [Window size scaling factor: 256]
    Checksum: 0x3caf [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042533, TSecr 20850657
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042533
            Timestamp echo reply: 20850657
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 35]
        [The RTT to ACK the segment was: 0.001666000 seconds]
        [Bytes in flight: 136]
    [PDU Size: 136]
OpcUa Binary Protocol
    Message Type: OPN
    Chunk Type: F
    Message Size: 136
    SecureChannelId: 240123
    SecurityPolicyUri: http://opcfoundation.org/UA/SecurityPolicy#None
    SenderCertificate: <MISSING>[OpcUa Null ByteString]
    ReceiverCertificateThumbprint: <MISSING>[OpcUa Null ByteString]
    SequenceNumber: 51
    RequestId: 2
    Message : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: OpenSecureChannelResponse (449)
        OpenSecureChannelResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.749721600 PDT
                RequestHandle: 0
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            ServerProtocolVersion: 0
            SecurityToken : ChannelSecurityToken
                ChannelId: 240123
                TokenId: 1
                CreatedAt: Oct  9, 2014 08:36:34.749721600 PDT
                RevisedLifetime: 600000
            ServerNonce: 01

No.     Time           Source                Destination           Protocol Length Info
     37 4.255304000    10.10.1.48            10.10.1.16            OpcUa    350    UA Secure Conversation Message: CreateSessionRequest

Frame 37: 350 bytes on wire (2800 bits), 350 bytes captured (2800 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.880252000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.880252000 seconds
    [Time delta from previous captured frame: 0.000219000 seconds]
    [Time delta from previous displayed frame: 0.000219000 seconds]
    [Time since reference or first frame: 4.255304000 seconds]
    Frame Number: 37
    Frame Length: 350 bytes (2800 bits)
    Capture Length: 350 bytes (2800 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 336
    Identification: 0x1e6d (7789)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x04e8 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 191, Ack: 165, Len: 284
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 191    (relative sequence number)
    [Next sequence number: 475    (relative sequence number)]
    Acknowledgment number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 237
    [Calculated window size: 30336]
    [Window size scaling factor: 128]
    Checksum: 0xee84 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850659, TSecr 6042533
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850659
            Timestamp echo reply: 6042533
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 36]
        [The RTT to ACK the segment was: 0.000219000 seconds]
        [Bytes in flight: 284]
    [PDU Size: 284]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 284
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 3
    Security RequestId: 3
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: CreateSessionRequest (461)
        CreateSessionRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                    NodeId Identifier Numeric: 0
                Timestamp: Oct  9, 2014 08:36:35.880187000 PDT
                RequestHandle: 2
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            ClientDescription : ApplicationDescription
                ApplicationUri: https://freeopcua.github.io/opcua-client
                ProductUri: https://freeopcua.github.io/opcua-client
                ApplicationName: LocalizedText
                    EncodingMask
                        .... ...0 = has locale information: False
                        .... ..0. = has text: False
                ApplicationType: Client (0x00000001)
                GatewayServerUri: [OpcUa Null String]
                DiscoveryProfileUri: [OpcUa Null String]
                Array of Simple Type
                    ArraySize: -1
            ServerUri: [OpcUa Null String]
            EndpointUrl: opc.tcp://10.10.1.16:4840
            SessionName: Open source OPC-UA Client Session
            ClientNonce: 000000000000000000000000000000000000000000000000...
            ClientCertificate: <MISSING>[OpcUa Null ByteString]
            RequestedSessionTimeout: 1200000
            MaxResponseMessageSize: 65536

No.     Time           Source                Destination           Protocol Length Info
     41 4.259089000    10.10.1.16            10.10.1.48            OpcUa    1419   UA Secure Conversation Message: CreateSessionResponse

Frame 41: 1419 bytes on wire (11352 bits), 1419 bytes captured (11352 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.884037000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.884037000 seconds
    [Time delta from previous captured frame: 0.001414000 seconds]
    [Time delta from previous displayed frame: 0.003785000 seconds]
    [Time since reference or first frame: 4.259089000 seconds]
    Frame Number: 41
    Frame Length: 1419 bytes (11352 bits)
    Capture Length: 1419 bytes (11352 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 1405
    Identification: 0x5d2b (23851)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x81fc [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 3061, Ack: 475, Len: 1353
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 3061    (relative sequence number)
    [Next sequence number: 4414    (relative sequence number)]
    Acknowledgment number: 475    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 258
    [Calculated window size: 66048]
    [Window size scaling factor: 256]
    Checksum: 0xbf3f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042534, TSecr 20850661
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042534
            Timestamp echo reply: 20850661
    [SEQ/ACK analysis]
        [Bytes in flight: 1353]
    [PDU Size: 4249]
    TCP segment data (1353 bytes)
[3 Reassembled TCP Segments (4249 bytes): #38(1448), #39(1448), #41(1353)]
    [Frame: 38, payload: 0-1447 (1448 bytes)]
    [Frame: 39, payload: 1448-2895 (1448 bytes)]
    [Frame: 41, payload: 2896-4248 (1353 bytes)]
    [Segment count: 3]
    [Reassembled TCP length: 4249]
    [Reassembled TCP Data: 4d53474699100000fba90300010000003400000003000000...]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 4249
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 52
    Security RequestId: 3
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: CreateSessionResponse (464)
        CreateSessionResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.750721600 PDT
                RequestHandle: 2
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            SessionId: NodeId
                .... 0100 = NodeId EncodingMask: GUID (0x04)
                NodeId Namespace Id: 1
                Guid: 74cca1f7-6f99-b74b-b059-6d74ce8678c5
            AuthenticationToken: NodeId
                .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                NodeId Namespace Id: 0
                NodeId Identifier Numeric: 240123
            RevisedSessionTimeout: 1200000
            ServerNonce: <MISSING>[OpcUa Null ByteString]
            ServerCertificate: 30820438308203a1a00302010202045435b892300d06092a...
            Array of ServerEndpoints
                ArraySize: 2
                [0] : EndpointDescription
                    EndpointUrl: opc.tcp://CP-13333C:4840
                    Server : ApplicationDescription
                        ApplicationUri: urn:CP-13333C/Beckhoff/TcOpcUaServer/1
                        ProductUri: urn:[NodeName]/Beckhoff/TcOpcUaServer/1
                        ApplicationName: LocalizedText
                            EncodingMask
                                .... ...1 = has locale information: True
                                .... ..1. = has text: True
                            Locale: en
                            Text: TcOpcUaServer@CP-13333C
                        ApplicationType: Server (0x00000000)
                        GatewayServerUri: [OpcUa Null String]
                        DiscoveryProfileUri: [OpcUa Null String]
                        Array of Simple Type
                            ArraySize: 1
                            DiscoveryUrls: opc.tcp://CP-13333C:4840
                    ServerCertificate: 30820438308203a1a00302010202045435b892300d06092a...
                    MessageSecurityMode: None (0x00000001)
                    SecurityPolicyUri: http://opcfoundation.org/UA/SecurityPolicy#None
                    Array of UserIdentityTokens
                        ArraySize: 2
                        [0] : UserTokenPolicy
                            PolicyId: Anonymous
                            UserTokenType: Anonymous (0x00000000)
                            IssuedTokenType: [OpcUa Null String]
                            IssuerEndpointUrl: [OpcUa Null String]
                            SecurityPolicyUri: [OpcUa Null String]
                        [1] : UserTokenPolicy
                            PolicyId: UserName
                            UserTokenType: UserName (0x00000001)
                            IssuedTokenType: [OpcUa Null String]
                            IssuerEndpointUrl: [OpcUa Null String]
                            SecurityPolicyUri: http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15
                    TransportProfileUri: http://opcfoundation.org/UA-Profile/Transport/uatcp-uasc-uabinary
                    SecurityLevel: 0
                [1] : EndpointDescription
                    EndpointUrl: opc.tcp://CP-13333C:4840
                    Server : ApplicationDescription
                        ApplicationUri: urn:CP-13333C/Beckhoff/TcOpcUaServer/1
                        ProductUri: urn:[NodeName]/Beckhoff/TcOpcUaServer/1
                        ApplicationName: LocalizedText
                            EncodingMask
                                .... ...1 = has locale information: True
                                .... ..1. = has text: True
                            Locale: en
                            Text: TcOpcUaServer@CP-13333C
                        ApplicationType: Server (0x00000000)
                        GatewayServerUri: [OpcUa Null String]
                        DiscoveryProfileUri: [OpcUa Null String]
                        Array of Simple Type
                            ArraySize: 1
                            DiscoveryUrls: opc.tcp://CP-13333C:4840
                    ServerCertificate: 30820438308203a1a00302010202045435b892300d06092a...
                    MessageSecurityMode: SignAndEncrypt (0x00000003)
                    SecurityPolicyUri: http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15
                    Array of UserIdentityTokens
                        ArraySize: 2
                        [0] : UserTokenPolicy
                            PolicyId: Anonymous
                            UserTokenType: Anonymous (0x00000000)
                            IssuedTokenType: [OpcUa Null String]
                            IssuerEndpointUrl: [OpcUa Null String]
                            SecurityPolicyUri: [OpcUa Null String]
                        [1] : UserTokenPolicy
                            PolicyId: UserName
                            UserTokenType: UserName (0x00000001)
                            IssuedTokenType: [OpcUa Null String]
                            IssuerEndpointUrl: [OpcUa Null String]
                            SecurityPolicyUri: http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15
                    TransportProfileUri: http://opcfoundation.org/UA-Profile/Transport/uatcp-uasc-uabinary
                    SecurityLevel: 130
            Array of ServerSoftwareCertificates
                ArraySize: -1
            ServerSignature : SignatureData
                Algorithm: [OpcUa Null String]
                Signature: <MISSING>[OpcUa Null ByteString]
            MaxRequestMessageSize: 4194304

No.     Time           Source                Destination           Protocol Length Info
     42 4.260008000    10.10.1.48            10.10.1.16            OpcUa    180    UA Secure Conversation Message: ActivateSessionRequest

Frame 42: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.884956000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.884956000 seconds
    [Time delta from previous captured frame: 0.000919000 seconds]
    [Time delta from previous displayed frame: 0.000919000 seconds]
    [Time since reference or first frame: 4.260008000 seconds]
    Frame Number: 42
    Frame Length: 180 bytes (1440 bits)
    Capture Length: 180 bytes (1440 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 166
    Identification: 0x1e6f (7791)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x0590 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 475, Ack: 4414, Len: 114
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 475    (relative sequence number)
    [Next sequence number: 589    (relative sequence number)]
    Acknowledgment number: 4414    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0x22bb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850664, TSecr 6042534
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850664
            Timestamp echo reply: 6042534
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 41]
        [The RTT to ACK the segment was: 0.000919000 seconds]
        [Bytes in flight: 114]
    [PDU Size: 114]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 114
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 4
    Security RequestId: 4
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ActivateSessionRequest (467)
        ActivateSessionRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.884890000 PDT
                RequestHandle: 3
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            ClientSignature : SignatureData
                Algorithm: [OpcUa Null String]
                Signature: <MISSING>[OpcUa Null ByteString]
            Array of ClientSoftwareCertificates
                ArraySize: 0
            Array of Simple Type
                ArraySize: 1
                LocaleIds: en
            UserIdentityToken : ExtensionObject
                TypeId: ExpandedNodeId
                    .... 0001 = NodeId EncodingMask: Four byte encoded Numeric (0x01)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 321
                EncodingMask
                    .... ...1 = has binary body: True
                    .... ..0. = has xml body: False
                AnonymousIdentityToken : AnonymousIdentityToken
                    PolicyId: Anonymous
            UserTokenSignature : SignatureData
                Algorithm: [OpcUa Null String]
                Signature: <MISSING>[OpcUa Null ByteString]

No.     Time           Source                Destination           Protocol Length Info
     43 4.261309000    10.10.1.16            10.10.1.48            OpcUa    130    UA Secure Conversation Message: ActivateSessionResponse

Frame 43: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.886257000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.886257000 seconds
    [Time delta from previous captured frame: 0.001301000 seconds]
    [Time delta from previous displayed frame: 0.001301000 seconds]
    [Time since reference or first frame: 4.261309000 seconds]
    Frame Number: 43
    Frame Length: 130 bytes (1040 bits)
    Capture Length: 130 bytes (1040 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 116
    Identification: 0x5d2c (23852)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x8704 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 4414, Ack: 589, Len: 64
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 4414    (relative sequence number)
    [Next sequence number: 4478    (relative sequence number)]
    Acknowledgment number: 589    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 258
    [Calculated window size: 66048]
    [Window size scaling factor: 256]
    Checksum: 0x5b69 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042534, TSecr 20850664
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042534
            Timestamp echo reply: 20850664
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 42]
        [The RTT to ACK the segment was: 0.001301000 seconds]
        [Bytes in flight: 64]
    [PDU Size: 64]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 64
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 53
    Security RequestId: 4
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ActivateSessionResponse (470)
        ActivateSessionResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.755721900 PDT
                RequestHandle: 3
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            ServerNonce: <MISSING>[OpcUa Null ByteString]
            Array of Simple Type
                ArraySize: 0
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
     44 4.261537000    10.10.1.48            10.10.1.16            OpcUa    165    UA Secure Conversation Message: ReadRequest

Frame 44: 165 bytes on wire (1320 bits), 165 bytes captured (1320 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.886485000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.886485000 seconds
    [Time delta from previous captured frame: 0.000228000 seconds]
    [Time delta from previous displayed frame: 0.000228000 seconds]
    [Time since reference or first frame: 4.261537000 seconds]
    Frame Number: 44
    Frame Length: 165 bytes (1320 bits)
    Capture Length: 165 bytes (1320 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 151
    Identification: 0x1e70 (7792)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x059e [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 589, Ack: 4478, Len: 99
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 589    (relative sequence number)
    [Next sequence number: 688    (relative sequence number)]
    Acknowledgment number: 4478    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xb388 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850665, TSecr 6042534
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850665
            Timestamp echo reply: 6042534
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 43]
        [The RTT to ACK the segment was: 0.000228000 seconds]
        [Bytes in flight: 99]
    [PDU Size: 99]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 99
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 5
    Security RequestId: 5
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadRequest (631)
        ReadRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.886446000 PDT
                RequestHandle: 4
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            MaxAge: 0
            TimestampsToReturn: Neither (0x00000003)
            Array of NodesToRead
                ArraySize: 1
                [0] : ReadValueId
                    NodeId: NodeId
                        .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                        NodeId Namespace Id: 0
                        NodeId Identifier Numeric: 84
                    AttributeId: 3
                    IndexRange: [OpcUa Null String]
                    DataEncoding: QualifiedName
                        Id: 0
                        Name: [OpcUa Null String]

No.     Time           Source                Destination           Protocol Length Info
     45 4.262850000    10.10.1.16            10.10.1.48            OpcUa    138    UA Secure Conversation Message: ReadResponse

Frame 45: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.887798000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.887798000 seconds
    [Time delta from previous captured frame: 0.001313000 seconds]
    [Time delta from previous displayed frame: 0.001313000 seconds]
    [Time since reference or first frame: 4.262850000 seconds]
    Frame Number: 45
    Frame Length: 138 bytes (1104 bits)
    Capture Length: 138 bytes (1104 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 124
    Identification: 0x5d2d (23853)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86fb [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 4478, Ack: 688, Len: 72
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 4478    (relative sequence number)
    [Next sequence number: 4550    (relative sequence number)]
    Acknowledgment number: 688    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 257
    [Calculated window size: 65792]
    [Window size scaling factor: 256]
    Checksum: 0xc277 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042534, TSecr 20850665
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042534
            Timestamp echo reply: 20850665
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 44]
        [The RTT to ACK the segment was: 0.001313000 seconds]
        [Bytes in flight: 72]
    [PDU Size: 72]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 72
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 54
    Security RequestId: 5
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadResponse (634)
        ReadResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.757722000 PDT
                RequestHandle: 4
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of Results
                ArraySize: 1
                [0]: DataValue
                    EncodingMask
                        .... ...1 = has value: True
                        .... ..0. = has statuscode: False
                        .... .0.. = has source timestamp: False
                        .... 0... = has server timestamp: False
                        ...0 .... = has source picoseconds: False
                        ..0. .... = has server picoseconds: False
                    Value: Variant
                        Variant Type: QualifiedName (0x14)
                        Value: QualifiedName
                            Id: 0
                            Name: Root
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
     46 4.263104000    10.10.1.48            10.10.1.16            OpcUa    180    UA Secure Conversation Message: ReadRequest

Frame 46: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.888052000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.888052000 seconds
    [Time delta from previous captured frame: 0.000254000 seconds]
    [Time delta from previous displayed frame: 0.000254000 seconds]
    [Time since reference or first frame: 4.263104000 seconds]
    Frame Number: 46
    Frame Length: 180 bytes (1440 bits)
    Capture Length: 180 bytes (1440 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 166
    Identification: 0x1e71 (7793)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x058e [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 688, Ack: 4550, Len: 114
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 688    (relative sequence number)
    [Next sequence number: 802    (relative sequence number)]
    Acknowledgment number: 4550    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xf92b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850667, TSecr 6042534
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850667
            Timestamp echo reply: 6042534
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 45]
        [The RTT to ACK the segment was: 0.000254000 seconds]
        [Bytes in flight: 114]
    [PDU Size: 114]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 114
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 6
    Security RequestId: 6
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadRequest (631)
        ReadRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.888016000 PDT
                RequestHandle: 5
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            MaxAge: 0
            TimestampsToReturn: Neither (0x00000003)
            Array of NodesToRead
                ArraySize: 1
                [0] : ReadValueId
                    NodeId: NodeId
                        .... 0011 = NodeId EncodingMask: String (0x03)
                        NodeId Namespace Id: 4
                        String: MAIN.bMemAlarm1
                    AttributeId: 3
                    IndexRange: [OpcUa Null String]
                    DataEncoding: QualifiedName
                        Id: 0
                        Name: [OpcUa Null String]

No.     Time           Source                Destination           Protocol Length Info
     47 4.264403000    10.10.1.16            10.10.1.48            OpcUa    144    UA Secure Conversation Message: ReadResponse

Frame 47: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.889351000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.889351000 seconds
    [Time delta from previous captured frame: 0.001299000 seconds]
    [Time delta from previous displayed frame: 0.001299000 seconds]
    [Time since reference or first frame: 4.264403000 seconds]
    Frame Number: 47
    Frame Length: 144 bytes (1152 bits)
    Capture Length: 144 bytes (1152 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 130
    Identification: 0x5d2e (23854)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86f4 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 4550, Ack: 802, Len: 78
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 4550    (relative sequence number)
    [Next sequence number: 4628    (relative sequence number)]
    Acknowledgment number: 802    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 257
    [Calculated window size: 65792]
    [Window size scaling factor: 256]
    Checksum: 0x87a7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042534, TSecr 20850667
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042534
            Timestamp echo reply: 20850667
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 46]
        [The RTT to ACK the segment was: 0.001299000 seconds]
        [Bytes in flight: 78]
    [PDU Size: 78]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 78
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 55
    Security RequestId: 6
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadResponse (634)
        ReadResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.758722100 PDT
                RequestHandle: 5
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of Results
                ArraySize: 1
                [0]: DataValue
                    EncodingMask
                        .... ...1 = has value: True
                        .... ..0. = has statuscode: False
                        .... .0.. = has source timestamp: False
                        .... 0... = has server timestamp: False
                        ...0 .... = has source picoseconds: False
                        ..0. .... = has server picoseconds: False
                    Value: Variant
                        Variant Type: QualifiedName (0x14)
                        Value: QualifiedName
                            Id: 4
                            Name: bMemAlarm1
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
     48 4.264803000    10.10.1.48            10.10.1.16            OpcUa    150    UA Secure Conversation Message: CreateSubscriptionRequest

Frame 48: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.889751000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.889751000 seconds
    [Time delta from previous captured frame: 0.000400000 seconds]
    [Time delta from previous displayed frame: 0.000400000 seconds]
    [Time since reference or first frame: 4.264803000 seconds]
    Frame Number: 48
    Frame Length: 150 bytes (1200 bits)
    Capture Length: 150 bytes (1200 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 136
    Identification: 0x1e72 (7794)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x05ab [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 802, Ack: 4628, Len: 84
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 802    (relative sequence number)
    [Next sequence number: 886    (relative sequence number)]
    Acknowledgment number: 4628    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0x86d4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850668, TSecr 6042534
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850668
            Timestamp echo reply: 6042534
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 47]
        [The RTT to ACK the segment was: 0.000400000 seconds]
        [Bytes in flight: 84]
    [PDU Size: 84]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 84
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 7
    Security RequestId: 7
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: CreateSubscriptionRequest (787)
        CreateSubscriptionRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.889677000 PDT
                RequestHandle: 6
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            RequestedPublishingInterval: 100
            RequestedLifetimeCount: 3000
            RequestedMaxKeepAliveCount: 10000
            MaxNotificationsPerPublish: 0
            PublishingEnabled: True
            Priority: 0

No.     Time           Source                Destination           Protocol Length Info
     49 4.266154000    10.10.1.16            10.10.1.48            OpcUa    138    UA Secure Conversation Message: CreateSubscriptionResponse

Frame 49: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.891102000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.891102000 seconds
    [Time delta from previous captured frame: 0.001351000 seconds]
    [Time delta from previous displayed frame: 0.001351000 seconds]
    [Time since reference or first frame: 4.266154000 seconds]
    Frame Number: 49
    Frame Length: 138 bytes (1104 bits)
    Capture Length: 138 bytes (1104 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 124
    Identification: 0x5d2f (23855)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86f9 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 4628, Ack: 886, Len: 72
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 4628    (relative sequence number)
    [Next sequence number: 4700    (relative sequence number)]
    Acknowledgment number: 886    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 256
    [Calculated window size: 65536]
    [Window size scaling factor: 256]
    Checksum: 0x2914 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042535, TSecr 20850668
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042535
            Timestamp echo reply: 20850668
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 48]
        [The RTT to ACK the segment was: 0.001351000 seconds]
        [Bytes in flight: 72]
    [PDU Size: 72]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 72
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 56
    Security RequestId: 7
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: CreateSubscriptionResponse (790)
        CreateSubscriptionResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.760722200 PDT
                RequestHandle: 6
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            SubscriptionId: 240110
            RevisedPublishingInterval: 100
            RevisedLifetimeCount: 30000
            RevisedMaxKeepAliveCount: 10000

No.     Time           Source                Destination           Protocol Length Info
     50 4.266385000    10.10.1.48            10.10.1.16            OpcUa    132    UA Secure Conversation Message: PublishRequest

Frame 50: 132 bytes on wire (1056 bits), 132 bytes captured (1056 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.891333000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.891333000 seconds
    [Time delta from previous captured frame: 0.000231000 seconds]
    [Time delta from previous displayed frame: 0.000231000 seconds]
    [Time since reference or first frame: 4.266385000 seconds]
    Frame Number: 50
    Frame Length: 132 bytes (1056 bits)
    Capture Length: 132 bytes (1056 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 118
    Identification: 0x1e73 (7795)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x05bc [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 886, Ack: 4700, Len: 66
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 886    (relative sequence number)
    [Next sequence number: 952    (relative sequence number)]
    Acknowledgment number: 4700    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0x5343 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850670, TSecr 6042535
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850670
            Timestamp echo reply: 6042535
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 49]
        [The RTT to ACK the segment was: 0.000231000 seconds]
        [Bytes in flight: 66]
    [PDU Size: 66]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 66
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 8
    Security RequestId: 8
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: PublishRequest (826)
        PublishRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.891276000 PDT
                RequestHandle: 7
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of SubscriptionAcknowledgements
                ArraySize: -1

No.     Time           Source                Destination           Protocol Length Info
     51 4.269385000    10.10.1.48            10.10.1.16            OpcUa    266    UA Secure Conversation Message: CreateMonitoredItemsRequest

Frame 51: 266 bytes on wire (2128 bits), 266 bytes captured (2128 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.894333000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.894333000 seconds
    [Time delta from previous captured frame: 0.003000000 seconds]
    [Time delta from previous displayed frame: 0.003000000 seconds]
    [Time since reference or first frame: 4.269385000 seconds]
    Frame Number: 51
    Frame Length: 266 bytes (2128 bits)
    Capture Length: 266 bytes (2128 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 252
    Identification: 0x1e74 (7796)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x0535 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 952, Ack: 4700, Len: 200
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 952    (relative sequence number)
    [Next sequence number: 1152    (relative sequence number)]
    Acknowledgment number: 4700    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xd2a5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850673, TSecr 6042535
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850673
            Timestamp echo reply: 6042535
    [SEQ/ACK analysis]
        [Bytes in flight: 266]
    [PDU Size: 66]
    [PDU Size: 134]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 66
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 9
    Security RequestId: 9
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: PublishRequest (826)
        PublishRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.891361000 PDT
                RequestHandle: 8
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of SubscriptionAcknowledgements
                ArraySize: -1
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 134
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 10
    Security RequestId: 10
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: CreateMonitoredItemsRequest (751)
        CreateMonitoredItemsRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.891444000 PDT
                RequestHandle: 9
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            SubscriptionId: 240110
            TimestampsToReturn: Neither (0x00000003)
            Array of ItemsToCreate
                ArraySize: 1
                [0] : MonitoredItemCreateRequest
                    ItemToMonitor : ReadValueId
                        NodeId: NodeId
                            .... 0011 = NodeId EncodingMask: String (0x03)
                            NodeId Namespace Id: 4
                            String: MAIN.bMemAlarm1
                        AttributeId: 13
                        IndexRange: [OpcUa Null String]
                        DataEncoding: QualifiedName
                            Id: 0
                            Name: [OpcUa Null String]
                    MonitoringMode: Reporting (0x00000002)
                    RequestedParameters : MonitoringParameters
                        ClientHandle: 2
                        SamplingInterval: 100
                        Filter : ExtensionObject
                            TypeId: ExpandedNodeId
                                .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                                NodeId Identifier Numeric: 0
                            EncodingMask
                                .... ...0 = has binary body: False
                                .... ..0. = has xml body: False
                        QueueSize: 1
                        DiscardOldest: True

No.     Time           Source                Destination           Protocol Length Info
     53 4.270988000    10.10.1.16            10.10.1.48            OpcUa    149    UA Secure Conversation Message: CreateMonitoredItemsResponse

Frame 53: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.895936000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.895936000 seconds
    [Time delta from previous captured frame: 0.000375000 seconds]
    [Time delta from previous displayed frame: 0.001603000 seconds]
    [Time since reference or first frame: 4.270988000 seconds]
    Frame Number: 53
    Frame Length: 149 bytes (1192 bits)
    Capture Length: 149 bytes (1192 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 135
    Identification: 0x5d31 (23857)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86ec [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 4700, Ack: 1152, Len: 83
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 4700    (relative sequence number)
    [Next sequence number: 4783    (relative sequence number)]
    Acknowledgment number: 1152    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 255
    [Calculated window size: 65280]
    [Window size scaling factor: 256]
    Checksum: 0x1539 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042535, TSecr 20850670
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042535
            Timestamp echo reply: 20850670
    [SEQ/ACK analysis]
        [Bytes in flight: 83]
    [PDU Size: 83]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 83
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 57
    Security RequestId: 10
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: CreateMonitoredItemsResponse (754)
        CreateMonitoredItemsResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.765722500 PDT
                RequestHandle: 9
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of Results
                ArraySize: 1
                [0] : MonitoredItemCreateResult
                    StatusCode: 0x00000000
                    MonitoredItemId: 1
                    RevisedSamplingInterval: 100
                    RevisedQueueSize: 1
                    FilterResult : ExtensionObject
                        TypeId: ExpandedNodeId
                            .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                            NodeId Identifier Numeric: 0
                        EncodingMask
                            .... ...0 = has binary body: False
                            .... ..0. = has xml body: False
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
     54 4.271349000    10.10.1.48            10.10.1.16            OpcUa    180    UA Secure Conversation Message: ReadRequest

Frame 54: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.896297000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.896297000 seconds
    [Time delta from previous captured frame: 0.000361000 seconds]
    [Time delta from previous displayed frame: 0.000361000 seconds]
    [Time since reference or first frame: 4.271349000 seconds]
    Frame Number: 54
    Frame Length: 180 bytes (1440 bits)
    Capture Length: 180 bytes (1440 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 166
    Identification: 0x1e75 (7797)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x058a [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 1152, Ack: 4783, Len: 114
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 1152    (relative sequence number)
    [Next sequence number: 1266    (relative sequence number)]
    Acknowledgment number: 4783    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xab87 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850675, TSecr 6042535
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850675
            Timestamp echo reply: 6042535
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 53]
        [The RTT to ACK the segment was: 0.000361000 seconds]
        [Bytes in flight: 114]
    [PDU Size: 114]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 114
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 11
    Security RequestId: 11
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadRequest (631)
        ReadRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.896230000 PDT
                RequestHandle: 10
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            MaxAge: 0
            TimestampsToReturn: Neither (0x00000003)
            Array of NodesToRead
                ArraySize: 1
                [0] : ReadValueId
                    NodeId: NodeId
                        .... 0011 = NodeId EncodingMask: String (0x03)
                        NodeId Namespace Id: 4
                        String: MAIN.bMemAlarm1
                    AttributeId: 3
                    IndexRange: [OpcUa Null String]
                    DataEncoding: QualifiedName
                        Id: 0
                        Name: [OpcUa Null String]

No.     Time           Source                Destination           Protocol Length Info
     55 4.272694000    10.10.1.16            10.10.1.48            OpcUa    144    UA Secure Conversation Message: ReadResponse

Frame 55: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.897642000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.897642000 seconds
    [Time delta from previous captured frame: 0.001345000 seconds]
    [Time delta from previous displayed frame: 0.001345000 seconds]
    [Time since reference or first frame: 4.272694000 seconds]
    Frame Number: 55
    Frame Length: 144 bytes (1152 bits)
    Capture Length: 144 bytes (1152 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 130
    Identification: 0x5d32 (23858)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86f0 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 4783, Ack: 1266, Len: 78
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 4783    (relative sequence number)
    [Next sequence number: 4861    (relative sequence number)]
    Acknowledgment number: 1266    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 255
    [Calculated window size: 65280]
    [Window size scaling factor: 256]
    Checksum: 0xf1ae [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042535, TSecr 20850675
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042535
            Timestamp echo reply: 20850675
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 54]
        [The RTT to ACK the segment was: 0.001345000 seconds]
        [Bytes in flight: 78]
    [PDU Size: 78]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 78
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 58
    Security RequestId: 11
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadResponse (634)
        ReadResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.766722600 PDT
                RequestHandle: 10
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of Results
                ArraySize: 1
                [0]: DataValue
                    EncodingMask
                        .... ...1 = has value: True
                        .... ..0. = has statuscode: False
                        .... .0.. = has source timestamp: False
                        .... 0... = has server timestamp: False
                        ...0 .... = has source picoseconds: False
                        ..0. .... = has server picoseconds: False
                    Value: Variant
                        Variant Type: QualifiedName (0x14)
                        Value: QualifiedName
                            Id: 4
                            Name: bMemAlarm1
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
     57 4.365846000    10.10.1.16            10.10.1.48            OpcUa    179    UA Secure Conversation Message: PublishResponse

Frame 57: 179 bytes on wire (1432 bits), 179 bytes captured (1432 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.990794000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.990794000 seconds
    [Time delta from previous captured frame: 0.053930000 seconds]
    [Time delta from previous displayed frame: 0.093152000 seconds]
    [Time since reference or first frame: 4.365846000 seconds]
    Frame Number: 57
    Frame Length: 179 bytes (1432 bits)
    Capture Length: 179 bytes (1432 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 165
    Identification: 0x5d33 (23859)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86cc [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 4861, Ack: 1266, Len: 113
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 4861    (relative sequence number)
    [Next sequence number: 4974    (relative sequence number)]
    Acknowledgment number: 1266    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 255
    [Calculated window size: 65280]
    [Window size scaling factor: 256]
    Checksum: 0x531b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6042545, TSecr 20850716
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6042545
            Timestamp echo reply: 20850716
    [SEQ/ACK analysis]
        [Bytes in flight: 113]
    [PDU Size: 113]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 113
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 59
    Security RequestId: 8
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: PublishResponse (829)
        PublishResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:34.860727900 PDT
                RequestHandle: 7
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            SubscriptionId: 240110
            Array of Simple Type
                ArraySize: 1
                AvailableSequenceNumbers: 1
            MoreNotifications: False
            NotificationMessage : NotificationMessage
                SequenceNumber: 1
                PublishTime: Oct  9, 2014 08:36:34.860727900 PDT
                Array of NotificationData
                    ArraySize: 1
                    [0] : ExtensionObject
                        TypeId: ExpandedNodeId
                            .... 0001 = NodeId EncodingMask: Four byte encoded Numeric (0x01)
                            NodeId Namespace Id: 0
                            NodeId Identifier Numeric: 811
                        EncodingMask
                            .... ...1 = has binary body: True
                            .... ..0. = has xml body: False
                        DataChangeNotification : DataChangeNotification
                            Array of MonitoredItems
                                ArraySize: 1
                                [0] : MonitoredItemNotification
                                    ClientHandle: 2
                                    Value: DataValue
                                        EncodingMask
                                            .... ...1 = has value: True
                                            .... ..0. = has statuscode: False
                                            .... .0.. = has source timestamp: False
                                            .... 0... = has server timestamp: False
                                            ...0 .... = has source picoseconds: False
                                            ..0. .... = has server picoseconds: False
                                        Value: Variant
                                            Variant Type: Boolean (0x01)
                                            Boolean: False
                            Array of DiagnosticInfos
                                ArraySize: 0
            Array of Simple Type
                ArraySize: 0
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
     59 4.366888000    10.10.1.48            10.10.1.16            OpcUa    140    UA Secure Conversation Message: PublishRequest

Frame 59: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:35.991836000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868995.991836000 seconds
    [Time delta from previous captured frame: 0.000900000 seconds]
    [Time delta from previous displayed frame: 0.001042000 seconds]
    [Time since reference or first frame: 4.366888000 seconds]
    Frame Number: 59
    Frame Length: 140 bytes (1120 bits)
    Capture Length: 140 bytes (1120 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 126
    Identification: 0x1e78 (7800)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x05af [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 1266, Ack: 4974, Len: 74
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 1266    (relative sequence number)
    [Next sequence number: 1340    (relative sequence number)]
    Acknowledgment number: 4974    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xfa78 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850771, TSecr 6042545
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850771
            Timestamp echo reply: 6042545
    [SEQ/ACK analysis]
        [Bytes in flight: 74]
    [PDU Size: 74]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 74
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 12
    Security RequestId: 12
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: PublishRequest (826)
        PublishRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.991680000 PDT
                RequestHandle: 11
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of SubscriptionAcknowledgements
                ArraySize: 1
                [0] : SubscriptionAcknowledgement
                    SubscriptionId: 240110
                    SequenceNumber: 1

No.     Time           Source                Destination           Protocol Length Info
     60 4.568905000    10.10.1.48            10.10.1.16            OpcUa    140    [TCP Retransmission] UA Secure Conversation Message: PublishRequest

Frame 60: 140 bytes on wire (1120 bits), 140 bytes captured (1120 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:36.193853000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412868996.193853000 seconds
    [Time delta from previous captured frame: 0.202017000 seconds]
    [Time delta from previous displayed frame: 0.202017000 seconds]
    [Time since reference or first frame: 4.568905000 seconds]
    Frame Number: 60
    Frame Length: 140 bytes (1120 bits)
    Capture Length: 140 bytes (1120 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: Bad TCP]
    [Coloring Rule String: tcp.analysis.flags && !tcp.analysis.window_update]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 126
    Identification: 0x1e79 (7801)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x05ae [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 1266, Ack: 4974, Len: 74
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 1266    (relative sequence number)
    [Next sequence number: 1340    (relative sequence number)]
    Acknowledgment number: 4974    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xf9ae [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20850973, TSecr 6042545
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20850973
            Timestamp echo reply: 6042545
    [SEQ/ACK analysis]
        [Bytes in flight: 74]
        [TCP Analysis Flags]
            [This frame is a (suspected) retransmission]
                [Expert Info (Note/Sequence): Retransmission (suspected)]
                    [Message: Retransmission (suspected)]
                    [Severity level: Note]
                    [Group: Sequence]
            [The RTO for this segment was: 0.202017000 seconds]
            [RTO based on delta from frame: 59]
    [PDU Size: 74]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 74
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 12
    Security RequestId: 12
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: PublishRequest (826)
        PublishRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:35.991680000 PDT
                RequestHandle: 11
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of SubscriptionAcknowledgements
                ArraySize: 1
                [0] : SubscriptionAcknowledgement
                    SubscriptionId: 240110
                    SequenceNumber: 1

No.     Time           Source                Destination           Protocol Length Info
    124 15.587695000   10.10.1.48            10.10.1.16            OpcUa    180    UA Secure Conversation Message: ReadRequest

Frame 124: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:47.212643000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869007.212643000 seconds
    [Time delta from previous captured frame: 0.210819000 seconds]
    [Time delta from previous displayed frame: 11.018790000 seconds]
    [Time since reference or first frame: 15.587695000 seconds]
    Frame Number: 124
    Frame Length: 180 bytes (1440 bits)
    Capture Length: 180 bytes (1440 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 166
    Identification: 0x1e7a (7802)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x0585 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 1340, Ack: 4974, Len: 114
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 1340    (relative sequence number)
    [Next sequence number: 1454    (relative sequence number)]
    Acknowledgment number: 4974    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xb077 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20861991, TSecr 6042565
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20861991
            Timestamp echo reply: 6042565
    [SEQ/ACK analysis]
        [Bytes in flight: 114]
    [PDU Size: 114]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 114
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 13
    Security RequestId: 13
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadRequest (631)
        ReadRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:47.212467000 PDT
                RequestHandle: 12
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            MaxAge: 0
            TimestampsToReturn: Neither (0x00000003)
            Array of NodesToRead
                ArraySize: 1
                [0] : ReadValueId
                    NodeId: NodeId
                        .... 0011 = NodeId EncodingMask: String (0x03)
                        NodeId Namespace Id: 4
                        String: MAIN.bMemAlarm1
                    AttributeId: 13
                    IndexRange: [OpcUa Null String]
                    DataEncoding: QualifiedName
                        Id: 0
                        Name: [OpcUa Null String]

No.     Time           Source                Destination           Protocol Length Info
    125 15.589754000   10.10.1.16            10.10.1.48            OpcUa    129    UA Secure Conversation Message: ReadResponse

Frame 125: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:47.214702000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869007.214702000 seconds
    [Time delta from previous captured frame: 0.002059000 seconds]
    [Time delta from previous displayed frame: 0.002059000 seconds]
    [Time since reference or first frame: 15.589754000 seconds]
    Frame Number: 125
    Frame Length: 129 bytes (1032 bits)
    Capture Length: 129 bytes (1032 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 115
    Identification: 0x5d4b (23883)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86e6 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 4974, Ack: 1454, Len: 63
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 4974    (relative sequence number)
    [Next sequence number: 5037    (relative sequence number)]
    Acknowledgment number: 1454    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 254
    [Calculated window size: 65024]
    [Window size scaling factor: 256]
    Checksum: 0x568b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6043667, TSecr 20861991
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6043667
            Timestamp echo reply: 20861991
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 124]
        [The RTT to ACK the segment was: 0.002059000 seconds]
        [Bytes in flight: 63]
    [PDU Size: 63]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 63
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 60
    Security RequestId: 13
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadResponse (634)
        ReadResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:46.084369900 PDT
                RequestHandle: 12
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of Results
                ArraySize: 1
                [0]: DataValue
                    EncodingMask
                        .... ...1 = has value: True
                        .... ..0. = has statuscode: False
                        .... .0.. = has source timestamp: False
                        .... 0... = has server timestamp: False
                        ...0 .... = has source picoseconds: False
                        ..0. .... = has server picoseconds: False
                    Value: Variant
                        Variant Type: Boolean (0x01)
                        Boolean: False
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
    137 17.336247000   10.10.1.48            10.10.1.16            OpcUa    180    UA Secure Conversation Message: ReadRequest

Frame 137: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:48.961195000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869008.961195000 seconds
    [Time delta from previous captured frame: 0.336534000 seconds]
    [Time delta from previous displayed frame: 1.746493000 seconds]
    [Time since reference or first frame: 17.336247000 seconds]
    Frame Number: 137
    Frame Length: 180 bytes (1440 bits)
    Capture Length: 180 bytes (1440 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 166
    Identification: 0x1e7c (7804)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x0583 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 1454, Ack: 5037, Len: 114
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 1454    (relative sequence number)
    [Next sequence number: 1568    (relative sequence number)]
    Acknowledgment number: 5037    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xd2c7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20863740, TSecr 6043667
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20863740
            Timestamp echo reply: 6043667
    [SEQ/ACK analysis]
        [Bytes in flight: 114]
    [PDU Size: 114]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 114
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 14
    Security RequestId: 14
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadRequest (631)
        ReadRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:48.961019000 PDT
                RequestHandle: 13
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            MaxAge: 0
            TimestampsToReturn: Neither (0x00000003)
            Array of NodesToRead
                ArraySize: 1
                [0] : ReadValueId
                    NodeId: NodeId
                        .... 0011 = NodeId EncodingMask: String (0x03)
                        NodeId Namespace Id: 4
                        String: MAIN.bMemAlarm1
                    AttributeId: 13
                    IndexRange: [OpcUa Null String]
                    DataEncoding: QualifiedName
                        Id: 0
                        Name: [OpcUa Null String]

No.     Time           Source                Destination           Protocol Length Info
    138 17.338942000   10.10.1.16            10.10.1.48            OpcUa    129    UA Secure Conversation Message: ReadResponse

Frame 138: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:48.963890000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869008.963890000 seconds
    [Time delta from previous captured frame: 0.002695000 seconds]
    [Time delta from previous displayed frame: 0.002695000 seconds]
    [Time since reference or first frame: 17.338942000 seconds]
    Frame Number: 138
    Frame Length: 129 bytes (1032 bits)
    Capture Length: 129 bytes (1032 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 115
    Identification: 0x5d50 (23888)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86e1 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 5037, Ack: 1568, Len: 63
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 5037    (relative sequence number)
    [Next sequence number: 5100    (relative sequence number)]
    Acknowledgment number: 1568    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 260
    [Calculated window size: 66560]
    [Window size scaling factor: 256]
    Checksum: 0x086b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6043842, TSecr 20863740
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6043842
            Timestamp echo reply: 20863740
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 137]
        [The RTT to ACK the segment was: 0.002695000 seconds]
        [Bytes in flight: 63]
    [PDU Size: 63]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 63
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 61
    Security RequestId: 14
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadResponse (634)
        ReadResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:47.833469900 PDT
                RequestHandle: 13
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of Results
                ArraySize: 1
                [0]: DataValue
                    EncodingMask
                        .... ...1 = has value: True
                        .... ..0. = has statuscode: False
                        .... .0.. = has source timestamp: False
                        .... 0... = has server timestamp: False
                        ...0 .... = has source picoseconds: False
                        ..0. .... = has server picoseconds: False
                    Value: Variant
                        Variant Type: Boolean (0x01)
                        Boolean: False
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
    166 19.316506000   10.10.1.48            10.10.1.16            OpcUa    180    UA Secure Conversation Message: ReadRequest

Frame 166: 180 bytes on wire (1440 bits), 180 bytes captured (1440 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:50.941454000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869010.941454000 seconds
    [Time delta from previous captured frame: 0.104580000 seconds]
    [Time delta from previous displayed frame: 1.977564000 seconds]
    [Time since reference or first frame: 19.316506000 seconds]
    Frame Number: 166
    Frame Length: 180 bytes (1440 bits)
    Capture Length: 180 bytes (1440 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 166
    Identification: 0x1e7e (7806)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x0581 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 1568, Ack: 5100, Len: 114
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 1568    (relative sequence number)
    [Next sequence number: 1682    (relative sequence number)]
    Acknowledgment number: 5100    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0x9c08 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20865720, TSecr 6043842
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20865720
            Timestamp echo reply: 6043842
    [SEQ/ACK analysis]
        [Bytes in flight: 114]
    [PDU Size: 114]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 114
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 15
    Security RequestId: 15
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadRequest (631)
        ReadRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:36:50.941293000 PDT
                RequestHandle: 14
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            MaxAge: 0
            TimestampsToReturn: Neither (0x00000003)
            Array of NodesToRead
                ArraySize: 1
                [0] : ReadValueId
                    NodeId: NodeId
                        .... 0011 = NodeId EncodingMask: String (0x03)
                        NodeId Namespace Id: 4
                        String: MAIN.bMemAlarm1
                    AttributeId: 13
                    IndexRange: [OpcUa Null String]
                    DataEncoding: QualifiedName
                        Id: 0
                        Name: [OpcUa Null String]

No.     Time           Source                Destination           Protocol Length Info
    167 19.319037000   10.10.1.16            10.10.1.48            OpcUa    129    UA Secure Conversation Message: ReadResponse

Frame 167: 129 bytes on wire (1032 bits), 129 bytes captured (1032 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:36:50.943985000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869010.943985000 seconds
    [Time delta from previous captured frame: 0.002531000 seconds]
    [Time delta from previous displayed frame: 0.002531000 seconds]
    [Time since reference or first frame: 19.319037000 seconds]
    Frame Number: 167
    Frame Length: 129 bytes (1032 bits)
    Capture Length: 129 bytes (1032 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 115
    Identification: 0x5d54 (23892)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86dd [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 5100, Ack: 1682, Len: 63
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 5100    (relative sequence number)
    [Next sequence number: 5163    (relative sequence number)]
    Acknowledgment number: 1682    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 259
    [Calculated window size: 66304]
    [Window size scaling factor: 256]
    Checksum: 0xa113 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6044040, TSecr 20865720
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6044040
            Timestamp echo reply: 20865720
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 166]
        [The RTT to ACK the segment was: 0.002531000 seconds]
        [Bytes in flight: 63]
    [PDU Size: 63]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 63
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 62
    Security RequestId: 15
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ReadResponse (634)
        ReadResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:36:49.813583200 PDT
                RequestHandle: 14
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of Results
                ArraySize: 1
                [0]: DataValue
                    EncodingMask
                        .... ...1 = has value: True
                        .... ..0. = has statuscode: False
                        .... .0.. = has source timestamp: False
                        .... 0... = has server timestamp: False
                        ...0 .... = has source picoseconds: False
                        ..0. .... = has server picoseconds: False
                    Value: Variant
                        Variant Type: Boolean (0x01)
                        Boolean: False
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
    314 45.342775000   10.10.1.48            10.10.1.16            OpcUa    165    UA Secure Conversation Message: WriteRequest

Frame 314: 165 bytes on wire (1320 bits), 165 bytes captured (1320 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:37:16.967723000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869036.967723000 seconds
    [Time delta from previous captured frame: 0.022675000 seconds]
    [Time delta from previous displayed frame: 26.023738000 seconds]
    [Time since reference or first frame: 45.342775000 seconds]
    Frame Number: 314
    Frame Length: 165 bytes (1320 bits)
    Capture Length: 165 bytes (1320 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: IntelCor_19:bc:f8 (24:77:03:19:bc:f8), Dst: Beckhoff_13:33:3c (00:01:05:13:33:3c)
    Destination: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.48 (10.10.1.48), Dst: 10.10.1.16 (10.10.1.16)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 151
    Identification: 0x1e81 (7809)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (6)
    Header checksum: 0x058d [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.48 (10.10.1.48)
    Destination: 10.10.1.16 (10.10.1.16)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 34741 (34741), Dst Port: opcua-tcp (4840), Seq: 1682, Ack: 5163, Len: 99
    Source port: 34741 (34741)
    Destination port: opcua-tcp (4840)
    [Stream index: 0]
    Sequence number: 1682    (relative sequence number)
    [Next sequence number: 1781    (relative sequence number)]
    Acknowledgment number: 5163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 305
    [Calculated window size: 39040]
    [Window size scaling factor: 128]
    Checksum: 0xbee4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 20891746, TSecr 6044040
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 20891746
            Timestamp echo reply: 6044040
    [SEQ/ACK analysis]
        [Bytes in flight: 99]
    [PDU Size: 99]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 99
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 16
    Security RequestId: 16
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: WriteRequest (673)
        WriteRequest
            RequestHeader : RequestHeader
                AuthenticationToken: NodeId
                    .... 0010 = NodeId EncodingMask: Numeric of arbitrary length (0x02)
                    NodeId Namespace Id: 0
                    NodeId Identifier Numeric: 240123
                Timestamp: Oct  9, 2014 08:37:16.967547000 PDT
                RequestHandle: 15
                ReturnDiagnostics: 0
                AuditEntryId: [OpcUa Null String]
                TimeoutHint: 10000
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of NodesToWrite
                ArraySize: 1
                [0] : WriteValue
                    NodeId: NodeId
                        .... 0011 = NodeId EncodingMask: String (0x03)
                        NodeId Namespace Id: 4
                        String: MAIN.bMemAlarm1
                    AttributeId: 13
                    IndexRange: [OpcUa Null String]
                    Value: DataValue
                        EncodingMask
                            .... ...1 = has value: True
                            .... ..0. = has statuscode: False
                            .... .0.. = has source timestamp: False
                            .... 0... = has server timestamp: False
                            ...0 .... = has source picoseconds: False
                            ..0. .... = has server picoseconds: False
                        Value: Variant
                            Variant Type: Boolean (0x01)
                            Boolean: True

No.     Time           Source                Destination           Protocol Length Info
    315 45.345148000   10.10.1.16            10.10.1.48            OpcUa    130    UA Secure Conversation Message: WriteResponse

Frame 315: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:37:16.970096000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869036.970096000 seconds
    [Time delta from previous captured frame: 0.002373000 seconds]
    [Time delta from previous displayed frame: 0.002373000 seconds]
    [Time since reference or first frame: 45.345148000 seconds]
    Frame Number: 315
    Frame Length: 130 bytes (1040 bits)
    Capture Length: 130 bytes (1040 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 116
    Identification: 0x5d8a (23946)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86a6 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 5163, Ack: 1781, Len: 64
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 5163    (relative sequence number)
    [Next sequence number: 5227    (relative sequence number)]
    Acknowledgment number: 1781    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 259
    [Calculated window size: 66304]
    [Window size scaling factor: 256]
    Checksum: 0xda60 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6046642, TSecr 20891746
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6046642
            Timestamp echo reply: 20891746
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 314]
        [The RTT to ACK the segment was: 0.002373000 seconds]
        [Bytes in flight: 64]
    [PDU Size: 64]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 64
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 63
    Security RequestId: 16
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: WriteResponse (676)
        WriteResponse
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:37:15.839071800 PDT
                RequestHandle: 15
                ServiceResult: 0x00000000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False
            Array of Simple Type
                ArraySize: 1
                Results: 0x00000000
            Array of DiagnosticInfos
                ArraySize: 0

No.     Time           Source                Destination           Protocol Length Info
    318 45.469117000   10.10.1.16            10.10.1.48            OpcUa    118    UA Secure Conversation Message: ServiceFault

Frame 318: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:37:17.094065000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869037.094065000 seconds
    [Time delta from previous captured frame: 0.092123000 seconds]
    [Time delta from previous displayed frame: 0.123969000 seconds]
    [Time since reference or first frame: 45.469117000 seconds]
    Frame Number: 318
    Frame Length: 118 bytes (944 bits)
    Capture Length: 118 bytes (944 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 104
    Identification: 0x5d8b (23947)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86b1 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 5227, Ack: 1781, Len: 52
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 5227    (relative sequence number)
    [Next sequence number: 5279    (relative sequence number)]
    Acknowledgment number: 1781    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 259
    [Calculated window size: 66304]
    [Window size scaling factor: 256]
    Checksum: 0xe6b1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6046655, TSecr 20891749
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6046655
            Timestamp echo reply: 20891749
    [SEQ/ACK analysis]
        [Bytes in flight: 52]
    [PDU Size: 52]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 52
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 64
    Security RequestId: 9
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ServiceFault (397)
        ServiceFault
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:37:15.963078900 PDT
                RequestHandle: 8
                ServiceResult: 0x800a0000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False

No.     Time           Source                Destination           Protocol Length Info
    320 45.469451000   10.10.1.16            10.10.1.48            OpcUa    118    UA Secure Conversation Message: ServiceFault

Frame 320: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) on interface 0
    Interface id: 0
    Encapsulation type: Ethernet (1)
    Arrival Time: Oct  9, 2014 08:37:17.094399000 PDT
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1412869037.094399000 seconds
    [Time delta from previous captured frame: 0.000173000 seconds]
    [Time delta from previous displayed frame: 0.000334000 seconds]
    [Time since reference or first frame: 45.469451000 seconds]
    Frame Number: 320
    Frame Length: 118 bytes (944 bits)
    Capture Length: 118 bytes (944 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ip:tcp:opcua]
    [Coloring Rule Name: TCP]
    [Coloring Rule String: tcp]
Ethernet II, Src: Beckhoff_13:33:3c (00:01:05:13:33:3c), Dst: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
    Destination: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        Address: IntelCor_19:bc:f8 (24:77:03:19:bc:f8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        Address: Beckhoff_13:33:3c (00:01:05:13:33:3c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IP (0x0800)
Internet Protocol Version 4, Src: 10.10.1.16 (10.10.1.16), Dst: 10.10.1.48 (10.10.1.48)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
    Total Length: 104
    Identification: 0x5d8c (23948)
    Flags: 0x02 (Don't Fragment)
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (6)
    Header checksum: 0x86b0 [validation disabled]
        [Good: False]
        [Bad: False]
    Source: 10.10.1.16 (10.10.1.16)
    Destination: 10.10.1.48 (10.10.1.48)
    [Source GeoIP: Unknown]
    [Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: opcua-tcp (4840), Dst Port: 34741 (34741), Seq: 5279, Ack: 1781, Len: 52
    Source port: opcua-tcp (4840)
    Destination port: 34741 (34741)
    [Stream index: 0]
    Sequence number: 5279    (relative sequence number)
    [Next sequence number: 5331    (relative sequence number)]
    Acknowledgment number: 1781    (relative ack number)
    Header length: 32 bytes
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
    Window size value: 259
    [Calculated window size: 66304]
    [Window size scaling factor: 256]
    Checksum: 0xdf7d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        No-Operation (NOP)
            Type: 1
                0... .... = Copy on fragmentation: No
                .00. .... = Class: Control (0)
                ...0 0001 = Number: No-Operation (NOP) (1)
        Timestamps: TSval 6046655, TSecr 20891749
            Kind: Timestamp (8)
            Length: 10
            Timestamp value: 6046655
            Timestamp echo reply: 20891749
    [SEQ/ACK analysis]
        [Bytes in flight: 52]
    [PDU Size: 52]
OpcUa Binary Protocol
    Message Type: MSG
    Chunk Type: F
    Message Size: 52
    SecureChannelId: 240123
    Security Token Id: 1
    Security Sequence Number: 65
    Security RequestId: 12
    OpcUa Service : Encodeable Object
        TypeId : ExpandedNodeId
            NodeId EncodingMask: Four byte encoded Numeric (0x01)
            NodeId EncodingMask: 0
            NodeId Identifier Numeric: ServiceFault (397)
        ServiceFault
            ResponseHeader : ResponseHeader
                Timestamp: Oct  9, 2014 08:37:15.963078900 PDT
                RequestHandle: 11
                ServiceResult: 0x800a0000
                ServiceDiagnostics: DiagnosticInfo
                    EncodingMask
                        .... ...0 = has symbolic id: False
                        .... ..0. = has namespace: False
                        .... .0.. = has localizedtext: False
                        .... 0... = has locale: False
                        ...0 .... = has additional info: False
                        ..0. .... = has inner statuscode: False
                        .0.. .... = has inner diagnostic info: False
                Array of Simple Type
                    ArraySize: 0
                AdditionalHeader : ExtensionObject
                    TypeId: ExpandedNodeId
                        .... 0000 = NodeId EncodingMask: Two byte encoded Numeric (0x00)
                        NodeId Identifier Numeric: 0
                    EncodingMask
                        .... ...0 = has binary body: False
                        .... ..0. = has xml body: False

[mdcb]

I dont know why github doesn't let you attach binary files or text files... you're right this thread is becoming a mess. If that's ok, I can open new issues that have more focus since I start getting clearer ideas of different issues? let me know if that works for you.

[oroulet]

Yes please several bug report. And send wireshark files as zip. That should work.

[oroulet]

Thanks I will have a look. Not enough data means that parsing of a message failed. That may happen if we have a bug in parsing ( or missing implement) or get corrupt data. Maybe we do not have support for service fault message ....that would explain....

[arykovanov]

We parse only Anonymous token. Therefore it is required to add other tokens. I just have looked at code. )

2014-10-10 21:06 GMT+04:00 oroulet notifications@github.com:

Thanks I will have a look. Not enough data means that parsing of a message failed. That may happen if we have a bug in parsing ( or missing implement) or get corrupt data. Maybe we do not have support for service fault message ....that would explain....

— Reply to this email directly or view it on GitHub https://github.com/FreeOpcUa/freeopcua/issues/54#issuecomment-58684965.

Best regards, Alexander Rykovanov.

[oroulet]

Could you also do a wirershark log for for the getchild issue and open a report. That might be the easiest to debug. And run the client with debug=true and send the output. Thank you

[mdcb]

closing this thread, nice to talk!

[mdcb]

how do you debug=true ?

[oroulet]

int main(int argc, char\ argv) { const bool debug = true; OpcUa::OPCUAServer server(debug);

in python this is also an argument to server or client object

On 10 October 2014 20:28, mdcb notifications@github.com wrote:

how do you debug=true ?

— Reply to this email directly or view it on GitHub https://github.com/FreeOpcUa/freeopcua/issues/54#issuecomment-58697086.