Packet Journey

How does a message travel across the internet?

Beginner10 minSimulated

Words you’ll meet:

TCP/IP
UDP
Routing

A laptop fetches a page from a server in Frankfurt. Handshake, request, response, teardown -- with a NAPT rewrite at the home router and its exact reverse on the way back.

Encapsulation: HTTP inside TCP inside IPv4 inside Ethernet
MAC addresses change every hop; IP addresses do not
TTL decrement and checksum recomputation
NAPT translation and the table that reverses it
TCP sequence and acknowledgement arithmetic

Change the run

Transport

As authored: TCP

Payload

1180 B

As authored: 412, 1180 bytes

Link MTU

Anything over 1500 bytes has to be fragmented.

Link loss

Every packet that is sent arrives.

4 steps. Pause, step back or replay any of them.

Press Play to watch it happen, in 4 steps.

Steps

SYN, SYN-ACK, ACK. Each end tells the other where its sequence numbers start, and the SYN itself takes one of them.
The browser writes 412 bytes onto the open connection. TCP puts them in one segment; IPv4 and Ethernet wrap it for the first wire.
The origin answers with headers and a small HTML body, back along the same path -- and through the same NAT row, read the other way.
FIN, ACK, FIN, ACK. Each direction closes separately, which is why teardown takes four segments where the handshake took three.

Details

Nothing selected

Click anything on the map (a device, a cable, or a moving message) to see what it is.

Step 1 of 4

0.00 s1.11 s

Encapsulation

54 B

TCP 49152 -> 80 [SYN] Seq=1842000 Win=64240 Len=0

Header added · Laptop

Ethernet frame prepended: 40 bytes become 54, addressed to 00:00:5e:00:53:06 -- the next machine on this wire, not the destination.

IPv4 header — fields in wire order.
Field	Value
Version	4
IHL	5 (20 bytes)
What it’s for: Header length in 32-bit words. Five means no options, which is almost every packet.
DSCP	0
ECN	0
Total Length	40
What it’s for: Header plus payload: 20 + 20 bytes.
Identification	30000
What it’s for: Shared by every fragment of one datagram, so the destination knows which pieces belong together.
Flags	none
What it’s for: Don't Fragment makes a router drop an oversized packet and report the MTU instead of splitting it. More Fragments is set on every fragment but the last.
Fragment Offset	0 (byte 0)
What it’s for: Counted in 8-byte units, which is why every fragment except the last carries a multiple of 8 bytes.
TTL	64
What it’s for: Every router subtracts one. At zero the packet is dropped and an ICMP Time Exceeded goes back -- which is how traceroute maps a path.
Protocol	6 (TCP)
Header Checksum	0x8137
What it’s for: Covers the header only, so every router that decrements the TTL must recompute it.
Source	192.168.1.112
What it’s for: Set by the sender and unchanged all the way to the destination -- unless a NAT rewrites it.
Destination	192.0.2.80
What it’s for: The far end of the journey. Routers read it to choose a next hop; none of them change it.

Outermost header first — the order a receiving network card reads them. Each hop throws away the frame at the top and builds a new one; everything below it crosses the whole path untouched.

Hop by hop

77 hops · click a row to seek

Every layer-3 hop in this run, with the addressing the packet carried across it and what the sending machine changed first. Each row seeks the timeline.
Hop	Time	From → to	TTL	MAC	IP	Bytes	Changed
TCP 49152 -> 80 [SYN] Seq=1842000 Win=64240 Len=0
	0.00 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.00 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x0848 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.01 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x0948
	0.01 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a48
	0.01 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b48
	0.10 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c48
	0.10 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d48
TCP 80 -> 60000 [SYN, ACK] Seq=3517400 Ack=1842001 Win=64240 Len=0
	0.10 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	54	first hop
	0.10 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x0847
	0.10 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x0947
	0.18 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x0a47
	0.18 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x0b47
	0.19 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x0c47
	0.19 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x8736 NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 49152 -> 80 [ACK] Seq=1842001 Ack=3517401 Win=64240 Len=0
	0.20 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.20 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x0846 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.20 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x0946
	0.21 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a46
	0.21 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b46
	0.29 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c46
	0.29 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d46
TCP 49152 -> 80 [PSH, ACK] Seq=1842001 Ack=3517401 Win=64240 Len=412
	0.29 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	466	first hop
	0.29 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x06a9 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.30 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x07a9
	0.30 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x08a9
	0.31 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x09a9
	0.39 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0aa9
	0.39 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0ba9
TCP 80 -> 60000 [ACK] Seq=3517401 Ack=1842413 Win=64240 Len=0
	0.39 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	54	first hop
	0.39 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x0844
	0.39 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x0944
	0.48 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x0a44
	0.48 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x0b44
	0.48 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x0c44
	0.49 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x8733 NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 80 -> 60000 [PSH, ACK] Seq=3517401 Ack=1842413 Win=64240 Len=1180
	0.49 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	1234	first hop
	0.49 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x03a7
	0.49 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x04a7
	0.57 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x05a7
	0.57 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x06a7
	0.58 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x07a7
	0.58 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	1234	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x8296 NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 49152 -> 80 [ACK] Seq=1842413 Ack=3518581 Win=64240 Len=0
	0.59 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.59 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x0842 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.59 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x0942
	0.60 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a42
	0.60 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b42
	0.68 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c42
	0.68 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d42
TCP 49152 -> 80 [FIN, ACK] Seq=1842413 Ack=3518581 Win=64240 Len=0
	0.68 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.68 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x0841 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.69 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x0941
	0.69 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a41
	0.70 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b41
	0.78 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c41
	0.78 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d41
TCP 80 -> 60000 [ACK] Seq=3518581 Ack=1842414 Win=64240 Len=0
	0.78 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	54	first hop
	0.78 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x0840
	0.78 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x0940
	0.87 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x0a40
	0.87 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x0b40
	0.87 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x0c40
	0.88 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x872f NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 80 -> 60000 [FIN, ACK] Seq=3518581 Ack=1842414 Win=64240 Len=0
	0.88 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	54	first hop
	0.88 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x083f
	0.88 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x093f
	0.96 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x0a3f
	0.97 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x0b3f
	0.97 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x0c3f
	0.97 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x872e NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 49152 -> 80 [ACK] Seq=1842414 Ack=3518582 Win=64240 Len=0
	0.98 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.98 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x083e NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.98 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x093e
	0.99 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a3e
	0.99 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b3e
	1.07 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c3e
	1.07 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d3e

NAT translation table

Home router (NAPT) · 203.0.113.7

Written by the packet on its way out and read backwards on the way in. Without the row, a reply arriving at 203.0.113.7 could not be told which machine in the house had asked for it.
Protocol	Inside (private)	Outside (public)	Destination	Created	Last used
Empty. The first packet out of the house writes the first row.

Everything that happened6 / 570

The map as a list

16 machines, 15 links

Loading the simulation…

IPv4 header — fields in wire order.

Field

Value

Version

IHL

5 (20 bytes)

What it’s for: Header length in 32-bit words. Five means no options, which is almost every packet.

DSCP

ECN

Total Length

What it’s for: Header plus payload: 20 + 20 bytes.

Identification

30000

What it’s for: Shared by every fragment of one datagram, so the destination knows which pieces belong together.

Flags

none

What it’s for: Don't Fragment makes a router drop an oversized packet and report the MTU instead of splitting it. More Fragments is set on every fragment but the last.

Fragment Offset

0 (byte 0)

What it’s for: Counted in 8-byte units, which is why every fragment except the last carries a multiple of 8 bytes.

TTL

What it’s for: Every router subtracts one. At zero the packet is dropped and an ICMP Time Exceeded goes back -- which is how traceroute maps a path.

Protocol

6 (TCP)

Header Checksum

0x8137

What it’s for: Covers the header only, so every router that decrements the TTL must recompute it.

Source

192.168.1.112

What it’s for: Set by the sender and unchanged all the way to the destination -- unless a NAT rewrites it.

Destination

192.0.2.80

What it’s for: The far end of the journey. Routers read it to choose a next hop; none of them change it.

Every layer-3 hop in this run, with the addressing the packet carried across it and what the sending machine changed first. Each row seeks the timeline.
Hop	Time	From → to	TTL	MAC	IP	Bytes	Changed
TCP 49152 -> 80 [SYN] Seq=1842000 Win=64240 Len=0
	0.00 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.00 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x0848 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.01 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x0948
	0.01 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a48
	0.01 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b48
	0.10 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c48
	0.10 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d48
TCP 80 -> 60000 [SYN, ACK] Seq=3517400 Ack=1842001 Win=64240 Len=0
	0.10 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	54	first hop
	0.10 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x0847
	0.10 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x0947
	0.18 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x0a47
	0.18 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x0b47
	0.19 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x0c47
	0.19 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x8736 NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 49152 -> 80 [ACK] Seq=1842001 Ack=3517401 Win=64240 Len=0
	0.20 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.20 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x0846 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.20 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x0946
	0.21 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a46
	0.21 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b46
	0.29 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c46
	0.29 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d46
TCP 49152 -> 80 [PSH, ACK] Seq=1842001 Ack=3517401 Win=64240 Len=412
	0.29 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	466	first hop
	0.29 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x06a9 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.30 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x07a9
	0.30 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x08a9
	0.31 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x09a9
	0.39 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0aa9
	0.39 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	466	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0ba9
TCP 80 -> 60000 [ACK] Seq=3517401 Ack=1842413 Win=64240 Len=0
	0.39 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	54	first hop
	0.39 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x0844
	0.39 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x0944
	0.48 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x0a44
	0.48 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x0b44
	0.48 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x0c44
	0.49 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x8733 NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 80 -> 60000 [PSH, ACK] Seq=3517401 Ack=1842413 Win=64240 Len=1180
	0.49 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	1234	first hop
	0.49 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x03a7
	0.49 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x04a7
	0.57 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x05a7
	0.57 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x06a7
	0.58 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	1234	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x07a7
	0.58 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	1234	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x8296 NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 49152 -> 80 [ACK] Seq=1842413 Ack=3518581 Win=64240 Len=0
	0.59 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.59 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x0842 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.59 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x0942
	0.60 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a42
	0.60 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b42
	0.68 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c42
	0.68 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d42
TCP 49152 -> 80 [FIN, ACK] Seq=1842413 Ack=3518581 Win=64240 Len=0
	0.68 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.68 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x0841 NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.69 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x0941
	0.69 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a41
	0.70 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b41
	0.78 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c41
	0.78 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d41
TCP 80 -> 60000 [ACK] Seq=3518581 Ack=1842414 Win=64240 Len=0
	0.78 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	54	first hop
	0.78 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x0840
	0.78 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x0940
	0.87 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x0a40
	0.87 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x0b40
	0.87 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x0c40
	0.88 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x872f NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 80 -> 60000 [FIN, ACK] Seq=3518581 Ack=1842414 Win=64240 Len=0
	0.88 s	app.example origin → Hosting provider edge	64	00:00:5e:00:53:10 → 00:00:5e:00:53:0f	192.0.2.80:80 → 203.0.113.7:60000	54	first hop
	0.88 s	Hosting provider edge → Transit provider (FRA)	63	00:00:5e:00:53:0f → 00:00:5e:00:53:0e	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e TTL 64 → 63 Checksum recomputed → 0x083f
	0.88 s	Transit provider (FRA) → Transit provider (SG)	62	00:00:5e:00:53:0e → 00:00:5e:00:53:0d	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d TTL 63 → 62 Checksum recomputed → 0x093f
	0.96 s	Transit provider (SG) → Regional POP router	61	00:00:5e:00:53:0d → 00:00:5e:00:53:0a	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a TTL 62 → 61 Checksum recomputed → 0x0a3f
	0.97 s	Regional POP router → ISP access router	60	00:00:5e:00:53:0a → 00:00:5e:00:53:08	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08 TTL 61 → 60 Checksum recomputed → 0x0b3f
	0.97 s	ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged	59	00:00:5e:00:53:08 → 00:00:5e:00:53:06	192.0.2.80:80 → 203.0.113.7:60000	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06 TTL 60 → 59 Checksum recomputed → 0x0c3f
	0.97 s	Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged	58	00:00:5e:00:53:06 → 00:00:5e:00:53:01	192.0.2.80:80 → 192.168.1.112:49152	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01 TTL 59 → 58 Checksum recomputed → 0x872e NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152
TCP 49152 -> 80 [ACK] Seq=1842414 Ack=3518582 Win=64240 Len=0
	0.98 s	Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged	64	00:00:5e:00:53:01 → 00:00:5e:00:53:06	192.168.1.112:49152 → 192.0.2.80:80	54	first hop
	0.98 s	Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged	63	00:00:5e:00:53:06 → 00:00:5e:00:53:08	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08 TTL 64 → 63 Checksum recomputed → 0x083e NAT: source 192.168.1.112:49152 → 203.0.113.7:60000
	0.98 s	ISP access router → Regional POP router	62	00:00:5e:00:53:08 → 00:00:5e:00:53:0a	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a TTL 63 → 62 Checksum recomputed → 0x093e
	0.99 s	Regional POP router → Transit provider (SG)	61	00:00:5e:00:53:0a → 00:00:5e:00:53:0d	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d TTL 62 → 61 Checksum recomputed → 0x0a3e
	0.99 s	Transit provider (SG) → Transit provider (FRA)	60	00:00:5e:00:53:0d → 00:00:5e:00:53:0e	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e TTL 61 → 60 Checksum recomputed → 0x0b3e
	1.07 s	Transit provider (FRA) → Hosting provider edge	59	00:00:5e:00:53:0e → 00:00:5e:00:53:0f	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f TTL 60 → 59 Checksum recomputed → 0x0c3e
	1.07 s	Hosting provider edge → app.example origin	58	00:00:5e:00:53:0f → 00:00:5e:00:53:10	203.0.113.7:60000 → 192.0.2.80:80	54	MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10 TTL 59 → 58 Checksum recomputed → 0x0d3e

Hop

Time

From → to

TTL

MAC

Bytes

Changed

TCP 49152 -> 80 [SYN] Seq=1842000 Win=64240 Len=0

0.00 s

Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged

00:00:5e:00:53:01 → 00:00:5e:00:53:06

192.168.1.112:49152 → 192.0.2.80:80

first hop

0.00 s

Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:08

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08
TTL 64 → 63
Checksum recomputed → 0x0848
NAT: source 192.168.1.112:49152 → 203.0.113.7:60000

0.01 s

ISP access router → Regional POP router

00:00:5e:00:53:08 → 00:00:5e:00:53:0a

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a
TTL 63 → 62
Checksum recomputed → 0x0948

0.01 s

Regional POP router → Transit provider (SG)

00:00:5e:00:53:0a → 00:00:5e:00:53:0d

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d
TTL 62 → 61
Checksum recomputed → 0x0a48

0.01 s

Transit provider (SG) → Transit provider (FRA)

00:00:5e:00:53:0d → 00:00:5e:00:53:0e

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e
TTL 61 → 60
Checksum recomputed → 0x0b48

0.10 s

Transit provider (FRA) → Hosting provider edge

00:00:5e:00:53:0e → 00:00:5e:00:53:0f

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f
TTL 60 → 59
Checksum recomputed → 0x0c48

0.10 s

Hosting provider edge → app.example origin

00:00:5e:00:53:0f → 00:00:5e:00:53:10

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10
TTL 59 → 58
Checksum recomputed → 0x0d48

TCP 80 -> 60000 [SYN, ACK] Seq=3517400 Ack=1842001 Win=64240 Len=0

0.10 s

app.example origin → Hosting provider edge

00:00:5e:00:53:10 → 00:00:5e:00:53:0f

192.0.2.80:80 → 203.0.113.7:60000

first hop

0.10 s

Hosting provider edge → Transit provider (FRA)

00:00:5e:00:53:0f → 00:00:5e:00:53:0e

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e
TTL 64 → 63
Checksum recomputed → 0x0847

0.10 s

Transit provider (FRA) → Transit provider (SG)

00:00:5e:00:53:0e → 00:00:5e:00:53:0d

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d
TTL 63 → 62
Checksum recomputed → 0x0947

0.18 s

Transit provider (SG) → Regional POP router

00:00:5e:00:53:0d → 00:00:5e:00:53:0a

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a
TTL 62 → 61
Checksum recomputed → 0x0a47

0.18 s

Regional POP router → ISP access router

00:00:5e:00:53:0a → 00:00:5e:00:53:08

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08
TTL 61 → 60
Checksum recomputed → 0x0b47

0.19 s

ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged

00:00:5e:00:53:08 → 00:00:5e:00:53:06

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06
TTL 60 → 59
Checksum recomputed → 0x0c47

0.19 s

Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:01

192.0.2.80:80 → 192.168.1.112:49152

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01
TTL 59 → 58
Checksum recomputed → 0x8736
NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152

TCP 49152 -> 80 [ACK] Seq=1842001 Ack=3517401 Win=64240 Len=0

0.20 s

Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged

00:00:5e:00:53:01 → 00:00:5e:00:53:06

192.168.1.112:49152 → 192.0.2.80:80

first hop

0.20 s

Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:08

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08
TTL 64 → 63
Checksum recomputed → 0x0846
NAT: source 192.168.1.112:49152 → 203.0.113.7:60000

0.20 s

ISP access router → Regional POP router

00:00:5e:00:53:08 → 00:00:5e:00:53:0a

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a
TTL 63 → 62
Checksum recomputed → 0x0946

0.21 s

Regional POP router → Transit provider (SG)

00:00:5e:00:53:0a → 00:00:5e:00:53:0d

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d
TTL 62 → 61
Checksum recomputed → 0x0a46

0.21 s

Transit provider (SG) → Transit provider (FRA)

00:00:5e:00:53:0d → 00:00:5e:00:53:0e

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e
TTL 61 → 60
Checksum recomputed → 0x0b46

0.29 s

Transit provider (FRA) → Hosting provider edge

00:00:5e:00:53:0e → 00:00:5e:00:53:0f

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f
TTL 60 → 59
Checksum recomputed → 0x0c46

0.29 s

Hosting provider edge → app.example origin

00:00:5e:00:53:0f → 00:00:5e:00:53:10

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10
TTL 59 → 58
Checksum recomputed → 0x0d46

TCP 49152 -> 80 [PSH, ACK] Seq=1842001 Ack=3517401 Win=64240 Len=412

0.29 s

Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged

00:00:5e:00:53:01 → 00:00:5e:00:53:06

192.168.1.112:49152 → 192.0.2.80:80

466

first hop

0.29 s

Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:08

203.0.113.7:60000 → 192.0.2.80:80

466

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08
TTL 64 → 63
Checksum recomputed → 0x06a9
NAT: source 192.168.1.112:49152 → 203.0.113.7:60000

0.30 s

ISP access router → Regional POP router

00:00:5e:00:53:08 → 00:00:5e:00:53:0a

203.0.113.7:60000 → 192.0.2.80:80

466

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a
TTL 63 → 62
Checksum recomputed → 0x07a9

0.30 s

Regional POP router → Transit provider (SG)

00:00:5e:00:53:0a → 00:00:5e:00:53:0d

203.0.113.7:60000 → 192.0.2.80:80

466

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d
TTL 62 → 61
Checksum recomputed → 0x08a9

0.31 s

Transit provider (SG) → Transit provider (FRA)

00:00:5e:00:53:0d → 00:00:5e:00:53:0e

203.0.113.7:60000 → 192.0.2.80:80

466

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e
TTL 61 → 60
Checksum recomputed → 0x09a9

0.39 s

Transit provider (FRA) → Hosting provider edge

00:00:5e:00:53:0e → 00:00:5e:00:53:0f

203.0.113.7:60000 → 192.0.2.80:80

466

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f
TTL 60 → 59
Checksum recomputed → 0x0aa9

0.39 s

Hosting provider edge → app.example origin

00:00:5e:00:53:0f → 00:00:5e:00:53:10

203.0.113.7:60000 → 192.0.2.80:80

466

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10
TTL 59 → 58
Checksum recomputed → 0x0ba9

TCP 80 -> 60000 [ACK] Seq=3517401 Ack=1842413 Win=64240 Len=0

0.39 s

app.example origin → Hosting provider edge

00:00:5e:00:53:10 → 00:00:5e:00:53:0f

192.0.2.80:80 → 203.0.113.7:60000

first hop

0.39 s

Hosting provider edge → Transit provider (FRA)

00:00:5e:00:53:0f → 00:00:5e:00:53:0e

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e
TTL 64 → 63
Checksum recomputed → 0x0844

0.39 s

Transit provider (FRA) → Transit provider (SG)

00:00:5e:00:53:0e → 00:00:5e:00:53:0d

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d
TTL 63 → 62
Checksum recomputed → 0x0944

0.48 s

Transit provider (SG) → Regional POP router

00:00:5e:00:53:0d → 00:00:5e:00:53:0a

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a
TTL 62 → 61
Checksum recomputed → 0x0a44

0.48 s

Regional POP router → ISP access router

00:00:5e:00:53:0a → 00:00:5e:00:53:08

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08
TTL 61 → 60
Checksum recomputed → 0x0b44

0.48 s

ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged

00:00:5e:00:53:08 → 00:00:5e:00:53:06

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06
TTL 60 → 59
Checksum recomputed → 0x0c44

0.49 s

Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:01

192.0.2.80:80 → 192.168.1.112:49152

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01
TTL 59 → 58
Checksum recomputed → 0x8733
NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152

TCP 80 -> 60000 [PSH, ACK] Seq=3517401 Ack=1842413 Win=64240 Len=1180

0.49 s

app.example origin → Hosting provider edge

00:00:5e:00:53:10 → 00:00:5e:00:53:0f

192.0.2.80:80 → 203.0.113.7:60000

1234

first hop

0.49 s

Hosting provider edge → Transit provider (FRA)

00:00:5e:00:53:0f → 00:00:5e:00:53:0e

192.0.2.80:80 → 203.0.113.7:60000

1234

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e
TTL 64 → 63
Checksum recomputed → 0x03a7

0.49 s

Transit provider (FRA) → Transit provider (SG)

00:00:5e:00:53:0e → 00:00:5e:00:53:0d

192.0.2.80:80 → 203.0.113.7:60000

1234

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d
TTL 63 → 62
Checksum recomputed → 0x04a7

0.57 s

Transit provider (SG) → Regional POP router

00:00:5e:00:53:0d → 00:00:5e:00:53:0a

192.0.2.80:80 → 203.0.113.7:60000

1234

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a
TTL 62 → 61
Checksum recomputed → 0x05a7

0.57 s

Regional POP router → ISP access router

00:00:5e:00:53:0a → 00:00:5e:00:53:08

192.0.2.80:80 → 203.0.113.7:60000

1234

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08
TTL 61 → 60
Checksum recomputed → 0x06a7

0.58 s

ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged

00:00:5e:00:53:08 → 00:00:5e:00:53:06

192.0.2.80:80 → 203.0.113.7:60000

1234

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06
TTL 60 → 59
Checksum recomputed → 0x07a7

0.58 s

Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:01

192.0.2.80:80 → 192.168.1.112:49152

1234

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01
TTL 59 → 58
Checksum recomputed → 0x8296
NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152

TCP 49152 -> 80 [ACK] Seq=1842413 Ack=3518581 Win=64240 Len=0

0.59 s

Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged

00:00:5e:00:53:01 → 00:00:5e:00:53:06

192.168.1.112:49152 → 192.0.2.80:80

first hop

0.59 s

Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:08

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08
TTL 64 → 63
Checksum recomputed → 0x0842
NAT: source 192.168.1.112:49152 → 203.0.113.7:60000

0.59 s

ISP access router → Regional POP router

00:00:5e:00:53:08 → 00:00:5e:00:53:0a

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a
TTL 63 → 62
Checksum recomputed → 0x0942

0.60 s

Regional POP router → Transit provider (SG)

00:00:5e:00:53:0a → 00:00:5e:00:53:0d

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d
TTL 62 → 61
Checksum recomputed → 0x0a42

0.60 s

Transit provider (SG) → Transit provider (FRA)

00:00:5e:00:53:0d → 00:00:5e:00:53:0e

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e
TTL 61 → 60
Checksum recomputed → 0x0b42

0.68 s

Transit provider (FRA) → Hosting provider edge

00:00:5e:00:53:0e → 00:00:5e:00:53:0f

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f
TTL 60 → 59
Checksum recomputed → 0x0c42

0.68 s

Hosting provider edge → app.example origin

00:00:5e:00:53:0f → 00:00:5e:00:53:10

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10
TTL 59 → 58
Checksum recomputed → 0x0d42

TCP 49152 -> 80 [FIN, ACK] Seq=1842413 Ack=3518581 Win=64240 Len=0

0.68 s

Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged

00:00:5e:00:53:01 → 00:00:5e:00:53:06

192.168.1.112:49152 → 192.0.2.80:80

first hop

0.68 s

Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:08

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08
TTL 64 → 63
Checksum recomputed → 0x0841
NAT: source 192.168.1.112:49152 → 203.0.113.7:60000

0.69 s

ISP access router → Regional POP router

00:00:5e:00:53:08 → 00:00:5e:00:53:0a

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a
TTL 63 → 62
Checksum recomputed → 0x0941

0.69 s

Regional POP router → Transit provider (SG)

00:00:5e:00:53:0a → 00:00:5e:00:53:0d

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d
TTL 62 → 61
Checksum recomputed → 0x0a41

0.70 s

Transit provider (SG) → Transit provider (FRA)

00:00:5e:00:53:0d → 00:00:5e:00:53:0e

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e
TTL 61 → 60
Checksum recomputed → 0x0b41

0.78 s

Transit provider (FRA) → Hosting provider edge

00:00:5e:00:53:0e → 00:00:5e:00:53:0f

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f
TTL 60 → 59
Checksum recomputed → 0x0c41

0.78 s

Hosting provider edge → app.example origin

00:00:5e:00:53:0f → 00:00:5e:00:53:10

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10
TTL 59 → 58
Checksum recomputed → 0x0d41

TCP 80 -> 60000 [ACK] Seq=3518581 Ack=1842414 Win=64240 Len=0

0.78 s

app.example origin → Hosting provider edge

00:00:5e:00:53:10 → 00:00:5e:00:53:0f

192.0.2.80:80 → 203.0.113.7:60000

first hop

0.78 s

Hosting provider edge → Transit provider (FRA)

00:00:5e:00:53:0f → 00:00:5e:00:53:0e

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e
TTL 64 → 63
Checksum recomputed → 0x0840

0.78 s

Transit provider (FRA) → Transit provider (SG)

00:00:5e:00:53:0e → 00:00:5e:00:53:0d

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d
TTL 63 → 62
Checksum recomputed → 0x0940

0.87 s

Transit provider (SG) → Regional POP router

00:00:5e:00:53:0d → 00:00:5e:00:53:0a

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a
TTL 62 → 61
Checksum recomputed → 0x0a40

0.87 s

Regional POP router → ISP access router

00:00:5e:00:53:0a → 00:00:5e:00:53:08

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08
TTL 61 → 60
Checksum recomputed → 0x0b40

0.87 s

ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged

00:00:5e:00:53:08 → 00:00:5e:00:53:06

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06
TTL 60 → 59
Checksum recomputed → 0x0c40

0.88 s

Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:01

192.0.2.80:80 → 192.168.1.112:49152

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01
TTL 59 → 58
Checksum recomputed → 0x872f
NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152

TCP 80 -> 60000 [FIN, ACK] Seq=3518581 Ack=1842414 Win=64240 Len=0

0.88 s

app.example origin → Hosting provider edge

00:00:5e:00:53:10 → 00:00:5e:00:53:0f

192.0.2.80:80 → 203.0.113.7:60000

first hop

0.88 s

Hosting provider edge → Transit provider (FRA)

00:00:5e:00:53:0f → 00:00:5e:00:53:0e

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:0e
TTL 64 → 63
Checksum recomputed → 0x083f

0.88 s

Transit provider (FRA) → Transit provider (SG)

00:00:5e:00:53:0e → 00:00:5e:00:53:0d

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0d
TTL 63 → 62
Checksum recomputed → 0x093f

0.96 s

Transit provider (SG) → Regional POP router

00:00:5e:00:53:0d → 00:00:5e:00:53:0a

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0a
TTL 62 → 61
Checksum recomputed → 0x0a3f

0.97 s

Regional POP router → ISP access router

00:00:5e:00:53:0a → 00:00:5e:00:53:08

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:08
TTL 61 → 60
Checksum recomputed → 0x0b3f

0.97 s

ISP access router → Home router (NAPT)via Fibre terminal (ONT) — unchanged

00:00:5e:00:53:08 → 00:00:5e:00:53:06

192.0.2.80:80 → 203.0.113.7:60000

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:06
TTL 60 → 59
Checksum recomputed → 0x0c3f

0.97 s

Home router (NAPT) → Laptopvia LAN switch, Wi-Fi access point — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:01

192.0.2.80:80 → 192.168.1.112:49152

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:01
TTL 59 → 58
Checksum recomputed → 0x872e
NAT: destination 203.0.113.7:60000 → 192.168.1.112:49152

TCP 49152 -> 80 [ACK] Seq=1842414 Ack=3518582 Win=64240 Len=0

0.98 s

Laptop → Home router (NAPT)via Wi-Fi access point, LAN switch — unchanged

00:00:5e:00:53:01 → 00:00:5e:00:53:06

192.168.1.112:49152 → 192.0.2.80:80

first hop

0.98 s

Home router (NAPT) → ISP access routervia Fibre terminal (ONT) — unchanged

00:00:5e:00:53:06 → 00:00:5e:00:53:08

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:06 → 00:00:5e:00:53:08
TTL 64 → 63
Checksum recomputed → 0x083e
NAT: source 192.168.1.112:49152 → 203.0.113.7:60000

0.98 s

ISP access router → Regional POP router

00:00:5e:00:53:08 → 00:00:5e:00:53:0a

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:08 → 00:00:5e:00:53:0a
TTL 63 → 62
Checksum recomputed → 0x093e

0.99 s

Regional POP router → Transit provider (SG)

00:00:5e:00:53:0a → 00:00:5e:00:53:0d

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0a → 00:00:5e:00:53:0d
TTL 62 → 61
Checksum recomputed → 0x0a3e

0.99 s

Transit provider (SG) → Transit provider (FRA)

00:00:5e:00:53:0d → 00:00:5e:00:53:0e

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0d → 00:00:5e:00:53:0e
TTL 61 → 60
Checksum recomputed → 0x0b3e

1.07 s

Transit provider (FRA) → Hosting provider edge

00:00:5e:00:53:0e → 00:00:5e:00:53:0f

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0e → 00:00:5e:00:53:0f
TTL 60 → 59
Checksum recomputed → 0x0c3e

1.07 s

Hosting provider edge → app.example origin

00:00:5e:00:53:0f → 00:00:5e:00:53:10

203.0.113.7:60000 → 192.0.2.80:80

MAC 00:00:5e:00:53:0f → 00:00:5e:00:53:10
TTL 59 → 58
Checksum recomputed → 0x0d3e

Written by the packet on its way out and read backwards on the way in. Without the row, a reply arriving at 203.0.113.7 could not be told which machine in the house had asked for it.
Protocol	Inside (private)	Outside (public)	Destination	Created	Last used
Empty. The first packet out of the house writes the first row.

Written by the packet on its way out and read backwards on the way in. Without the row, a reply arriving at 203.0.113.7 could not be told which machine in the house had asked for it.

Protocol

Inside (private)

Outside (public)

Destination

Created

Last used

Empty. The first packet out of the house writes the first row.

Packet Journey

Change the run

How to use this page

Steps

Details

Encapsulation

Hop by hop

NAT translation table

The map as a list

Change the run

How to use this page

Steps

Details

Encapsulation

Hop by hop

NAT translation table

The map as a list