This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Tcpdump - any experts to explain exactly what the output means?

I have a tcpdump where I'm not getting the reply I expect from the remote device. I'm just wondering what certain parts mean eg [.] , nop, nop etc

Logs are as follows:

14:41:29.534774 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [S.], seq 3781070632, ack 3003906911, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 133182370 ecr 104989], length 0

14:41:29.534826 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [S.], seq 3781070632, ack 3003906911, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 133182370 ecr 104989], length 0

14:41:29.624576 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [.], ack 1, win 516, options [nop,nop,TS val 133182378 ecr 104997,nop,nop,sack 1 {1377:2164}], length 0

14:41:29.624606 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [.], ack 1, win 516, options [nop,nop,TS val 133182378 ecr 104997,nop,nop,sack 1 {1377:2164}], length 0

14:41:34.615679 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133182878 ecr 104997], length 0

14:41:34.615697 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133182878 ecr 104997], length 0

14:41:34.916109 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133182908 ecr 104997], length 0

14:41:34.916132 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133182908 ecr 104997], length 0

14:41:35.516652 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133182968 ecr 104997], length 0

14:41:35.516669 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133182968 ecr 104997], length 0

14:41:36.723812 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133183088 ecr 104997], length 0

14:41:36.723818 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133183088 ecr 104997], length 0

14:41:39.115565 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133183328 ecr 104997], length 0

14:41:39.115579 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133183328 ecr 104997], length 0

14:41:43.916919 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133183808 ecr 104997], length 0

14:41:43.916930 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [F.], seq 1, ack 1, win 516, options [nop,nop,TS val 133183808 ecr 104997], length 0

14:41:53.522107 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [R.], seq 2, ack 1, win 0, length 0

14:41:53.522114 IP 10.1.2.20.http-alt > 10.1.38.140.43175: Flags [R.], seq 2, ack 1, win 0, length 0



This thread was automatically locked due to age.
Parents Reply Children
No Data