Skip to content

Instantly share code, notes, and snippets.

@adobito
Created March 4, 2016 01:44
Show Gist options
  • Save adobito/8ba6962058c8b836eefa to your computer and use it in GitHub Desktop.
Save adobito/8ba6962058c8b836eefa to your computer and use it in GitHub Desktop.
doesn't work
[ec2-user@ip-10-185-95-31 ~]$ sudo tcpdump port 80
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
01:41:10.033577 IP 10.185.95.31.58351 > 110.45.191.11.http: Flags [S], seq 2655901366, win 26883, options [mss 8961,sackOK,TS val 115147 ecr 0,nop,wscale 7], length 0
01:41:11.033370 IP 10.185.95.31.58351 > 110.45.191.11.http: Flags [S], seq 2655901366, win 26883, options [mss 8961,sackOK,TS val 115397 ecr 0,nop,wscale 7], length 0
01:41:13.037343 IP 10.185.95.31.58351 > 110.45.191.11.http: Flags [S], seq 2655901366, win 26883, options [mss 8961,sackOK,TS val 115898 ecr 0,nop,wscale 7], length 0
01:41:17.045337 IP 10.185.95.31.58351 > 110.45.191.11.http: Flags [S], seq 2655901366, win 26883, options [mss 8961,sackOK,TS val 116900 ecr 0,nop,wscale 7], length 0
01:41:25.061342 IP 10.185.95.31.58351 > 110.45.191.11.http: Flags [S], seq 2655901366, win 26883, options [mss 8961,sackOK,TS val 118904 ecr 0,nop,wscale 7], length 0
01:41:41.093342 IP 10.185.95.31.58351 > 110.45.191.11.http: Flags [S], seq 2655901366, win 26883, options [mss 8961,sackOK,TS val 122912 ecr 0,nop,wscale 7], length 0
01:42:13.157346 IP 10.185.95.31.58351 > 110.45.191.11.http: Flags [S], seq 2655901366, win 26883, options [mss 8961,sackOK,TS val 130928 ecr 0,nop,wscale 7], length 0
works:
[ec2-user@ip-10-185-92-48 ~]$ sudo tcpdump port 80
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
01:41:13.006961 IP 10.185.92.48.34879 > 110.45.191.11.http: Flags [S], seq 3985734260, win 26883, options [mss 8961,sackOK,TS val 6878 ecr 0,nop,wscale 7], length 0
01:41:13.045378 IP 110.45.191.11.http > 10.185.92.48.34879: Flags [S.], seq 2906068963, ack 3985734261, win 26883, options [mss 1460,nop,wscale 0,nop,nop,TS val 1056748113 ecr 6878,sackOK,eol], length 0
01:41:13.045398 IP 10.185.92.48.34879 > 110.45.191.11.http: Flags [.], ack 1, win 211, options [nop,nop,TS val 6888 ecr 1056748113], length 0
01:41:13.045434 IP 10.185.92.48.34879 > 110.45.191.11.http: Flags [P.], seq 1:95, ack 1, win 211, options [nop,nop,TS val 6888 ecr 1056748113], length 94
01:41:13.085038 IP 110.45.191.11.http > 10.185.92.48.34879: Flags [P.], seq 1:635, ack 95, win 26789, options [nop,nop,TS val 1056748152 ecr 6888], length 634
01:41:13.085052 IP 10.185.92.48.34879 > 110.45.191.11.http: Flags [.], ack 635, win 220, options [nop,nop,TS val 6897 ecr 1056748152], length 0
01:41:13.085054 IP 110.45.191.11.http > 10.185.92.48.34879: Flags [F.], seq 635, ack 95, win 26789, options [nop,nop,TS val 1056748152 ecr 6888], length 0
01:41:13.085190 IP 10.185.92.48.34879 > 110.45.191.11.http: Flags [F.], seq 95, ack 636, win 220, options [nop,nop,TS val 6898 ecr 1056748152], length 0
01:41:13.123525 IP 110.45.191.11.http > 10.185.92.48.34879: Flags [.], ack 96, win 26788, options [nop,nop,TS val 1056748191 ecr 6898], length 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment