Skip to content

Instantly share code, notes, and snippets.

@gabrtv

gabrtv/gist:18eadbb23f6337207ece

Created May 1, 2014 20:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save gabrtv/18eadbb23f6337207ece to your computer and use it in GitHub Desktop.
Save gabrtv/18eadbb23f6337207ece to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
core@deis-1 ~ $ nse 3254
groups: cannot find name for group ID 11
root@b4ffc49bf4e0:/# tcpdump -n
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
20:03:54.109016 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [S], seq 423731768, win 29200, options [mss 1460,sackOK,TS val 14774827 ecr 0,nop,wscale 7], length 0
20:03:55.118781 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [S], seq 423731768, win 29200, options [mss 1460,sackOK,TS val 14775836 ecr 0,nop,wscale 7], length 0
20:03:57.122025 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [S], seq 423731768, win 29200, options [mss 1460,sackOK,TS val 14777840 ecr 0,nop,wscale 7], length 0
20:03:59.122747 ARP, Request who-has 10.1.0.9 tell 10.1.42.1, length 28
20:04:00.124041 ARP, Request who-has 10.1.0.9 tell 10.1.42.1, length 28
20:04:01.126320 ARP, Request who-has 10.1.0.9 tell 10.1.42.1, length 28
20:04:01.129936 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [S], seq 423731768, win 29200, options [mss 1460,sackOK,TS val 14781848 ecr 0,nop,wscale 7], length 0
20:04:09.139513 ARP, Request who-has 10.1.0.9 tell 10.1.42.1, length 28
20:04:09.139597 ARP, Reply 10.1.0.9 is-at ca:91:4a:ec:c5:37, length 28
20:04:09.139629 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [S], seq 423731768, win 29200, options [mss 1460,sackOK,TS val 14789857 ecr 0,nop,wscale 7], length 0
20:04:09.139662 IP 10.1.0.9.5000 > 10.1.42.1.33654: Flags [S.], seq 7081632, ack 423731769, win 28960, options [mss 1460,sackOK,TS val 14789857 ecr 14789857,nop,wscale 7], length 0
20:04:09.139728 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [.], ack 1, win 229, options [nop,nop,TS val 14789857 ecr 14789857], length 0
20:04:09.139937 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [P.], seq 1:80, ack 1, win 229, options [nop,nop,TS val 14789858 ecr 14789857], length 79
20:04:09.139951 IP 10.1.0.9.5000 > 10.1.42.1.33654: Flags [.], ack 80, win 227, options [nop,nop,TS val 14789858 ecr 14789858], length 0
20:04:09.147475 IP 10.1.0.9.57419 > 10.0.2.3.53: 59295+ PTR? 1.42.1.10.in-addr.arpa. (40)
20:04:09.150562 IP 10.0.2.3.53 > 10.1.0.9.57419: 59295 NXDomain*- 0/0/0 (40)
20:04:09.151602 IP 10.1.0.9.32902 > 10.0.2.3.53: 36408+ PTR? 1.42.1.10.in-addr.arpa. (40)
20:04:09.152122 IP 10.0.2.3.53 > 10.1.0.9.32902: 36408 NXDomain*- 0/0/0 (40)
20:04:09.164631 IP 10.1.0.9.5000 > 10.1.42.1.33654: Flags [P.], seq 1:283, ack 80, win 227, options [nop,nop,TS val 14789882 ecr 14789858], length 282
20:04:09.164637 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [.], ack 283, win 237, options [nop,nop,TS val 14789882 ecr 14789882], length 0
20:04:09.165065 IP 10.1.0.9.5000 > 10.1.42.1.33654: Flags [P.], seq 283:300, ack 80, win 227, options [nop,nop,TS val 14789883 ecr 14789882], length 17
20:04:09.165083 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [.], ack 300, win 237, options [nop,nop,TS val 14789883 ecr 14789883], length 0
20:04:09.168513 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [F.], seq 80, ack 300, win 237, options [nop,nop,TS val 14789886 ecr 14789883], length 0
20:04:09.169232 IP 10.1.0.9.5000 > 10.1.42.1.33654: Flags [F.], seq 300, ack 81, win 227, options [nop,nop,TS val 14789887 ecr 14789886], length 0
20:04:09.169320 IP 10.1.42.1.33654 > 10.1.0.9.5000: Flags [.], ack 301, win 237, options [nop,nop,TS val 14789887 ecr 14789887], length 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment