Skip to content

Instantly share code, notes, and snippets.

@hco

hco/tcpdump Secret

Created October 19, 2015 09:17
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hco/fb78d48f6f8e1e91b408 to your computer and use it in GitHub Desktop.
Save hco/fb78d48f6f8e1e91b408 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tcpdump
# output on compute host, command: tcpdump -n -vvv -i any host 169.254.169.254 or port 8775
## within instance: curl http://169.254.169.254:80/ - times out
10:45:00.594888 IP (tos 0x0, ttl 64, id 36684, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.161.38530 > 169.254.169.254.http: Flags [S], cksum 0xee75 (incorrect -> 0x6e10), seq 2928538351, win 13600, options [mss 1360,sackOK,TS val 163486 ecr 0,nop,wscale 3], length 0
10:45:00.594888 IP (tos 0x0, ttl 64, id 36684, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.161.38530 > 192.168.217.10.8775: Flags [S], cksum 0x342c (incorrect -> 0x0663), seq 2928538351, win 13600, options [mss 1360,sackOK,TS val 163486 ecr 0,nop,wscale 3], length 0
## within instance: curl http://192.168.217.10:8775) - working
10:45:07.364685 IP (tos 0x0, ttl 64, id 48065, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.161.48870 > 192.168.217.10.8775: Flags [S], cksum 0x342c (incorrect -> 0xb70f), seq 2195013371, win 13600, options [mss 1360,sackOK,TS val 165178 ecr 0,nop,wscale 3], length 0
10:45:07.364716 IP (tos 0x0, ttl 64, id 48065, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.161.48870 > 192.168.217.10.8775: Flags [S], cksum 0x342c (incorrect -> 0xb70f), seq 2195013371, win 13600, options [mss 1360,sackOK,TS val 165178 ecr 0,nop,wscale 3], length 0
10:45:07.364718 IP (tos 0x0, ttl 64, id 48065, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.161.48870 > 192.168.217.10.8775: Flags [S], cksum 0x342c (incorrect -> 0xb70f), seq 2195013371, win 13600, options [mss 1360,sackOK,TS val 165178 ecr 0,nop,wscale 3], length 0
10:45:07.364800 IP (tos 0x0, ttl 64, id 48065, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.161.48870 > 192.168.217.10.8775: Flags [S], cksum 0xb70f (correct), seq 2195013371, win 13600, options [mss 1360,sackOK,TS val 165178 ecr 0,nop,wscale 3], length 0
10:45:07.365239 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.10.8775 > 192.168.217.161.48870: Flags [S.], cksum 0x155e (correct), seq 3078759597, ack 2195013372, win 14480, options [mss 1460,sackOK,TS val 63487440 ecr 165178,nop,wscale 7], length 0
10:45:07.365282 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.10.8775 > 192.168.217.161.48870: Flags [S.], cksum 0x155e (correct), seq 3078759597, ack 2195013372, win 14480, options [mss 1460,sackOK,TS val 63487440 ecr 165178,nop,wscale 7], length 0
10:45:07.365287 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.10.8775 > 192.168.217.161.48870: Flags [S.], cksum 0x155e (correct), seq 3078759597, ack 2195013372, win 14480, options [mss 1460,sackOK,TS val 63487440 ecr 165178,nop,wscale 7], length 0
10:45:07.365327 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
192.168.217.10.8775 > 192.168.217.161.48870: Flags [S.], cksum 0x155e (correct), seq 3078759597, ack 2195013372, win 14480, options [mss 1460,sackOK,TS val 63487440 ecr 165178,nop,wscale 7], length 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment