Skip to content

Instantly share code, notes, and snippets.

@ihcsim
Last active February 1, 2023 17:53
Show Gist options
  • Save ihcsim/e9439b614f798a2026056ef412d7e45f to your computer and use it in GitHub Desktop.
Save ihcsim/e9439b614f798a2026056ef412d7e45f to your computer and use it in GitHub Desktop.
ip netns exec vnet0 tcpdump -X -i veth0 -n tcp -l
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on veth0, link-type EN10MB (Ethernet), capture size 262144 bytes
14:32:23.780478 IP 10.0.2.0.42870 > 10.0.1.0.7096: Flags [F.], seq 538500124, ack 864375556, win 229, options [nop,nop,TS val 3753880662 ecr 2384594272], length 0
0x0000: 4500 0034 cadb 4000 4006 58e9 0a00 0200 E..4..@.@.X.....
0x0010: 0a00 0100 a776 1bb8 2018 dc1c 3385 5304 .....v......3.S.
0x0020: 8011 00e5 1726 0000 0101 080a dfbf ac56 .....&.........V
0x0030: 8e22 0560 .".`
14:32:23.780572 IP 10.0.1.0.7096 > 10.0.2.0.42870: Flags [F.], seq 1, ack 1, win 227, options [nop,nop,TS val 2384621298 ecr 3753880662], length 0
0x0000: 4500 0034 45d9 4000 4006 ddeb 0a00 0100 E..4E.@.@.......
0x0010: 0a00 0200 1bb8 a776 3385 5304 2018 dc1d .......v3.S.....
0x0020: 8011 00e3 1726 0000 0101 080a 8e22 6ef2 .....&......."n.
0x0030: dfbf ac56 ...V
14:32:23.780608 IP 10.0.2.0.42870 > 10.0.1.0.7096: Flags [.], ack 2, win 229, options [nop,nop,TS val 3753880662 ecr 2384621298], length 0
0x0000: 4500 0034 cadc 4000 4006 58e8 0a00 0200 E..4..@.@.X.....
0x0010: 0a00 0100 a776 1bb8 2018 dc1d 3385 5305 .....v......3.S.
0x0020: 8010 00e5 1726 0000 0101 080a dfbf ac56 .....&.........V
0x0030: 8e22 6ef2 ."n.
14:32:30.066788 IP 10.0.2.0.43354 > 10.0.1.0.7096: Flags [S], seq 4039524796, win 29200, options [mss 1460,sackOK,TS val 3753886949 ecr 0,nop,wscale 7], length 0
0x0000: 4500 003c 7d82 4000 4006 a63a 0a00 0200 E..<}.@.@..:....
0x0010: 0a00 0100 a95a 1bb8 f0c6 41bc 0000 0000 .....Z....A.....
0x0020: a002 7210 172e 0000 0204 05b4 0402 080a ..r.............
0x0030: dfbf c4e5 0000 0000 0103 0307 ............
14:32:30.066834 IP 10.0.1.0.7096 > 10.0.2.0.43354: Flags [S.], seq 3900645303, ack 4039524797, win 28960, options [mss 1460,sackOK,TS val 2384627585 ecr 3753886949,nop,wscale 7], length 0
0x0000: 4500 003c 0000 4000 4006 23bd 0a00 0100 E..<..@.@.#.....
0x0010: 0a00 0200 1bb8 a95a e87f 1fb7 f0c6 41bd .......Z......A.
0x0020: a012 7120 172e 0000 0204 05b4 0402 080a ..q.............
0x0030: 8e22 8781 dfbf c4e5 0103 0307 ."..........
14:32:30.066865 IP 10.0.2.0.43354 > 10.0.1.0.7096: Flags [.], ack 1, win 229, options [nop,nop,TS val 3753886949 ecr 2384627585], length 0
0x0000: 4500 0034 7d83 4000 4006 a641 0a00 0200 E..4}.@.@..A....
0x0010: 0a00 0100 a95a 1bb8 f0c6 41bd e87f 1fb8 .....Z....A.....
0x0020: 8010 00e5 1726 0000 0101 080a dfbf c4e5 .....&..........
0x0030: 8e22 8781 ."..
14:32:53.273525 IP 10.0.2.0.43354 > 10.0.1.0.7096: Flags [P.], seq 1:24, ack 1, win 229, options [nop,nop,TS val 3753910156 ecr 2384627585], length 23
0x0000: 4500 004b 7d84 4000 4006 a629 0a00 0200 E..K}.@.@..)....
0x0010: 0a00 0100 a95a 1bb8 f0c6 41bd e87f 1fb8 .....Z....A.....
0x0020: 8018 00e5 173d 0000 0101 080a dfc0 1f8c .....=..........
0x0030: 8e22 8781 7468 6973 2069 7320 6120 7465 ."..this.is.a.te
0x0040: 7374 206d 6573 7361 6765 0a st.message.
14:32:53.273547 IP 10.0.1.0.7096 > 10.0.2.0.43354: Flags [.], ack 24, win 227, options [nop,nop,TS val 2384650792 ecr 3753910156], length 0
0x0000: 4500 0034 2386 4000 4006 003f 0a00 0100 E..4#.@.@..?....
0x0010: 0a00 0200 1bb8 a95a e87f 1fb8 f0c6 41d4 .......Z......A.
0x0020: 8010 00e3 1726 0000 0101 080a 8e22 e228 .....&.......".(
0x0030: dfc0 1f8c ....
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment