Skip to content

Instantly share code, notes, and snippets.

@imlibra
Created Sep 17, 2021
Embed
What would you like to do?
tcpdump: listening on pppoe-wan, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
02:37:52.320340 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 64)
114.246.207.139.62300 > 17.142.169.199.443: Flags [S], cksum 0x6261 (correct), seq 1938751972, win 65535, options [mss 1452,nop,wscale 6,nop,nop,TS val 2178083437 ecr 0,sackOK,eol], length 0
02:37:52.503870 IP (tos 0x0, ttl 235, id 51095, offset 0, flags [DF], proto TCP (6), length 52)
17.142.169.199.443 > 114.246.207.139.62300: Flags [S.], cksum 0x80cf (correct), seq 3417807404, ack 1938751973, win 8190, options [mss 1440,nop,wscale 7,nop,nop,sackOK], length 0
02:37:52.508169 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [.], cksum 0xd18b (correct), seq 1, ack 1, win 4096, length 0
02:37:52.508317 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 557)
114.246.207.139.62300 > 17.142.169.199.443: Flags [P.], cksum 0xd181 (correct), seq 1:518, ack 1, win 4096, length 517
02:37:52.693414 IP (tos 0x0, ttl 235, id 51096, offset 0, flags [DF], proto TCP (6), length 40)
17.142.169.199.443 > 114.246.207.139.62300: Flags [.], cksum 0xde78 (correct), seq 1, ack 518, win 270, length 0
02:37:52.693561 IP (tos 0x0, ttl 235, id 51098, offset 0, flags [DF], proto TCP (6), length 1480)
17.142.169.199.443 > 114.246.207.139.62300: Flags [P.], cksum 0xcfa8 (correct), seq 1:1441, ack 518, win 270, length 1440
02:37:52.693565 IP (tos 0x0, ttl 235, id 51100, offset 0, flags [DF], proto TCP (6), length 1480)
17.142.169.199.443 > 114.246.207.139.62300: Flags [P.], cksum 0xcce5 (correct), seq 1441:2881, ack 518, win 270, length 1440
02:37:52.696291 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [.], cksum 0xc473 (correct), seq 518, ack 2881, win 4051, length 0
02:37:52.696387 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [.], cksum 0xc446 (correct), seq 518, ack 2881, win 4096, length 0
02:37:52.879060 IP (tos 0x0, ttl 235, id 51102, offset 0, flags [DF], proto TCP (6), length 414)
17.142.169.199.443 > 114.246.207.139.62300: Flags [P.], cksum 0xdfbf (correct), seq 2881:3255, ack 518, win 270, length 374
02:37:52.882890 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [.], cksum 0xc2d6 (correct), seq 518, ack 3255, win 4090, length 0
02:37:52.898092 IP (tos 0x0, ttl 235, id 51102, offset 0, flags [DF], proto TCP (6), length 414)
17.142.169.199.443 > 114.246.207.139.62300: Flags [P.], cksum 0xdfbf (correct), seq 2881:3255, ack 518, win 270, length 374
02:37:52.899018 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 358)
114.246.207.139.62300 > 17.142.169.199.443: Flags [P.], cksum 0x4bc3 (correct), seq 518:836, ack 3255, win 4096, length 318
02:37:52.900609 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62300 > 17.142.169.199.443: Flags [.], cksum 0xa7ba (correct), seq 836, ack 3255, win 4096, options [nop,nop,sack 1 {2881:3255}], length 0
02:37:53.083261 IP (tos 0x0, ttl 235, id 51107, offset 0, flags [DF], proto TCP (6), length 40)
17.142.169.199.443 > 114.246.207.139.62300: Flags [.], cksum 0xd086 (correct), seq 3255, ack 836, win 268, length 0
02:37:53.084930 IP (tos 0x0, ttl 235, id 51109, offset 0, flags [DF], proto TCP (6), length 91)
17.142.169.199.443 > 114.246.207.139.62300: Flags [P.], cksum 0x507f (correct), seq 3255:3306, ack 836, win 268, length 51
02:37:53.088636 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [.], cksum 0xc160 (correct), seq 836, ack 3306, win 4095, length 0
02:37:53.092838 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 339)
114.246.207.139.62300 > 17.142.169.199.443: Flags [P.], cksum 0x864d (correct), seq 836:1135, ack 3306, win 4096, length 299
02:37:53.094409 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 383)
114.246.207.139.62300 > 17.142.169.199.443: Flags [P.], cksum 0xd1bc (correct), seq 1135:1478, ack 3306, win 4096, length 343
02:37:53.277136 IP (tos 0x0, ttl 235, id 51110, offset 0, flags [DF], proto TCP (6), length 40)
17.142.169.199.443 > 114.246.207.139.62300: Flags [.], cksum 0xcf2b (correct), seq 3306, ack 1135, win 265, length 0
02:37:53.278142 IP (tos 0x0, ttl 235, id 51111, offset 0, flags [DF], proto TCP (6), length 40)
17.142.169.199.443 > 114.246.207.139.62300: Flags [.], cksum 0x4eed (correct), seq 3306, ack 1478, win 32752, length 0
02:37:53.278689 IP (tos 0x0, ttl 235, id 51113, offset 0, flags [DF], proto TCP (6), length 231)
17.142.169.199.443 > 114.246.207.139.62300: Flags [P.], cksum 0x064c (correct), seq 3306:3497, ack 1478, win 32757, length 191
02:37:53.281951 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [.], cksum 0xbe21 (correct), seq 1478, ack 3497, win 4093, length 0
02:37:53.283494 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 71)
114.246.207.139.62300 > 17.142.169.199.443: Flags [P.], cksum 0xd7a3 (correct), seq 1478:1509, ack 3497, win 4096, length 31
02:37:53.284801 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [F.], cksum 0xbdfe (correct), seq 1509, ack 3497, win 4096, length 0
02:37:53.465095 IP (tos 0x0, ttl 235, id 51122, offset 0, flags [DF], proto TCP (6), length 71)
17.142.169.199.443 > 114.246.207.139.62300: Flags [F.], cksum 0x993b (correct), seq 3497:3528, ack 1478, win 319, length 31
02:37:53.466674 IP (tos 0x0, ttl 235, id 51123, offset 0, flags [DF], proto TCP (6), length 40)
17.142.169.199.443 > 114.246.207.139.62300: Flags [F.], cksum 0xcca0 (correct), seq 3528, ack 1509, win 319, length 0
02:37:53.467817 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [R], cksum 0x41b8 (correct), seq 1938753450, win 0, length 0
02:37:53.468238 IP (tos 0x0, ttl 235, id 51124, offset 0, flags [DF], proto TCP (6), length 40)
17.142.169.199.443 > 114.246.207.139.62300: Flags [.], cksum 0xcc9f (correct), seq 3529, ack 1510, win 319, length 0
02:37:53.468979 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [R], cksum 0x4199 (correct), seq 1938753481, win 0, length 0
02:37:53.470629 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62300 > 17.142.169.199.443: Flags [R], cksum 0x4198 (correct), seq 1938753482, win 0, length 0
02:38:06.888830 IP (tos 0x0, ttl 215, id 6614, offset 0, flags [DF], proto TCP (6), length 283)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62266: Flags [P.], cksum 0x3d03 (correct), seq 2651964002:2651964233, ack 4258452122, win 115, options [nop,nop,TS val 757067567 ecr 1555340659], length 231
02:38:06.908041 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62266 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [.], cksum 0xd27f (correct), seq 1, ack 231, win 2044, options [nop,nop,TS val 1555631348 ecr 757067567], length 0
02:38:06.913490 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 83)
114.246.207.139.62266 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [P.], cksum 0x0e5a (correct), seq 1:32, ack 231, win 2048, options [nop,nop,TS val 1555631353 ecr 757067567], length 31
02:38:06.914838 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62266 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [F.], cksum 0xd256 (correct), seq 32, ack 231, win 2048, options [nop,nop,TS val 1555631353 ecr 757067567], length 0
02:38:07.199342 IP (tos 0x0, ttl 215, id 6615, offset 0, flags [DF], proto TCP (6), length 52)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62266: Flags [.], cksum 0xd8ad (correct), seq 231, ack 32, win 115, options [nop,nop,TS val 757067878 ecr 1555631353], length 0
02:38:07.199858 IP (tos 0x0, ttl 215, id 6617, offset 0, flags [DF], proto TCP (6), length 52)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62266: Flags [F.], cksum 0xd88d (correct), seq 262, ack 32, win 115, options [nop,nop,TS val 757067878 ecr 1555631353], length 0
02:38:07.199864 IP (tos 0x0, ttl 215, id 6616, offset 0, flags [DF], proto TCP (6), length 83)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62266: Flags [P.], cksum 0x8e45 (correct), seq 231:262, ack 32, win 115, options [nop,nop,TS val 757067878 ecr 1555631353], length 31
02:38:07.200061 IP (tos 0x0, ttl 215, id 6618, offset 0, flags [DF], proto TCP (6), length 52)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62266: Flags [.], cksum 0xd88c (correct), seq 263, ack 33, win 115, options [nop,nop,TS val 757067878 ecr 1555631353], length 0
02:38:07.219344 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 64)
114.246.207.139.62266 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [F.], cksum 0xd6e2 (correct), seq 32, ack 231, win 2048, options [nop,nop,TS val 1555631657 ecr 757067878,nop,nop,sack 1 {262:263}], length 0
02:38:07.219447 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62266 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [R], cksum 0xfad7 (correct), seq 4258452153, win 0, length 0
02:38:07.219511 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62266 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [R], cksum 0xfad6 (correct), seq 4258452154, win 0, length 0
02:38:07.504919 IP (tos 0x0, ttl 215, id 6619, offset 0, flags [DF], proto TCP (6), length 64)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62266: Flags [.], cksum 0xfef9 (correct), seq 263, ack 33, win 115, options [nop,nop,TS val 757068183 ecr 1555631657,nop,nop,sack 1 {32:33}], length 0
02:38:07.507798 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62266 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [R], cksum 0xfad6 (correct), seq 4258452154, win 0, length 0
02:38:08.982146 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 64)
114.246.207.139.62301 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [S], cksum 0x4a5f (correct), seq 1999596552, win 65535, options [mss 1452,nop,wscale 6,nop,nop,TS val 1196612987 ecr 0,sackOK,eol], length 0
02:38:09.272312 IP (tos 0x0, ttl 215, id 0, offset 0, flags [DF], proto TCP (6), length 60)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62301: Flags [S.], cksum 0x6653 (correct), seq 1087907231, ack 1999596553, win 26847, options [mss 1460,sackOK,TS val 757069951 ecr 1196612987,nop,wscale 8], length 0
02:38:09.366532 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62301 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [.], cksum 0xf46b (correct), seq 1, ack 1, win 2070, options [nop,nop,TS val 1196613369 ecr 757069951], length 0
02:38:09.367059 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 569)
114.246.207.139.62301 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [P.], cksum 0xede2 (correct), seq 1:518, ack 1, win 2070, options [nop,nop,TS val 1196613370 ecr 757069951], length 517
02:38:09.658575 IP (tos 0x0, ttl 215, id 57244, offset 0, flags [DF], proto TCP (6), length 52)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62301: Flags [.], cksum 0xf88b (correct), seq 1, ack 518, win 110, options [nop,nop,TS val 757070337 ecr 1196613370], length 0
02:38:09.659108 IP (tos 0x0, ttl 215, id 57245, offset 0, flags [DF], proto TCP (6), length 1492)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62301: Flags [.], cksum 0x9b54 (correct), seq 1:1441, ack 518, win 110, options [nop,nop,TS val 757070337 ecr 1196613370], length 1440
02:38:09.659114 IP (tos 0x0, ttl 215, id 57246, offset 0, flags [DF], proto TCP (6), length 1492)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62301: Flags [.], cksum 0x76eb (correct), seq 1441:2881, ack 518, win 110, options [nop,nop,TS val 757070337 ecr 1196613370], length 1440
02:38:09.659117 IP (tos 0x0, ttl 215, id 57247, offset 0, flags [DF], proto TCP (6), length 1268)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62301: Flags [P.], cksum 0x0bfd (correct), seq 2881:4097, ack 518, win 110, options [nop,nop,TS val 757070337 ecr 1196613370], length 1216
02:38:09.659886 IP (tos 0x0, ttl 215, id 57248, offset 0, flags [DF], proto TCP (6), length 1374)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62301: Flags [P.], cksum 0xe735 (correct), seq 4097:5419, ack 518, win 110, options [nop,nop,TS val 757070338 ecr 1196613370], length 1322
02:38:09.674599 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62301 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [.], cksum 0xdad9 (correct), seq 518, ack 5419, win 1985, options [nop,nop,TS val 1196613678 ecr 757070338], length 0
02:38:09.674695 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62301 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [.], cksum 0xda9a (correct), seq 518, ack 5419, win 2048, options [nop,nop,TS val 1196613678 ecr 757070338], length 0
02:38:09.701848 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 178)
114.246.207.139.62301 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [P.], cksum 0xac73 (correct), seq 518:644, ack 5419, win 2048, options [nop,nop,TS val 1196613706 ecr 757070338], length 126
02:38:09.992272 IP (tos 0x0, ttl 215, id 57249, offset 0, flags [DF], proto TCP (6), length 103)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62301: Flags [P.], cksum 0xf321 (correct), seq 5419:5470, ack 644, win 110, options [nop,nop,TS val 757070671 ecr 1196613706], length 51
02:38:09.995540 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62301 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [.], cksum 0xd75d (correct), seq 644, ack 5470, win 2047, options [nop,nop,TS val 1196613998 ecr 757070671], length 0
02:38:09.996775 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 786)
114.246.207.139.62301 > ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443: Flags [P.], cksum 0xbfb3 (correct), seq 644:1378, ack 5470, win 2048, options [nop,nop,TS val 1196614000 ecr 757070671], length 734
02:38:10.328893 IP (tos 0x0, ttl 215, id 57250, offset 0, flags [DF], proto TCP (6), length 52)
ec2-34-254-138-6.eu-west-1.compute.amazonaws.com.443 > 114.246.207.139.62301: Flags [.], cksum 0xdab9 (correct), seq 5470, ack 1378, win 115, options [nop,nop,TS val 757071007 ecr 1196614000], length 0
02:38:14.127766 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 79)
114.246.207.139.62298 > 221.203.223.117.443: Flags [P.], cksum 0xfdf0 (correct), seq 3862437343:3862437382, ack 3130589692, win 4096, length 39
02:38:14.139680 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 64)
114.246.207.139.62298 > 221.203.223.117.443: Flags [P.], cksum 0x9287 (correct), seq 39:63, ack 1, win 4096, length 24
02:38:14.139778 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62298 > 221.203.223.117.443: Flags [F.], cksum 0xea0d (correct), seq 63, ack 1, win 4096, length 0
02:38:14.141843 IP (tos 0x0, ttl 57, id 29284, offset 0, flags [DF], proto TCP (6), length 40)
221.203.223.117.443 > 114.246.207.139.62298: Flags [.], cksum 0xf9e4 (correct), seq 1, ack 39, win 66, length 0
02:38:14.153569 IP (tos 0x0, ttl 57, id 29285, offset 0, flags [DF], proto TCP (6), length 40)
221.203.223.117.443 > 114.246.207.139.62298: Flags [.], cksum 0xf9cc (correct), seq 1, ack 63, win 66, length 0
02:38:14.158973 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 83)
114.246.207.139.62530 > 39.102.96.186.443: Flags [P.], cksum 0x86ea (correct), seq 2575080888:2575080919, ack 1194201431, win 2070, options [nop,nop,TS val 954747958 ecr 2102850853], length 31
02:38:14.159077 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62530 > 39.102.96.186.443: Flags [F.], cksum 0x2692 (correct), seq 31, ack 1, win 2070, options [nop,nop,TS val 954747958 ecr 2102850853], length 0
02:38:14.159577 IP (tos 0x0, ttl 57, id 29286, offset 0, flags [DF], proto TCP (6), length 40)
221.203.223.117.443 > 114.246.207.139.62298: Flags [F.], cksum 0xf9ca (correct), seq 1, ack 64, win 66, length 0
02:38:14.162839 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 40)
114.246.207.139.62298 > 221.203.223.117.443: Flags [.], cksum 0xea0c (correct), seq 64, ack 2, win 4096, length 0
02:38:14.166055 IP (tos 0x0, ttl 56, id 62874, offset 0, flags [DF], proto TCP (6), length 52)
39.102.96.186.443 > 114.246.207.139.62530: Flags [.], cksum 0x9f27 (correct), seq 1, ack 31, win 61, options [nop,nop,TS val 2102887529 ecr 954747958], length 0
02:38:14.167229 IP (tos 0x0, ttl 56, id 62875, offset 0, flags [DF], proto TCP (6), length 52)
39.102.96.186.443 > 114.246.207.139.62530: Flags [F.], cksum 0x9f24 (correct), seq 1, ack 32, win 61, options [nop,nop,TS val 2102887530 ecr 954747958], length 0
02:38:14.170052 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6), length 52)
114.246.207.139.62530 > 39.102.96.186.443: Flags [.], cksum 0x9740 (correct), seq 32, ack 2, win 2070, options [nop,nop,TS val 954747969 ecr 2102887530], length 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment