Skip to content

Instantly share code, notes, and snippets.

@mpapec
Created June 17, 2014 07:16
Show Gist options
  • Save mpapec/9140effa9e2089028799 to your computer and use it in GitHub Desktop.
Save mpapec/9140effa9e2089028799 to your computer and use it in GitHub Desktop.
tcpdump -vv -x -X -s 1500 -i eth0 'port 23'
10:11:17.778693 IP (tos 0x0, ttl 64, id 63881, offset 0, flags [DF], proto TCP (6), length 60)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [S], cksum 0x2125 (incorrect -> 0x9178), seq 2950613336, win 14600, options [mss 1460,sackOK,TS val 20066513 ecr 0,nop,wscale 3], length 0
0x0000: 4500 003c f989 4000 4006 203c 0a01 0676 E..<..@.@..<...v
0x0010: 0a01 067f b13b 0017 afde c958 0000 0000 .....;.....X....
0x0020: a002 3908 2125 0000 0204 05b4 0402 080a ..9.!%..........
0x0030: 0132 30d1 0000 0000 0103 0303 .20.........
10:11:17.779132 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [S.], cksum 0x5a67 (correct), seq 3752203257, ack 2950613337, win 5792, options [mss 1460,sackOK,TS val 41444178 ecr 20066513,nop,wscale 1], length 0
0x0000: 4500 003c 0000 4000 4006 19c6 0a01 067f E..<..@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 13f9 afde c959 ...v...;.......Y
0x0020: a012 16a0 5a67 0000 0204 05b4 0402 080a ....Zg..........
0x0030: 0278 6352 0132 30d1 0103 0301 .xcR.20.....
10:11:17.779156 IP (tos 0x0, ttl 64, id 63882, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [.], cksum 0x211d (incorrect -> 0x98ac), seq 1, ack 1, win 1825, options [nop,nop,TS val 20066513 ecr 41444178], length 0
0x0000: 4500 0034 f98a 4000 4006 2043 0a01 0676 E..4..@.@..C...v
0x0010: 0a01 067f b13b 0017 afde c959 dfa6 13fa .....;.....Y....
0x0020: 8010 0721 211d 0000 0101 080a 0132 30d1 ...!!........20.
0x0030: 0278 6352 .xcR
10:11:17.780387 IP (tos 0x10, ttl 64, id 28840, offset 0, flags [DF], proto TCP (6), length 64)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0x5d26 (correct), seq 1:13, ack 1, win 2896, options [nop,nop,TS val 41444178 ecr 20066513], length 12 [telnet DO TERMINAL TYPE, DO TSPEED, DO XDISPLOC, DO NEW-ENVIRON]
0x0000: 4510 0040 70a8 4000 4006 a909 0a01 067f E..@p.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 13fa afde c959 ...v...;.......Y
0x0020: 8018 0b50 5d26 0000 0101 080a 0278 6352 ...P]&.......xcR
0x0030: 0132 30d1 fffd 18ff fd20 fffd 23ff fd27 .20.........#..'
10:11:17.780409 IP (tos 0x0, ttl 64, id 63883, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [.], cksum 0x211d (incorrect -> 0x989f), seq 1, ack 13, win 1825, options [nop,nop,TS val 20066514 ecr 41444178], length 0
0x0000: 4500 0034 f98b 4000 4006 2042 0a01 0676 E..4..@.@..B...v
0x0010: 0a01 067f b13b 0017 afde c959 dfa6 1406 .....;.....Y....
0x0020: 8010 0721 211d 0000 0101 080a 0132 30d2 ...!!........20.
0x0030: 0278 6352 .xcR
10:11:17.785797 IP (tos 0x0, ttl 64, id 63884, offset 0, flags [DF], proto TCP (6), length 64)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [P.], cksum 0x6349 (correct), seq 1:13, ack 13, win 1825, options [nop,nop,TS val 20066515 ecr 41444178], length 12 [telnet WONT TERMINAL TYPE, WONT TSPEED, WONT XDISPLOC, WONT NEW-ENVIRON]
0x0000: 4500 0040 f98c 4000 4006 2035 0a01 0676 E..@..@.@..5...v
0x0010: 0a01 067f b13b 0017 afde c959 dfa6 1406 .....;.....Y....
0x0020: 8018 0721 6349 0000 0101 080a 0132 30d3 ...!cI.......20.
0x0030: 0278 6352 fffc 18ff fc20 fffc 23ff fc27 .xcR........#..'
10:11:17.786097 IP (tos 0x10, ttl 64, id 28841, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [.], cksum 0x9462 (correct), seq 13, ack 13, win 2896, options [nop,nop,TS val 41444179 ecr 20066515], length 0
0x0000: 4510 0034 70a9 4000 4006 a914 0a01 067f E..4p.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 1406 afde c965 ...v...;.......e
0x0020: 8010 0b50 9462 0000 0101 080a 0278 6353 ...P.b.......xcS
0x0030: 0132 30d3 .20.
10:11:17.786207 IP (tos 0x10, ttl 64, id 28842, offset 0, flags [DF], proto TCP (6), length 67)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0x574d (correct), seq 13:28, ack 13, win 2896, options [nop,nop,TS val 41444179 ecr 20066515], length 15 [telnet WILL SUPPRESS GO AHEAD, DO ECHO, DO NAWS, WILL STATUS, DO LFLOW]
0x0000: 4510 0043 70aa 4000 4006 a904 0a01 067f E..Cp.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 1406 afde c965 ...v...;.......e
0x0020: 8018 0b50 574d 0000 0101 080a 0278 6353 ...PWM.......xcS
0x0030: 0132 30d3 fffb 03ff fd01 fffd 1fff fb05 .20.............
0x0040: fffd 21 ..!
10:11:17.786682 IP (tos 0x0, ttl 64, id 63885, offset 0, flags [DF], proto TCP (6), length 67)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [P.], cksum 0x5a6d (correct), seq 13:28, ack 28, win 1825, options [nop,nop,TS val 20066515 ecr 41444179], length 15 [telnet DO SUPPRESS GO AHEAD, WONT ECHO, WONT NAWS, DO STATUS, WONT LFLOW]
0x0000: 4500 0043 f98d 4000 4006 2031 0a01 0676 E..C..@.@..1...v
0x0010: 0a01 067f b13b 0017 afde c965 dfa6 1415 .....;.....e....
0x0020: 8018 0721 5a6d 0000 0101 080a 0132 30d3 ...!Zm.......20.
0x0030: 0278 6353 fffd 03ff fc01 fffc 1fff fd05 .xcS............
0x0040: fffc 21 ..!
10:11:17.787282 IP (tos 0x10, ttl 64, id 28843, offset 0, flags [DF], proto TCP (6), length 73)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0x06f9 (correct), seq 28:49, ack 28, win 2896, options [nop,nop,TS val 41444179 ecr 20066515], length 21 [telnet WILL ECHO]
0x0000: 4510 0049 70ab 4000 4006 a8fd 0a01 067f E..Ip.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 1415 afde c974 ...v...;.......t
0x0020: 8018 0b50 06f9 0000 0101 080a 0278 6353 ...P.........xcS
0x0030: 0132 30d3 fffb 010d 0a4d 696b 726f 5469 .20......MikroTi
0x0040: 6b20 7635 2e31 380d 0a k.v5.18..
10:11:17.787555 IP (tos 0x0, ttl 64, id 63886, offset 0, flags [DF], proto TCP (6), length 55)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [P.], cksum 0x9755 (correct), seq 28:31, ack 49, win 1825, options [nop,nop,TS val 20066515 ecr 41444179], length 3 [telnet DO ECHO]
0x0000: 4500 0037 f98e 4000 4006 203c 0a01 0676 E..7..@.@..<...v
0x0010: 0a01 067f b13b 0017 afde c974 dfa6 142a .....;.....t...*
0x0020: 8018 0721 9755 0000 0101 080a 0132 30d3 ...!.U.......20.
0x0030: 0278 6353 fffd 01 .xcS...
10:11:17.787899 IP (tos 0x10, ttl 64, id 28844, offset 0, flags [DF], proto TCP (6), length 59)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0x520a (correct), seq 49:56, ack 31, win 2896, options [nop,nop,TS val 41444179 ecr 20066515], length 7
0x0000: 4510 003b 70ac 4000 4006 a90a 0a01 067f E..;p.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 142a afde c977 ...v...;...*...w
0x0020: 8018 0b50 520a 0000 0101 080a 0278 6353 ...PR........xcS
0x0030: 0132 30d3 4c6f 6769 6e3a 20 .20.Login:.
10:11:17.788371 IP (tos 0x0, ttl 64, id 63887, offset 0, flags [DF], proto TCP (6), length 60)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [P.], cksum 0x1df0 (correct), seq 31:39, ack 56, win 1825, options [nop,nop,TS val 20066516 ecr 41444179], length 8
0x0000: 4500 003c f98f 4000 4006 2036 0a01 0676 E..<..@.@..6...v
0x0010: 0a01 067f b13b 0017 afde c977 dfa6 1431 .....;.....w...1
0x0020: 8018 0721 1df0 0000 0101 080a 0132 30d4 ...!.........20.
0x0030: 0278 6353 7573 6572 2b63 740a .xcSuser+ct.
10:11:17.790976 IP (tos 0x10, ttl 64, id 28845, offset 0, flags [DF], proto TCP (6), length 61)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0x0fb4 (correct), seq 56:65, ack 39, win 2896, options [nop,nop,TS val 41444180 ecr 20066516], length 9
0x0000: 4510 003d 70ad 4000 4006 a907 0a01 067f E..=p.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 1431 afde c97f ...v...;...1....
0x0020: 8018 0b50 0fb4 0000 0101 080a 0278 6354 ...P.........xcT
0x0030: 0132 30d4 7573 6572 2b63 740d 0a .20.user+ct..
10:11:17.828542 IP (tos 0x0, ttl 64, id 63888, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [.], cksum 0x211d (incorrect -> 0x9837), seq 39, ack 65, win 1825, options [nop,nop,TS val 20066526 ecr 41444180], length 0
0x0000: 4500 0034 f990 4000 4006 203d 0a01 0676 E..4..@.@..=...v
0x0010: 0a01 067f b13b 0017 afde c97f dfa6 143a .....;.........:
0x0020: 8010 0721 211d 0000 0101 080a 0132 30de ...!!........20.
0x0030: 0278 6354 .xcT
10:11:17.828893 IP (tos 0x10, ttl 64, id 28846, offset 0, flags [DF], proto TCP (6), length 62)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0xac2a (correct), seq 65:75, ack 39, win 2896, options [nop,nop,TS val 41444183 ecr 20066526], length 10
0x0000: 4510 003e 70ae 4000 4006 a905 0a01 067f E..>p.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 143a afde c97f ...v...;...:....
0x0020: 8018 0b50 ac2a 0000 0101 080a 0278 6357 ...P.*.......xcW
0x0030: 0132 30de 5061 7373 776f 7264 3a20 .20.Password:.
10:11:17.828905 IP (tos 0x0, ttl 64, id 63889, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [.], cksum 0x211d (incorrect -> 0x982a), seq 39, ack 75, win 1825, options [nop,nop,TS val 20066526 ecr 41444183], length 0
0x0000: 4500 0034 f991 4000 4006 203c 0a01 0676 E..4..@.@..<...v
0x0010: 0a01 067f b13b 0017 afde c97f dfa6 1444 .....;.........D
0x0020: 8010 0721 211d 0000 0101 080a 0132 30de ...!!........20.
0x0030: 0278 6357 .xcW
10:11:17.829208 IP (tos 0x0, ttl 64, id 63890, offset 0, flags [DF], proto TCP (6), length 57)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [P.], cksum 0x29b7 (correct), seq 39:44, ack 75, win 1825, options [nop,nop,TS val 20066526 ecr 41444183], length 5
0x0000: 4500 0039 f992 4000 4006 2036 0a01 0676 E..9..@.@..6...v
0x0010: 0a01 067f b13b 0017 afde c97f dfa6 1444 .....;.........D
0x0020: 8018 0721 29b7 0000 0101 080a 0132 30de ...!)........20.
0x0030: 0278 6357 3132 3334 0a .xcW1234.
10:11:17.831220 IP (tos 0x10, ttl 64, id 28847, offset 0, flags [DF], proto TCP (6), length 54)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0x86e1 (correct), seq 75:77, ack 44, win 2896, options [nop,nop,TS val 41444184 ecr 20066526], length 2
0x0000: 4510 0036 70af 4000 4006 a90c 0a01 067f E..6p.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 1444 afde c984 ...v...;...D....
0x0020: 8018 0b50 86e1 0000 0101 080a 0278 6358 ...P.........xcX
0x0030: 0132 30de 0d0a .20...
10:11:17.885035 IP (tos 0x0, ttl 64, id 63891, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [.], cksum 0x211d (incorrect -> 0x9814), seq 44, ack 77, win 1825, options [nop,nop,TS val 20066540 ecr 41444184], length 0
0x0000: 4500 0034 f993 4000 4006 203a 0a01 0676 E..4..@.@..:...v
0x0010: 0a01 067f b13b 0017 afde c984 dfa6 1446 .....;.........F
0x0020: 8010 0721 211d 0000 0101 080a 0132 30ec ...!!........20.
0x0030: 0278 6358 .xcX
10:11:17.885282 IP (tos 0x10, ttl 64, id 28848, offset 0, flags [DF], proto TCP (6), length 673)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0x1c68 (correct), seq 77:698, ack 44, win 2896, options [nop,nop,TS val 41444189 ecr 20066540], length 621
0x0000: 4510 02a1 70b0 4000 4006 a6a0 0a01 067f E...p.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 1446 afde c984 ...v...;...F....
0x0020: 8018 0b50 1c68 0000 0101 080a 0278 635d ...P.h.......xc]
0x0030: 0132 30ec 0d00 0d0a 0d00 0d0a 0d00 0d0a .20.............
0x0040: 0d00 0d0a 0d00 0d0a 0d00 0d0a 0d00 0d0a ................
0x0050: 0d0a 0d00 2020 4d4d 4d20 2020 2020 204d ......MMM......M
0x0060: 4d4d 2020 2020 2020 204b 4b4b 2020 2020 MM.......KKK....
0x0070: 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x0080: 2020 2020 2020 5454 5454 5454 5454 5454 ......TTTTTTTTTT
0x0090: 5420 2020 2020 204b 4b4b 0d0a 0d00 2020 T......KKK......
0x00a0: 4d4d 4d4d 2020 2020 4d4d 4d4d 2020 2020 MMMM....MMMM....
0x00b0: 2020 204b 4b4b 2020 2020 2020 2020 2020 ...KKK..........
0x00c0: 2020 2020 2020 2020 2020 2020 2020 2020 ................
0x00d0: 5454 5454 5454 5454 5454 5420 2020 2020 TTTTTTTTTTT.....
0x00e0: 204b 4b4b 0d0a 0d00 2020 4d4d 4d20 4d4d .KKK......MMM.MM
0x00f0: 4d4d 204d 4d4d 2020 4949 4920 204b 4b4b MM.MMM..III..KKK
0x0100: 2020 4b4b 4b20 2052 5252 5252 5220 2020 ..KKK..RRRRRR...
0x0110: 2020 4f4f 4f4f 4f4f 2020 2020 2020 5454 ..OOOOOO......TT
0x0120: 5420 2020 2020 4949 4920 204b 4b4b 2020 T.....III..KKK..
0x0130: 4b4b 4b0d 0a0d 0020 204d 4d4d 2020 4d4d KKK......MMM..MM
0x0140: 2020 4d4d 4d20 2049 4949 2020 4b4b 4b4b ..MMM..III..KKKK
0x0150: 4b20 2020 2020 5252 5220 2052 5252 2020 K.....RRR..RRR..
0x0160: 4f4f 4f20 204f 4f4f 2020 2020 2054 5454 OOO..OOO.....TTT
0x0170: 2020 2020 2049 4949 2020 4b4b 4b4b 4b0d .....III..KKKKK.
0x0180: 0a0d 0020 204d 4d4d 2020 2020 2020 4d4d .....MMM......MM
0x0190: 4d20 2049 4949 2020 4b4b 4b20 4b4b 4b20 M..III..KKK.KKK.
0x01a0: 2020 5252 5252 5252 2020 2020 4f4f 4f20 ..RRRRRR....OOO.
0x01b0: 204f 4f4f 2020 2020 2054 5454 2020 2020 .OOO.....TTT....
0x01c0: 2049 4949 2020 4b4b 4b20 4b4b 4b0d 0a0d .III..KKK.KKK...
0x01d0: 0020 204d 4d4d 2020 2020 2020 4d4d 4d20 ...MMM......MMM.
0x01e0: 2049 4949 2020 4b4b 4b20 204b 4b4b 2020 .III..KKK..KKK..
0x01f0: 5252 5220 2052 5252 2020 204f 4f4f 4f4f RRR..RRR...OOOOO
0x0200: 4f20 2020 2020 2054 5454 2020 2020 2049 O......TTT.....I
0x0210: 4949 2020 4b4b 4b20 204b 4b4b 0d0a 0d00 II..KKK..KKK....
0x0220: 0d0a 0d00 2020 4d69 6b72 6f54 696b 2052 ......MikroTik.R
0x0230: 6f75 7465 724f 5320 352e 3138 2028 6329 outerOS.5.18.(c)
0x0240: 2031 3939 392d 3230 3132 2020 2020 2020 .1999-2012......
0x0250: 2068 7474 703a 2f2f 7777 772e 6d69 6b72 .http://www.mikr
0x0260: 6f74 696b 2e63 6f6d 2f0d 0a0d 000d 0a0d otik.com/.......
0x0270: 001b 5b39 3939 3942 0d00 1b5b 3939 3939 ..[9999B...[9999
0x0280: 420d 000d 000d 001b 5b39 3939 3942 5b75 B.......[9999B[u
0x0290: 7365 7240 4d69 6b72 6f54 696b 315d 203e ser@MikroTik1].>
0x02a0: 20 .
10:11:17.885302 IP (tos 0x0, ttl 64, id 63892, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [.], cksum 0x211d (incorrect -> 0x9506), seq 44, ack 698, win 1981, options [nop,nop,TS val 20066540 ecr 41444189], length 0
0x0000: 4500 0034 f994 4000 4006 2039 0a01 0676 E..4..@.@..9...v
0x0010: 0a01 067f b13b 0017 afde c984 dfa6 16b3 .....;..........
0x0020: 8010 07bd 211d 0000 0101 080a 0132 30ec ....!........20.
0x0030: 0278 635d .xc]
10:11:17.886425 IP (tos 0x0, ttl 64, id 63893, offset 0, flags [DF], proto TCP (6), length 79)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [P.], cksum 0x7608 (correct), seq 44:71, ack 698, win 1981, options [nop,nop,TS val 20066540 ecr 41444189], length 27
0x0000: 4500 004f f995 4000 4006 201d 0a01 0676 E..O..@.@......v
0x0010: 0a01 067f b13b 0017 afde c984 dfa6 16b3 .....;..........
0x0020: 8018 07bd 7608 0000 0101 080a 0132 30ec ....v........20.
0x0030: 0278 635d 2f69 7020 6669 7265 7761 6c6c .xc]/ip.firewall
0x0040: 2066 696c 7465 7220 6578 706f 7274 0a .filter.export.
10:11:17.901813 IP (tos 0x10, ttl 64, id 28849, offset 0, flags [DF], proto TCP (6), length 109)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [P.], cksum 0x289a (correct), seq 698:755, ack 71, win 2896, options [nop,nop,TS val 41444191 ecr 20066540], length 57
0x0000: 4510 006d 70b1 4000 4006 a8d3 0a01 067f E..mp.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 16b3 afde c99f ...v...;........
0x0020: 8018 0b50 289a 0000 0101 080a 0278 635f ...P(........xc_
0x0030: 0132 30ec 0d00 5b75 7365 7240 4d69 6b72 .20...[user@Mikr
0x0040: 6f54 696b 315d 203e 201b 5b4b 1b37 1b5b oTik1].>..[K.7.[
0x0050: 721b 382f 6970 2066 6972 6577 616c 6c20 r.8/ip.firewall.
0x0060: 6669 6c74 6572 2065 7870 6f72 74 filter.export
10:11:17.948593 IP (tos 0x0, ttl 64, id 63894, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [.], cksum 0x211d (incorrect -> 0x94a0), seq 71, ack 755, win 1981, options [nop,nop,TS val 20066556 ecr 41444191], length 0
0x0000: 4500 0034 f996 4000 4006 2037 0a01 0676 E..4..@.@..7...v
0x0010: 0a01 067f b13b 0017 afde c99f dfa6 16ec .....;..........
0x0020: 8010 07bd 211d 0000 0101 080a 0132 30fc ....!........20.
0x0030: 0278 635f .xc_
10:11:24.219246 IP (tos 0x0, ttl 64, id 63895, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [F.], cksum 0x211d (incorrect -> 0x8e80), seq 71, ack 755, win 1981, options [nop,nop,TS val 20068123 ecr 41444191], length 0
0x0000: 4500 0034 f997 4000 4006 2036 0a01 0676 E..4..@.@..6...v
0x0010: 0a01 067f b13b 0017 afde c99f dfa6 16ec .....;..........
0x0020: 8011 07bd 211d 0000 0101 080a 0132 371b ....!........27.
0x0030: 0278 635f .xc_
10:11:24.219666 IP (tos 0x10, ttl 64, id 28850, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.127.telnet > 10.1.6.118.45371: Flags [F.], cksum 0x8874 (correct), seq 755, ack 72, win 2896, options [nop,nop,TS val 41444823 ecr 20068123], length 0
0x0000: 4510 0034 70b2 4000 4006 a90b 0a01 067f E..4p.@.@.......
0x0010: 0a01 0676 0017 b13b dfa6 16ec afde c9a0 ...v...;........
0x0020: 8011 0b50 8874 0000 0101 080a 0278 65d7 ...P.t.......xe.
0x0030: 0132 371b .27.
10:11:24.219704 IP (tos 0x0, ttl 64, id 63896, offset 0, flags [DF], proto TCP (6), length 52)
10.1.6.118.45371 > 10.1.6.127.telnet: Flags [.], cksum 0x211d (incorrect -> 0x8c07), seq 72, ack 756, win 1981, options [nop,nop,TS val 20068123 ecr 41444823], length 0
0x0000: 4500 0034 f998 4000 4006 2035 0a01 0676 E..4..@.@..5...v
0x0010: 0a01 067f b13b 0017 afde c9a0 dfa6 16ed .....;..........
0x0020: 8010 07bd 211d 0000 0101 080a 0132 371b ....!........27.
0x0030: 0278 65d7 .xe.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment