Skip to content

Instantly share code, notes, and snippets.

@petronius
Created July 9, 2014 13:44
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save petronius/286484766ad8de4fe20b to your computer and use it in GitHub Desktop.
Save petronius/286484766ad8de4fe20b to your computer and use it in GitHub Desktop.
Port capture for hung process
$ sudo tcpdump -v port 49291
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
13:05:35.294325 IP (tos 0x0, ttl 64, id 44758, offset 0, flags [DF], proto UDP (17), length 81)
my.server.net.49291 > google-public-dns-a.google.com.domain: 1188+ A? media.artlogic.net.s3.amazonaws.com. (53)
13:05:35.294353 IP (tos 0x0, ttl 64, id 44759, offset 0, flags [DF], proto UDP (17), length 81)
my.server.net.49291 > google-public-dns-a.google.com.domain: 28519+ AAAA? media.artlogic.net.s3.amazonaws.com. (53)
13:05:35.306129 IP (tos 0x0, ttl 50, id 3934, offset 0, flags [none], proto UDP (17), length 186)
google-public-dns-a.google.com.domain > my.server.net.49291: 1188 4/0/0 media.artlogic.net.s3.amazonaws.com. CNAME s3-directional-w.amazonaws.com., s3-directional-w.amazonaws.com. CNAME s3-directional-w.a-geo.amazonaws.com., s3-directional-w.a-geo.amazonaws.com. CNAME s3-2-w.amazonaws.com., s3-2-w.amazonaws.com. A 207.171.189.81 (158)
13:05:35.306151 IP (tos 0x0, ttl 50, id 48711, offset 0, flags [none], proto UDP (17), length 254)
google-public-dns-a.google.com.domain > my.server.net.49291: 28519 3/1/0 media.artlogic.net.s3.amazonaws.com. CNAME s3-directional-w.amazonaws.com., s3-directional-w.amazonaws.com. CNAME s3-directional-w.a-geo.amazonaws.com., s3-directional-w.a-geo.amazonaws.com. CNAME s3-2-w.amazonaws.com. (226)
14:22:08.356776 IP (tos 0x0, ttl 51, id 920, offset 0, flags [DF], proto TCP (6), length 64)
171.33.192.208.49291 > my.server.net.http: Flags [S], cksum 0x91be (correct), seq 3874869945, win 65535, options [mss 1380,nop,wscale 4,nop,nop,TS val 686534345 ecr 0,sackOK,eol], length 0
14:22:08.356816 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
my.server.net.http > 171.33.192.208.49291: Flags [S.], cksum 0x537e (incorrect -> 0xba95), seq 154257232, ack 3874869946, win 14480, options [mss 1460,sackOK,TS val 2859938880 ecr 686534345,nop,wscale 7], length 0
14:22:08.928067 IP (tos 0x0, ttl 52, id 24734, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xffb6 (correct), ack 1, win 8208, options [nop,nop,TS val 686534900 ecr 2859938880], length 0
14:22:08.934675 IP (tos 0x0, ttl 52, id 13065, offset 0, flags [DF], proto TCP (6), length 408)
171.33.192.208.49291 > my.server.net.http: Flags [P.], cksum 0x21a5 (correct), seq 1:357, ack 1, win 8208, options [nop,nop,TS val 686534906 ecr 2859938880], length 356
14:22:08.934720 IP (tos 0x0, ttl 64, id 62337, offset 0, flags [DF], proto TCP (6), length 52)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x5376 (incorrect -> 0x1d53), ack 357, win 122, options [nop,nop,TS val 2859939024 ecr 686534906], length 0
14:22:08.935376 IP (tos 0x0, ttl 64, id 62338, offset 0, flags [DF], proto TCP (6), length 952)
my.server.net.http > 171.33.192.208.49291: Flags [P.], cksum 0xf026 (correct), seq 1:901, ack 357, win 122, options [nop,nop,TS val 2859939025 ecr 686534906], length 900
14:22:09.528241 IP (tos 0x0, ttl 52, id 38484, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xf82d (correct), ack 901, win 8151, options [nop,nop,TS val 686535485 ecr 2859939025], length 0
14:22:09.532333 IP (tos 0x0, ttl 52, id 11470, offset 0, flags [DF], proto TCP (6), length 427)
171.33.192.208.49291 > my.server.net.http: Flags [P.], cksum 0x02b6 (correct), seq 357:732, ack 901, win 8192, options [nop,nop,TS val 686535488 ecr 2859939025], length 375
14:22:09.532666 IP (tos 0x0, ttl 64, id 62339, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x137e (correct), seq 901:2269, ack 732, win 130, options [nop,nop,TS val 2859939174 ecr 686535488], length 1368
14:22:09.532685 IP (tos 0x0, ttl 64, id 62340, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0xd3ae (correct), seq 2269:3637, ack 732, win 130, options [nop,nop,TS val 2859939174 ecr 686535488], length 1368
14:22:09.532695 IP (tos 0x0, ttl 64, id 62341, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0xca36 (correct), seq 3637:5005, ack 732, win 130, options [nop,nop,TS val 2859939174 ecr 686535488], length 1368
14:22:09.532706 IP (tos 0x0, ttl 64, id 62342, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x97de (correct), seq 5005:6373, ack 732, win 130, options [nop,nop,TS val 2859939174 ecr 686535488], length 1368
14:22:09.532714 IP (tos 0x0, ttl 64, id 62343, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0xc894 (correct), seq 6373:7741, ack 732, win 130, options [nop,nop,TS val 2859939174 ecr 686535488], length 1368
14:22:09.532722 IP (tos 0x0, ttl 64, id 62344, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x29e7 (correct), seq 7741:9109, ack 732, win 130, options [nop,nop,TS val 2859939174 ecr 686535488], length 1368
14:22:10.131907 IP (tos 0x0, ttl 52, id 29637, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xe9a7 (correct), ack 3637, win 8021, options [nop,nop,TS val 686536073 ecr 2859939174], length 0
14:22:10.131965 IP (tos 0x0, ttl 64, id 62345, offset 0, flags [DF], proto TCP (6), length 316)
my.server.net.http > 171.33.192.208.49291: Flags [P.], cksum 0xc9f3 (correct), seq 9109:9373, ack 732, win 130, options [nop,nop,TS val 2859939324 ecr 686536073], length 264
14:22:10.131981 IP (tos 0x0, ttl 64, id 62346, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x2abb (correct), seq 9373:10741, ack 732, win 130, options [nop,nop,TS val 2859939324 ecr 686536073], length 1368
14:22:10.131989 IP (tos 0x0, ttl 64, id 62347, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x793a (correct), seq 10741:12109, ack 732, win 130, options [nop,nop,TS val 2859939324 ecr 686536073], length 1368
14:22:10.131997 IP (tos 0x0, ttl 64, id 62348, offset 0, flags [DF], proto TCP (6), length 1412)
my.server.net.http > 171.33.192.208.49291: Flags [P.], cksum 0x3aeb (correct), seq 12109:13469, ack 732, win 130, options [nop,nop,TS val 2859939324 ecr 686536073], length 1360
14:22:10.132007 IP (tos 0x0, ttl 64, id 62349, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x03c4 (correct), seq 13469:14837, ack 732, win 130, options [nop,nop,TS val 2859939324 ecr 686536073], length 1368
14:22:10.132015 IP (tos 0x0, ttl 64, id 62350, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x6fae (correct), seq 14837:16205, ack 732, win 130, options [nop,nop,TS val 2859939324 ecr 686536073], length 1368
14:22:10.132662 IP (tos 0x0, ttl 52, id 48199, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xe3a4 (correct), ack 5005, win 8191, options [nop,nop,TS val 686536074 ecr 2859939174], length 0
14:22:10.132675 IP (tos 0x0, ttl 64, id 62351, offset 0, flags [DF], proto TCP (6), length 1420)
my.server.net.http > 171.33.192.208.49291: Flags [P.], cksum 0x72a1 (correct), seq 16205:17573, ack 732, win 130, options [nop,nop,TS val 2859939324 ecr 686536074], length 1368
14:22:10.134089 IP (tos 0x0, ttl 52, id 55957, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xd99c (correct), ack 7741, win 8021, options [nop,nop,TS val 686536076 ecr 2859939174], length 0
14:22:10.134163 IP (tos 0x0, ttl 64, id 62352, offset 0, flags [DF], proto TCP (6), length 1267)
my.server.net.http > 171.33.192.208.49291: Flags [P.], cksum 0xad9f (correct), seq 17573:18788, ack 732, win 130, options [nop,nop,TS val 2859939324 ecr 686536076], length 1215
14:22:10.141899 IP (tos 0x0, ttl 52, id 39219, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xd392 (correct), ack 9109, win 8192, options [nop,nop,TS val 686536083 ecr 2859939174], length 0
14:22:10.753051 IP (tos 0x0, ttl 52, id 40838, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xcfac (correct), ack 9373, win 8175, options [nop,nop,TS val 686536684 ecr 2859939324], length 0
14:22:10.753451 IP (tos 0x0, ttl 52, id 22884, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xc5a7 (correct), ack 12109, win 8004, options [nop,nop,TS val 686536684 ecr 2859939324], length 0
14:22:10.754651 IP (tos 0x0, ttl 52, id 53739, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xc0ab (correct), ack 13469, win 7919, options [nop,nop,TS val 686536685 ecr 2859939324], length 0
14:22:10.755075 IP (tos 0x0, ttl 52, id 64421, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xba42 (correct), ack 14837, win 8192, options [nop,nop,TS val 686536685 ecr 2859939324], length 0
14:22:10.755750 IP (tos 0x0, ttl 52, id 17155, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xb03c (correct), ack 17573, win 8021, options [nop,nop,TS val 686536686 ecr 2859939324], length 0
14:22:10.756511 IP (tos 0x0, ttl 52, id 38342, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xaf91 (correct), ack 17573, win 8192, options [nop,nop,TS val 686536686 ecr 2859939324], length 0
14:22:10.757515 IP (tos 0x0, ttl 52, id 8552, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0xab1c (correct), ack 18788, win 8116, options [nop,nop,TS val 686536688 ecr 2859939324], length 0
14:22:25.148481 IP (tos 0x0, ttl 64, id 62353, offset 0, flags [DF], proto TCP (6), length 52)
my.server.net.http > 171.33.192.208.49291: Flags [F.], cksum 0x5376 (incorrect -> 0xbba3), seq 18788, ack 732, win 130, options [nop,nop,TS val 2859943078 ecr 686536688], length 0
14:22:25.684597 IP (tos 0x0, ttl 51, id 23921, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [.], cksum 0x622b (correct), ack 18789, win 8192, options [nop,nop,TS val 686551530 ecr 2859943078], length 0
14:22:26.468403 IP (tos 0x0, ttl 51, id 469, offset 0, flags [DF], proto TCP (6), length 52)
171.33.192.208.49291 > my.server.net.http: Flags [F.], cksum 0x5f1e (correct), seq 732, ack 18789, win 8192, options [nop,nop,TS val 686552310 ecr 2859943078], length 0
14:22:26.468436 IP (tos 0x0, ttl 64, id 62354, offset 0, flags [DF], proto TCP (6), length 52)
my.server.net.http > 171.33.192.208.49291: Flags [.], cksum 0x5376 (incorrect -> 0x7d52), ack 733, win 130, options [nop,nop,TS val 2859943408 ecr 686552310], length 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment