Create a gist now

Instantly share code, notes, and snippets.

@rauchg /google-tcpdump Secret
Created Oct 25, 2014

# tcpdump -ttttt host www.google.com
00:00:00.000000 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [S], seq 67740561, win 14600, options [mss 1460,sackOK,TS val 1239161370 ecr 0,nop,wscale 7], length 0
00:00:00.001832 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [S.], seq 18780086, ack 67740562, win 42540, options [mss 1430,sackOK,TS val 2124636127 ecr 1239161370,nop,wscale 7], length 0
00:00:00.001857 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 1, win 115, options [nop,nop,TS val 1239161371 ecr 2124636127], length 0
00:00:00.001939 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [P.], seq 1:79, ack 1, win 115, options [nop,nop,TS val 1239161371 ecr 2124636127], length 78
00:00:00.003541 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], ack 79, win 333, options [nop,nop,TS val 2124636128 ecr 1239161371], length 0
00:00:00.061303 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 1:1419, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061317 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 1419, win 137, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061326 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 1419:2837, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061333 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 2837, win 160, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061337 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 2837:4255, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061341 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 4255, win 182, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061363 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 4255:5673, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061370 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 5673, win 205, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061387 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 5673:7091, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061393 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 7091, win 228, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061410 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 7091:8509, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061422 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 8509, win 250, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061434 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 8509:9927, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061440 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 9927, win 273, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061465 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 9927:11345, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061471 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 11345, win 296, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061492 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 11345:12763, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061499 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 12763, win 303, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.061517 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [P.], seq 12763:14181, ack 79, win 333, options [nop,nop,TS val 2124636186 ecr 1239161371], length 1418
00:00:00.061523 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 14181, win 293, options [nop,nop,TS val 1239161386 ecr 2124636186], length 0
00:00:00.062990 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 14181:15599, ack 79, win 333, options [nop,nop,TS val 2124636187 ecr 1239161386], length 1418
00:00:00.063001 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 15599, win 331, options [nop,nop,TS val 1239161386 ecr 2124636187], length 0
00:00:00.063016 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [.], seq 15599:17017, ack 79, win 333, options [nop,nop,TS val 2124636187 ecr 1239161386], length 1418
00:00:00.063021 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 17017, win 322, options [nop,nop,TS val 1239161386 ecr 2124636187], length 0
00:00:00.063043 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [P.], seq 17017:18307, ack 79, win 333, options [nop,nop,TS val 2124636187 ecr 1239161386], length 1290
00:00:00.063050 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 18307, win 313, options [nop,nop,TS val 1239161386 ecr 2124636187], length 0
00:00:00.063170 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [F.], seq 79, ack 18307, win 331, options [nop,nop,TS val 1239161386 ecr 2124636187], length 0
00:00:00.064787 IP nuq05s01-in-f17.1e100.net.http > 10.0.0.47.60481: Flags [F.], seq 18307, ack 80, win 333, options [nop,nop,TS val 2124636189 ecr 1239161386], length 0
00:00:00.064800 IP 10.0.0.47.60481 > nuq05s01-in-f17.1e100.net.http: Flags [.], ack 18308, win 331, options [nop,nop,TS val 1239161387 ecr 2124636189], length 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment