Re: [Hampshire] Strange network problem

Top Page

Reply to this message
Author: Vic
Date:  
To: hampshire
Subject: Re: [Hampshire] Strange network problem
> I'm using tcpdump.

You've filtered out too much information - you've done something like -f
"dest 80.176.97.122". You should have done a -f "host 80.176.97.122" (from
a remote box) or -f "host xx.xx.xx.xx" from the local machine. This will
show you the traffic in both directions...

> 15:55:04.956658 XX.XX.XX.XX.38688 > 80.176.97.122.443: S
> 927076470:927076470(0) win 5840 <mss 1460,sackOK,timestamp 89927409
> 0,nop,wscale 4> (DF)


Syn packet - start of connection.


> 15:55:04.997284 XX.XX.XX.XX.38688 > 80.176.97.122.443: . ack 229068150 win
> 365 <nop,nop,timestamp 89927419 791315675> (DF)


Ack packet in response to SynAck that hasn't been captured.

> 15:55:04.998546 XX.XX.XX.XX.38688 > 80.176.97.122.443: P 0:124(124) ack 1
> win 365 <nop,nop,timestamp 89927419 791315675> (DF)


This is the start of your https conversation - but without seeing hte
server responses, there's not a lot I can tell you about it...

Vic.