[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

Deciphering TCPDUMP

Posted on 1998-11-14
1
Medium Priority
?
243 Views
Last Modified: 2013-12-26
Can someone give me a site that breaks down the output of TCPDUMP? Here is a sample output that i cant figure out:

21:52:32.058766 d196-tanna.net.1023 > praise.com.http: S 432195:432211(16) win 10052
21:52:32.228766 d196-tanna.net.1025 > ns1.tanna.net.domain: 39598+ (42)
21:52:32.658766 ns1.tanna.net.domain > d196-tanna.net.1025: 39598* 1/3/3 (203) (DF)
21:52:32.658766 d196-tanna.net.1027 > ns1.tanna.net.domain: 39599+ (46)
21:52:32.918766 ns1.tanna.net.domain > d196-tanna.net.1027: 39599* 1/2/2 (187) (DF)
21:52:32.918766 d196-tanna.net.1028 > ns1.tanna.net.domain: 39600+ (45)
21:52:33.158766 ns1.tanna.net.domain > d196-tanna.net.1028: 39600* 1/2/2 (160) (DF)

I understand the first line in that it is sending a "S"YN request with a ISN (Initial Sequence #) of 432195 and it appears to be sending a data packet of 16 bytes in size with a window size of a little of 10k.  Besides that i have no idea what the rest is saying ie. "DF", "*", "1/2/2", ".", etc...

Is there a site that breaks down this information or is the best way just to play around with it?

Thanks
0
Comment
Question by:aniston
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 51

Accepted Solution

by:
ahoffmann earned 40 total points
ID: 1294152
looks like an DNS answer, (DF) means don't fragment IP (see man tcpdump)
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction: Displaying information on the statusbar.   Continuing from the third article about sudoku.   Open the project in visual studio. Status bar – let’s display the timestamp there.  We need to get the timestamp from the document s…
If you use Adobe Reader X it is possible you can't open OLE PDF documents in the standard. The reason is the 'save box mode' in adobe reader X. Many people think the protected Mode of adobe reader x is only to stop the write access. But this fe…
This video will show you how to get GIT to work in Eclipse.   It will walk you through how to install the EGit plugin in eclipse and how to checkout an existing repository.
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question