On Wed, 14 Jul 1999, Paul Jakma wrote in part:
> hi dan,
>
> best thing to do is to get a tcpdump of the conversation between your
> machine and the offending machine, and post it to l-k. (it's not too large).
> Then the experts can see the details for themselves.
>
> regards,
>
> paul jakma.
As suggested by Paul Jakma, I ran a tcpdump session to get a look at
the traffic between my machine and www.opendx.org.
When wget started it's second try to get the file I killed the program.
I'm not familiar with tcpdump, so if I need to set one of it's many
options in order to produce useable output please let me know. I hope
this will be useful to someone.
Here is the output of wget:
dan-m>wget www.opendx.org
--12:57:49-- http://www.opendx.org:80/
=> `index.html.1'
Connecting to www.opendx.org:80... connected!
HTTP request sent, awaiting response...
Read error (Connection reset by peer) in headers.
Retrying.
--13:06:51-- http://www.opendx.org:80/
(try: 2) => `index.html.1'
Connecting to www.opendx.org:80... connected!
HTTP request sent, awaiting response...
dan-m>
And here is the output from tcpdump:
12:57:49.020076 dan-m.uni-c.dk.3094 > www.montana.com.www: S 1081050655:1081050655(0) win 32120 <mss 1460,sackOK,timestamp 180921653[|tcp]> (DF)
12:57:49.221530 www.montana.com.www > dan-m.uni-c.dk.3094: S 2669539961:2669539961(0) ack 1081050656 win 2920 <mss 1460,nop,nop,timestamp 260613[|tcp]> (DF)
12:57:49.221669 dan-m.uni-c.dk.3094 > www.montana.com.www: . ack 1 win 32120 <nop,nop,timestamp 180921673 260613> (DF)
12:57:49.223563 dan-m.uni-c.dk.3094 > www.montana.com.www: P 1:81(80) ack 1 win 32120 <nop,nop,timestamp 180921673 260613> (DF)
12:57:52.217880 dan-m.uni-c.dk.3094 > www.montana.com.www: P 1:81(80) ack 1 win 32120 <nop,nop,timestamp 180921973 260613> (DF)
12:57:58.217693 dan-m.uni-c.dk.3094 > www.montana.com.www: P 1:81(80) ack 1 win 32120 <nop,nop,timestamp 180922573 260613> (DF)
12:58:10.217355 dan-m.uni-c.dk.3094 > www.montana.com.www: P 1:81(80) ack 1 win 32120 <nop,nop,timestamp 180923773 260613> (DF)
12:58:34.216632 dan-m.uni-c.dk.3094 > www.montana.com.www: P 1:81(80) ack 1 win 32120 <nop,nop,timestamp 180926173 260613> (DF)
12:58:34.422050 www.montana.com.www > dan-m.uni-c.dk.3094: . ack 81 win 8760 <nop,nop,timestamp 260703 180921673> (DF)
13:06:51.723096 www.montana.com.www > dan-m.uni-c.dk.3094: R 1461:2921(1460) ack 81 win 8760 (DF)
13:06:51.724540 dan-m.uni-c.dk.3095 > www.montana.com.www: S 1663549547:1663549547(0) win 32120 <mss 1460,sackOK,timestamp 180975925[|tcp]> (DF)
13:06:51.920797 www.montana.com.www > dan-m.uni-c.dk.3095: S 2838250115:2838250115(0) ack 1663549548 win 2920 <mss 1460,nop,nop,timestamp 261698[|tcp]> (DF)
13:06:51.920906 dan-m.uni-c.dk.3095 > www.montana.com.www: . ack 1 win 32120 <nop,nop,timestamp 180975944 261698> (DF)
13:06:51.921261 dan-m.uni-c.dk.3095 > www.montana.com.www: P 1:81(80) ack 1 win 32120 <nop,nop,timestamp 180975944 261698> (DF)
13:06:54.911803 dan-m.uni-c.dk.3095 > www.montana.com.www: P 1:81(80) ack 1 win 32120 <nop,nop,timestamp 180976244 261698> (DF)
15 packets received by filter
0 packets dropped by kernel
Regards,
Dan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/