cfbearden

Win2003 keep-alives without timestamps: valid checksums

Jun 9th, 2011
201
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.87 KB | None | 0 0
  1. 14:30:34.206090 IP (tos 0x0, ttl 64, id 45755, offset 0, flags [DF], proto TCP (6), length 60)
  2. Ubuntu.host.57430 > Win2003.host.1433: Flags [S], cksum 0x4966 (correct), seq 2120245215, win 5840, options [mss 1460,sackOK,TS val 51506532 ecr 0,nop,wscale 7], length 0
  3. 14:30:34.206223 IP (tos 0x0, ttl 128, id 1664, offset 0, flags [none], proto TCP (6), length 64)
  4. Win2003.host.1433 > Ubuntu.host.57430: Flags [S.], cksum 0x5fb9 (correct), seq 3008424849, ack 2120245216, win 16384, options [mss 1460,nop,wscale 0,nop,nop,TS val 0 ecr 0,nop,nop,sackOK], length 0
  5. 14:30:34.206284 IP (tos 0x0, ttl 64, id 45756, offset 0, flags [DF], proto TCP (6), length 52)
  6. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xefdf (correct), ack 1, win 46, options [nop,nop,TS val 51506533 ecr 0], length 0
  7. 14:30:34.211283 IP (tos 0x0, ttl 64, id 45757, offset 0, flags [DF], proto TCP (6), length 78)
  8. Ubuntu.host.57430 > Win2003.host.1433: Flags [P.], cksum 0x3365 (incorrect -> 0xcd8d), seq 1:27, ack 1, win 46, options [nop,nop,TS val 51506534 ecr 0], length 26
  9. 14:30:34.211416 IP (tos 0x0, ttl 128, id 1665, offset 0, flags [DF], proto TCP (6), length 78)
  10. Win2003.host.1433 > Ubuntu.host.57430: Flags [P.], cksum 0xcc59 (correct), seq 1:27, ack 27, win 65509, options [nop,nop,TS val 42022602 ecr 51506532], length 26
  11. 14:30:34.211442 IP (tos 0x0, ttl 64, id 45758, offset 0, flags [DF], proto TCP (6), length 52)
  12. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xb65f (correct), ack 27, win 46, options [nop,nop,TS val 51506534 ecr 42022602], length 0
  13. 14:30:34.657957 IP (tos 0x0, ttl 64, id 45759, offset 0, flags [DF], proto TCP (6), length 163)
  14. Ubuntu.host.57430 > Win2003.host.1433: Flags [P.], cksum 0x33ba (incorrect -> 0x6750), seq 27:138, ack 27, win 46, options [nop,nop,TS val 51506579 ecr 42022602], length 111
  15. 14:30:34.658433 IP (tos 0x0, ttl 128, id 1914, offset 0, flags [DF], proto TCP (6), length 669)
  16. Win2003.host.1433 > Ubuntu.host.57430: Flags [P.], cksum 0x7881 (correct), seq 27:644, ack 138, win 65398, options [nop,nop,TS val 42022607 ecr 51506579], length 617
  17. 14:30:34.658481 IP (tos 0x0, ttl 64, id 45760, offset 0, flags [DF], proto TCP (6), length 52)
  18. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xb34b (correct), ack 644, win 56, options [nop,nop,TS val 51506579 ecr 42022607], length 0
  19. 14:30:34.682030 IP (tos 0x0, ttl 64, id 45761, offset 0, flags [DF], proto TCP (6), length 242)
  20. Ubuntu.host.57430 > Win2003.host.1433: Flags [P.], cksum 0x3409 (incorrect -> 0xfb0b), seq 138:328, ack 644, win 56, options [nop,nop,TS val 51506581 ecr 42022607], length 190
  21. 14:30:34.683226 IP (tos 0x0, ttl 128, id 1931, offset 0, flags [DF], proto TCP (6), length 103)
  22. Win2003.host.1433 > Ubuntu.host.57430: Flags [P.], cksum 0x75d1 (correct), seq 644:695, ack 328, win 65208, options [nop,nop,TS val 42022607 ecr 51506581], length 51
  23. 14:30:34.691231 IP (tos 0x0, ttl 64, id 45762, offset 0, flags [DF], proto TCP (6), length 315)
  24. Ubuntu.host.57430 > Win2003.host.1433: Flags [P.], cksum 0x3452 (incorrect -> 0x5449), seq 328:591, ack 695, win 56, options [nop,nop,TS val 51506582 ecr 42022607], length 263
  25. 14:30:34.692117 IP (tos 0x0, ttl 128, id 1932, offset 0, flags [DF], proto TCP (6), length 469)
  26. Win2003.host.1433 > Ubuntu.host.57430: Flags [P.], cksum 0x442b (correct), seq 695:1112, ack 591, win 64945, options [nop,nop,TS val 42022607 ecr 51506582], length 417
  27. 14:30:34.715264 IP (tos 0x0, ttl 64, id 45763, offset 0, flags [DF], proto TCP (6), length 242)
  28. Ubuntu.host.57430 > Win2003.host.1433: Flags [P.], cksum 0x3409 (incorrect -> 0x68c1), seq 591:781, ack 1112, win 65, options [nop,nop,TS val 51506584 ecr 42022607], length 190
  29. 14:30:34.715578 IP (tos 0x0, ttl 128, id 1947, offset 0, flags [DF], proto TCP (6), length 86)
  30. Win2003.host.1433 > Ubuntu.host.57430: Flags [P.], cksum 0xf3ad (correct), seq 1112:1146, ack 781, win 64755, options [nop,nop,TS val 42022607 ecr 51506584], length 34
  31. 14:30:34.727647 IP (tos 0x0, ttl 64, id 45764, offset 0, flags [DF], proto TCP (6), length 172)
  32. Ubuntu.host.57430 > Win2003.host.1433: Flags [P.], cksum 0x33c3 (incorrect -> 0xea77), seq 781:901, ack 1146, win 65, options [nop,nop,TS val 51506586 ecr 42022607], length 120
  33. 14:30:34.842896 IP (tos 0x0, ttl 128, id 1992, offset 0, flags [DF], proto TCP (6), length 52)
  34. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0xb20d (correct), ack 901, win 64635, options [nop,nop,TS val 42022609 ecr 51506586], length 0
  35. 14:30:35.110600 IP (tos 0x0, ttl 128, id 2116, offset 0, flags [DF], proto TCP (6), length 73)
  36. Win2003.host.1433 > Ubuntu.host.57430: Flags [P.], cksum 0xaead (correct), seq 1146:1167, ack 901, win 64635, options [nop,nop,TS val 42022611 ecr 51506586], length 21
  37. 14:30:35.113801 IP (tos 0x0, ttl 64, id 45765, offset 0, flags [DF], proto TCP (6), length 164)
  38. Ubuntu.host.57430 > Win2003.host.1433: Flags [P.], cksum 0x33bb (incorrect -> 0x9ad2), seq 901:1013, ack 1167, win 65, options [nop,nop,TS val 51506624 ecr 42022611], length 112
  39. 14:30:35.245320 IP (tos 0x0, ttl 128, id 2158, offset 0, flags [DF], proto TCP (6), length 52)
  40. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0xb1ce (correct), ack 1013, win 64523, options [nop,nop,TS val 42022613 ecr 51506624], length 0
  41. 14:30:35.265042 IP (tos 0x0, ttl 128, id 2167, offset 0, flags [DF], proto TCP (6), length 73)
  42. Win2003.host.1433 > Ubuntu.host.57430: Flags [P.], cksum 0xae93 (correct), seq 1167:1188, ack 1013, win 64523, options [nop,nop,TS val 42022613 ecr 51506624], length 21
  43. 14:30:35.268086 IP (tos 0x0, ttl 64, id 45766, offset 0, flags [DF], proto TCP (6), length 266)
  44. Ubuntu.host.57430 > Win2003.host.1433: Flags [P.], cksum 0x3421 (incorrect -> 0xe15d), seq 1013:1227, ack 1188, win 65, options [nop,nop,TS val 51506640 ecr 42022613], length 214
  45. 14:30:35.445672 IP (tos 0x0, ttl 128, id 2241, offset 0, flags [DF], proto TCP (6), length 52)
  46. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0xb1a7 (correct), ack 1227, win 64309, options [nop,nop,TS val 42022615 ecr 51506640], length 0
  47. 14:31:05.220068 IP (tos 0x0, ttl 128, id 17769, offset 0, flags [DF], proto TCP (6), length 41)
  48. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  49. 14:31:05.220119 IP (tos 0x0, ttl 64, id 45767, offset 0, flags [DF], proto TCP (6), length 64)
  50. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0x23c6 (correct), ack 1188, win 65, options [nop,nop,TS val 51509635 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  51. 14:31:35.194629 IP (tos 0x0, ttl 128, id 2516, offset 0, flags [DF], proto TCP (6), length 41)
  52. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  53. 14:31:35.194679 IP (tos 0x0, ttl 64, id 45768, offset 0, flags [DF], proto TCP (6), length 64)
  54. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0x1811 (correct), ack 1188, win 65, options [nop,nop,TS val 51512632 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  55. 14:32:05.168824 IP (tos 0x0, ttl 128, id 25422, offset 0, flags [DF], proto TCP (6), length 41)
  56. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  57. 14:32:05.168876 IP (tos 0x0, ttl 64, id 45769, offset 0, flags [DF], proto TCP (6), length 64)
  58. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0x0c5b (correct), ack 1188, win 65, options [nop,nop,TS val 51515630 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  59. 14:32:35.245129 IP (tos 0x0, ttl 128, id 5639, offset 0, flags [DF], proto TCP (6), length 41)
  60. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  61. 14:32:35.245179 IP (tos 0x0, ttl 64, id 45770, offset 0, flags [DF], proto TCP (6), length 64)
  62. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0x009b (correct), ack 1188, win 65, options [nop,nop,TS val 51518638 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  63. 14:33:05.219950 IP (tos 0x0, ttl 128, id 22986, offset 0, flags [DF], proto TCP (6), length 41)
  64. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  65. 14:33:05.220007 IP (tos 0x0, ttl 64, id 45771, offset 0, flags [DF], proto TCP (6), length 64)
  66. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xf4e5 (correct), ack 1188, win 65, options [nop,nop,TS val 51521635 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  67. 14:33:35.193907 IP (tos 0x0, ttl 128, id 32506, offset 0, flags [DF], proto TCP (6), length 41)
  68. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  69. 14:33:35.193964 IP (tos 0x0, ttl 64, id 45772, offset 0, flags [DF], proto TCP (6), length 64)
  70. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xe930 (correct), ack 1188, win 65, options [nop,nop,TS val 51524632 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  71. 14:34:05.169604 IP (tos 0x0, ttl 128, id 12602, offset 0, flags [DF], proto TCP (6), length 41)
  72. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  73. 14:34:05.169661 IP (tos 0x0, ttl 64, id 45773, offset 0, flags [DF], proto TCP (6), length 64)
  74. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xdd7a (correct), ack 1188, win 65, options [nop,nop,TS val 51527630 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  75. 14:34:35.245021 IP (tos 0x0, ttl 128, id 21828, offset 0, flags [DF], proto TCP (6), length 41)
  76. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  77. 14:34:35.245077 IP (tos 0x0, ttl 64, id 45774, offset 0, flags [DF], proto TCP (6), length 64)
  78. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xd1ba (correct), ack 1188, win 65, options [nop,nop,TS val 51530638 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  79. 14:35:05.219048 IP (tos 0x0, ttl 128, id 31521, offset 0, flags [DF], proto TCP (6), length 41)
  80. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  81. 14:35:05.219108 IP (tos 0x0, ttl 64, id 45775, offset 0, flags [DF], proto TCP (6), length 64)
  82. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xc605 (correct), ack 1188, win 65, options [nop,nop,TS val 51533635 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  83. 14:35:35.194671 IP (tos 0x0, ttl 128, id 21774, offset 0, flags [DF], proto TCP (6), length 41)
  84. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  85. 14:35:35.194729 IP (tos 0x0, ttl 64, id 45776, offset 0, flags [DF], proto TCP (6), length 64)
  86. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xba50 (correct), ack 1188, win 65, options [nop,nop,TS val 51536632 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  87. 14:36:05.168823 IP (tos 0x0, ttl 128, id 6180, offset 0, flags [DF], proto TCP (6), length 41)
  88. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x14f9 (correct), seq 1187:1188, ack 1227, win 64309, length 1
  89. 14:36:05.168881 IP (tos 0x0, ttl 64, id 45777, offset 0, flags [DF], proto TCP (6), length 64)
  90. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0xae9a (correct), ack 1188, win 65, options [nop,nop,TS val 51539630 ecr 42022615,nop,nop,sack 1 {1187:1188}], length 0
  91. 14:36:11.214536 IP (tos 0x0, ttl 128, id 8679, offset 0, flags [DF], proto TCP (6), length 73)
  92. Win2003.host.1433 > Ubuntu.host.57430: Flags [P.], cksum 0x05df (correct), seq 1188:1209, ack 1227, win 64309, options [nop,nop,TS val 42025973 ecr 51539630], length 21
  93. 14:36:11.214592 IP (tos 0x0, ttl 64, id 45778, offset 0, flags [DF], proto TCP (6), length 52)
  94. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0x1c2f (correct), ack 1209, win 65, options [nop,nop,TS val 51540234 ecr 42025973], length 0
  95. 14:36:11.216032 IP (tos 0x0, ttl 64, id 45779, offset 0, flags [DF], proto TCP (6), length 52)
  96. Ubuntu.host.57430 > Win2003.host.1433: Flags [F.], cksum 0x1c2d (correct), seq 1227, ack 1209, win 65, options [nop,nop,TS val 51540235 ecr 42025973], length 0
  97. 14:36:11.216186 IP (tos 0x0, ttl 128, id 8683, offset 0, flags [DF], proto TCP (6), length 52)
  98. Win2003.host.1433 > Ubuntu.host.57430: Flags [.], cksum 0x2138 (correct), ack 1228, win 64309, options [nop,nop,TS val 42025973 ecr 51540235], length 0
  99. 14:36:11.216292 IP (tos 0x0, ttl 128, id 8684, offset 0, flags [DF], proto TCP (6), length 52)
  100. Win2003.host.1433 > Ubuntu.host.57430: Flags [F.], cksum 0x2137 (correct), seq 1209, ack 1228, win 64309, options [nop,nop,TS val 42025973 ecr 51540235], length 0
  101. 14:36:11.216324 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 52)
  102. Ubuntu.host.57430 > Win2003.host.1433: Flags [.], cksum 0x1c2c (correct), ack 1210, win 65, options [nop,nop,TS val 51540235 ecr 42025973], length 0
Add Comment
Please, Sign In to add comment