API tools faq
paste
cfbearden

Win2008 keep-alives with tcp timestamps: bogus checksums

cfbearden
Jun 9th, 2011
375
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.74 KB | None | 0 0
raw download clone embed print report
  1. 14:40:05.301076 IP (tos 0x0, ttl 64, id 33579, offset 0, flags [DF], proto TCP (6), length 60)
  2. Ubuntu.host.51067 > Win2008.host.1433: Flags [S], cksum 0x7da6 (correct), seq 2489274192, win 5840, options [mss 1460,sackOK,TS val 51563643 ecr 0,nop,wscale 7], length 0
  3. 14:40:05.301247 IP (tos 0x0, ttl 128, id 15854, offset 0, flags [DF], proto TCP (6), length 60)
  4. Win2008.host.1433 > Ubuntu.host.51067: Flags [S.], cksum 0xbcff (correct), seq 2337044748, ack 2489274193, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 184068115 ecr 51563643], length 0
  5. 14:40:05.301311 IP (tos 0x0, ttl 64, id 33580, offset 0, flags [DF], proto TCP (6), length 52)
  6. Ubuntu.host.51067 > Win2008.host.1433: Flags [.], cksum 0x0b9f (correct), ack 1, win 46, options [nop,nop,TS val 51563643 ecr 184068115], length 0
  7. 14:40:05.305157 IP (tos 0x0, ttl 64, id 33581, offset 0, flags [DF], proto TCP (6), length 78)
  8. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x3378 (incorrect -> 0xe94c), seq 1:27, ack 1, win 46, options [nop,nop,TS val 51563644 ecr 184068115], length 26
  9. 14:40:05.305405 IP (tos 0x0, ttl 128, id 32768, offset 0, flags [DF], proto TCP (6), length 78)
  10. Win2008.host.1433 > Ubuntu.host.51067: Flags [P.], cksum 0x8344 (correct), seq 1:27, ack 27, win 260, options [nop,nop,TS val 184068123 ecr 51563644], length 26
  11. 14:40:05.305456 IP (tos 0x0, ttl 64, id 33582, offset 0, flags [DF], proto TCP (6), length 52)
  12. Ubuntu.host.51067 > Win2008.host.1433: Flags [.], cksum 0x0b62 (correct), ack 27, win 46, options [nop,nop,TS val 51563644 ecr 184068123], length 0
  13. 14:40:05.668645 IP (tos 0x0, ttl 64, id 33583, offset 0, flags [DF], proto TCP (6), length 163)
  14. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x33cd (incorrect -> 0xe1d4), seq 27:138, ack 27, win 46, options [nop,nop,TS val 51563680 ecr 184068123], length 111
  15. 14:40:05.669086 IP (tos 0x0, ttl 128, id 32769, offset 0, flags [DF], proto TCP (6), length 669)
  16. Win2008.host.1433 > Ubuntu.host.51067: Flags [P.], cksum 0x72e7 (correct), seq 27:644, ack 138, win 260, options [nop,nop,TS val 184068851 ecr 51563680], length 617
  17. 14:40:05.669160 IP (tos 0x0, ttl 64, id 33584, offset 0, flags [DF], proto TCP (6), length 52)
  18. Ubuntu.host.51067 > Win2008.host.1433: Flags [.], cksum 0x0584 (correct), ack 644, win 56, options [nop,nop,TS val 51563680 ecr 184068851], length 0
  19. 14:40:05.691800 IP (tos 0x0, ttl 64, id 33585, offset 0, flags [DF], proto TCP (6), length 258)
  20. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x342c (incorrect -> 0x5762), seq 138:344, ack 644, win 56, options [nop,nop,TS val 51563682 ecr 184068851], length 206
  21. 14:40:05.691884 IP (tos 0x0, ttl 128, id 32770, offset 0, flags [DF], proto TCP (6), length 52)
  22. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x03ba (correct), ack 344, win 260, options [nop,nop,TS val 184068897 ecr 51563682], length 0
  23. 14:40:05.692775 IP (tos 0x0, ttl 128, id 32771, offset 0, flags [DF], proto TCP (6), length 119)
  24. Win2008.host.1433 > Ubuntu.host.51067: Flags [P.], cksum 0xda6a (correct), seq 644:711, ack 344, win 260, options [nop,nop,TS val 184068899 ecr 51563682], length 67
  25. 14:40:05.700702 IP (tos 0x0, ttl 64, id 33586, offset 0, flags [DF], proto TCP (6), length 329)
  26. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x3473 (incorrect -> 0x86e9), seq 344:621, ack 711, win 56, options [nop,nop,TS val 51563683 ecr 184068899], length 277
  27. 14:40:05.701681 IP (tos 0x0, ttl 128, id 32772, offset 0, flags [DF], proto TCP (6), length 457)
  28. Win2008.host.1433 > Ubuntu.host.51067: Flags [P.], cksum 0xf965 (correct), seq 711:1116, ack 621, win 260, options [nop,nop,TS val 184068917 ecr 51563683], length 405
  29. 14:40:05.724412 IP (tos 0x0, ttl 64, id 33587, offset 0, flags [DF], proto TCP (6), length 242)
  30. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x341c (incorrect -> 0xba84), seq 621:811, ack 1116, win 65, options [nop,nop,TS val 51563685 ecr 184068917], length 190
  31. 14:40:05.724478 IP (tos 0x0, ttl 128, id 32773, offset 0, flags [DF], proto TCP (6), length 52)
  32. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0xffcb (correct), ack 811, win 260, options [nop,nop,TS val 184068961 ecr 51563685], length 0
  33. 14:40:05.724667 IP (tos 0x0, ttl 128, id 32774, offset 0, flags [DF], proto TCP (6), length 86)
  34. Win2008.host.1433 > Ubuntu.host.51067: Flags [P.], cksum 0x4133 (correct), seq 1116:1150, ack 811, win 260, options [nop,nop,TS val 184068963 ecr 51563685], length 34
  35. 14:40:05.736541 IP (tos 0x0, ttl 64, id 33588, offset 0, flags [DF], proto TCP (6), length 172)
  36. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x33d6 (incorrect -> 0x3c0d), seq 811:931, ack 1150, win 65, options [nop,nop,TS val 51563687 ecr 184068963], length 120
  37. 14:40:05.936686 IP (tos 0x0, ttl 128, id 32775, offset 0, flags [DF], proto TCP (6), length 52)
  38. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0xfd85 (correct), ack 931, win 260, options [nop,nop,TS val 184069387 ecr 51563687], length 0
  39. 14:40:05.947027 IP (tos 0x0, ttl 64, id 33589, offset 0, flags [DF], proto TCP (6), length 172)
  40. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x33d6 (incorrect -> 0x3bf8), seq 811:931, ack 1150, win 65, options [nop,nop,TS val 51563708 ecr 184068963], length 120
  41. 14:40:05.947080 IP (tos 0x0, ttl 128, id 32776, offset 0, flags [DF], proto TCP (6), length 52)
  42. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0xfd5c (correct), ack 931, win 260, options [nop,nop,TS val 184069407 ecr 51563708], length 0
  43. 14:40:18.150732 IP (tos 0x0, ttl 128, id 32777, offset 0, flags [DF], proto TCP (6), length 73)
  44. Win2008.host.1433 > Ubuntu.host.51067: Flags [P.], cksum 0x9a95 (correct), seq 1150:1171, ack 931, win 260, options [nop,nop,TS val 184093815 ecr 51563708], length 21
  45. 14:40:18.153976 IP (tos 0x0, ttl 64, id 33590, offset 0, flags [DF], proto TCP (6), length 164)
  46. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x33ce (incorrect -> 0x86a4), seq 931:1043, ack 1171, win 65, options [nop,nop,TS val 51564928 ecr 184093815], length 112
  47. 14:40:18.166394 IP (tos 0x0, ttl 128, id 32778, offset 0, flags [DF], proto TCP (6), length 73)
  48. Win2008.host.1433 > Ubuntu.host.51067: Flags [P.], cksum 0x954f (correct), seq 1171:1192, ack 1043, win 260, options [nop,nop,TS val 184093847 ecr 51564928], length 21
  49. 14:40:18.169470 IP (tos 0x0, ttl 64, id 33591, offset 0, flags [DF], proto TCP (6), length 266)
  50. Ubuntu.host.51067 > Win2008.host.1433: Flags [P.], cksum 0x3434 (incorrect -> 0xcd1f), seq 1043:1257, ack 1192, win 65, options [nop,nop,TS val 51564930 ecr 184093847], length 214
  51. 14:40:18.169546 IP (tos 0x0, ttl 128, id 32779, offset 0, flags [DF], proto TCP (6), length 52)
  52. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x97a8 (correct), ack 1257, win 260, options [nop,nop,TS val 184093853 ecr 51564930], length 0
  53. 14:40:48.164675 IP (tos 0x0, ttl 128, id 32780, offset 0, flags [DF], proto TCP (6), length 53)
  54. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0xaa4f (incorrect -> 0xad4f), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184153845 ecr 51564930], length 1
  55. 14:40:49.164853 IP (tos 0x0, ttl 128, id 32781, offset 0, flags [DF], proto TCP (6), length 53)
  56. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0xa27f (incorrect -> 0xa57f), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184155845 ecr 51564930], length 1
  57. 14:40:50.164732 IP (tos 0x0, ttl 128, id 32782, offset 0, flags [DF], proto TCP (6), length 53)
  58. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x9aaf (incorrect -> 0x9daf), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184157845 ecr 51564930], length 1
  59. 14:40:51.164610 IP (tos 0x0, ttl 128, id 32783, offset 0, flags [DF], proto TCP (6), length 53)
  60. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x92df (incorrect -> 0x95df), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184159845 ecr 51564930], length 1
  61. 14:40:52.164789 IP (tos 0x0, ttl 128, id 32784, offset 0, flags [DF], proto TCP (6), length 53)
  62. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x8b0f (incorrect -> 0x8e0f), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184161845 ecr 51564930], length 1
  63. 14:40:53.164668 IP (tos 0x0, ttl 128, id 32785, offset 0, flags [DF], proto TCP (6), length 53)
  64. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x833f (incorrect -> 0x863f), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184163845 ecr 51564930], length 1
  65. 14:40:54.164554 IP (tos 0x0, ttl 128, id 32786, offset 0, flags [DF], proto TCP (6), length 53)
  66. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x7b6f (incorrect -> 0x7e6f), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184165845 ecr 51564930], length 1
  67. 14:40:55.164725 IP (tos 0x0, ttl 128, id 32787, offset 0, flags [DF], proto TCP (6), length 53)
  68. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x739f (incorrect -> 0x769f), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184167845 ecr 51564930], length 1
  69. 14:40:56.164610 IP (tos 0x0, ttl 128, id 32788, offset 0, flags [DF], proto TCP (6), length 53)
  70. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x6bcf (incorrect -> 0x6ecf), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184169845 ecr 51564930], length 1
  71. 14:40:57.164481 IP (tos 0x0, ttl 128, id 32789, offset 0, flags [DF], proto TCP (6), length 53)
  72. Win2008.host.1433 > Ubuntu.host.51067: Flags [.], cksum 0x63ff (incorrect -> 0x66ff), seq 1191:1192, ack 1257, win 260, options [nop,nop,TS val 184171845 ecr 51564930], length 1
  73. 14:40:58.165060 IP (tos 0x0, ttl 128, id 16007, offset 0, flags [DF], proto TCP (6), length 40)
  74. Win2008.host.1433 > Ubuntu.host.51067: Flags [R.], cksum 0xbdea (correct), seq 1192, ack 1257, win 0, length 0
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!