cfbearden

Win2008 keep-alives without timestamps: valid checksums

Jun 10th, 2011
214
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.80 KB | None | 0 0
  1. 14:43:15.573229 IP (tos 0x0, ttl 64, id 51420, offset 0, flags [DF], proto TCP (6), length 52)
  2. Ubuntu.host.52251 > Win2008.host.1433: Flags [S], cksum 0x2e55 (correct), seq 1189994002, win 5840, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
  3. 14:43:15.573581 IP (tos 0x0, ttl 128, id 16406, offset 0, flags [DF], proto TCP (6), length 52)
  4. Win2008.host.1433 > Ubuntu.host.52251: Flags [S.], cksum 0xbed4 (correct), seq 2646526079, ack 1189994003, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
  5. 14:43:15.573647 IP (tos 0x0, ttl 64, id 51421, offset 0, flags [DF], proto TCP (6), length 40)
  6. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x1f7a (correct), ack 1, win 46, length 0
  7. 14:43:15.577411 IP (tos 0x0, ttl 64, id 51422, offset 0, flags [DF], proto TCP (6), length 66)
  8. Ubuntu.host.52251 > Win2008.host.1433: Flags [P.], cksum 0x336c (incorrect -> 0xfd28), seq 1:27, ack 1, win 46, length 26
  9. 14:43:15.577631 IP (tos 0x0, ttl 128, id 32768, offset 0, flags [DF], proto TCP (6), length 66)
  10. Win2008.host.1433 > Ubuntu.host.52251: Flags [P.], cksum 0x972c (correct), seq 1:27, ack 27, win 256, length 26
  11. 14:43:15.577663 IP (tos 0x0, ttl 64, id 51423, offset 0, flags [DF], proto TCP (6), length 40)
  12. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x1f46 (correct), ack 27, win 46, length 0
  13. 14:43:16.323299 IP (tos 0x0, ttl 64, id 51424, offset 0, flags [DF], proto TCP (6), length 151)
  14. Ubuntu.host.52251 > Win2008.host.1433: Flags [P.], cksum 0x33c1 (incorrect -> 0x1622), seq 27:138, ack 27, win 46, length 111
  15. 14:43:16.323744 IP (tos 0x0, ttl 128, id 32769, offset 0, flags [DF], proto TCP (6), length 657)
  16. Win2008.host.1433 > Ubuntu.host.52251: Flags [P.], cksum 0x0df6 (correct), seq 27:644, ack 138, win 256, length 617
  17. 14:43:16.335410 IP (tos 0x0, ttl 64, id 51425, offset 0, flags [DF], proto TCP (6), length 40)
  18. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x1c64 (correct), ack 644, win 56, length 0
  19. 14:43:16.368975 IP (tos 0x0, ttl 64, id 51426, offset 0, flags [DF], proto TCP (6), length 246)
  20. Ubuntu.host.52251 > Win2008.host.1433: Flags [P.], cksum 0x3420 (incorrect -> 0x3de8), seq 138:344, ack 644, win 56, length 206
  21. 14:43:16.369047 IP (tos 0x0, ttl 128, id 32770, offset 0, flags [DF], proto TCP (6), length 40)
  22. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1ace (correct), ack 344, win 256, length 0
  23. 14:43:16.369908 IP (tos 0x0, ttl 128, id 32771, offset 0, flags [DF], proto TCP (6), length 107)
  24. Win2008.host.1433 > Ubuntu.host.52251: Flags [P.], cksum 0x038d (correct), seq 644:711, ack 344, win 256, length 67
  25. 14:43:16.383680 IP (tos 0x0, ttl 64, id 51427, offset 0, flags [DF], proto TCP (6), length 40)
  26. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x1b53 (correct), ack 711, win 56, length 0
  27. 14:43:16.391913 IP (tos 0x0, ttl 64, id 51428, offset 0, flags [DF], proto TCP (6), length 317)
  28. Ubuntu.host.52251 > Win2008.host.1433: Flags [P.], cksum 0x3467 (incorrect -> 0x4d96), seq 344:621, ack 711, win 56, length 277
  29. 14:43:16.392831 IP (tos 0x0, ttl 128, id 32772, offset 0, flags [DF], proto TCP (6), length 445)
  30. Win2008.host.1433 > Ubuntu.host.52251: Flags [P.], cksum 0x109f (correct), seq 711:1116, ack 621, win 256, length 405
  31. 14:43:16.435400 IP (tos 0x0, ttl 64, id 51429, offset 0, flags [DF], proto TCP (6), length 40)
  32. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x18a0 (correct), ack 1116, win 65, length 0
  33. 14:43:16.446700 IP (tos 0x0, ttl 64, id 51430, offset 0, flags [DF], proto TCP (6), length 230)
  34. Ubuntu.host.52251 > Win2008.host.1433: Flags [P.], cksum 0x3410 (incorrect -> 0xd1bb), seq 621:811, ack 1116, win 65, length 190
  35. 14:43:16.446779 IP (tos 0x0, ttl 128, id 32773, offset 0, flags [DF], proto TCP (6), length 40)
  36. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1723 (correct), ack 811, win 256, length 0
  37. 14:43:16.447001 IP (tos 0x0, ttl 128, id 32774, offset 0, flags [DF], proto TCP (6), length 74)
  38. Win2008.host.1433 > Ubuntu.host.52251: Flags [P.], cksum 0x589c (correct), seq 1116:1150, ack 811, win 256, length 34
  39. 14:43:16.447123 IP (tos 0x0, ttl 64, id 51431, offset 0, flags [DF], proto TCP (6), length 40)
  40. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x17c0 (correct), ack 1150, win 65, length 0
  41. 14:43:16.466792 IP (tos 0x0, ttl 64, id 51432, offset 0, flags [DF], proto TCP (6), length 160)
  42. Ubuntu.host.52251 > Win2008.host.1433: Flags [P.], cksum 0x33ca (incorrect -> 0x5374), seq 811:931, ack 1150, win 65, length 120
  43. 14:43:16.477216 IP (tos 0x0, ttl 128, id 32775, offset 0, flags [DF], proto TCP (6), length 61)
  44. Win2008.host.1433 > Ubuntu.host.52251: Flags [P.], cksum 0x132a (correct), seq 1150:1171, ack 931, win 256, length 21
  45. 14:43:16.480354 IP (tos 0x0, ttl 64, id 51433, offset 0, flags [DF], proto TCP (6), length 152)
  46. Ubuntu.host.52251 > Win2008.host.1433: Flags [P.], cksum 0x33c2 (incorrect -> 0x03f9), seq 931:1043, ack 1171, win 65, length 112
  47. 14:43:16.480418 IP (tos 0x0, ttl 128, id 32776, offset 0, flags [DF], proto TCP (6), length 40)
  48. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1604 (correct), ack 1043, win 256, length 0
  49. 14:43:16.492895 IP (tos 0x0, ttl 128, id 32777, offset 0, flags [DF], proto TCP (6), length 61)
  50. Win2008.host.1433 > Ubuntu.host.52251: Flags [P.], cksum 0x12c8 (correct), seq 1171:1192, ack 1043, win 256, length 21
  51. 14:43:16.495934 IP (tos 0x0, ttl 64, id 51434, offset 0, flags [DF], proto TCP (6), length 254)
  52. Ubuntu.host.52251 > Win2008.host.1433: Flags [P.], cksum 0x3428 (incorrect -> 0x4a96), seq 1043:1257, ack 1192, win 65, length 214
  53. 14:43:16.695657 IP (tos 0x0, ttl 128, id 32778, offset 0, flags [DF], proto TCP (6), length 40)
  54. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1519 (correct), ack 1257, win 256, length 0
  55. 14:43:46.660804 IP (tos 0x0, ttl 128, id 32779, offset 0, flags [DF], proto TCP (6), length 41)
  56. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1519 (correct), seq 1191:1192, ack 1257, win 256, length 1
  57. 14:43:46.660842 IP (tos 0x0, ttl 64, id 51435, offset 0, flags [DF], proto TCP (6), length 52)
  58. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x09f5 (correct), ack 1192, win 65, options [nop,nop,sack 1 {1191:1192}], length 0
  59. 14:44:16.660147 IP (tos 0x0, ttl 128, id 32780, offset 0, flags [DF], proto TCP (6), length 41)
  60. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1519 (correct), seq 1191:1192, ack 1257, win 256, length 1
  61. 14:44:16.660176 IP (tos 0x0, ttl 64, id 51436, offset 0, flags [DF], proto TCP (6), length 52)
  62. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x09f5 (correct), ack 1192, win 65, options [nop,nop,sack 1 {1191:1192}], length 0
  63. 14:44:46.659491 IP (tos 0x0, ttl 128, id 32781, offset 0, flags [DF], proto TCP (6), length 41)
  64. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1519 (correct), seq 1191:1192, ack 1257, win 256, length 1
  65. 14:44:46.659508 IP (tos 0x0, ttl 64, id 51437, offset 0, flags [DF], proto TCP (6), length 52)
  66. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x09f5 (correct), ack 1192, win 65, options [nop,nop,sack 1 {1191:1192}], length 0
  67. 14:45:16.658834 IP (tos 0x0, ttl 128, id 32782, offset 0, flags [DF], proto TCP (6), length 41)
  68. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1519 (correct), seq 1191:1192, ack 1257, win 256, length 1
  69. 14:45:16.658851 IP (tos 0x0, ttl 64, id 51438, offset 0, flags [DF], proto TCP (6), length 52)
  70. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x09f5 (correct), ack 1192, win 65, options [nop,nop,sack 1 {1191:1192}], length 0
  71. 14:45:21.064977 IP (tos 0x0, ttl 128, id 32783, offset 0, flags [DF], proto TCP (6), length 61)
  72. Win2008.host.1433 > Ubuntu.host.52251: Flags [P.], cksum 0xf74b (correct), seq 1192:1213, ack 1257, win 256, length 21
  73. 14:45:21.064993 IP (tos 0x0, ttl 64, id 51439, offset 0, flags [DF], proto TCP (6), length 40)
  74. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x15c3 (correct), ack 1213, win 65, length 0
  75. 14:45:21.066705 IP (tos 0x0, ttl 64, id 51440, offset 0, flags [DF], proto TCP (6), length 40)
  76. Ubuntu.host.52251 > Win2008.host.1433: Flags [F.], cksum 0x15c2 (correct), seq 1257, ack 1213, win 65, length 0
  77. 14:45:21.066748 IP (tos 0x0, ttl 128, id 32784, offset 0, flags [DF], proto TCP (6), length 40)
  78. Win2008.host.1433 > Ubuntu.host.52251: Flags [.], cksum 0x1503 (correct), ack 1258, win 256, length 0
  79. 14:45:21.066995 IP (tos 0x0, ttl 128, id 32785, offset 0, flags [DF], proto TCP (6), length 40)
  80. Win2008.host.1433 > Ubuntu.host.52251: Flags [F.], cksum 0x1502 (correct), seq 1213, ack 1258, win 256, length 0
  81. 14:45:21.067010 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 40)
  82. Ubuntu.host.52251 > Win2008.host.1433: Flags [.], cksum 0x15c1 (correct), ack 1214, win 65, length 0
Add Comment
Please, Sign In to add comment