SHARE
TWEET

Untitled

a guest Mar 21st, 2019 52 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # Data from NPing's TCP MODE
  2. ~$ sudo tcpdump -n -e -vvv "host dstip and port dstport"
  3. tcpdump: listening on ens3, link-type EN10MB (Ethernet), capture size 262144 bytes
  4. 18:33:21.378407 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 56437, offset 0, flags [none], proto TCP (6), length 40)
  5.     172.16.1.6.17964 > dstip.dstport: Flags [S], cksum 0x95da (correct), seq 2442293308, win 1480, length 0
  6. 18:33:21.381521 fa:16:3e:b3:d6:24 > fa:16:3e:a9:3d:34, ethertype IPv4 (0x0800), length 58: (tos 0x0, ttl 122, id 20359, offset 0, flags [DF], proto TCP (6), length 44)
  7.     dstip.dstport > 172.16.1.6.17964: Flags [S.], cksum 0xed70 (correct), seq 1354835383, ack 2442293309, win 8192, options [mss 1440], length 0
  8. 18:33:21.381560 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 57160, offset 0, flags [DF], proto TCP (6), length 40)
  9.     172.16.1.6.17964 > dstip.dstport: Flags [R], cksum 0x9b9f (correct), seq 2442293309, win 0, length 0
  10.  
  11. 18:33:22.379007 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 56437, offset 0, flags [none], proto TCP (6), length 40)
  12.     172.16.1.6.17964 > dstip.dstport: Flags [S], cksum 0x95da (correct), seq 2442293308, win 1480, length 0
  13. 18:33:22.382069 fa:16:3e:b3:d6:24 > fa:16:3e:a9:3d:34, ethertype IPv4 (0x0800), length 58: (tos 0x0, ttl 122, id 20500, offset 0, flags [DF], proto TCP (6), length 44)
  14.     dstip.dstport > 172.16.1.6.17964: Flags [S.], cksum 0xcb40 (correct), seq 1355106275, ack 2442293309, win 8192, options [mss 1440], length 0
  15. 18:33:22.382112 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 57359, offset 0, flags [DF], proto TCP (6), length 40)
  16.     172.16.1.6.17964 > dstip.dstport: Flags [R], cksum 0x9b9f (correct), seq 2442293309, win 0, length 0
  17.  
  18. 18:33:23.380979 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 56437, offset 0, flags [none], proto TCP (6), length 40)
  19.     172.16.1.6.17964 > dstip.dstport: Flags [S], cksum 0x95da (correct), seq 2442293308, win 1480, length 0
  20. 18:33:23.385960 fa:16:3e:b3:d6:24 > fa:16:3e:a9:3d:34, ethertype IPv4 (0x0800), length 58: (tos 0x0, ttl 122, id 20647, offset 0, flags [DF], proto TCP (6), length 44)
  21.     dstip.dstport > 172.16.1.6.17964: Flags [S.], cksum 0xa444 (correct), seq 1355378395, ack 2442293309, win 8192, options [mss 1440], length 0
  22. 18:33:23.386002 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 57411, offset 0, flags [DF], proto TCP (6), length 40)
  23.     172.16.1.6.17964 > dstip.dstport: Flags [R], cksum 0x9b9f (correct), seq 2442293309, win 0, length 0
  24.  
  25. 18:33:24.382972 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 56437, offset 0, flags [none], proto TCP (6), length 40)
  26.     172.16.1.6.17964 > dstip.dstport: Flags [S], cksum 0x95da (correct), seq 2442293308, win 1480, length 0
  27. 18:33:24.386016 fa:16:3e:b3:d6:24 > fa:16:3e:a9:3d:34, ethertype IPv4 (0x0800), length 58: (tos 0x0, ttl 122, id 20791, offset 0, flags [DF], proto TCP (6), length 44)
  28.     dstip.dstport > 172.16.1.6.17964: Flags [S.], cksum 0x91e5 (correct), seq 1355645238, ack 2442293309, win 8192, options [mss 1440], length 0
  29. 18:33:24.386084 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 57592, offset 0, flags [DF], proto TCP (6), length 40)
  30.     172.16.1.6.17964 > dstip.dstport: Flags [R], cksum 0x9b9f (correct), seq 2442293309, win 0, length 0
  31.  
  32. 18:33:25.384955 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 56437, offset 0, flags [none], proto TCP (6), length 40)
  33.     172.16.1.6.17964 > dstip.dstport: Flags [S], cksum 0x95da (correct), seq 2442293308, win 1480, length 0
  34. 18:33:25.388165 fa:16:3e:b3:d6:24 > fa:16:3e:a9:3d:34, ethertype IPv4 (0x0800), length 58: (tos 0x0, ttl 122, id 20938, offset 0, flags [DF], proto TCP (6), length 44)
  35.     dstip.dstport > 172.16.1.6.17964: Flags [S.], cksum 0x7ce0 (correct), seq 1355912759, ack 2442293309, win 8192, options [mss 1440], length 0
  36. 18:33:25.388193 fa:16:3e:a9:3d:34 > fa:16:3e:b3:d6:24, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 64, id 57644, offset 0, flags [DF], proto TCP (6), length 40)
  37.     172.16.1.6.17964 > dstip.dstport: Flags [R], cksum 0x9b9f (correct), seq 2442293309, win 0, length 0
  38. ^C
  39. 15 packets captured
  40. 15 packets received by filter
  41. 0 packets dropped by kernel
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top