Postby mangoo » 20 Jul 2007 16:07
This is a tcpdump when we want to connect:
# tcpdump -i eth0 port 1234 -XX -vv
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
16:05:09.619475 IP (tos 0x0, ttl 64, id 46351, offset 0, flags [DF], proto: TCP (6), length: 60) 192.168.111.145.46764 > 192.168.111.159.1234: S, cksum 0xb263 (correct), 388946124:388946124(0) win 5840 <mss 1460,sackOK,timestamp 84962755 0,nop,wscale 5>
0x0000: 0016 3e6d a2d2 0030 05af 9668 0800 4500 ..>m...0...h..E.
0x0010: 003c b50f 4000 4006 252b c0a8 6f91 c0a8 .<..@.@.%+..o...
0x0020: 6f9f b6ac 04d2 172e d8cc 0000 0000 a002 o...............
0x0030: 16d0 b263 0000 0204 05b4 0402 080a 0510 ...c............
0x0040: 6dc3 0000 0000 0103 0305 m.........
16:05:09.621220 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: TCP (6), length: 60) 192.168.111.159.1234 > 192.168.111.145.46764: S, cksum 0xab53 (correct), 1955546346:1955546346(0) ack 388946125 win 5792 <mss 1460,sackOK,timestamp 7818556 84962755,nop,wscale 7>
0x0000: 0030 05af 9668 0016 3e6d a2d2 0800 4500 .0...h..>m....E.
0x0010: 003c 0000 4000 4006 da3a c0a8 6f9f c0a8 .<..@.@..:..o...
0x0020: 6f91 04d2 b6ac 748f 44ea 172e d8cd a012 o.....t.D.......
0x0030: 16a0 ab53 0000 0204 05b4 0402 080a 0077 ...S...........w
0x0040: 4d3c 0510 6dc3 0103 0307 M<..m.....
16:05:09.621265 IP (tos 0x0, ttl 64, id 46352, offset 0, flags [DF], proto: TCP (6), length: 52) 192.168.111.145.46764 > 192.168.111.159.1234: ., cksum 0xf006 (correct), 1:1(0) ack 1 win 183 <nop,nop,timestamp 84962757 7818556>
0x0000: 0016 3e6d a2d2 0030 05af 9668 0800 4500 ..>m...0...h..E.
0x0010: 0034 b510 4000 4006 2532 c0a8 6f91 c0a8 .4..@.@.%2..o...
0x0020: 6f9f b6ac 04d2 172e d8cd 748f 44eb 8010 o.........t.D...
0x0030: 00b7 f006 0000 0101 080a 0510 6dc5 0077 ............m..w
0x0040: 4d3c M<
16:05:09.622026 IP (tos 0x0, ttl 64, id 46353, offset 0, flags [DF], proto: TCP (6), length: 276) 192.168.111.145.46764 > 192.168.111.159.1234: P 1:225(224) ack 1 win 183 <nop,nop,timestamp 84962758 7818556>
0x0000: 0016 3e6d a2d2 0030 05af 9668 0800 4500 ..>m...0...h..E.
0x0010: 0114 b511 4000 4006 2451 c0a8 6f91 c0a8 ....@.@.$Q..o...
0x0020: 6f9f b6ac 04d2 172e d8cd 748f 44eb 8018 o.........t.D...
0x0030: 00b7 d3f0 0000 0101 080a 0510 6dc6 0077 ............m..w
0x0040: 4d3c 0100 0000 cefa 0bb0 d000 0000 4d4d M<............MM
0x0050: 5320 1a00 0000 0000 0000 0000 0000 0000 S...............
16:05:09.624588 IP (tos 0x0, ttl 64, id 2519, offset 0, flags [DF], proto: TCP (6), length: 52) 192.168.111.159.1234 > 192.168.111.145.46764: ., cksum 0xefa5 (correct), 1:1(0) ack 225 win 54 <nop,nop,timestamp 7818557 84962758>
0x0000: 0030 05af 9668 0016 3e6d a2d2 0800 4500 .0...h..>m....E.
0x0010: 0034 09d7 4000 4006 d06b c0a8 6f9f c0a8 .4..@.@..k..o...
0x0020: 6f91 04d2 b6ac 748f 44eb 172e d9ad 8010 o.....t.D.......
0x0030: 0036 efa5 0000 0101 080a 0077 4d3d 0510 .6.........wM=..
0x0040: 6dc6 m.
And, the rest when we ctrl+C mplayer:
16:05:58.284448 IP (tos 0x0, ttl 64, id 46354, offset 0, flags [DF], proto: TCP (6), length: 52) 192.168.111.145.46764 > 192.168.111.159.1234: F, cksum 0x310d (correct), 225:225(0) ack 1 win 183 <nop,nop,timestamp 85011420 7818557>
0x0000: 0016 3e6d a2d2 0030 05af 9668 0800 4500 ..>m...0...h..E.
0x0010: 0034 b512 4000 4006 2530 c0a8 6f91 c0a8 .4..@.@.%0..o...
0x0020: 6f9f b6ac 04d2 172e d9ad 748f 44eb 8011 o.........t.D...
0x0030: 00b7 310d 0000 0101 080a 0511 2bdc 0077 ..1.........+..w
0x0040: 4d3d M=
16:05:58.286406 IP (tos 0x0, ttl 64, id 2520, offset 0, flags [DF], proto: TCP (6), length: 52) 192.168.111.159.1234 > 192.168.111.145.46764: F, cksum 0x1e8a (correct), 1:1(0) ack 226 win 54 <nop,nop,timestamp 7823424 85011420>
0x0000: 0030 05af 9668 0016 3e6d a2d2 0800 4500 .0...h..>m....E.
0x0010: 0034 09d8 4000 4006 d06a c0a8 6f9f c0a8 .4..@.@..j..o...
0x0020: 6f91 04d2 b6ac 748f 44eb 172e d9ae 8011 o.....t.D.......
0x0030: 0036 1e8a 0000 0101 080a 0077 6040 0511 .6.........w`@..
0x0040: 2bdc +.
16:05:58.286469 IP (tos 0x0, ttl 64, id 46355, offset 0, flags [DF], proto: TCP (6), length: 52) 192.168.111.145.46764 > 192.168.111.159.1234: ., cksum 0x1e07 (correct), 226:226(0) ack 2 win 183 <nop,nop,timestamp 85011422 7823424>
0x0000: 0016 3e6d a2d2 0030 05af 9668 0800 4500 ..>m...0...h..E.
0x0010: 0034 b513 4000 4006 252f c0a8 6f91 c0a8 .4..@.@.%/..o...
0x0020: 6f9f b6ac 04d2 172e d9ae 748f 44ec 8010 o.........t.D...
0x0030: 00b7 1e07 0000 0101 080a 0511 2bde 0077 ............+..w
0x0040: 6040 `@