On Sat, Jan 18, 2003 at 10:49:25PM +0100, Tom Beer wrote: > Hi, > > when I surf to the website with ip 129.132.112.231 I get the following blocks:
It's blocking duplicate / out-of-order packets that fall out of the
current TCP window. This is normal.
> Jan 18 20:09:31 strawberry ipmon[108]: 20:09:31.659122 tun0 @0:27 b
> 129.132.112.231,80 -> 192.168.1.9,1066 PR tcp len 20 48 -A 4292436563 2530732
> 8192 IN
> Jan 18 20:09:37 strawberry ipmon[108]: 20:09:37.663074 tun0 @0:27 b
> 129.132.112.231,80 -> 192.168.1.9,1066 PR tcp len 20 48 -A 4292436563 2530732
> 8192 IN
> Jan 18 20:09:49 strawberry ipmon[108]: 20:09:49.669917 tun0 @0:27 b
> 129.132.112.231,80 -> 192.168.1.9,1066 PR tcp len 20 48 -A 4292436563 2530732
> 8192 IN
Note that these three have the same TCP seq / ack values.
> Jan 18 20:09:49 strawberry ipmon[108]: 20:09:49.862139 tun0 @0:27 b
> 129.132.112.231,80 -> 192.168.1.9,1067 PR tcp len 20 48 -A 4292415405 2551890
> 8192 IN
> Jan 18 20:09:53 strawberry ipmon[108]: 20:09:52.766679 tun0 @0:27 b
> 129.132.112.231,80 -> 192.168.1.9,1067 PR tcp len 20 48 -A 4292415405 2551890
> 8192 IN
> Jan 18 20:09:59 strawberry ipmon[108]: 20:09:58.766592 tun0 @0:27 b
> 129.132.112.231,80 -> 192.168.1.9,1067 PR tcp len 20 48 -A 4292415405 2551890
> 8192 IN
This is the same case as above.
--
ryan beasley <[EMAIL PROTECTED]>
GPG ID: 0x16EFBD48
msg02249/pgp00000.pgp
Description: PGP signature
