Hello workers ,
There is an small bug in tcpdump 3.6.2 working on Solaris and Linux
At the beginning of the execution with
"tcpdump -X -vvv -s 140 host 10.1.3.3 and port 80"
the dump of a packet with IP options displays well the TCP ack,
but then with almost the same packet it shows the TCP ack as 1.
I know that the option is not well constructed, but it should not
affect the ack interpretation, isn't it ?.
11:43:41.961013 10.1.40.10.www > 10.1.3.3.www: . [tcp sum ok] 0:0(0) ack 12345 win
1048 (ttl 56, id 32618, len 44, optlen=4 IPOPT-136{2} IPOPT-210{4} EOL--3)
0x0000 4600 002c 7f6a 0000 3806 694c 0a01 280a F..,.j..8.iL..(.
0x0010 0a01 0303 8802 d204 0050 0050 0000 0000 .........P.P....
0x0020 0000 3039 5010 0418 3bd5 0000 ..09P...;...
11:49:24.478170 10.1.40.10.www > 10.1.3.3.www: . [tcp sum ok] 0:0(0) ack 1 win 1048
(ttl 56, id 32874, len 44, optlen=4 IPOPT-136{2} IPOPT-210{4} EOL--3)
0x0000 4600 002c 806a 0000 3806 684c 0a01 280a F..,.j..8.hL..(.
0x0010 0a01 0303 8802 d204 0050 0050 0000 0000 .........P.P....
0x0020 0000 3039 5010 0418 3bd5 0000 ..09P...;...
The six great gifts of an Irish girl are beauty, soft voice, sweet speech,
wisdom, needlework, and chastity.
-- Theodore Roosevelt, 1907
-------------------------------------
Jaime Torres mailto:[EMAIL PROTECTED]
T�cnico en seguridad para Comercio Electr�nico
Visite nuestro web: http://www.sia.es
-------------------------------------
Feliz viernes.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
