TCP RST+data!

Ian FREISLICH ianf at clue.co.za
Thu Nov 22 23:31:10 PST 2007


"Kip Macy" wrote:
> On Nov 22, 2007 12:14 PM, Ian FREISLICH <ianf at clue.co.za> wrote:
> > Hi
> >
> > I have a device (sip/iax phone) that has a web interface and a
> > poorly documented CLI.  The only thing is it sends a RST with its
> > last data packet.  "Stevens" seems to indicate an RST should discard
> > buffered data and I suspect that's what's happening when I try to
> > browse to it.
> >
> > However, Windows and MacOs both pull up the web page.  Is this a
> > bug in our TCP implimentation or in theirs?
> >
> > Here's a tcpdump of seamonkey trying to retrieve the document index:
> >
> > 22:07:53.728516 IP (tos 0x0, ttl 64, id 24507, offset 0, flags [DF], proto 
TCP (6), length 60) 196.7.162.28.50118 > 196.7.162.30.80: S, cksum 0xdbdd (corr
ect), 2746220400:2746220400(0) win 65535 <mss 1460,nop,wscale 3,sackOK,timestam
p 16267181 0>
> > 22:07:53.731512 IP (tos 0x0, ttl 64, id 36, offset 0, flags [DF], proto TCP
 (6), length 60) 196.7.162.30.80 > 196.7.162.28.50118: S, cksum 0xbdba (correct
), 2416404465:2416404465(0) ack 2746220401 win 8192 <mss 1460,nop,wscale 0,nop,
nop,timestamp 2333 16267181>
> > 22:07:53.731543 IP (tos 0x0, ttl 64, id 24508, offset 0, flags [DF], proto 
TCP (6), length 52) 196.7.162.28.50118 > 196.7.162.30.80: ., cksum 0xe8f5 (corr
ect), 1:1(0) ack 1 win 8326 <nop,nop,timestamp 16267184 2333>
> > 22:07:53.731593 IP (tos 0x0, ttl 64, id 24509, offset 0, flags [DF], proto 
TCP (6), length 428) 196.7.162.28.50118 > 196.7.162.30.80: P 1:377(376) ack 1 w
in 8326 <nop,nop,timestamp 16267184 2333>
> > 22:07:53.770545 IP (tos 0x0, ttl 64, id 37, offset 0, flags [DF], proto TCP
 (6), length 52) 196.7.162.30.80 > 196.7.162.28.50118: ., cksum 0xe948 (correct
), 1:1(0) ack 377 win 7867 <nop,nop,timestamp 2333 16267184>
> > 22:07:54.004963 IP (tos 0x0, ttl 64, id 38, offset 0, flags [DF], proto TCP
 (6), length 61) 196.7.162.30.80 > 196.7.162.28.50118: P, cksum 0xcdea (correct
), 1:10(9) ack 377 win 8192 <nop,nop,timestamp 2334 16267184>
> > 22:07:54.018027 IP (tos 0x0, ttl 64, id 39, offset 0, flags [DF], proto TCP
 (6), length 638) 196.7.162.30.80 > 196.7.162.28.50118: RP 10:608(598) ack 377 
win 8192 [!RST+ 200 OK\015\012Server: Rapid Logic/1.]
> 
> This is very strange behavior. Could you please send us a tcpdump when
> the session is between an OS X host and your phone?

Here's the Mac's dump.  Bad checksums are as a result of my router
doing checksum offload.

09:24:10.019973 IP (tos 0x0, ttl 55, id 48909, offset 0, flags [DF], proto TCP (
6), length 64, bad cksum 0 (->f011)!) 196.40.106.74.64291 > 196.7.162.30.80: S, 
cksum 0x3c59 (correct), 301090670:301090670(0) win 65535 <mss 1448,nop,wscale 3,
nop,nop,timestamp 963434456 0,sackOK,eol>
09:24:10.022507 IP (tos 0x0, ttl 64, id 12, offset 0, flags [DF], proto TCP (6),
 length 60) 196.7.162.30.80 > 196.40.106.74.64291: S, cksum 0xf8f8 (correct), 21
76824040:2176824040(0) ack 301090671 win 8192 <mss 1460,nop,wscale 0,nop,nop,tim
estamp 676 963434456>
09:24:10.416650 IP (tos 0x0, ttl 55, id 61711, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->be1b)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x44b9 (correct), 1:1(0) ack 1 win 65535 <nop,nop,timestamp 963434460 676>
09:24:10.577601 IP (tos 0x0, ttl 55, id 61541, offset 0, flags [DF], proto TCP (
6), length 458, bad cksum 0 (->bd2f)!) 196.40.106.74.64291 > 196.7.162.30.80: P 
1:407(406) ack 1 win 65535 <nop,nop,timestamp 963434460 676>
09:24:10.738611 IP (tos 0x0, ttl 64, id 13, offset 0, flags [DF], proto TCP (6),
 length 52) 196.7.162.30.80 > 196.40.106.74.64291: ., cksum 0x23c3 (correct), 1:
1(0) ack 407 win 8031 <nop,nop,timestamp 677 963434460>
09:24:10.866023 IP (tos 0x0, ttl 64, id 14, offset 0, flags [DF], proto TCP (6),
 length 61) 196.7.162.30.80 > 196.40.106.74.64291: P, cksum 0x0909 (correct), 1:
10(9) ack 407 win 8192 <nop,nop,timestamp 678 963434460>
09:24:11.227653 IP (tos 0x0, ttl 55, id 15217, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->73ba)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x4310 (correct), 407:407(0) ack 10 win 65535 <nop,nop,timestamp 963434468
 678>
09:24:11.229397 IP (tos 0x0, ttl 64, id 15, offset 0, flags [DF], proto TCP (6),
 length 650) 196.7.162.30.80 > 196.40.106.74.64291: P 10:608(598) ack 407 win 81
92 <nop,nop,timestamp 678 963434468>
09:24:11.875439 IP (tos 0x0, ttl 55, id 41795, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->be8)!) 196.40.106.74.64291 > 196.7.162.30.80: ., c
ksum 0x40b4 (correct), 407:407(0) ack 608 win 65535 <nop,nop,timestamp 963434474
 678>
09:24:12.115839 IP (tos 0x0, ttl 55, id 56578, offset 0, flags [DF], proto TCP (
6), length 497, bad cksum 0 (->d06b)!) 196.40.106.74.64291 > 196.7.162.30.80: P 
407:852(445) ack 608 win 65535 <nop,nop,timestamp 963434474 678>
09:24:12.123050 IP (tos 0x0, ttl 64, id 16, offset 0, flags [DF], proto TCP (6),
 length 52) 196.7.162.30.80 > 196.40.106.74.64291: ., cksum 0x20b1 (correct), 60
8:608(0) ack 852 win 7748 <nop,nop,timestamp 680 963434474>
09:24:12.132396 IP (tos 0x0, ttl 55, id 19785, offset 0, flags [DF], proto TCP (
6), length 64, bad cksum 0 (->61d6)!) 196.40.106.74.64292 > 196.7.162.30.80: S, 
cksum 0x95b7 (correct), 3177988738:3177988738(0) win 65535 <mss 1448,nop,wscale 
3,nop,nop,timestamp 963434474 0,sackOK,eol>
09:24:12.134450 IP (tos 0x0, ttl 64, id 17, offset 0, flags [DF], proto TCP (6),
 length 60) 196.7.162.30.80 > 196.40.106.74.64292: S, cksum 0xda12 (correct), 21
77444639:2177444639(0) ack 3177988739 win 8192 <mss 1460,nop,wscale 0,nop,nop,ti
mestamp 680 963434474>
09:24:12.556400 IP (tos 0x0, ttl 55, id 4930, offset 0, flags [DF], proto TCP (6), length 52, bad cksum 0 (->9be9)!) 196.40.106.74.64292 > 196.7.162.30.80: ., c
ksum 0x25d0 (correct), 1:1(0) ack 1 win 65535 <nop,nop,timestamp 963434481 680>
09:24:12.643024 IP (tos 0x0, ttl 64, id 18, offset 0, flags [DF], proto TCP (6),
 length 61) 196.7.162.30.80 > 196.40.106.74.64291: P, cksum 0x04dc (correct), 60
8:617(9) ack 852 win 8192 <nop,nop,timestamp 681 963434474>
09:24:12.720907 IP (tos 0x0, ttl 64, id 19, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64291: . 617:2053(1436) ack 852 wi
n 8192 <nop,nop,timestamp 681 963434474>
09:24:12.723086 IP (tos 0x0, ttl 64, id 20, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64291: . 2053:3489(1436) ack 852 w
in 8192 <nop,nop,timestamp 681 963434474>
09:24:12.723845 IP (tos 0x0, ttl 55, id 1044, offset 0, flags [DF], proto TCP (6
), length 498, bad cksum 0 (->a959)!) 196.40.106.74.64292 > 196.7.162.30.80: P 1
:447(446) ack 1 win 65535 <nop,nop,timestamp 963434481 680>
09:24:12.725434 IP (tos 0x0, ttl 64, id 21, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64291: . 3489:4925(1436) ack 852 w
in 8192 <nop,nop,timestamp 681 963434474>
09:24:12.727310 IP (tos 0x0, ttl 64, id 22, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64291: . 4925:6361(1436) ack 852 w
in 8192 <nop,nop,timestamp 681 963434474>
09:24:12.729147 IP (tos 0x0, ttl 64, id 23, offset 0, flags [DF], proto TCP (6),
 length 52) 196.7.162.30.80 > 196.40.106.74.64292: ., cksum 0x05cf (correct), 1:
1(0) ack 447 win 7746 <nop,nop,timestamp 681 963434481>
09:24:13.067356 IP (tos 0x0, ttl 55, id 10063, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->87dc)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x3edf (correct), 852:852(0) ack 617 win 65535 <nop,nop,timestamp 96343448
6 681>
09:24:13.069725 IP (tos 0x0, ttl 64, id 24, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64291: . 6361:7797(1436) ack 852 w
in 8192 <nop,nop,timestamp 682 963434486>
09:24:13.612605 IP (tos 0x0, ttl 55, id 33080, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->2df3)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x393e (correct), 852:852(0) ack 2053 win 65535 <nop,nop,timestamp 9634344
91 681>
09:24:13.615909 IP (tos 0x0, ttl 64, id 25, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64291: . 7797:9233(1436) ack 852 w
in 8192 <nop,nop,timestamp 683 963434491>
09:24:14.034890 IP (tos 0x0, ttl 55, id 18490, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->66f1)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x339e (correct), 852:852(0) ack 3489 win 65535 <nop,nop,timestamp 9634344
95 681>
09:24:14.037880 IP (tos 0x0, ttl 64, id 26, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64291: . 9233:10669(1436) ack 852 
win 8192 <nop,nop,timestamp 684 963434495>
09:24:14.038501 IP (tos 0x0, ttl 64, id 27, offset 0, flags [DF], proto TCP (6),
 length 458) 196.7.162.30.80 > 196.40.106.74.64291: P 10669:11075(406) ack 852 w
in 8192 <nop,nop,timestamp 684 963434495>
09:24:14.410965 IP (tos 0x0, ttl 55, id 11591, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->81e4)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x2dfe (correct), 852:852(0) ack 4925 win 65535 <nop,nop,timestamp 9634344
99 681>
09:24:14.671674 IP (tos 0x0, ttl 64, id 28, offset 0, flags [DF], proto TCP (6),
 length 61) 196.7.162.30.80 > 196.40.106.74.64292: P, cksum 0xe9f4 (correct), 1:
10(9) ack 447 win 8192 <nop,nop,timestamp 685 963434481>
09:24:14.768234 IP (tos 0x0, ttl 64, id 29, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64292: . 10:1446(1436) ack 447 win
 8192 <nop,nop,timestamp 685 963434481>
09:24:14.770275 IP (tos 0x0, ttl 64, id 30, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64292: . 1446:2882(1436) ack 447 w
in 8192 <nop,nop,timestamp 685 963434481>
09:24:14.874342 IP (tos 0x0, ttl 55, id 21310, offset 0, flags [DF], proto TCP (
6), length 498, bad cksum 0 (->5a2f)!) 196.40.106.74.64292 > 196.7.162.30.80: P 
1:447(446) ack 1 win 65535 <nop,nop,timestamp 963434501 680>
09:24:14.875774 IP (tos 0x0, ttl 64, id 31, offset 0, flags [DF], proto TCP (6),
 length 67) 196.7.162.30.80 > 196.40.106.74.64292: ., cksum 0x173a (correct), 28
82:2897(15) ack 447 win 8192 <nop,nop,timestamp 686 963434501>
09:24:14.903540 IP (tos 0x0, ttl 55, id 49938, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->ec18)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x285e (correct), 852:852(0) ack 6361 win 65535 <nop,nop,timestamp 9634345
03 681>
09:24:15.211142 IP (tos 0x0, ttl 55, id 60968, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->c102)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x22bd (correct), 852:852(0) ack 7797 win 65535 <nop,nop,timestamp 9634345
07 682>
09:24:15.633655 IP (tos 0x0, ttl 55, id 13860, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->7907)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x1d1c (correct), 852:852(0) ack 9233 win 65535 <nop,nop,timestamp 9634345
11 683>
09:24:16.104111 IP (tos 0x0, ttl 55, id 25678, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->4add)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x177b (correct), 852:852(0) ack 10669 win 65535 <nop,nop,timestamp 963434
515 684>
09:24:16.123089 IP (tos 0x0, ttl 55, id 36874, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->1f21)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x15e4 (correct), 852:852(0) ack 11075 win 65535 <nop,nop,timestamp 963434
516 684>
09:24:16.124208 IP (tos 0x0, ttl 64, id 32, offset 0, flags [DF], proto TCP (6),
 length 59) 196.7.162.30.80 > 196.40.106.74.64291: P, cksum 0xa4ac (correct), 11
075:11082(7) ack 852 win 8192 <nop,nop,timestamp 688 963434516>
09:24:16.135131 IP (tos 0x0, ttl 55, id 56115, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->d3f7)!) 196.40.106.74.64292 > 196.7.162.30.80: ., 
cksum 0x23e1 (correct), 447:447(0) ack 10 win 65535 <nop,nop,timestamp 963434516
 685>
09:24:16.137501 IP (tos 0x0, ttl 64, id 33, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64292: . 2897:4333(1436) ack 447 w
in 8192 <nop,nop,timestamp 688 963434516>
09:24:16.623113 IP (tos 0x0, ttl 55, id 21319, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->5be4)!) 196.40.106.74.64292 > 196.7.162.30.80: ., 
cksum 0x1e40 (correct), 447:447(0) ack 1446 win 65535 <nop,nop,timestamp 9634345
21 685>
09:24:16.625549 IP (tos 0x0, ttl 64, id 34, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64292: . 4333:5769(1436) ack 447 w
in 8192 <nop,nop,timestamp 689 963434521>
09:24:16.627199 IP (tos 0x0, ttl 64, id 35, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64292: . 5769:7205(1436) ack 447 w
in 8192 <nop,nop,timestamp 689 963434521>
09:24:16.907004 IP (tos 0x0, ttl 55, id 64535, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->b313)!) 196.40.106.74.64292 > 196.7.162.30.80: ., 
cksum 0x1892 (correct), 447:447(0) ack 2897 win 65535 <nop,nop,timestamp 9634345
24 685>
09:24:16.909525 IP (tos 0x0, ttl 64, id 36, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64292: . 7205:8641(1436) ack 447 w
in 8192 <nop,nop,timestamp 690 963434524>
09:24:16.911552 IP (tos 0x0, ttl 64, id 37, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64292: . 8641:10077(1436) ack 447 
win 8192 <nop,nop,timestamp 690 963434524>
09:24:16.930337 IP (tos 0x0, ttl 55, id 6525, offset 0, flags [DF], proto TCP (6
), length 52, bad cksum 0 (->95ae)!) 196.40.106.74.64291 > 196.7.162.30.80: ., c
ksum 0x15d1 (correct), 852:852(0) ack 11082 win 65535 <nop,nop,timestamp 9634345
24 688>
09:24:17.426650 IP (tos 0x0, ttl 55, id 48666, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->f110)!) 196.40.106.74.64292 > 196.7.162.30.80: ., 
cksum 0x12ee (correct), 447:447(0) ack 4333 win 65535 <nop,nop,timestamp 9634345
29 688>
09:24:17.430860 IP (tos 0x0, ttl 64, id 38, offset 0, flags [DF], proto TCP (6),
 length 1488) 196.7.162.30.80 > 196.40.106.74.64292: . 10077:11513(1436) ack 447
 win 8192 <nop,nop,timestamp 691 963434529>
09:24:17.885974 IP (tos 0x0, ttl 55, id 2937, offset 0, flags [DF], proto TCP (6
), length 52, bad cksum 0 (->a3b2)!) 196.40.106.74.64292 > 196.7.162.30.80: ., c
ksum 0x0d4d (correct), 447:447(0) ack 5769 win 65535 <nop,nop,timestamp 96343453
3 689>
09:24:17.888808 IP (tos 0x0, ttl 64, id 39, offset 0, flags [DF], proto TCP (6),
 length 1448) 196.7.162.30.80 > 196.40.106.74.64292: P 11513:12909(1396) ack 447
 win 8192 <nop,nop,timestamp 692 963434533>
09:24:18.244997 IP (tos 0x0, ttl 55, id 58221, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->cbbd)!) 196.40.106.74.64292 > 196.7.162.30.80: ., 
cksum 0x07ad (correct), 447:447(0) ack 7205 win 65535 <nop,nop,timestamp 9634345
37 689>
09:24:18.642182 IP (tos 0x0, ttl 55, id 15887, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->711c)!) 196.40.106.74.64292 > 196.7.162.30.80: ., 
cksum 0x020c (correct), 447:447(0) ack 8641 win 65535 <nop,nop,timestamp 9634345
41 690>
09:24:19.087859 IP (tos 0x0, ttl 55, id 32823, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->2ef4)!) 196.40.106.74.64292 > 196.7.162.30.80: ., 
cksum 0xfc6b (correct), 447:447(0) ack 10077 win 65535 <nop,nop,timestamp 963434
545 690>
09:24:19.441905 IP (tos 0x0, ttl 55, id 2353, offset 0, flags [DF], proto TCP (6
), length 52, bad cksum 0 (->a5fa)!) 196.40.106.74.64292 > 196.7.162.30.80: ., c
ksum 0xf6ca (correct), 447:447(0) ack 11513 win 65535 <nop,nop,timestamp 9634345
49 691>
09:24:19.634885 IP (tos 0x0, ttl 55, id 58716, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->c9ce)!) 196.40.106.74.64292 > 196.7.162.30.80: ., 
cksum 0xf160 (correct), 447:447(0) ack 12909 win 65522 <nop,nop,timestamp 963434
551 692>
09:24:19.637152 IP (tos 0x0, ttl 64, id 40, offset 0, flags [DF], proto TCP (6),
 length 1027) 196.7.162.30.80 > 196.40.106.74.64292: P 12909:13884(975) ack 447 
win 8192 <nop,nop,timestamp 695 963434551>
09:24:20.357258 IP (tos 0x0, ttl 55, id 1649, offset 0, flags [DF], proto TCP (6
), length 52, bad cksum 0 (->a8ba)!) 196.40.106.74.64292 > 196.7.162.30.80: ., c
ksum 0xed79 (correct), 447:447(0) ack 13884 win 65535 <nop,nop,timestamp 9634345
59 695>
09:24:20.603850 IP (tos 0x0, ttl 55, id 279, offset 0, flags [DF], proto TCP (6)
, length 420, bad cksum 0 (->aca4)!) 196.40.106.74.64291 > 196.7.162.30.80: P 85
2:1220(368) ack 11082 win 65535 <nop,nop,timestamp 963434559 688>
09:24:20.611056 IP (tos 0x0, ttl 64, id 41, offset 0, flags [DF], proto TCP (6),
 length 52) 196.7.162.30.80 > 196.40.106.74.64291: ., cksum 0xf5a3 (correct), 11
082:11082(0) ack 1220 win 7825 <nop,nop,timestamp 697 963434559>
09:24:20.837236 IP (tos 0x0, ttl 64, id 42, offset 0, flags [DF], proto TCP (6),
 length 61) 196.7.162.30.80 > 196.40.106.74.64291: P, cksum 0xda1b (correct), 11
082:11091(9) ack 1220 win 8192 <nop,nop,timestamp 698 963434559>
09:24:21.188762 IP (tos 0x0, ttl 55, id 24409, offset 0, flags [DF], proto TCP (
6), length 52, bad cksum 0 (->4fd2)!) 196.40.106.74.64291 > 196.7.162.30.80: ., 
cksum 0x1423 (correct), 1220:1220(0) ack 11091 win 65535 <nop,nop,timestamp 9634
34567 698>
09:24:21.190332 IP (tos 0x0, ttl 64, id 43, offset 0, flags [DF], proto TCP (6),
 length 283) 196.7.162.30.80 > 196.40.106.74.64291: P 11091:11322(231) ack 1220 
win 8192 <nop,nop,timestamp 698 963434567>
09:24:21.668014 IP (tos 0x0, ttl 55, id 3099, offset 0, flags [DF], proto TCP (6
), length 52, bad cksum 0 (->a310)!) 196.40.106.74.64291 > 196.7.162.30.80: ., c
ksum 0x1337 (correct), 1220:1220(0) ack 11322 win 65535 <nop,nop,timestamp 96343
4572 698>


--
Ian Freislich



More information about the freebsd-current mailing list