tcpdump - How to check if server received packet (acknowledged) -
i running tcpdump on server capture traffic between server (servera) , remote server (serverb). not know how read output tcpdump. point out if serverb acknowledging packets being sent servera being received serverb? here tcpdump log:
2015-03-31 11:32:18.038284 ip (tos 0x0, ttl 64, id 30781, offset 0, flags [df], proto tcp (6), length 60) servera.14033 > serverb.8004: flags [s], cksum 0x02bd (correct), seq 337482636, win 14600, options [mss 1460,nop,nop,ts val 506588081 ecr 0,nop,wscale 7], length 0 0x0000: 4500 003c 783d 4000 4006 bae4 0a04 7a0e e.. servera.14033: flags [s.], cksum 0x3b2a (correct), seq 1742982091, ack 337482637, win 4140, options [mss 1380,nop,wscale 0], length 0 0x0000: 4500 0030 5ff2 0000 f606 5d3b cefd b48a e..0_.....];.... 0x0010: 0a04 7a0e 1f44 36d1 67e3 cbcb 141d 938d ..z..d6.g....... 0x0020: 7012 102c 3b2a 0000 0204 0564 0103 0300 p..,;*.....d.... 2015-03-31 11:32:18.078622 ip (tos 0x0, ttl 64, id 30782, offset 0, flags [df], proto tcp (6), length 40) servera.14033 > serverb.8004: flags [.], cksum 0x7657 (correct), seq 337482637, ack 1742982092, win 115, length 0 0x0000: 4500 0028 783e 4000 4006 baf7 0a04 7a0e e..(x>@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 938d 67e3 cbcc ....6..d....g... 0x0020: 5010 0073 7657 0000 p..svw.. 2015-03-31 11:32:18.093197 ip (tos 0x0, ttl 64, id 30783, offset 0, flags [df], proto tcp (6), length 208) servera.14033 > serverb.8004: flags [p.], cksum 0x085d (incorrect -> 0x43ad), seq 337482637:337482805, ack 1742982092, win 115, length 168 0x0000: 4500 00d0 783f 4000 4006 ba4e 0a04 7a0e e...x?@.@..n..z. 0x0010: cefd b48a 36d1 1f44 141d 938d 67e3 cbcc ....6..d....g... 0x0020: 5018 0073 085d 0000 1603 0100 a301 0000 p..s.].......... 0x0030: 9f03 0155 1abe 0244 8cef bc2f fbaf 01ba ...u...d.../.... 0x0040: d77a de09 8698 1584 9755 7a91 e895 0636 .z.......uz....6 0x0050: 5d53 bd00 0038 c00a c014 0035 c005 c00f ]s...8.....5.... 0x0060: 0039 0038 c009 c013 002f c004 c00e 0033 .9.8...../.....3 0x0070: 0032 c007 c011 0005 c002 c00c c008 c012 .2.............. 0x0080: 000a c003 c00d 0016 0013 0004 00ff 0100 ................ 0x0090: 003e 000a 0034 0032 0017 0001 0003 0013 .>...4.2........ 0x00a0: 0015 0006 0007 0009 000a 0018 000b 000c ................ 0x00b0: 0019 000d 000e 000f 0010 0011 0002 0012 ................ 0x00c0: 0004 0005 0014 0008 0016 000b 0002 0100 ................ .... ...cert exchange .... 2015-03-31 11:32:18.152983 ip (tos 0x0, ttl 247, id 24608, offset 0, flags [none], proto tcp (6), length 225) serverb.8004 > servera.14033: flags [p.], cksum 0x71b6 (correct), seq 1742986232:1742986417, ack 337482805, win 4308, length 185 0x0000: 4500 00e1 6020 0000 f706 5b5c cefd b48a e...`.....[\.... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dbf8 141d 9435 ..z..d6.g......5 0x0020: 5018 10d4 71b6 0000 0105 0507 0303 0609 p...q........... 0x0030: 6086 4801 86f8 4204 0106 0a60 8648 0186 `.h...b....`.h.. 0x0040: f845 0108 0130 0d06 092a 8648 86f7 0d01 .e...0...*.h.... 0x0050: 0105 0500 0381 8100 1302 ddf8 e886 00f2 ................ 0x0060: 5af8 f820 0c59 8862 07ce cef7 4ef9 bb59 z....y.b....n..y 0x0070: a198 e5e1 38dd 4ebc 6618 d3ad eb18 f20d ....8.n.f....... 0x0080: c96d 3e4a 9420 c33c babd 6554 c6af 44b3 .m>j.........c..^. 0x00a0: e52a 67ce cd33 0c2a d789 5603 231f b3be .*g..3.*..v.#... 0x00b0: e83a 0859 b4ec 4535 f78a 5bff 66cf 50af .:.y..e5..[.f.p. 0x00c0: c66d 578d 1978 b7b9 a2d1 57ea 1f9a 4baf .mw..x....w...k. 0x00d0: bac9 8e12 7ec6 bdff 1603 0100 040e 0000 ....~........... 0x00e0: 00 . 2015-03-31 11:32:18.152999 ip (tos 0x0, ttl 64, id 30787, offset 0, flags [df], proto tcp (6), length 40) servera.14033 > serverb.8004: flags [.], cksum 0x6470 (correct), seq 337482805, ack 1742986417, win 205, length 0 0x0000: 4500 0028 7843 4000 4006 baf2 0a04 7a0e e..(xc@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 9435 67e3 dcb1 ....6..d...5g... 0x0020: 5010 00cd 6470 0000 p...dp.. 2015-03-31 11:32:18.166971 ip (tos 0x0, ttl 64, id 30788, offset 0, flags [df], proto tcp (6), length 307) servera.14033 > serverb.8004: flags [p.], cksum 0x08c0 (incorrect -> 0xf8ac), seq 337482805:337483072, ack 1742986417, win 205, length 267 0x0000: 4500 0133 7844 4000 4006 b9e6 0a04 7a0e e..3xd@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 9435 67e3 dcb1 ....6..d...5g... 0x0020: 5018 00cd 08c0 0000 1603 0101 0610 0001 p............... 0x0030: 0201 0086 f933 32c1 9576 1c51 5f32 c8b2 .....32..v.q_2.. 0x0040: 7b59 5d79 3fd1 45c4 43c7 2231 1336 ff4b {y]y?.e.c."1.6.k 0x0050: 3cb9 2851 88dd 377a 3bfc b7cf 7e8c 0c2c w..nk_...t. 0x00c0: f7b0 587c 73ca 1cd5 f292 304b 8eb1 2151 ..x|s.....0k..!q 0x00d0: ac45 ad62 4328 9ed0 dd74 6767 d5ea 986e .e.bc(...tgg...n 0x00e0: d14c def4 bcd2 ff1f a9e3 c047 acfe 0aee .l.........g.... 0x00f0: 2652 4e89 cf1c f700 6da5 1827 213a 4b1b &rn.....m..'!:k. 0x0100: d447 a3fd 35d1 8282 743a 17a2 b27f c66a .g..5...t:.....j 0x0110: 7fd1 db43 facb 6d89 614c 4f0d 7fb6 d985 ...c..m.alo..... 0x0120: 6ee1 b1c7 50ad 0dfe b218 dc21 9973 8894 n...p......!.s.. 0x0130: c0f0 42 ..b 2015-03-31 11:32:18.167830 ip (tos 0x0, ttl 64, id 30789, offset 0, flags [df], proto tcp (6), length 46) servera.14033 > serverb.8004: flags [p.], cksum 0x07bb (incorrect -> 0x4d53), seq 337483072:337483078, ack 1742986417, win 205, length 6 0x0000: 4500 002e 7845 4000 4006 baea 0a04 7a0e e...xe@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 9540 67e3 dcb1 ....6..d...@g... 0x0020: 5018 00cd 07bb 0000 1403 0100 0101 p............. 2015-03-31 11:32:18.168755 ip (tos 0x0, ttl 64, id 30790, offset 0, flags [df], proto tcp (6), length 81) servera.14033 > serverb.8004: flags [p.], cksum 0x07de (incorrect -> 0xf231), seq 337483078:337483119, ack 1742986417, win 205, length 41 0x0000: 4500 0051 7846 4000 4006 bac6 0a04 7a0e e..qxf@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 9546 67e3 dcb1 ....6..d...fg... 0x0020: 5018 00cd 07de 0000 1603 0100 24c4 5c80 p...........$.\. 0x0030: 8efa bc61 ecd8 bc27 0578 b2b9 36c2 4bad ...a...'.x..6.k. 0x0040: 9419 9bab 4c62 2259 84bf 1b60 f8e8 772c ....lb"y...`..w, 0x0050: fb . 2015-03-31 11:32:18.196123 ip (tos 0x0, ttl 247, id 24624, offset 0, flags [none], proto tcp (6), length 40) serverb.8004 > servera.14033: flags [.], cksum 0x5247 (correct), seq 1742986417, ack 337483078, win 4581, length 0 0x0000: 4500 0028 6030 0000 f706 5c05 cefd b48a e..(`0....\..... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dcb1 141d 9546 ..z..d6.g......f 0x0020: 5010 11e5 5247 0000 0000 0000 0000 p...rg........ 2015-03-31 11:32:18.197205 ip (tos 0x0, ttl 247, id 24628, offset 0, flags [none], proto tcp (6), length 87) serverb.8004 > servera.14033: flags [p.], cksum 0xc1b9 (correct), seq 1742986417:1742986464, ack 337483119, win 4622, length 47 0x0000: 4500 0057 6034 0000 f706 5bd2 cefd b48a e..w`4....[..... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dcb1 141d 956f ..z..d6.g......o 0x0020: 5018 120e c1b9 0000 1403 0100 0101 1603 p............... 0x0030: 0100 24df dca5 f8a1 8b4f 71de 93db 5d12 ..$......oq...]. 0x0040: 9c44 cdd9 555b bb7b 76d5 6b22 30af b533 .d..u[.{v.k"0..3 0x0050: 8522 b2f0 eed6 11 ."..... 2015-03-31 11:32:18.236557 ip (tos 0x0, ttl 64, id 30791, offset 0, flags [df], proto tcp (6), length 40) servera.14033 > serverb.8004: flags [.], cksum 0x6307 (correct), seq 337483119, ack 1742986464, win 205, length 0 0x0000: 4500 0028 7847 4000 4006 baee 0a04 7a0e e..(xg@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 956f 67e3 dce0 ....6..d...og... 0x0020: 5010 00cd 6307 0000 p...c... 2015-03-31 11:32:28.200453 ip (tos 0x0, ttl 64, id 30792, offset 0, flags [df], proto tcp (6), length 549) servera.14033 > serverb.8004: flags [p.], cksum 0x09b2 (incorrect -> 0x3a9c), seq 337483119:337483628, ack 1742986464, win 205, length 509 0x0000: 4500 0225 7848 4000 4006 b8f0 0a04 7a0e e..%xh@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 956f 67e3 dce0 ....6..d...og... 0x0020: 5018 00cd 09b2 0000 1703 0101 f8d4 7621 p.............v! 0x0030: 6c4f 7bf9 8de8 2ec8 048f fc38 37ee aa2a lo{........87..* 0x0040: ffe0 7052 95e1 3df8 a1fa 36c5 d1f2 bee9 ..pr..=...6..... 0x0050: 5b6f f4ab a895 5caf c024 2150 f52a dede [o....\..$!p.*.. 0x0060: 4042 22bd a443 1d38 c85a 0c12 0cbc 2f07 @b"..c.8.z..../. 0x0070: 7bf4 2cd4 f1f9 bacd 17d9 d456 f4be 47f1 {.,........v..g. 0x0080: 99c2 2f01 705f 2c8f 5b6c c4d9 041e 85b8 ../.p_,.[l...... 0x0090: 7a44 6bde 499f b86b 8c46 d55a 5571 6026 zdk.i..k.f.zuq`& 0x00a0: 6601 e57d b91b a45d e1c0 50c6 faaa 5eeb f..}...]..p...^. 0x00b0: afd7 4b72 3241 eb78 02a8 8787 35c7 214c ..kr2a.x....5.!l 0x00c0: 9035 1741 dde5 3b40 3471 1627 575a 8235 .5.a..;@4q.'wz.5 0x00d0: d256 2104 13c3 cdce cb9b abe2 4099 6e23 .v!.........@.n# 0x00e0: 6548 a2f8 6b89 78f2 c02f 6576 6f8b d96a eh..k.x../evo..j 0x00f0: 2e82 bfb8 b5eb 3319 6fdb 6acd 45d5 bf32 ......3.o.j.e..2 0x0100: b212 e525 e366 7483 35c9 a1a5 aadd b394 ...%.ft.5....... 0x0110: 7aa5 5b60 fb7a ab4d 77ef d883 c117 0bdf z.[`.z.mw....... 0x0120: 58b7 8778 a85f c5e1 b197 61e7 fdc5 e877 x..x._....a....w 0x0130: b66c 1e7e 32be 4c86 266a 225f 5e9a ec30 .l.~2.l.&j"_^..0 0x0140: be10 5d58 0787 a207 7d69 0aec bea2 4328 ..]x....}i....c( 0x0150: 2402 ab9d 52b3 0b0d a65b 3002 4ca6 dbec $...r....[0.l... 0x0160: b03a abe0 1164 254f 70b3 0515 f42a c54a .:...d%op....*.j 0x0170: 9f26 1264 b6af 042b 27ef 74a9 73a1 930b .&.d...+'.t.s... 0x0180: 7083 5780 1c9d 54b4 dec5 2794 0e7c 1c92 p.w...t...'..|.. 0x0190: 84ff a204 252a f85c 3c99 8e72 92a2 6645 ....%*.\ servera.14033: flags [.], cksum 0x4dcc (correct), seq 1742986464, ack 337483628, win 5131, length 0 0x0000: 4500 0028 7803 0000 f706 4432 cefd b48a e..(x.....d2.... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dce0 141d 976c ..z..d6.g......l 0x0020: 5010 140b 4dcc 0000 0000 0000 0000 p...m......... 2015-03-31 11:32:28.352967 ip (tos 0x0, ttl 64, id 30793, offset 0, flags [df], proto tcp (6), length 549) servera.14033 > serverb.8004: flags [p.], cksum 0x09b2 (incorrect -> 0x6c1d), seq 337483628:337484137, ack 1742986464, win 205, length 509 0x0000: 4500 0225 7849 4000 4006 b8ef 0a04 7a0e e..%xi@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 976c 67e3 dce0 ....6..d...lg... 0x0020: 5018 00cd 09b2 0000 1703 0101 f8a8 aec5 p............... 0x0030: 12bd 0d07 0766 9ae0 d9b4 ef64 21b5 51c4 .....f.....d!.q. 0x0040: a9e1 2f5d c678 addc 7f3b 51c8 395e 2d18 ../].x...;q.9^-. 0x0050: 782b 51ed 9fce cfb6 9221 d96f 6c1a de16 x+q......!.ol... 0x0060: 2ad2 ef52 d984 c8a8 13c5 746d 99bc b4ed *..r......tm.... 0x0070: c258 327e 0758 c5f6 6476 422c 3794 972d .x2~.x..dvb,7..- 0x0080: b018 e6e1 fa97 2b87 a8d4 d515 9799 ac35 ......+........5 0x0090: d5ae 878b b356 7b8d 4029 ec82 cc7b 408d .....v{.@)...{@. 0x00a0: 259a 9516 9104 91c9 1bd4 6957 2e31 a6a4 %.........iw.1.. 0x00b0: 0232 1820 9424 f141 ef6a 13eb 3389 b012 .2...$.a.j..3... 0x00c0: 5643 d35e dd9f 0b62 296f e946 0efa 53de vc.^...b)o.f..s. 0x00d0: 20a2 fdcf cc38 55d1 57f8 f8f5 a76e 74d1 .....8u.w....nt. 0x00e0: 507a 7fc4 d09f 5882 4965 b222 6c3b 3c9e pz....x.ie."l;....h 0x01e0: eb32 a4aa 7036 3824 8e6b ca66 8e48 13fe .2..p68$.k.f.h.. 0x01f0: 75e3 1ff2 a39c 3c20 bf6f 174f cb9b 6c02 u..... servera.14033: flags [.], cksum 0x49d2 (correct), seq 1742986464, ack 337484137, win 5640, length 0 0x0000: 4500 0028 784a 0000 f706 43eb cefd b48a e..(xj....c..... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dce0 141d 9969 ..z..d6.g......i 0x0020: 5010 1608 49d2 0000 0000 0000 0000 p...i......... 2015-03-31 11:32:28.505265 ip (tos 0x0, ttl 64, id 30794, offset 0, flags [df], proto tcp (6), length 549) servera.14033 > serverb.8004: flags [p.], cksum 0x09b2 (incorrect -> 0x2232), seq 337484137:337484646, ack 1742986464, win 205, length 509 0x0000: 4500 0225 784a 4000 4006 b8ee 0a04 7a0e e..%xj@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 9969 67e3 dce0 ....6..d...ig... 0x0020: 5018 00cd 09b2 0000 1703 0101 f84f 08ba p............o.. 0x0030: f2eb 392d 0788 0e12 1914 8d29 db0b 61e4 ..9-.......)..a. 0x0040: 11c4 3e4d 0433 4eb5 758b 42ad 0581 d6b7 ..>m.3n.u.b..... 0x0050: a9ac 47e0 c858 5fbc 81b9 3991 8446 4b7d ..g..x_...9..fk} 0x0060: 3516 e09d 0202 ad55 67e6 d1da 6482 9e11 5......ug...d... 0x0070: 1231 d4d4 bd77 264a 2117 549a fa15 9849 .1...w&j!.t....i 0x0080: 5019 1519 a62c 9e96 8623 c6d4 c669 ca4c p....,...#...i.l 0x0090: 1cdd c19c f8a9 95e6 4665 162e df93 e540 ........fe.....@ 0x00a0: 0fb7 955f b277 26b9 8723 adef d4de 9877 ..._.w&..#.....w 0x00b0: f96d 1e35 736a b821 d46d 549f adcd 6672 .m.5sj.!.mt...fr 0x00c0: 4986 d7a5 3339 64ba b88c fd16 88c8 3ac8 i...39d.......:. 0x00d0: 83b0 e533 0ff8 cbb1 7c45 680b 06ed 9c47 ...3....|eh....g 0x00e0: 1f9d 3837 aedb da12 670c bf51 22d8 f48f ..87....g..q"... 0x00f0: bf40 f88e d4ed 4a0b 1d36 4eb9 ace9 c007 .@....j..6n..... 0x0100: 4f2d 9647 aec1 3b5c 1bf9 22a5 86a7 9d92 o-.g..;\.."..... 0x0110: b44b 077e 3e84 03f8 97ce f07f f535 2e13 .k.~>........5.. 0x0120: 9dd1 914a 2c61 599f 4ed5 e492 b3d4 5f0f ...j,ay.n....._. 0x0130: 6c61 235c a38b 5b2b 753d b328 22a8 8f8b la#\..[+u=.("... 0x0140: cc1e 75a1 67b4 84f4 fa2e b235 5ee6 a845 ..u.g......5^..e 0x0150: 0754 9599 7f46 f761 77d7 6328 e0cc fe1a .t...f.aw.c(.... 0x0160: 5775 e892 e68d 003f d2c4 2c8c 8c65 5395 wu.....?..,..es. 0x0170: 16ac 91e3 f18c 7117 dfb6 c216 9cad acde ......q......... 0x0180: 3594 5ea7 9401 50c8 f8b7 eb7c 3e11 ddbf 5.^...p....|>... 0x0190: eaef 20ad 3030 2865 2963 c837 6edc 3580 ....00(e)c.7n.5. 0x01a0: b79c b88b f34c df62 47c0 cfaf d328 8090 .....l.bg....(.. 0x01b0: 1f90 7f15 a38e c5ea 1faa 2e53 0b29 5840 ...........s.)x@ 0x01c0: 5b1e b5fb a7cb 8417 e62e 13ac b212 dc85 [............... 0x01d0: 2fb9 4708 0b72 ac9d 22bc 7c50 db62 0296 /.g..r..".|p.b.. 0x01e0: 92f3 ad3e 279c e76b 2b1e 752b ac2b 100c ...>'..k+.u+.+.. 0x01f0: 9290 09c7 1cd6 ba11 1e5c 13d3 b0c0 9d76 .........\.....v 0x0200: a6ab 0df5 10b3 7059 e74b 960d bc34 0371 ......py.k...4.q 0x0210: 9715 4fcd f194 8fd7 28a2 feed faee 2f63 ..o.....(...../c 0x0220: a708 e77d 35 ...}5 2015-03-31 11:32:28.633819 ip (tos 0x0, ttl 247, id 30844, offset 0, flags [none], proto tcp (6), length 40) serverb.8004 > servera.14033: flags [.], cksum 0x45d8 (correct), seq 1742986464, ack 337484646, win 6149, length 0 0x0000: 4500 0028 787c 0000 f706 43b9 cefd b48a e..(x|....c..... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dce0 141d 9b66 ..z..d6.g......f 0x0020: 5010 1805 45d8 0000 0000 0000 0000 p...e......... 2015-03-31 11:32:28.656994 ip (tos 0x0, ttl 64, id 30795, offset 0, flags [df], proto tcp (6), length 549) servera.14033 > serverb.8004: flags [p.], cksum 0x09b2 (incorrect -> 0xfbfb), seq 337484646:337485155, ack 1742986464, win 205, length 509 0x0000: 4500 0225 784b 4000 4006 b8ed 0a04 7a0e e..%xk@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d 9b66 67e3 dce0 ....6..d...fg... 0x0020: 5018 00cd 09b2 0000 1703 0101 f8b8 e319 p............... 0x0030: c5b4 1996 a85d 2940 86ce 5908 c91e f700 .....])@..y..... 0x0040: 9f7a 9c04 920b bcd3 c4e8 d15d 1842 c5c5 .z.........].b.. 0x0050: 27fd e7a9 81f2 9894 d746 a850 6c82 a3eb '........f.pl... 0x0060: f372 cd30 9998 612e e54a 81b7 f044 85cb .r.0..a..j...d.. 0x0070: dff8 7554 4fdf d253 cb23 c538 0ff4 e08b ..uto..s.#.8.... 0x0080: 60a5 bdaf 60c1 0c19 6c25 baa8 c4bd f0f3 `...`...l%...... 0x0090: fb46 9d7e 58c1 87d8 8cdc 6e01 155e fec5 .f.~x.....n..^.. 0x00a0: a03f 97c2 3455 5fb7 1b4d 6ad1 7234 7f18 .?..4u_..mj.r4.. 0x00b0: c9a9 8b3d f5f2 f4cf 5f03 8bd6 6259 8dc8 ...=...._...by.. 0x00c0: 23c6 9dab f6eb 3ade cb9d 9b21 2cb7 b21d #.....:....!,... 0x00d0: 0cdb 4b18 e192 9390 94c2 98dd 6ef4 43ad ..k.........n.c. 0x00e0: 7512 2996 af87 e106 ed1e b12b 31d0 8bbf u.)........+1... 0x00f0: f6b1 8b09 e636 6ae8 f9e9 1bf0 aea9 c8da .....6j......... 0x0100: c49b b54e 28d2 dc16 431e fd8d cb34 be14 ...n(...c....4.. 0x0110: 88fc cc7b 2f6f 4bac 2d02 124b 5be2 c1a2 ...{/ok.-..k[... 0x0120: 64ed 4b18 361a c883 5982 a624 d13f b3e6 d.k.6...y..$.?.. 0x0130: 7161 cddf 99e6 9f80 f061 2df2 30cc e410 qa.......a-.0... 0x0140: eb45 319d 34c7 26a0 2d3b e636 230e b0d1 .e1.4.&.-;.6#... 0x0150: c0e6 a6e6 8279 9a13 7def 28be 2e27 2915 .....y..}.(..'). 0x0160: 8e02 b350 cd67 c41d e9fb f880 5a34 de1a ...p.g......z4.. 0x0170: b621 8017 68d9 6eca 54bb acc6 85ec a7d5 .!..h.n.t....... 0x0180: 4a2e 637b 4d4a 8e76 193d 0478 8bbf d283 j.c{mj.v.=.x.... 0x0190: 2f5a 43c1 4df8 3ef7 3143 8406 4a1a fc91 /zc.m.>.1c..j... 0x01a0: ec98 65b6 a607 b49a d13b 0923 41f2 58b6 ..e......;.#a.x. 0x01b0: 410c 2670 5e1b 8d2a 4c2f 3e07 01d6 dd8c a.&p^..*l/>..... 0x01c0: d46c 22a3 e4d2 863a 50fb f134 3602 9b44 .l"....:p..46..d 0x01d0: f881 802d 0402 0a77 fe2e 7e51 90e8 7783 ...-...w..~q..w. 0x01e0: 083c e00a b2e2 71d2 69c9 60d6 4598 6606 ..;, 0x0220: adaf 85c3 9a ..... 2015-03-31 11:32:28.787452 ip (tos 0x0, ttl 246, id 30877, offset 0, flags [none], proto tcp (6), length 40) serverb.8004 > servera.14033: flags [.], cksum 0x41de (correct), seq 1742986464, ack 337485155, win 6658, length 0 0x0000: 4500 0028 789d 0000 f606 4498 cefd b48a e..(x.....d..... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dce0 141d 9d63 ..z..d6.g......c 0x0020: 5010 1a02 41de 0000 0000 0000 0000 p...a......... ... ... 2015-03-31 11:32:30.442259 ip (tos 0x0, ttl 64, id 30806, offset 0, flags [df], proto tcp (6), length 76) servera.14033 > serverb.8004: flags [p.], cksum 0x07d9 (incorrect -> 0x05c7), seq 337490003:337490039, ack 1742986464, win 205, length 36 0x0000: 4500 004c 7856 4000 4006 babb 0a04 7a0e e..lxv@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d b053 67e3 dce0 ....6..d...sg... 0x0020: 5018 00cd 07d9 0000 1703 0100 1f19 7220 p.............r. 0x0030: 2042 f717 9a51 08ca d19b c82b 18bd 28db .b...q.....+..(. 0x0040: 8d53 b59f afe6 a382 fd47 6f79 .s.......goy 2015-03-31 11:32:30.442690 ip (tos 0x0, ttl 64, id 30807, offset 0, flags [df], proto tcp (6), length 40) servera.14033 > serverb.8004: flags [f.], cksum 0x47fe (correct), seq 337490039, ack 1742986464, win 205, length 0 0x0000: 4500 0028 7857 4000 4006 bade 0a04 7a0e e..(xw@.@.....z. 0x0010: cefd b48a 36d1 1f44 141d b077 67e3 dce0 ....6..d...wg... 0x0020: 5011 00cd 47fe 0000 p...g... 2015-03-31 11:32:30.471398 ip (tos 0x0, ttl 247, id 31726, offset 0, flags [none], proto tcp (6), length 40) serverb.8004 > servera.14033: flags [.], cksum 0x1bb5 (correct), seq 1742986464, ack 337490040, win 11542, length 0 0x0000: 4500 0028 7bee 0000 f706 4047 cefd b48a e..({.....@g.... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dce0 141d b078 ..z..d6.g......x 0x0020: 5010 2d16 1bb5 0000 0000 0000 0000 p.-........... 2015-03-31 11:32:30.594848 ip (tos 0x0, ttl 246, id 31815, offset 0, flags [none], proto tcp (6), length 40) serverb.8004 > servera.14033: flags [f.], cksum 0x1bb4 (correct), seq 1742986464, ack 337490040, win 11542, length 0 0x0000: 4500 0028 7c47 0000 f606 40ee cefd b48a e..(|g....@..... 0x0010: 0a04 7a0e 1f44 36d1 67e3 dce0 141d b078 ..z..d6.g......x 0x0020: 5011 2d16 1bb4 0000 0000 0000 0000 p.-........... 2015-03-31 11:32:30.594865 ip (tos 0x0, ttl 64, id 0, offset 0, flags [df], proto tcp (6), length 40) servera.14033 > serverb.8004: flags [.], cksum 0x47fd (correct), seq 337490040, ack 1742986465, win 205, length 0 0x0000: 4500 0028 0000 4000 4006 3336 0a04 7a0e e..(..@.@.36..z. 0x0010: cefd b48a 36d1 1f44 141d b078 67e3 dce1 ....6..d...xg... 0x0020: 5010 00cd 47fd 0000 p...g...
| find tcp tutorial, , @ parts cover flags (syn, ack, rst, fin, psh, urg), sequence numbers , acknowledgement numbers. acknowledgement number 1 system sends tells remote end packets have been received far... – twalberg mar 31 '15 @ 16:51 | ||
| thanks comment @twalberg. read wiki tcp/ip. tcpdump log makes more sense. see 3 way handshake connection establishment ([s], [s.], [.]) , 4 way connection termination ([f.],[.],[f.],[.]). understanding of sequence numbers , acknowledgements 1 can see data being sent server , server sending acknowledgements back. – ali apr 10 '15 @ 17:01 |