[ale] Interpret.

[Randy Ramsdell]

Chris Fowler wrote:
> I want to make sure I'm interpreting this output correctly.
> 
> 09:28:11.529374 IP 169.240.128.15.32888 > 10.200.10.10.5000: S
> 1880371487:1880371487(0) win 5840 <mss 1380,sackOK,timestamp 544543
> 0,nop,wscale 0>


Syn ---> 10.200.10.10.5000

> 09:28:11.529390 IP 10.200.10.10.5000 > 169.240.128.15.32888: S
> 2934099079:2934099079(0) ack 1880371488 win 5792 <mss
> 1460,sackOK,timestamp 263860056 543343,nop,wscale 7>

Syn / Ack ---> 169.240.128.15.32888

> 09:28:21.005369 IP 10.200.10.10.5000 > 169.240.128.15.32888: S
> 2934099079:2934099079(0) ack 1880371488 win 5792 <mss
> 1460,sackOK,timestamp 263869533 543343,nop,wscale 7>



> 09:28:27.004963 IP 10.200.10.10.5000 > 169.240.128.15.32887: S
> 2864078318:2864078318(0) ack 3337269842 win 5792 <mss
> 1460,sackOK,timestamp 263875533 536742,nop,wscale 7>

> 09:28:45.202876 IP 10.200.10.10.5000 > 169.240.128.15.32888: S
> 2934099079:2934099079(0) ack 1880371488 win 5792 <mss
> 1460,sackOK,timestamp 263893733 543343,nop,wscale 7>

Keeps sending Syn

> 09:28:50.532050 IP 169.240.128.15.32889 > 10.200.10.10.5000: S
> 2093583909:2093583909(0) win 5840 <mss 1380,sackOK,timestamp 548444
> 0,nop,wscale 0>

Trying to connect again.

I don't see the 3way syn ---> syn/ack ---> ack

> 
> I'm seeing a packet from from 169.240.128.15.  Server sends ack but that
> does not seem to be seen by remote?
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo