☰

TCPDUMP，tcp 标志未从标志 [S] 更改为其他标志值

tag-icon • tag-icon tcp socket tcpdump websocket
TCPDUMP，tcp 标志未从标志 [S] 更改为其他标志值

我需要支持来理解这些线条。

当我尝试连接到特定端口的服务器时，它显示正在连接并出现超时错误。

但是在 tcp-dump 命令中，数据包标志没有从 [s] 更改为其他标志。

查看以下日志并为我提供更好的解决方案。

07:30:42.787417 IP broadband.actcorp.in.44306 > xxx.xx.xxx.xx.5000: Flags [S], seq 416168771, win 29200, options [mss 1460,sackOK,TS val 1731483200 ecr 0,nop,wscale 7], length 0
E..<.C@./.6fj3.(..d.......;C......r.q..........
g4V@........
07:30:42.788613 IP broadband.actcorp.in.44304 > xxx.xxx.xxx.xx.5000: Flags [S], seq 288165140, win 29200, options [mss 1460,sackOK,TS val 1731483200 ecr 0,nop,wscale 7], length 0
E..<..@./...j3.(..d......-........r............
g4V@........
07:30:43.811043 IP broadband.actcorp.in.44306 > xxx.xxx.xxx.xx.5000: Flags [S], seq 416168771, win 29200, options [mss 1460,sackOK,TS val 1731484225 ecr 0,nop,wscale 7], length 0
E..<.D@./.6ej3.(..d.......;C......r.m..........
g4ZA........
07:30:43.812304 IP broadband.actcorp.in.44304 > xxx.xxx.xxx.xx.5000: Flags [S], seq 288165140, win 29200, options [mss 1460,sackOK,TS val 1731484225 ecr 0,nop,wscale 7], length 0
E..<..@./...j3.(..d......-........r............
g4ZA........
07:30:45.826800 IP broadband.actcorp.in.44306 > xxx.xxx.xxx.xx.5000: Flags [S], seq 416168771, win 29200, options [mss 1460,sackOK,TS val 1731486240 ecr 0,nop,wscale 7], length 0
E..<.E@./.6dj3.(..d.......;C......r.e..........
g4b ........
07:30:45.828063 IP broadband.actcorp.in.44304 > xxx.xxx.xxx.xx.5000: Flags [S], seq 288165140, win 29200, options [mss 1460,sackOK,TS val 1731486240 ecr 0,nop,wscale 7], length 0
E..<..@./...j3.(..d......-........r............
g4b ........
07:30:49.955119 IP broadband.actcorp.in.44306 > xxx.xxx.xxx.xx.5000: Flags [S], seq 416168771, win 29200, options [mss 1460,sackOK,TS val 1731490368 ecr 0,nop,wscale 7], length 0
E..<.F@./.6cj3.(..d.......;C......r.U..........
g4r@........
07:30:49.956179 IP broadband.actcorp.in.44304 > xxx.xxx.xxx.xx.5000: Flags [S], seq 288165140, win 29200, options [mss 1460,sackOK,TS val 1731490368 ecr 0,nop,wscale 7], length 0
E..<..@./...j3.(..d......-........r............
g4r@........
07:30:50.425698 IP 192.168.100.4.46835 > xxx.xxx.xxx.xx.5000: Flags [S], seq 3617736523, win 14600, options [mss 1460,sackOK,TS val 3944752462 ecr 0,nop,wscale 7], length 0
E..<b.@[email protected]............
. %N........
07:30:51.427297 IP 192.168.100.4.46835 > xxx.xxx.xxx.xx.5000: Flags [S], seq 3617736523, win 14600, options [mss 1460,sackOK,TS val 3944753464 ecr 0,nop,wscale 7], length 0
E..<b.@[email protected]............
. )8........
07:30:53.431409 IP 192.168.100.4.46835 > xxx.xxx.xxx.xx.5000: Flags [S], seq 3617736523, win 14600, options [mss 1460,sackOK,TS val 3944755468 ecr 0,nop,wscale 7], length 0
E..<b.@[email protected]............
. 1.........
07:30:57.435466 IP 192.168.100.4.46835 > xxx.xxx.xxx.xx.5000: Flags [S], seq 3617736523, win 14600, options [mss 1460,sackOK,TS val 3944759472 ecr 0,nop,wscale 7], length 0
E..<b.@[email protected].........
. @.........
07:30:58.147142 IP broadband.actcorp.in.44306 > xxx.xxx.xxx.xx.5000: Flags [S], seq 416168771, win 29200, options [mss 1460,sackOK,TS val 1731498561 ecr 0,nop,wscale 7], length 0
E..<.G@./.6bj3.(..d.......;C......r.5..........
g4.A........

答案1

这意味着远程主机没有应答您的连接请求或者回复 tcp SYN-ACK 被阻止或丢失。

相关内容