SVRBRIS50:~# tcpdump -nXi eth2 host 10.2.10.17 -s 65535 -vv tcpdump: listening on eth2, link-type EN10MB (Ethernet), capture size 65535 byte s 12:17:38.475820 IP (tos 0x0, ttl 62, id 56996, offset 0, flags [DF], length: 60) 10.1.0.103.42285 > 10.2.10.17.80: S [tcp sum ok] 1709176042:1709176042(0) win 5840 0x0000: 4500 003c dea4 4000 3e06 3f9d 0a01 0067 E..<..@.>.?....g 0x0010: 0a02 0a11 a52d 0050 65df f4ea 0000 0000 .....-.Pe....... 0x0020: a002 16d0 e83a 0000 0204 0572 0402 080a .....:.....r.... 0x0030: 002c 2a4e 0000 0000 0103 0302 .,*N........ 12:17:38.476336 IP (tos 0x0, ttl 254, id 200, offset 0, flags [DF], length: 44) 10.2.10.17.80 > 10.1.0.103.42285: S [tcp sum ok] 84056246:84056246(0) ack 1709176043 win 1394 0x0000: 4500 002c 00c8 4000 fe06 5d89 0a02 0a11 E..,..@...]..... 0x0010: 0a01 0067 0050 a52d 0502 98b6 65df f4eb ...g.P.-....e... 0x0020: 6012 0572 d636 0000 0204 05a6 0000 `..r.6........ 12:17:38.611103 IP (tos 0x0, ttl 62, id 56997, offset 0, flags [DF], length: 40) 10.1.0.103.42285 > 10.2.10.17.80: . [tcp sum ok] 1:1(0) ack 1 win 5840 0x0000: 4500 0028 dea5 4000 3e06 3fb0 0a01 0067 E..(..@.>.?....g 0x0010: 0a02 0a11 a52d 0050 65df f4eb 0502 98b7 .....-.Pe....... 0x0020: 5010 16d0 dc87 0000 P....... 12:17:38.659571 IP (tos 0x0, ttl 62, id 56998, offset 0, flags [DF], length: 500) 10.1.0.103.42285 > 10.2.10.17.80: P [tcp sum ok] 1:461(460) ack 1 win 5840 0x0000: 4500 01f4 dea6 4000 3e06 3de3 0a01 0067 E.....@.>.=....g 0x0010: 0a02 0a11 a52d 0050 65df f4eb 0502 98b7 .....-.Pe....... 0x0020: 5018 16d0 29b7 0000 4745 5420 2f20 4854 P...)...GET./.HT 0x0030: 5450 2f31 2e31 0d0a 486f 7374 3a20 3130 TP/1.1..Host:.10 0x0040: 2e32 2e31 302e 3137 0d0a 5573 6572 2d41 .2.10.17..User-A 0x0050: 6765 6e74 3a20 4d6f 7a69 6c6c 612f 352e gent:.Mozilla/5. 0x0060: 3020 2858 3131 3b20 553b 204c 696e 7578 0.(X11;.U;.Linux 0x0070: 2069 3638 363b 2065 6e2d 5553 3b20 7276 .i686;.en-US;.rv 0x0080: 3a31 2e38 2e30 2e34 2920 4765 636b 6f2f :1.8.0.4).Gecko/ 0x0090: 3230 3036 3034 3036 2046 6972 6566 6f78 20060406.Firefox 0x00a0: 2f31 2e35 2e30 2e34 2028 4465 6269 616e /1.5.0.4.(Debian 0x00b0: 2d31 2e35 2e64 6673 672b 312e 352e 302e -1.5.dfsg+1.5.0. 0x00c0: 342d 3129 0d0a 4163 6365 7074 3a20 7465 4-1)..Accept:.te 0x00d0: 7874 2f78 6d6c 2c61 7070 6c69 6361 7469 xt/xml,applicati 0x00e0: 6f6e 2f78 6d6c 2c61 7070 6c69 6361 7469 on/xml,applicati 0x00f0: 6f6e 2f78 6874 6d6c 2b78 6d6c 2c74 6578 on/xhtml+xml,tex 0x0100: 742f 6874 6d6c 3b71 3d30 2e39 2c74 6578 t/html;q=0.9,tex 0x0110: 742f 706c 6169 6e3b 713d 302e 382c 696d t/plain;q=0.8,im 0x0120: 6167 652f 706e 672c 2a2f 2a3b 713d 302e age/png,*/*;q=0. 0x0130: 350d 0a41 6363 6570 742d 4c61 6e67 7561 5..Accept-Langua 0x0140: 6765 3a20 656e 2d75 732c 656e 3b71 3d30 ge:.en-us,en;q=0 0x0150: 2e35 0d0a 4163 6365 7074 2d45 6e63 6f64 .5..Accept-Encod 0x0160: 696e 673a 2067 7a69 702c 6465 666c 6174 ing:.gzip,deflat 0x0170: 650d 0a41 6363 6570 742d 4368 6172 7365 e..Accept-Charse 0x0180: 743a 2049 534f 2d38 3835 392d 312c 7574 t:.ISO-8859-1,ut 0x0190: 662d 383b 713d 302e 372c 2a3b 713d 302e f-8;q=0.7,*;q=0. 0x01a0: 370d 0a4b 6565 702d 416c 6976 653a 2033 7..Keep-Alive:.3 0x01b0: 3030 0d0a 436f 6e6e 6563 7469 6f6e 3a20 00..Connection:. 0x01c0: 6b65 6570 2d61 6c69 7665 0d0a 436f 6f6b keep-alive..Cook 0x01d0: 6965 3a20 5365 7373 696f 6e49 643d 2232 ie:.SessionId="2 0x01e0: 6337 6130 3032 3735 3761 3265 3031 6522 c7a002757a2e01e" 0x01f0: 0d0a 0d0a .... 12:17:38.667670 IP (tos 0x0, ttl 254, id 201, offset 0, flags [DF], length: 1434) 10.2.10.17.80 > 10.1.0.103.42285: . [tcp sum ok] 1:1395(1394) ack 461 win 1394 0x0000: 4500 059a 00c9 4000 fe06 581a 0a02 0a11 E.....@...X..... 0x0010: 0a01 0067 0050 a52d 0502 98b7 65df f6b7 ...g.P.-....e... 0x0020: 5010 0572 b586 0000 4854 5450 2f31 2e30 P..r....HTTP/1.0 0x0030: 2032 3030 204f 4b0d 0a43 6f6e 7465 6e74 .200.OK..Content 0x0040: 2d54 7970 653a 2074 6578 742f 6874 6d6c -Type:.text/html 0x0050: 3b63 6861 7273 6574 3d69 736f 2d38 3835 ;charset=iso-885 0x0060: 392d 310d 0a53 6572 7665 723a 2047 7261 9-1..Server:.Gra 0x0070: 6e64 7374 7265 616d 2f31 2e31 300d 0a0d ndstream/1.10... 0x0080: 0a20 3c68 746d 6c3e 0d0a 3c68 6561 643e .... 0x0090: 0d0a 3c74 6974 6c65 3e47 7261 6e64 7374 ..Grandst 0x00a0: 7265 616d 2044 6576 6963 6520 436f 6e66 ream.Device.Conf 0x00b0: 6967 7572 6174 696f 6e3c 2f74 6974 6c65 iguration............ 0x01e0: 3c74 6162 6c65 2077 6964 7468 3d22 3630 ......... 0x0250: 203c 7464 2076 616c 6967 6e3d 2274 6f70 . 0x02b0: 0d0a 3c74 723e 3c74 6420 6865 6967 6874 ..Grand 0x0330: 7374 7265 616d 2044 6576 6963 6520 436f stream.Device.Co 0x0340: 6e66 6967 7572 6174 696f 6e3c 2f62 3e3c nfiguration< 0x0350: 2f66 6f6e 743e 3c2f 7374 726f 6e67 3e3c /font>< 0x0360: 2f74 643e 0d0a 3c2f 7472 3e0d 0a3c 7472 /td>....&n 0x03b0: 6273 703b 3c2f 7464 3e3c 2f74 723e 0d0a bsp;.. 0x03c0: 2020 2020 2020 2020 3c74 7220 6267 636f ........... 0x03e0: 2020 2020 2020 2020 2020 3c74 6420 616c ................ 0x0470: 2020 2020 2020 2020 2020 203c 7472 3e20 ............ 0x0480: 0d0a 2020 2020 2020 2020 2020 2020 2020 ................ 0x0490: 2020 3c74 6420 7769 6474 683d 3332 253e .. 0x04a0: 3c64 6976 2061 6c69 676e 3d72 6967 6874 Passwor 0x04d0: 643c 2f62 3e3c 2f66 6f6e 743e 3c2f 6469 d......... 0x04f0: 2020 2020 2020 2020 203c 7464 2077 6964 ......... 0x0540: 0d0a 2020 2020 2020 2020 2020 2020 2020 ................ 0x0550: 3c2f 7472 3e0d 0a20 2020 2020 2020 2020 ........... 0x0560: 2020 203c 2f74 6162 6c65 3e3c 2f74 643e ... 0x0570: 0d0a 2020 2020 2020 2020 3c2f 7472 3e0d ........... 0x0580: 0a20 2020 2020 2020 203c 7472 2062 6763 ................. 0x01c0: 3c66 6f72 6d20 6163 7469 6f6e 3d22 646f .. 10.2.10.17.80: P [tcp sum ok] 1:461(460) ack 1 win 5840 0x0000: 4500 01f4 dea7 4000 3e06 3de2 0a01 0067 E.....@.>.=....g 0x0010: 0a02 0a11 a52d 0050 65df f4eb 0502 98b7 .....-.Pe....... 0x0020: 5018 16d0 29b7 0000 4745 5420 2f20 4854 P...)...GET./.HT 0x0030: 5450 2f31 2e31 0d0a 486f 7374 3a20 3130 TP/1.1..Host:.10 0x0040: 2e32 2e31 302e 3137 0d0a 5573 6572 2d41 .2.10.17..User-A 0x0050: 6765 6e74 3a20 4d6f 7a69 6c6c 612f 352e gent:.Mozilla/5. 0x0060: 3020 2858 3131 3b20 553b 204c 696e 7578 0.(X11;.U;.Linux 0x0070: 2069 3638 363b 2065 6e2d 5553 3b20 7276 .i686;.en-US;.rv 0x0080: 3a31 2e38 2e30 2e34 2920 4765 636b 6f2f :1.8.0.4).Gecko/ 0x0090: 3230 3036 3034 3036 2046 6972 6566 6f78 20060406.Firefox 0x00a0: 2f31 2e35 2e30 2e34 2028 4465 6269 616e /1.5.0.4.(Debian 0x00b0: 2d31 2e35 2e64 6673 672b 312e 352e 302e -1.5.dfsg+1.5.0. 0x00c0: 342d 3129 0d0a 4163 6365 7074 3a20 7465 4-1)..Accept:.te 0x00d0: 7874 2f78 6d6c 2c61 7070 6c69 6361 7469 xt/xml,applicati 0x00e0: 6f6e 2f78 6d6c 2c61 7070 6c69 6361 7469 on/xml,applicati 0x00f0: 6f6e 2f78 6874 6d6c 2b78 6d6c 2c74 6578 on/xhtml+xml,tex 0x0100: 742f 6874 6d6c 3b71 3d30 2e39 2c74 6578 t/html;q=0.9,tex 0x0110: 742f 706c 6169 6e3b 713d 302e 382c 696d t/plain;q=0.8,im 0x0120: 6167 652f 706e 672c 2a2f 2a3b 713d 302e age/png,*/*;q=0. 0x0130: 350d 0a41 6363 6570 742d 4c61 6e67 7561 5..Accept-Langua 0x0140: 6765 3a20 656e 2d75 732c 656e 3b71 3d30 ge:.en-us,en;q=0 0x0150: 2e35 0d0a 4163 6365 7074 2d45 6e63 6f64 .5..Accept-Encod 0x0160: 696e 673a 2067 7a69 702c 6465 666c 6174 ing:.gzip,deflat 0x0170: 650d 0a41 6363 6570 742d 4368 6172 7365 e..Accept-Charse 0x0180: 743a 2049 534f 2d38 3835 392d 312c 7574 t:.ISO-8859-1,ut 0x0190: 662d 383b 713d 302e 372c 2a3b 713d 302e f-8;q=0.7,*;q=0. 0x01a0: 370d 0a4b 6565 702d 416c 6976 653a 2033 7..Keep-Alive:.3 0x01b0: 3030 0d0a 436f 6e6e 6563 7469 6f6e 3a20 00..Connection:. 0x01c0: 6b65 6570 2d61 6c69 7665 0d0a 436f 6f6b keep-alive..Cook 0x01d0: 6965 3a20 5365 7373 696f 6e49 643d 2232 ie:.SessionId="2 0x01e0: 6337 6130 3032 3735 3761 3265 3031 6522 c7a002757a2e01e" 0x01f0: 0d0a 0d0a .... 12:17:49.122409 IP (tos 0x0, ttl 254, id 203, offset 0, flags [DF], length: 40) 10.2.10.17.80 > 10.1.0.103.42285: . [tcp sum ok] 1:1(0) ack 461 win 1394 0x0000: 4500 0028 00cb 4000 fe06 5d8a 0a02 0a11 E..(..@...]..... 0x0010: 0a01 0067 0050 a52d 0502 98b7 65df f6b7 ...g.P.-....e... 0x0020: 5010 0572 ec19 0000 0000 0000 0000 P..r.......... 12:19:03.381606 IP (tos 0x0, ttl 62, id 57000, offset 0, flags [DF], length: 40) 10.1.0.103.42285 > 10.2.10.17.80: F [tcp sum ok] 461:461(0) ack 1 win 5840 0x0000: 4500 0028 dea8 4000 3e06 3fad 0a01 0067 E..(..@.>.?....g 0x0010: 0a02 0a11 a52d 0050 65df f6b7 0502 98b7 .....-.Pe....... 0x0020: 5011 16d0 daba 0000 P....... 12:19:03.386744 IP (tos 0x0, ttl 254, id 211, offset 0, flags [DF], length: 40) 10.2.10.17.80 > 10.1.0.103.42285: F [tcp sum ok] 1:1(0) ack 462 win 1394 0x0000: 4500 0028 00d3 4000 fe06 5d82 0a02 0a11 E..(..@...]..... 0x0010: 0a01 0067 0050 a52d 0502 98b7 65df f6b8 ...g.P.-....e... 0x0020: 5011 0572 ec17 0000 0000 0000 0000 P..r.......... 12:19:03.505592 IP (tos 0x0, ttl 62, id 57001, offset 0, flags [DF], length: 40) 10.1.0.103.42285 > 10.2.10.17.80: . [tcp sum ok] 462:462(0) ack 2 win 5840 0x0000: 4500 0028 dea9 4000 3e06 3fac 0a01 0067 E..(..@.>.?....g 0x0010: 0a02 0a11 a52d 0050 65df f6b8 0502 98b8 .....-.Pe....... 0x0020: 5010 16d0 dab9 0000 P.......