sudo tcpdump -c 50 -vvveni any dst port 443 tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes 12:42:15.503978 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 76: (tos 0x0, ttl 64, id 58680, offset 0, flags [DF], proto TCP (6), length 60) 10.0.0.14.39354 > 130.61.4.180.443: Flags [S], cksum 0x912d (incorrect -> 0x7e01), seq 1276523647, win 62720, options [mss 8960,sackOK,TS val 1673766628 ecr 0,nop,wscale 7], length 0 12:42:15.505132 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 58681, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39354 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x61b7), seq 1276523648, ack 3670265125, win 490, options [nop,nop,TS val 1673766629 ecr 132230045], length 0 12:42:15.514386 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 444: (tos 0x0, ttl 64, id 58682, offset 0, flags [DF], proto TCP (6), length 428) 10.0.0.14.39354 > 130.61.4.180.443: Flags [P.], cksum 0x929d (incorrect -> 0xccd6), seq 0:376, ack 1, win 490, options [nop,nop,TS val 1673766638 ecr 132230045], length 376 12:42:15.520794 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 58683, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39354 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x4eb6), seq 376, ack 4494, win 455, options [nop,nop,TS val 1673766644 ecr 132230061], length 0 12:42:15.522041 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 194: (tos 0x0, ttl 64, id 58684, offset 0, flags [DF], proto TCP (6), length 178) 10.0.0.14.39354 > 130.61.4.180.443: Flags [P.], cksum 0x91a3 (incorrect -> 0x7831), seq 376:502, ack 4494, win 455, options [nop,nop,TS val 1673766645 ecr 132230061], length 126 12:42:15.527795 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 58685, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39354 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x4e24), seq 502, ack 4500, win 455, options [nop,nop,TS val 1673766651 ecr 132230068], length 0 12:42:15.528325 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 58686, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39354 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x4df6), seq 502, ack 4545, win 455, options [nop,nop,TS val 1673766652 ecr 132230068], length 0 12:42:15.530401 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 3076: (tos 0x0, ttl 64, id 58687, offset 0, flags [DF], proto TCP (6), length 3060) 10.0.0.14.39354 > 130.61.4.180.443: Flags [P.], cksum 0x9ce5 (incorrect -> 0x37f9), seq 502:3510, ack 4545, win 455, options [nop,nop,TS val 1673766654 ecr 132230068], length 3008 12:42:15.533041 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 6449: (tos 0x0, ttl 64, id 58690, offset 0, flags [DF], proto TCP (6), length 6433) 10.0.0.14.39354 > 130.61.4.180.443: Flags [P.], cksum 0xaa12 (incorrect -> 0xb643), seq 3510:9891, ack 4545, win 455, options [nop,nop,TS val 1673766656 ecr 132230071], length 6381 12:42:15.640972 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 58695, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39354 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x2755), seq 9891, ack 4821, win 453, options [nop,nop,TS val 1673766765 ecr 132230181], length 0 12:42:15.642873 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 58696, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39354 > 130.61.4.180.443: Flags [F.], cksum 0x9125 (incorrect -> 0x2753), seq 9891, ack 4821, win 453, options [nop,nop,TS val 1673766766 ecr 132230181], length 0 12:42:15.645417 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 58697, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39354 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x274c), seq 9892, ack 4822, win 453, options [nop,nop,TS val 1673766769 ecr 132230184], length 0 12:42:25.746801 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 76: (tos 0x0, ttl 64, id 27842, offset 0, flags [DF], proto TCP (6), length 60) 10.0.0.14.39356 > 130.61.4.180.443: Flags [S], cksum 0x912d (incorrect -> 0xaa20), seq 3032512433, win 62720, options [mss 8960,sackOK,TS val 1673776870 ecr 0,nop,wscale 7], length 0 12:42:25.747920 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 27843, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39356 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x329a), seq 3032512434, ack 1752920744, win 490, options [nop,nop,TS val 1673776872 ecr 132240286], length 0 12:42:25.757222 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 444: (tos 0x0, ttl 64, id 27844, offset 0, flags [DF], proto TCP (6), length 428) 10.0.0.14.39356 > 130.61.4.180.443: Flags [P.], cksum 0x929d (incorrect -> 0x6b85), seq 0:376, ack 1, win 490, options [nop,nop,TS val 1673776881 ecr 132240286], length 376 12:42:25.763127 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 27845, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39356 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x1f98), seq 376, ack 4494, win 455, options [nop,nop,TS val 1673776887 ecr 132240303], length 0 12:42:25.764341 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 194: (tos 0x0, ttl 64, id 27846, offset 0, flags [DF], proto TCP (6), length 178) 10.0.0.14.39356 > 130.61.4.180.443: Flags [P.], cksum 0x91a3 (incorrect -> 0xd17f), seq 376:502, ack 4494, win 455, options [nop,nop,TS val 1673776888 ecr 132240303], length 126 12:42:25.770737 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 27847, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39356 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0x1ed9), seq 502, ack 4545, win 455, options [nop,nop,TS val 1673776894 ecr 132240310], length 0 12:42:25.773171 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 3076: (tos 0x0, ttl 64, id 27848, offset 0, flags [DF], proto TCP (6), length 3060) 10.0.0.14.39356 > 130.61.4.180.443: Flags [P.], cksum 0x9ce5 (incorrect -> 0x9c7c), seq 502:3510, ack 4545, win 455, options [nop,nop,TS val 1673776896 ecr 132240310], length 3008 12:42:25.773956 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 6449: (tos 0x0, ttl 64, id 27851, offset 0, flags [DF], proto TCP (6), length 6433) 10.0.0.14.39356 > 130.61.4.180.443: Flags [P.], cksum 0xaa12 (incorrect -> 0xe4a3), seq 3510:9891, ack 4545, win 455, options [nop,nop,TS val 1673776896 ecr 132240310], length 6381 12:42:25.811982 Out 02:00:17:02:a4:a2 ethertype IPv4 (0x0800), length 68: (tos 0x0, ttl 64, id 27856, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.14.39356 > 130.61.4.180.443: Flags [.], cksum 0x9125 (incorrect -> 0xf8c6), seq 9891, ack 4821, win 453, options [nop,nop,TS val 1673776936 ecr 132240351], length 0
Ich habe das VCN in Verdacht, siehe allerersten Link.
Anfänglich hatte ich damit auch Schwierigkeiten, ach was texte ich, immer noch habe ich die Schwierigkeiten.