node2:/root/test#netstat -i
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth1 1500 0 394336 0 0 0 426553 0 0 0 BMRU
lo 16436 0 180831 0 0 0 180831 0 0 0 LRU
You have mail in /var/spool/mail/root
node1:/root#netstat -i
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth1 1500 0 2103574 0 0 0 1766367 0 0 0 BMRU
lo 16436 0 280392 0 0 0 280392 0 0 0 LRU
发送1460长度数据:
You have mail in /var/spool/mail/root
node2:/root#tcpdump -S -i eth1 '((tcp) and (port 8080) and (host 192.168.137.2))'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
16:36:06.960304 IP node2.37039 > node1.webcache: Flags [S], seq 2881256472, win 14600, options [mss 1460,sackOK,TS val 128808655 ecr 0,nop,wscale 7], length 0
16:36:06.960468 IP node1.webcache > node2.37039: Flags [S.], seq 2175213438, ack 2881256473, win 14480, options [mss 1460,sackOK,TS val 53812485 ecr 128808655,nop,wscale 6], length 0
16:36:06.960484 IP node2.37039 > node1.webcache: Flags [.], ack 2175213439, win 115, options [nop,nop,TS val 128808655 ecr 53812485], length 0
16:36:06.960575 IP node2.37039 > node1.webcache: Flags [.], seq 2881256473:2881257921, ack 2175213439, win 115, options [nop,nop,TS val 128808655 ecr 53812485], length 1448
16:36:06.960613 IP node2.37039 > node1.webcache: Flags [P.], seq 2881257921:2881257933, ack 2175213439, win 115, options [nop,nop,TS val 128808655 ecr 53812485], length 12
16:36:06.960697 IP node2.37039 > node1.webcache: Flags [F.], seq 2881257933, ack 2175213439, win 115, options [nop,nop,TS val 128808655 ecr 53812485], length 0
16:36:06.960725 IP node1.webcache > node2.37039: Flags [.], ack 2881257921, win 272, options [nop,nop,TS val 53812486 ecr 128808655], length 0
16:36:06.960729 IP node1.webcache > node2.37039: Flags [.], ack 2881257933, win 272, options [nop,nop,TS val 53812486 ecr 128808655], length 0
16:36:06.961410 IP node1.webcache > node2.37039: Flags [F.], seq 2175213439, ack 2881257934, win 272, options [nop,nop,TS val 53812486 ecr 128808655], length 0
16:36:06.961421 IP node2.37039 > node1.webcache: Flags [.], ack 2175213440, win 115, options [nop,nop,TS val 128808656 ecr 53812486], length 0
发送1448长度数据:
node2:/root#tcpdump -S -i eth1 '((tcp) and (port 8080) and (host 192.168.137.2))'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
16:36:49.796258 IP node2.37058 > node1.webcache: Flags [S], seq 2092300878, win 14600, options [mss 1460,sackOK,TS val 128851490 ecr 0,nop,wscale 7], length 0
16:36:49.796436 IP node1.webcache > node2.37058: Flags [S.], seq 1347404752, ack 2092300879, win 14480, options [mss 1460,sackOK,TS val 53855321 ecr 128851490,nop,wscale 6], length 0
16:36:49.796453 IP node2.37058 > node1.webcache: Flags [.], ack 1347404753, win 115, options [nop,nop,TS val 128851491 ecr 53855321], length 0
16:36:49.796540 IP node2.37058 > node1.webcache: Flags [P.], seq 2092300879:2092302327, ack 1347404753, win 115, options [nop,nop,TS val 128851491 ecr 53855321], length 1448
16:36:49.796604 IP node2.37058 > node1.webcache: Flags [F.], seq 2092302327, ack 1347404753, win 115, options [nop,nop,TS val 128851491 ecr 53855321], length 0
16:36:49.796857 IP node1.webcache > node2.37058: Flags [.], ack 2092302327, win 272, options [nop,nop,TS val 53855322 ecr 128851491], length 0
16:36:49.797101 IP node1.webcache > node2.37058: Flags [F.], seq 1347404753, ack 2092302328, win 272, options [nop,nop,TS val 53855322 ecr 128851491], length 0
16:36:49.797112 IP node2.37058 > node1.webcache: Flags [.], ack 1347404754, win 115, options [nop,nop,TS val 128851491 ecr 53855322], length 0