Constant TCP traffic

Constant TCP traffic

Post by Heidi Ack » Fri, 22 Nov 1996 04:00:00



Hi,

When I use tcpdump (to look at tcp traffic, right?),  I
see a constant stream of traffic between my Linux box and
one of the nameservers on grounds.  

This seems to happen with Red Hat 4.0 (kernel 2.0.18) and Red
Hat 3.0.3 (kernel 1.2.13).

Any thoughts? Thanks.

 
 
 

1. (Q) constant traffic as seen by tcpdump

I notice that after setting up ipmasq
there is a constant stream of packets
even when nothing is happening.
Is this normal?
Here is a half-second's worth:
===============================
Script started on Wed Jan  2 00:54:21 2002

tcpdump: listening on eth1
00:54:32.287041 alfred.murphy.ie.telnet > william.proxim.1045: P 2027099440:2027099442(2) ack 2174463454 win 6432 <nop,nop,timestamp 1546739 187511> (DF) [tos 0x10]
00:54:32.296502 william.proxim.1045 > alfred.murphy.ie.telnet: . ack 2 win 33232 <nop,nop,timestamp 187513 1546739> (DF) [tos 0x10]
00:54:32.296611 alfred.murphy.ie.telnet > william.proxim.1045: P 2:30(28) ack 1 win 6432 <nop,nop,timestamp 1546740 187513> (DF) [tos 0x10]
00:54:32.307992 william.proxim.1045 > alfred.murphy.ie.telnet: . ack 30 win 33232 <nop,nop,timestamp 187514 1546740> (DF) [tos 0x10]
00:54:32.308058 alfred.murphy.ie.telnet > william.proxim.1045: P 30:473(443) ack 1 win 6432 <nop,nop,timestamp 1546741 187514> (DF) [tos 0x10]
00:54:32.325476 william.proxim.1045 > alfred.murphy.ie.telnet: . ack 473 win 33232 <nop,nop,timestamp 187516 1546741> (DF) [tos 0x10]
00:54:32.325539 alfred.murphy.ie.telnet > william.proxim.1045: P 473:753(280) ack 1 win 6432 <nop,nop,timestamp 1546743 187516> (DF) [tos 0x10]
00:54:32.375087 william.proxim.1045 > alfred.murphy.ie.telnet: . ack 753 win 33232 <nop,nop,timestamp 187521 1546743> (DF) [tos 0x10]
00:54:32.375161 alfred.murphy.ie.telnet > william.proxim.1045: P 753:1035(282) ack 1 win 6432 <nop,nop,timestamp 1546748 187521> (DF) [tos 0x10]
...
254 packets received by filter
0 packets dropped by kernel

Script done on Wed Jan  2 00:54:42 2002
===============================

--
Timothy Murphy  

tel: 086-233 6090
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

2. Soundblaster PCI 512

3. Constant Data Exhibits Constant Replicator 2.1 for Linux on IBMs

4. olvwm for *Intel* Solaris 2.1

5. utility to simulate web traffic across TCP/IP ?

6. Remote backup: How to do it?

7. TCP/IP Traffic

8. Can a Terminal Server interface to a TTY-based host?

9. Manipulating TCP traffic

10. TCP/IP disable - monitoring Internet traffic

11. Getting traffic rate traces bound to each active tcp link

12. How can I generate TCP/IP traffic (L2 lever and L3 lavel)

13. Allowing TCP Traffic Through Port 1680 Using ipchains