root@myserver:~# sudo tcpdump -i any -c30 -nn -A port 443
tcpdump: data link type LINUX_SLL2
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes
03:01:51.578543 eth0 Out IP6 2a03:4000:2:f093:98c8:9dff:fe8a:1adf.45782 > 2620:0:862:ed1a::1.443: Flags [S], seq 2800354948, win 43200, options [mss 1440,sackOK,TS val 513185181 ecr 0,nop,wscale 11], length 0
`
...(.@*.@.............& ...b.....................................
............
03:01:52.582751 eth0 Out IP6 2a03:4000:2:f093:98c8:9dff:fe8a:1adf.45782 > 2620:0:862:ed1a::1.443: Flags [S], seq 2800354948, win 43200, options [mss 1440,sackOK,TS val 513186185 ecr 0,nop,wscale 11], length 0
`.#..(.@*.@.............& ...b.....................................
............
03:01:54.598688 eth0 Out IP6 2a03:4000:2:f093:98c8:9dff:fe8a:1adf.45782 > 2620:0:862:ed1a::1.443: Flags [S], seq 2800354948, win 43200, options [mss 1440,sackOK,TS val 513188201 ecr 0,nop,wscale 11], length 0
`..$.(.@*.@.............& ...b.....................................
...i........
03:01:58.854696 eth0 Out IP6 2a03:4000:2:f093:98c8:9dff:fe8a:1adf.45782 > 2620:0:862:ed1a::1.443: Flags [S], seq 2800354948, win 43200, options [mss 1440,sackOK,TS val 513192457 ecr 0,nop,wscale 11], length 0
`....(.@*.@.............& ...b.....................................
... ........
03:02:07.046700 eth0 Out IP6 2a03:4000:2:f093:98c8:9dff:fe8a:1adf.45782 > 2620:0:862:ed1a::1.443: Flags [S], seq 2800354948, win 43200, options [mss 1440,sackOK,TS val 513200649 ecr 0,nop,wscale 11], length 0
`.m:.(.@*.@.............& ...b.....................................
... ........
03:02:10.028806 eth0 In IP 40.77.167.1.31808 > 46.38.232.232.443: Flags [SEW], seq 3946431188, win 64240, options [mss 1440,nop,nop,sackOK], length 0
E..0.6@.o. 3(M...&..|@...9......p...u...........
03:02:10.029645 eth0 Out IP 46.38.232.232.443 > 40.77.167.1.31808: Flags [S.], seq 3047924625, ack 3946431189, win 42340, options [mss 1460,nop,nop,sackOK], length 0
E..0..@.@.Tk.&..(M....|@.....9..p..d............
03:02:10.122118 eth0 In IP 40.77.167.1.31808 > 46.38.232.232.443: Flags [.], ack 1, win 64240, length 0
E..(.7@.o. <(M...&..|@...9......P...I=........
03:02:10.125759 eth0 In IP 40.77.167.1.31808 > 46.38.232.232.443: Flags [P.], seq 1:353, ack 1, win 64240, length 352
E....8@.o...(M...&..|@...9......P...........[...W... ...Yk.g.......c<..........7I&. ....:.,....B..>9...X.......gI....(.....,.+.0./.$.#.(.'.
. .........=.<.5./.............myserver.de..........+......................................#...
...............h2.http/1.1.3.g.e...a. .]IO02Q.U....P83V.....q...V.k..|0....4_..>.{..Q...]4d7L\K.P..U.[..2.a.r...-o.=.9].g..V-...D...K.1............-....
03:02:10.125809 eth0 Out IP 46.38.232.232.443 > 40.77.167.1.31808: Flags [.], ack 353, win 41988, length 0
E..(2.@.@.!..&..(M....|@.....9.5P....w..
03:02:10.128751 eth0 Out IP 46.38.232.232.443 > 40.77.167.1.31808: Flags [P.], seq 1:2881, ack 353, win 41988, length 2880
E..h2.@.@..h.&..(M....|@.....9.5P.......................'{W... ...........G..*;..Q_ ....:.,....B..>9...X.......gI.......o.+.....3.e...a.*^..j....6W..JO..o......~....}..1a/..S...2.B.....c..]./..`...w4/.........V.(..z...pV......8.Hb............4..Y.;b...W0*..-....
.-.g.....0.......ER.....4..VL.2I.....A.G.J.C.$........g.3.....:!Qab&.s._E.....o.y(.'.e....eB..l..J..%.......<...S...q#..@.J....o..N.h.P...j;S:......|.t..d...R^.1.l.blX.R2......F..u(. ...d.........
..n.....7._Yk.n.)U....+K.wU..`...../^U...j3.b'..F....=$C. ...>d..'-ty@..F.I..k./2......O-
.N\..:...@w.3.*.T.?.....p .=.1q.$.....B...?......\..6!..4...f.E..?`..z..i3..8..<r......`...A*.Jr.}../%.7..f......I....1.f;..j.....L.T.j.....;y..E.cn.+...\....<....r$^._.*(.}V@....| ......z.(..R...~.W.F...&..lO...N_.jDK).^......5x..y....GVZLL.%EN.........\.....y&....r..?....dP...w........*...Z...i....P.......\.6.g..._3..X.Q..2P...B....'.fsG..#>.J........va7..kTH.B)........?..0r...Z-...h.qL7.M.*....5C......p.r..hx.Y&.W....#.....hE.},
.v..n....Mq.V..Tn.b'g.ox...?-*n.BE..9.......);d.7.!...Z.o.N..((gH...9YR!...#..h.7.c}5.Qi....$*.rSq..Z;3.514T...i ......S}...
c.9...<.7[".;... *+....<..:.=`sz...........r.E(.]v.Z&.Q.I....._,0.."..../.r'..s.\0..Oo.......@+..>g.....U:.w...S..&
).,\..GG..C.B......?&...n...lVrk..nd....h....J.jMe.>]h1A.@..x...}.Dp...)].63...0....-.L.v.n..z&........@~.......;....|.....).#.`.i..3P4..A.%.........~..b.O.9Ed....D......E../P1.B.ROU...}..y......kT.........?..~.=.m......L.#.3..B.._=P..0.Z..0i
.....>B9...... ..}iO.EL..Mu..I".r....V..V..-..5.....7+.j........3.....Vg.`.l...<..YW..p.S.xf........y.IU...].....
.Ow..p. ..Q.X...BIH.Hsp..UL...I7V.....k`}..........q....`.......E...-TW...N1...."`$....&.-D_...")y.....8.,J.R.
-n9z.!E~cJ.....#.%I...o.._..6"..4....b.....i&. ....^T..>!...~..mF.......6&..].s.....)...}iI|..".qY...z...v$Q...yq~8.,.....r2...&S..Fh.H.Z.KM...r...........u...P...n..E@.#X"?$ov.m9....k......Y...o...CPu.?,."T.... ...c"..t.....S^...V.k.g|a.b....[..2.....(M...........M....+...S...C..%.d..P`..U...*_K.. W0.....".v.y........f*...o.Y...+.^.........5..TM.......T.........o..q..T.)...<>.Cv_HD..[^...;..B3.wp.../.+H...T. .(K.P..#......P.. .k.....@].....g..~P{..I.N
.6U.jY.$.q.p.c.W-...?...W.7..%.....h.B+..599c.)|...i#...J..x.b.l......2v.J>.k..}0:......^L.. X..k..>t},..........?It..W....!<...OA.&.H.T.|4......m............. .....'N...W...SNj...6v.j.s....n.....<7.bh...y_0.Y\(7..>>..JB......y.j..{...k.P>...N%..xQz..3..Z6$(}#..P.J....
.gX.Q.0.p....lH..`K..l.34....0s..}.....c..".Q...t......,Q|.I.Yi.ItN.P.........Z..@.#......~........|...U(..m?}D?.>..j.5..B..:.. NW...[s...)......(\........;`...n...i|..;..L+.V.t......[cA...[Ix.......g.......t.......... K......
g......)s..N....Xqy$2.xb.
...
.
j..Hp.~..j.i"..<=..!......o..8.j.y$.!.....I....._.c.]....\o.^..l......d....+~...P.h.4+.R...)..Z..rt...l>..|..T..8..^..Jk..9..F....U..Q`.H..1.-T>L....0QH.....)...(..}.;*C..;.
...Y.H.e\...<...3l.}R.'^.........U`.......sO.rx..Q..`.y.......5.z
03:02:10.128778 eth0 Out IP 46.38.232.232.443 > 40.77.167.1.31808: Flags [P.], seq 2881:4097, ack 353, win 41988, length 1216
E...2.@.@....&..(M....|@.....9.5P....7......sR...r..C..gYd....&..=..q.k\:$..z."fq.;v..y&<.4w.\....5>.K.k.....o...`.....9.S.S...3..P..X.gx...R.S.{>t.9...&...&..#F._....-...&...W.Y%....$y...p.....K..t..k.b.}..zSQ.......;.6>..0.....?.wq
.R..a.5H.A}9M.N
O.d.....A....9..
....(...g-b..J....'-.S..."...c1...*2.'...uZ..a/Oi.{*R...yy..X.].....@.,/..*...i7>...tU.=......p..f..ir...u``
.?Su0k.....
_...c..n.v.+[..TZ..r..1.....T.Lb..V...W...EQ...G.-T[..[5.8.|...-\.C.D....E..Q."...3..Il.....}."..sYn.c._^9Z....Iu..x...g
.v...DP?.h.R\;...d.......P..9...g..'....C...s0...........d..G.:...$ L....X....D....B..BJ7....+@}.'_.#......"..L..x"N....q.|....Sg*wT..h,....}...8;....$>.....{T0.S*5....(1...\...Sr..u....H.....&1...d@E.... G.......y=...$3.m......... ...^..wa..n...t1)4v..+..;6......l.....i\o...X.......b...'..`.c+ =.S`.......%........{i....N..-.....o.t..G........d..z....1..`Ai...{....t.I.R./i.L..H:....J^.H...U..7.-..f?.[.Y.0K..,F.....C.<7.....p.....aK...$.....a_..k..@:."...fiR....O...W.....S_.BcH.....j.iv...c..\.R....v..]..*.v....R../....w....A../I.|.>N.F......}.)...].Wz%5.z......yx?.D.w.\.Q..t@Xcr.....................b)A..L.....F..... ..+..5.N..t.(....4../.8.f.~.....[..D{X. ].A..i..O..Z........ ..y.X...T......p...U......T.mK...A.Z.#4.^...Q.q-5.!,IO.1.....
03:02:10.129718 eth0 Out IP 46.38.232.232.443 > 40.77.167.1.31808: Flags [P.], seq 4097:4688, ack 353, win 41988, length 591
E..w2.@.@..V.&..(M....|@.....9.5P........-...C.V...=...5.X.;.-d.;.8....~
.UO....c....J.a....#.z.l.
.`..a.....E.GQ..L.......I....D......."......p.da..\e`1.....q...*...v....i....[.mC(...P..l...'..........a.d.B...|..[...t}?.....A....\."..,.......2..c.jC....Y.......Jx....-sc......m.y~N.e.,.g..x.qu.W.4.?.OE%.....X;C.d.:..i\.(...L.....z[..W...X..g.DK>.@i..|..#.b...B Z.:o..E..k....Z=....J......[..sX...%.p.!.....0zh.7.8....H-+..N#5..KZ...G.cl...7_\.....M.....tG.P\S..$..,.D..(NQK.O:S..j./T..vI..&..;.$..@...6,0..Pnq._..?.._ok.......u?. S..'KW.Pi.ur9..7.v$.....|....E%.o.-...M..jE...(.4.AM".g.6...-.@z..{....$/...l.CrL#..4#9..rE.s......
03:02:10.221198 eth0 In IP 40.77.167.1.31808 > 46.38.232.232.443: Flags [.], ack 4097, win 64240, length 0
E..(.9@.o. :(M...&..|@...9.5....P...7.........
03:02:10.221869 eth0 In IP 40.77.167.1.31808 > 46.38.232.232.443: Flags [.], ack 4688, win 63649, length 0
E..(.:@.o. 9(M...&..|@...9.5....P...7.........
03:02:10.233973 eth0 In IP 40.77.167.1.31808 > 46.38.232.232.443: Flags [P.], seq 353:433, ack 4688, win 63649, length 80
E..x.;@.o...(M...&..|@...9.5....P.................E........e......S$.._.GI.....|.b]..<J4j.:...t.^......^[....+....ZP.S.=
03:02:10.234214 eth0 Out IP 46.38.232.232.443 > 40.77.167.1.31808: Flags [P.], seq 4688:4767, ack 433, win 41988, length 79
E..w2.@.@.!U.&..(M....|@.....9..P...........J.,...(K..o....eW.e...kD'..k...MW$.+..+G......%g1..T...S.{..%...q...h....4.
03:02:10.234261 eth0 Out IP 46.38.232.232.443 > 40.77.167.1.31808: Flags [P.], seq 4767:4846, ack 433, win 41988, length 79
Alles anzeigen