Scribd
Upload
72 views6 pages

Network Connectivity Analysis

The document contains a tcpdump output showing network traffic captured on the usb0 interface, detailing various IP packets including DNS queries and responses, TCP connections, and HTTP requests. It highlights interactions between the local IP address 192.168.225.25 and external IP addresses, particularly related to connectivity checks and DNS resolutions for domains like connectivitycheck.platform.hicloud.com and www.baidu.com. The output also includes ARP requests and responses, as well as ICMP echo requests to test connectivity.

Uploaded by

lcoitlolo
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
72 views6 pages

Network Connectivity Analysis

The document contains a tcpdump output showing network traffic captured on the usb0 interface, detailing various IP packets including DNS queries and responses, TCP connections, and HTTP requests. It highlights interactions between the local IP address 192.168.225.25 and external IP addresses, particularly related to connectivity checks and DNS resolutions for domains like connectivitycheck.platform.hicloud.com and www.baidu.com. The output also includes ARP requests and responses, as well as ICMP echo requests to test connectivity.

Uploaded by

lcoitlolo
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

tcpdump: listening on usb0, link-type EN10MB (Ethernet), capture size 262144 bytes

[Link].979607 IP (tos 0x0, ttl 64, id 43865, offset 0, flags [DF], proto UDP
(17), length 84)
[Link].49411 > [Link].53: [udp sum ok] 40165+ A?
[Link]. (56)
[Link].029360 IP (tos 0x0, ttl 64, id 3536, offset 0, flags [DF], proto UDP (17),
length 459)
[Link].53 > [Link].49411: [udp sum ok] 40165 q: A?
[Link]. 10/2/4
[Link]. CNAME
[Link].,
[Link]. CNAME
[Link].,
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link] ns: [Link].
NS [Link]., [Link]. NS [Link].
ar: [Link]. A [Link], [Link]. A
[Link], [Link]. AAAA [Link],
[Link]. AAAA [Link] (431)
[Link].035663 IP (tos 0x0, ttl 64, id 16710, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].60534 > [Link].80: Flags [S], cksum 0x63ce (correct), seq
2654569888, win 65535, options [mss 1460,sackOK,TS val 2380296735 ecr 0,nop,wscale
9], length 0
[Link].036415 IP (tos 0x0, ttl 64, id 38789, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].56686 > [Link].443: Flags [S], cksum 0x9cab (correct), seq
4139647450, win 65535, options [mss 1460,sackOK,TS val 2380296736 ecr 0,nop,wscale
9], length 0
[Link].069237 IP (tos 0x0, ttl 57, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].443 > [Link].56686: Flags [S.], cksum 0x7f92 (correct),
seq 3722629949, ack 4139647451, win 28960, options [mss 1380,sackOK,TS val
828033467 ecr 2380296736,nop,wscale 10], length 0
[Link].069634 IP (tos 0x0, ttl 64, id 38790, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].56686 > [Link].443: Flags [.], cksum 0x1e91 (correct), seq
1, ack 1, win 128, options [nop,nop,TS val 2380296769 ecr 828033467], length 0
[Link].069895 IP (tos 0x0, ttl 57, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].80 > [Link].60534: Flags [S.], cksum 0x3a2c (correct), seq
2834895828, ack 2654569889, win 28960, options [mss 1380,sackOK,TS val 1031388792
ecr 2380296735,nop,wscale 10], length 0
[Link].070198 IP (tos 0x0, ttl 64, id 16711, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60534 > [Link].80: Flags [.], cksum 0xd929 (correct), seq
1, ack 1, win 128, options [nop,nop,TS val 2380296769 ecr 1031388792], length 0
[Link].074459 IP (tos 0x0, ttl 64, id 38791, offset 0, flags [DF], proto TCP (6),
length 569)
[Link].56686 > [Link].443: Flags [P.], cksum 0x1049 (correct),
seq 1:518, ack 1, win 128, options [nop,nop,TS val 2380296774 ecr 828033467],
length 517
[Link].075117 IP (tos 0x0, ttl 64, id 16712, offset 0, flags [DF], proto TCP (6),
length 141)
[Link].60534 > [Link].80: Flags [P.], cksum 0xc776 (correct), seq
1:90, ack 1, win 128, options [nop,nop,TS val 2380296774 ecr 1031388792], length
89: HTTP, length: 89
GET /generate_204 HTTP/1.1
Host: [Link]
Accept: */*

[Link].112034 IP (tos 0x48, ttl 62, id 48791, offset 0, flags [none], proto TCP
(6), length 40)
[Link].443 > [Link].56686: Flags [R.], cksum 0x50d7 (correct),
seq 1, ack 518, win 128, length 0
[Link].116244 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has [Link]
tell [Link], length 28
[Link].116439 ARP, Ethernet (len 6), IPv4 (len 4), Reply [Link] is-at
[Link] (oui Unknown), length 28
[Link].116680 IP (tos 0x48, ttl 62, id 26712, offset 0, flags [none], proto TCP
(6), length 397)
[Link].80 > [Link].60534: Flags [FP.], cksum 0xe17c (correct),
seq 1:358, ack 90, win 128, length 357: HTTP, length: 357
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Content-Length: 174
Location: [Link]
Cache-Control: no-cache
Connection: Close

<html><head><title>302 Found</title></head><body><h1>302 Found</h1><p>The


document has moved <a
href="[Link]
http]
[Link].117372 IP (tos 0x0, ttl 64, id 16713, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60534 > [Link].80: Flags [F.], cksum 0xd736 (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380296817 ecr 1031388792], length 0
[Link].366553 IP (tos 0x0, ttl 64, id 16714, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60534 > [Link].80: Flags [F.], cksum 0xd63d (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380297066 ecr 1031388792], length 0
[Link].606510 IP (tos 0x0, ttl 64, id 16715, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60534 > [Link].80: Flags [F.], cksum 0xd54d (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380297306 ecr 1031388792], length 0
[Link].086505 IP (tos 0x0, ttl 64, id 16716, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60534 > [Link].80: Flags [F.], cksum 0xd36d (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380297786 ecr 1031388792], length 0
[Link].046586 IP (tos 0x0, ttl 64, id 16717, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60534 > [Link].80: Flags [F.], cksum 0xcfad (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380298746 ecr 1031388792], length 0
[Link].046547 IP (tos 0x0, ttl 64, id 16718, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60534 > [Link].80: Flags [F.], cksum 0xc7dd (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380300746 ecr 1031388792], length 0
[Link].961051 IP (tos 0x0, ttl 64, id 45043, offset 0, flags [DF], proto UDP
(17), length 59)
[Link].52007 > [Link].53: [udp sum ok] 44749+ A? [Link].
(31)
[Link].999968 IP (tos 0x0, ttl 64, id 3570, offset 0, flags [DF], proto UDP (17),
length 376)
[Link].53 > [Link].52007: [udp sum ok] 44749 q: A?
[Link]. 3/5/9 [Link]. CNAME [Link]., [Link]. A
[Link], [Link]. A [Link] ns: [Link]. NS
[Link]., [Link]. NS [Link]., [Link]. NS
[Link]., [Link]. NS [Link]., [Link]. NS
[Link]. ar: [Link]. A [Link], [Link]. A
[Link], [Link]. A [Link], [Link]. A
[Link], [Link]. A [Link], [Link]. A [Link],
[Link]. A [Link], [Link]. AAAA
[Link], [Link]. AAAA
[Link] (348)
[Link].001950 IP (tos 0x0, ttl 64, id 8315, offset 0, flags [DF], proto ICMP (1),
length 84)
[Link] > [Link]: ICMP echo request, id 5, seq 256, length 64
[Link].003323 IP (tos 0x0, ttl 64, id 8576, offset 0, flags [DF], proto ICMP (1),
length 84)
[Link] > [Link]: ICMP echo request, id 5, seq 512, length 64
[Link].003265 IP (tos 0x0, ttl 64, id 8637, offset 0, flags [DF], proto ICMP (1),
length 84)
[Link] > [Link]: ICMP echo request, id 5, seq 768, length 64
[Link].886508 IP (tos 0x0, ttl 64, id 16719, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60534 > [Link].80: Flags [F.], cksum 0xb8dd (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380304586 ecr 1031388792], length 0
[Link].913857 IP (tos 0x48, ttl 57, id 0, offset 0, flags [DF], proto TCP (6),
length 40)
[Link].80 > [Link].60534: Flags [R], cksum 0x3156 (correct), seq
2834896187, win 0, length 0
[Link].356808 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32)
fe80::f42d:44ff:fe31:dbd2 > ff02::1:ff49:dce2: [icmp6 sum ok] ICMP6, neighbor
solicitation, length 32, who has fe80::642d:c1ff:fe49:dce2
source link-address option (1), length 8 (1): [Link]
0x0000: fae1 77cf c02a
[Link].357054 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32)
fe80::642d:c1ff:fe49:dce2 > fe80::f42d:44ff:fe31:dbd2: [icmp6 sum ok] ICMP6,
neighbor advertisement, length 32, tgt is fe80::642d:c1ff:fe49:dce2, Flags
[solicited, override]
destination link-address option (2), length 8 (1): [Link]
0x0000: 662d c149 dce2
[Link].401790 IP (tos 0x0, ttl 64, id 4946, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].40168 > [Link].1883: Flags [S], cksum 0xdfa3 (correct),
seq 2808873142, win 65535, options [mss 1460,sackOK,TS val 854713204 ecr
0,nop,wscale 9], length 0
[Link].485803 IP (tos 0x14, ttl 52, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].1883 > [Link].40168: Flags [S.], cksum 0x1203 (correct),
seq 4129611136, ack 2808873143, win 28960, options [mss 1380,sackOK,TS val
2673994169 ecr 854713204,nop,wscale 7], length 0
[Link].486218 IP (tos 0x0, ttl 64, id 4947, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].40168 > [Link].1883: Flags [.], cksum 0xb0cb (correct),
seq 1, ack 1, win 128, options [nop,nop,TS val 854713288 ecr 2673994169], length 0
[Link].534047 IP (tos 0x0, ttl 64, id 4948, offset 0, flags [DF], proto TCP (6),
length 99)
[Link].40168 > [Link].1883: Flags [P.], cksum 0xab18 (correct),
seq 1:48, ack 1, win 128, options [nop,nop,TS val 854715336 ecr 2673994169], length
47
[Link].570947 IP (tos 0x48, ttl 63, id 14948, offset 0, flags [none], proto TCP
(6), length 40)
[Link].1883 > [Link].40168: Flags [R.], cksum 0x8985 (correct),
seq 1, ack 48, win 128, length 0
[Link].128706 IP (tos 0x0, ttl 64, id 50398, offset 0, flags [DF], proto UDP
(17), length 84)
[Link].47777 > [Link].53: [udp sum ok] 59726+ A?
[Link]. (56)
[Link].131566 IP (tos 0x0, ttl 64, id 3771, offset 0, flags [DF], proto UDP (17),
length 341)
[Link].53 > [Link].47777: [udp sum ok] 59726 q: A?
[Link]. 10/0/0
[Link]. CNAME
[Link].,
[Link]. CNAME
[Link].,
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link],
[Link]. A [Link] (313)
[Link].137231 IP (tos 0x0, ttl 64, id 15174, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].60870 > [Link].80: Flags [S], cksum 0x479d (correct), seq
3443915743, win 65535, options [mss 1460,sackOK,TS val 2380326836 ecr 0,nop,wscale
9], length 0
[Link].137921 IP (tos 0x0, ttl 64, id 39173, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].36902 > [Link].443: Flags [S], cksum 0xef33 (correct), seq
337996190, win 65535, options [mss 1460,sackOK,TS val 2380326837 ecr 0,nop,wscale
9], length 0
[Link].188352 IP (tos 0x0, ttl 57, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].443 > [Link].36902: Flags [S.], cksum 0xb871 (correct),
seq 2528248533, ack 337996191, win 28960, options [mss 1380,sackOK,TS val
3211750632 ecr 2380326837,nop,wscale 10], length 0
[Link].188724 IP (tos 0x0, ttl 64, id 39174, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].36902 > [Link].443: Flags [.], cksum 0x575e (correct), seq
1, ack 1, win 128, options [nop,nop,TS val 2380326888 ecr 3211750632], length 0
[Link].188873 IP (tos 0x0, ttl 57, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].80 > [Link].60870: Flags [S.], cksum 0xa77b (correct), seq
2941797469, ack 3443915744, win 28960, options [mss 1380,sackOK,TS val 2897645266
ecr 2380326836,nop,wscale 10], length 0
[Link].189058 IP (tos 0x0, ttl 64, id 15175, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60870 > [Link].80: Flags [.], cksum 0x4667 (correct), seq
1, ack 1, win 128, options [nop,nop,TS val 2380326888 ecr 2897645266], length 0
[Link].190159 IP (tos 0x0, ttl 64, id 15176, offset 0, flags [DF], proto TCP (6),
length 141)
[Link].60870 > [Link].80: Flags [P.], cksum 0x34b8 (correct), seq
1:90, ack 1, win 128, options [nop,nop,TS val 2380326889 ecr 2897645266], length
89: HTTP, length: 89
GET /generate_204 HTTP/1.1
Host: [Link]
Accept: */*

[Link].195124 IP (tos 0x0, ttl 64, id 39175, offset 0, flags [DF], proto TCP (6),
length 569)
[Link].36902 > [Link].443: Flags [P.], cksum 0xaf01 (correct),
seq 1:518, ack 1, win 128, options [nop,nop,TS val 2380326894 ecr 3211750632],
length 517
[Link].216086 IP (tos 0x48, ttl 62, id 25176, offset 0, flags [none], proto TCP
(6), length 397)
[Link].80 > [Link].60870: Flags [FP.], cksum 0x03f9 (correct),
seq 1:358, ack 90, win 128, length 357: HTTP, length: 357
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
Content-Length: 174
Location: [Link]
Cache-Control: no-cache
Connection: Close

<html><head><title>302 Found</title></head><body><h1>302 Found</h1><p>The


document has moved <a
href="[Link]
http]
[Link].216900 IP (tos 0x0, ttl 64, id 15177, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60870 > [Link].80: Flags [F.], cksum 0x4488 (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380326916 ecr 2897645266], length 0
[Link].226788 IP (tos 0x48, ttl 63, id 49175, offset 0, flags [none], proto TCP
(6), length 40)
[Link].443 > [Link].36902: Flags [R.], cksum 0x308e (correct),
seq 1, ack 518, win 128, length 0
[Link].473203 IP (tos 0x0, ttl 64, id 15178, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60870 > [Link].80: Flags [F.], cksum 0x4388 (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380327172 ecr 2897645266], length 0
[Link].743174 IP (tos 0x0, ttl 64, id 15179, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60870 > [Link].80: Flags [F.], cksum 0x427a (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380327442 ecr 2897645266], length 0
[Link].246500 IP (tos 0x0, ttl 64, id 15180, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60870 > [Link].80: Flags [F.], cksum 0x4082 (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380327946 ecr 2897645266], length 0
[Link].259825 IP (tos 0x0, ttl 64, id 15181, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60870 > [Link].80: Flags [F.], cksum 0x3c8d (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380328959 ecr 2897645266], length 0
[Link].339835 IP (tos 0x0, ttl 64, id 15182, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60870 > [Link].80: Flags [F.], cksum 0x346d (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380331039 ecr 2897645266], length 0
[Link].393077 IP (tos 0x0, ttl 64, id 15183, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].60870 > [Link].80: Flags [F.], cksum 0x2498 (correct), seq
90, ack 359, win 131, options [nop,nop,TS val 2380335092 ecr 2897645266], length 0
[Link].536002 IP (tos 0x48, ttl 57, id 0, offset 0, flags [DF], proto TCP (6),
length 40)
[Link].80 > [Link].60870: Flags [R], cksum 0xf91d (correct), seq
2941797828, win 0, length 0
[Link].637189 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32)
fe80::f42d:44ff:fe31:dbd2 > ff02::1:ff49:dce2: [icmp6 sum ok] ICMP6, neighbor
solicitation, length 32, who has fe80::642d:c1ff:fe49:dce2
source link-address option (1), length 8 (1): [Link]
0x0000: fae1 77cf c02a
[Link].637461 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32)
fe80::642d:c1ff:fe49:dce2 > fe80::f42d:44ff:fe31:dbd2: [icmp6 sum ok] ICMP6,
neighbor advertisement, length 32, tgt is fe80::642d:c1ff:fe49:dce2, Flags
[solicited, override]
destination link-address option (2), length 8 (1): [Link]
0x0000: 662d c149 dce2
[Link].197072 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has [Link]
tell [Link], length 28
[Link].197211 ARP, Ethernet (len 6), IPv4 (len 4), Reply [Link] is-at
[Link] (oui Unknown), length 28
[Link].846531 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32)
fe80::642d:c1ff:fe49:dce2 > fe80::f42d:44ff:fe31:dbd2: [icmp6 sum ok] ICMP6,
neighbor solicitation, length 32, who has fe80::f42d:44ff:fe31:dbd2
source link-address option (1), length 8 (1): [Link]
0x0000: 662d c149 dce2
[Link].848315 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24)
fe80::f42d:44ff:fe31:dbd2 > fe80::642d:c1ff:fe49:dce2: [icmp6 sum ok] ICMP6,
neighbor advertisement, length 24, tgt is fe80::f42d:44ff:fe31:dbd2, Flags [router,
solicited]
[Link].408215 IP (tos 0x0, ttl 64, id 6464, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].45828 > [Link].1883: Flags [S], cksum 0xfb80 (correct),
seq 220197843, win 65535, options [mss 1460,sackOK,TS val 854743210 ecr
0,nop,wscale 9], length 0
[Link].492351 IP (tos 0x14, ttl 50, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
[Link].1883 > [Link].45828: Flags [S.], cksum 0x7796 (correct),
seq 1401274674, ack 220197844, win 28960, options [mss 1380,sackOK,TS val
2674024176 ecr 854743210,nop,wscale 7], length 0
[Link].492718 IP (tos 0x0, ttl 64, id 6465, offset 0, flags [DF], proto TCP (6),
length 52)
[Link].45828 > [Link].1883: Flags [.], cksum 0x165e (correct),
seq 1, ack 1, win 128, options [nop,nop,TS val 854743295 ecr 2674024176], length 0
[Link].515812 IP (tos 0x0, ttl 64, id 6466, offset 0, flags [DF], proto TCP (6),
length 99)
[Link].45828 > [Link].1883: Flags [P.], cksum 0x10c4 (correct),
seq 1:48, ack 1, win 128, options [nop,nop,TS val 854745318 ecr 2674024176], length
47
[Link].559228 IP (tos 0x48, ttl 63, id 16466, offset 0, flags [none], proto TCP
(6), length 40)
[Link].1883 > [Link].45828: Flags [R.], cksum 0xd986 (correct),
seq 1, ack 48, win 128, length 0

65 packets captured
65 packets received by filter
0 packets dropped by kernel

You might also like