Alexsandre,
I explained the whole header since you did not mention a specific part.
11:26:25.828347 mail.eccelera.com.br.3262 > proteus.hipernet.com.br.www: S
828883219:828883219(0) win 32120 <mss 1460,sackOK,timestamp 1546955 80
[|tcp]> (DF)
11:26:25.828347 - timestamp
mail.eccelera.com.br - host sending the packet
3262 - source port
proteus.hipernet.com.br - host receiving the packet
www - destination port (80)
S - syn flag
828883219:828883219(0) - The first number is the starting sequence number
of the packet and the second number is the ending sequence number of the
packet. The second number minus the first number tells you how many bytes
are in the segment. Since both numbers are the same there are zero bytes
of data hence the (0).
win 32120 - The window size being advertized by the host. This is how much
data in bytes the sending host will receive.
mss 1460 - This is the maximum segment size. It is the most data that can
be received in one packet without fragmenting the packet.
sackOK - I believe this option is saying that selective acknowledgements
are ok. This is in RFC1072.
timestamp 1546955 - timestamp
(DF) - don't fragment
Regards,
Jeffery Gieser
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
