On Wed, Oct 13, 1999 at 11:19:08AM +0100, Glynn Clements wrote:
>
> Alfonso Armenta wrote:
>
> > A simple question about tcpdump. I use the following command:
> >
> > % tcpdump -n -f -O -l -q -i eth0 tcp
> >
> > This gives me lots of the following:
> >
> > 09:13:36.803236 10.0.2.2.1991 > 10.0.1.1.8080: tcp 0 (DF)
> >
>
> The tcpdump manpage doesn't describe the format which is used when the
> -q switch is given, but my guess is that it is the relative sequence
> number.
Could be, bearing in mind that the usual SYN -> SYN+ACK -> ACK stuff can be
done without any actual data being sent towards either 'connected' host.
--
Giorgos Keramidas, <[EMAIL PROTECTED]>
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
