On Monday 06 May 2002 10:03 pm, Scottie wrote: > Here is the dest dump. Pattern repeats > > 09:32:06.496890 66.162.8.121.1218 > 192.168.0.9.5800: S > 388761428:388761428(0) win 32120 <mss 1460,sackOK,timestamp 88330517 > 0,nop,wscale 0> (DF) > 17:51:09.329986 66.162.8.121.1218 > 192.168.0.9.5800: S > 388761428:388761428(0) win 32120 <mss 1460,sackOK,timestamp 88330517 > 0,nop,wscale 0> (DF) > 17:51:09.330056 192.168.0.9.5800 > 66.162.8.121.1218: S 8199528:8199528(0) > ack 388761429 win 8760 <mss 1460,nop,nop,sackOK> (DF) > 09:32:06.497333 66.162.8.121.1218 > 192.168.0.9.5800: R > 388761429:388761429(0) win 0
I don't understand the timestamps: 09:32:06..... 17:51:09..... 17:51:09..... 09:32:06..... Any why is the destination address now 192.168.0.9 when we were talking about 192.168.0.17 earlier ? Can you do a tcpdump on the same machine when you connect to it from a non-NATted client (eg something on the same network segment) and see how the VNC server responds ? Antony.
