keepalive message or not?
From: SB CH (chulmin2@hotmail.com)Date: 10/17/02
- Previous message: Frederick Garbrecht: "Re: Radius server for NT"
- Next in thread: Brad Arlt: "Re: keepalive message or not?"
- Reply: Brad Arlt: "Re: keepalive message or not?"
- Reply: Stephane Nasdrovisky: "Re: keepalive message or not?"
- Reply: Jaco van der Schyff: "Re: keepalive message or not?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "SB CH" <chulmin2@hotmail.com> To: security-basics@securityfocus.com Date: Thu, 17 Oct 2002 03:28:35 +0000
Hello all.
I remote connected my server using ssh and executed like this.
# tcpdump tcp
and I can see so lots of packets like this.
12:24:08.901473 eth0 < client.com.2157 > www.server.com.ssh: P
2801:2841(40) ack 13496 win 16736 (DF)
12:24:08.901481 eth0 < client.com.2157 > www.server.com.ssh: P
2801:2841(40) ack 13496 win 16736 (DF)
12:24:08.901483 eth0 < client.com.2157 > www.server.com.ssh: P
2801:2841(40) ack 13496 win 16736 (DF)
12:24:08.901492 eth0 < client.com.2157 > www.server.com.ssh: P
2801:2841(40) ack 13496 win 16736 (DF)
12:24:08.901498 eth0 < client.com.2157 > www.server.com.ssh: P
2801:2841(40) ack 13496 win 16736 (DF)
* client.com is my pc name.
Surely, I didn't do anything except ssh login and just tcpdump.
Is this a keepalive message or not?
Please let me know the meaning about this message.
Thanks in advance.
_________________________________________________________________
Áõ±Ç Á¤º¸ °¡Àå ºü¸£°í ÆíÇÏ°Ô º¸½Ç ¼ö ÀÖ½À´Ï´Ù. MSN Áõ±Ç/ÅõÀÚ
http://www.msn.co.kr/stock/
- Previous message: Frederick Garbrecht: "Re: Radius server for NT"
- Next in thread: Brad Arlt: "Re: keepalive message or not?"
- Reply: Brad Arlt: "Re: keepalive message or not?"
- Reply: Stephane Nasdrovisky: "Re: keepalive message or not?"
- Reply: Jaco van der Schyff: "Re: keepalive message or not?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]