[root@gateway2000 root]# tcpdump -i eth0 -nnxX -s 0 host 198.30.29.42 \ and port 80 tcpdump: listening on eth0 16:33:26.615288 172.16.35.180.3753 > 198.30.29.42.80: S 1376605564:1376605564(0) win 5840 <mss 1460,sackOK,timestamp 320257512 0,nop,wscale 0> (DF) 0x0000 4500 003c e894 4000 4006 9f1a ac10 23b4 E..<..@.@.....#. 0x0010 c61e 1d2a 0ea9 0050 520d 557c 0000 0000 ...*...PR.U|.... 0x0020 a002 16d0 f6a8 0000 0204 05b4 0402 080a ................ 0x0030 1316 bde8 0000 0000 0103 0300 ............ 16:33:26.837612 198.30.29.42.80 > 172.16.35.180.3753: S 1387810625:1387810625(0) ack 1376605565 win 5792 <mss 1460,sackOK,timestamp 993903177 320257512,nop,wscale 0> (DF) 0x0000 4500 003c 0000 4000 2f06 98af c61e 1d2a E..<..@./......* 0x0010 ac10 23b4 0050 0ea9 52b8 4f41 520d 557d ..#..P..R.OAR.U} 0x0020 a012 16a0 5747 0000 0204 05b4 0402 080a ....WG.......... 0x0030 3b3d c249 1316 bde8 0103 0300 ;=.I........ 16:33:26.837729 172.16.35.180.3753 > 198.30.29.42.80: . ack 1 win 5840 <nop,nop,timestamp 320257626 993903177> (DF) 0x0000 4500 0034 e895 4000 4006 9f21 ac10 23b4 E..4..@.@..!..#. 0x0010 c61e 1d2a 0ea9 0050 520d 557d 52b8 4f42 ...*...PR.U}R.OB 0x0020 8010 16d0 856a 0000 0101 080a 1316 be5a .....j.........Z 0x0030 3b3d c249 ;=.I 16:33:26.839464 172.16.35.180.3753 > 198.30.29.42.80: P 1:532(531) ack 1 win 5840 <nop,nop,timestamp 320257627 993903177> (DF) 0x0000 4500 0247 e896 4000 4006 9d0d ac10 23b4 E..G..@.@.....#. 0x0010 c61e 1d2a 0ea9 0050 520d 557d 52b8 4f42 ...*...PR.U}R.OB 0x0020 8018 16d0 adea 0000 0101 080a 1316 be5b ...............[ 0x0030 3b3d c249 4745 5420 2f73 7570 706f 7274 ;=.IGET./support 0x0040 2f79 756d 2f79 756d 636f 6e66 2e70 6870 /yum/yumconf.php 0x0050 3f76 6572 3d38 2e30 2048 5454 502f 312e ?ver=8.0.HTTP/1. 0x0060 310d 0a48 6f73 743a 2077 7777 2e6f 776c 1..Host:.www.owl 0x0070 7269 7665 722e 636f 6d0d 0a55 7365 722d river.com..User- 0x0080 4167 656e 743a 204d 6f7a 696c 6c61 2f35 Agent:.Mozilla/5 0x0090 2e30 2028 5831 313b 2055 3b20 4c69 6e75 .0.(X11;.U;.Linu 0x00a0 7820 6936 3836 3b20 656e 2d55 533b 2072 x.i686;.en-US;.r 0x00b0 763a 312e 302e 3129 2047 6563 6b6f 2f32 v:1.0.1).Gecko/2 0x00c0 3030 3231 3030 330d 0a41 6363 6570 743a 0021003..Accept: 0x00d0 2074 6578 742f 786d 6c2c 6170 706c 6963 .text/xml,applic 0x00e0 6174 696f 6e2f 786d 6c2c 6170 706c 6963 ation/xml,applic 0x00f0 6174 696f 6e2f 7868 746d 6c2b 786d 6c2c ation/xhtml+xml, 0x0100 7465 7874 2f68 746d 6c3b 713d 302e 392c text/html;q=0.9, 0x0110 7465 7874 2f70 6c61 696e 3b71 3d30 2e38 text/plain;q=0.8 0x0120 2c76 6964 656f 2f78 2d6d 6e67 2c69 6d61 ,video/x-mng,ima 0x0130 6765 2f70 6e67 2c69 6d61 6765 2f6a 7065 ge/png,image/jpe 0x0140 672c 696d 6167 652f 6769 663b 713d 302e g,image/gif;q=0. 0x0150 322c 7465 7874 2f63 7373 2c2a 2f2a 3b71 2,text/css,*/*;q 0x0160 3d30 2e31 0d0a 4163 6365 7074 2d4c 616e =0.1..Accept-Lan 0x0170 6775 6167 653a 2065 6e2d 7573 2c20 656e guage:.en-us,.en 0x0180 3b71 3d30 2e35 300d 0a41 6363 6570 742d ;q=0.50..Accept- 0x0190 456e 636f 6469 6e67 3a20 677a 6970 2c20 Encoding:.gzip,. 0x01a0 6465 666c 6174 652c 2063 6f6d 7072 6573 deflate,.compres 0x01b0 733b 713d 302e 390d 0a41 6363 6570 742d s;q=0.9..Accept- 0x01c0 4368 6172 7365 743a 2049 534f 2d38 3835 Charset:.ISO-885 0x01d0 392d 312c 2075 7466 2d38 3b71 3d30 2e36 9-1,.utf-8;q=0.6 0x01e0 362c 202a 3b71 3d30 2e36 360d 0a4b 6565 6,.*;q=0.66..Kee 0x01f0 702d 416c 6976 653a 2033 3030 0d0a 436f p-Alive:.300..Co 0x0200 6e6e 6563 7469 6f6e 3a20 6b65 6570 2d61 nnection:.keep-a 0x0210 6c69 7665 0d0a 5265 6665 7265 723a 2068 live..Referer:.h 0x0220 7474 703a 2f2f 7777 772e 6f77 6c72 6976 ttp://www.owlriv 0x0230 6572 2e63 6f6d 2f73 7570 706f 7274 2f79 er.com/support/y 0x0240 756d 2f0d 0a0d 0a um/.... 16:33:27.018548 198.30.29.42.80 > 172.16.35.180.3753: . ack 532 win 6432 <nop,nop,timestamp 993903195 320257627> (DF) 0x0000 4500 0034 8d19 4000 2f06 0b9e c61e 1d2a E..4..@./......* 0x0010 ac10 23b4 0050 0ea9 52b8 4f42 520d 5790 ..#..P..R.OBR.W. 0x0020 8010 1920 80f4 0000 0101 080a 3b3d c25b ............;=.[ 0x0030 1316 be5b ...[ 16:33:30.067835 198.30.29.42.80 > 172.16.35.180.3753: P 1:553(552) ack 532 win 6432 <nop,nop,timestamp 993903499 320257627> (DF) 0x0000 4500 025c 8d1a 4000 2f06 0975 c61e 1d2a E..\..@./..u...* 0x0010 ac10 23b4 0050 0ea9 52b8 4f42 520d 5790 ..#..P..R.OBR.W. 0x0020 8018 1920 781a 0000 0101 080a 3b3d c38b ....x.......;=.. 0x0030 1316 be5b 4854 5450 2f31 2e31 2032 3030 ...[HTTP/1.1.200 0x0040 204f 4b0d 0a44 6174 653a 2046 7269 2c20 .OK..Date:.Fri,. 0x0050 3134 2046 6562 2032 3030 3320 3231 3a33 14.Feb.2003.21:3 0x0060 333a 3236 2047 4d54 0d0a 5365 7276 6572 3:26.GMT..Server 0x0070 3a20 4170 6163 6865 2f31 2e33 2e32 3720 :.Apache/1.3.27. 0x0080 2855 6e69 7829 2020 2852 6564 2d48 6174 (Unix)..(Red-Hat 0x0090 2f4c 696e 7578 2920 5048 502f 342e 312e /Linux).PHP/4.1. 0x00a0 3220 6d6f 645f 7065 726c 2f31 2e32 360d 2.mod_perl/1.26. 0x00b0 0a58 2d50 6f77 6572 6564 2d42 793a 2050 .X-Powered-By:.P 0x00c0 4850 2f34 2e31 2e32 0d0a 436f 6e6e 6563 HP/4.1.2..Connec 0x00d0 7469 6f6e 3a20 636c 6f73 650d 0a54 7261 tion:.close..Tra 0x00e0 6e73 6665 722d 456e 636f 6469 6e67 3a20 nsfer-Encoding:. 0x00f0 6368 756e 6b65 640d 0a43 6f6e 7465 6e74 chunked..Content 0x0100 2d54 7970 653a 2074 6578 742f 6874 6d6c -Type:.text/html 0x0110 0d0a 0d0a 3133 630d 0a5b 6d61 696e 5d0a ....13c..[main]. 0x0120 6361 6368 6564 6972 3d2f 7661 722f 6361 cachedir=/var/ca 0x0130 6368 652f 7975 6d0a 6465 6275 676c 6576 che/yum.debuglev 0x0140 656c 3d32 0a6c 6f67 6669 6c65 3d2f 7661 el=2.logfile=/va 0x0150 722f 6c6f 672f 7975 6d2e 6c6f 670a 706b r/log/yum.log.pk 0x0160 6770 6f6c 6963 793d 6e65 7765 7374 0a0a gpolicy=newest.. 0x0170 5b62 6173 655d 0a6e 616d 653d 5265 6420 [base].name=Red. 0x0180 4861 7420 4c69 6e75 7820 382e 3020 6261 Hat.Linux.8.0.ba 0x0190 7365 0a62 6173 6575 726c 3d68 7474 703a se.baseurl=http: 0x01a0 2f2f 6d69 7272 6f72 2e64 756c 7567 2e64 //mirror.dulug.d 0x01b0 756b 652e 6564 752f 7075 622f 7975 6d2d uke.edu/pub/yum- 0x01c0 7265 706f 7369 746f 7279 2f72 6564 6861 repository/redha 0x01d0 742f 382e 302f 6933 3836 2f0a 0a0a 5b75 t/8.0/i386/...[u 0x01e0 7064 6174 6573 5d0a 6e61 6d65 3d52 6564 pdates].name=Red 0x01f0 2048 6174 204c 696e 7578 2038 2e30 2075 .Hat.Linux.8.0.u 0x0200 7064 6174 6573 0a62 6173 6575 726c 3d68 pdates.baseurl=h 0x0210 7474 703a 2f2f 6d69 7272 6f72 2e64 756c ttp://mirror.dul 0x0220 7567 2e64 756b 652e 6564 752f 7075 622f ug.duke.edu/pub/ 0x0230 7975 6d2d 7265 706f 7369 746f 7279 2f72 yum-repository/r 0x0240 6564 6861 742f 7570 6461 7465 732f 382e edhat/updates/8. 0x0250 302f 0a0a 0a0d 0a30 0d0a 0d0a 0/.....0.... 16:33:30.067919 172.16.35.180.3753 > 198.30.29.42.80: . ack 553 win 6624 <nop,nop,timestamp 320259280 993903499> (DF) 0x0000 4500 0034 e897 4000 4006 9f1f ac10 23b4 E..4..@.@.....#. 0x0010 c61e 1d2a 0ea9 0050 520d 5790 52b8 516a ...*...PR.W.R.Qj 0x0020 8010 19e0 7667 0000 0101 080a 1316 c4d0 ....vg.......... 0x0030 3b3d c38b ;=.. 16:33:30.068023 198.30.29.42.80 > 172.16.35.180.3753: F 553:553(0) ack 532 win 6432 <nop,nop,timestamp 993903499 320257627> (DF) 0x0000 4500 0034 8d1b 4000 2f06 0b9c c61e 1d2a E..4..@./......* 0x0010 ac10 23b4 0050 0ea9 52b8 516a 520d 5790 ..#..P..R.QjR.W. 0x0020 8011 1920 7d9b 0000 0101 080a 3b3d c38b ....}.......;=.. 0x0030 1316 be5b ...[ 16:33:30.105715 172.16.35.180.3753 > 198.30.29.42.80: . ack 554 win 6624 <nop,nop,timestamp 320259300 993903499> (DF) 0x0000 4500 0034 e898 4000 4006 9f1e ac10 23b4 E..4..@.@.....#. 0x0010 c61e 1d2a 0ea9 0050 520d 5790 52b8 516b ...*...PR.W.R.Qk 0x0020 8010 19e0 7652 0000 0101 080a 1316 c4e4 ....vR.......... 0x0030 3b3d c38b ;=.. 16:33:30.385123 172.16.35.180.3753 > 198.30.29.42.80: F 532:532(0) ack 554 win 6624 <nop,nop,timestamp 320259443 993903499> (DF) 0x0000 4500 0034 e899 4000 4006 9f1d ac10 23b4 E..4..@.@.....#. 0x0010 c61e 1d2a 0ea9 0050 520d 5790 52b8 516b ...*...PR.W.R.Qk 0x0020 8011 19e0 75c2 0000 0101 080a 1316 c573 ....u..........s 0x0030 3b3d c38b ;=.. 16:33:30.489627 198.30.29.42.80 > 172.16.35.180.3753: . ack 533 win 6432 <nop,nop,timestamp 993903542 320259443> (DF) 0x0000 4500 0034 8d1c 4000 2f06 0b9b c61e 1d2a E..4..@./......* 0x0010 ac10 23b4 0050 0ea9 52b8 516b 520d 5791 ..#..P..R.QkR.W. 0x0020 8010 1920 7657 0000 0101 080a 3b3d c3b6 ....vW......;=.. 0x0030 1316 c573 ...s