| nohack |
Bonjour,quand je visualise un fichier tcpdump avec ethereal,
les numero de sequences sont translate(on a que 0 ou 1),
comment faire pour obtenir les vrai num de sequences:
No. Time Source Destination Protocol Info
3 0.002254 195.221.38.16 195.71.49.251 TCP netbios-ssn > 3251 [SYN, ACK] Seq=0 Ack=1 Win=8760 Len=0 MSS=1460
Frame 3 (58 bytes on wire, 58 bytes captured)
Ethernet II, Src: 00:01:02:0a:fa:f2, Dst: 00:09:7c:1f:8a:ff
Internet Protocol, Src Addr: 195.221.38.16 (195.221.38.16), Dst Addr: 195.71.49.251 (195.71.49.251)
Transmission Control Protocol, Src Port: netbios-ssn (139), Dst Port: 3251 (3251), Seq: 0, Ack: 1, Len: 0
No. Time Source Destination Protocol Info
4 1.081847 195.71.49.251 195.221.38.16 TCP 3251 > netbios-ssn [ACK] Seq=1 Ack=1 Win=17520 Len=0
Frame 4 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:09:7c:1f:8a:ff, Dst: 00:01:02:0a:fa:f2
Internet Protocol, Src Addr: 195.71.49.251 (195.71.49.251), Dst Addr: 195.221.38.16 (195.221.38.16)
Transmission Control Protocol, Src Port: 3251 (3251), Dst Port: netbios-ssn (139), Seq: 1, Ack: 1, Len: 0 |
