Need EXPERT tcpdump interpreter-port 80

Our network served by 65.116.161.134 cannot display the web site
served by
164.121.249.14. Below is results by my ISP looking at my firewall when
my client machine tried to hit the 164.121.249.14 server. Any ideas as
to what or where I need to look.
Thanks in advance
Mark

15:33:04.464233 65.116.161.134.1791 > 164.121.249.14.80: S
377769106:377769106(0) win 5840 <mss 1460,sackOK,timestamp 63162783
0,nop,wscale 0> (DF)
15:33:04.465029 65.116.161.134.1791 > 164.121.249.14.80: S
377769106:377769106(0) win 5840 <mss 1460,sackOK,timestamp 63162783
0,nop,wscale 0> (DF)
15:33:04.474789 164.121.249.14.80 > 65.116.161.134.1791: S
1942975210:1942975210(0) ack 377769107 win 8192 <mss 1460>
15:33:04.475038 164.121.249.14.80 > 65.116.161.134.1791: S
1942975210:1942975210(0) ack 377769107 win 8192 <mss 1460>
15:33:04.505676 65.116.161.134.1791 > 164.121.249.14.80: . ack 1 win
5840 (DF)
15:33:04.506046 65.116.161.134.1791 > 164.121.249.14.80: . ack 1 win
5840 (DF)
15:33:04.506593 65.116.161.134.1791 > 164.121.249.14.80: P 1:4(3) ack
1 win 5840 (DF)
15:33:04.507048 65.116.161.134.1791 > 164.121.249.14.80: P 1:4(3) ack
1 win 5840 (DF)
15:33:04.518108 164.121.249.14.80 > 65.116.161.134.1791: . ack 4 win
8192
15:33:04.518632 164.121.249.14.80 > 65.116.161.134.1791: . ack 4 win
8192
15:33:08.504098 65.116.161.134.1791 > 164.121.249.14.80: F 4:4(0) ack
1 win 5840 (DF)
15:33:08.504295 65.116.161.134.1791 > 164.121.249.14.80: F 4:4(0) ack
1 win 5840 (DF)
15:33:08.515874 164.121.249.14.80 > 65.116.161.134.1791: F 1:1(0) ack
5 win 8192
15:33:08.516312 164.121.249.14.80 > 65.116.161.134.1791: F 1:1(0) ack
5 win 8192
15:33:08.539295 65.116.161.134.1791 > 164.121.249.14.80: . ack 2 win
5840 (DF)
15:33:08.539856 65.116.161.134.1791 > 164.121.249.14.80: . ack 2 win
5840 (DF)

"mark" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> Our network served by 65.116.161.134 cannot display the web site
> served by
> 164.121.249.14. Below is results by my ISP looking at my firewall when
> my client machine tried to hit the 164.121.249.14 server. Any ideas as
> to what or where I need to look.
> Thanks in advance
> Mark
>
<dump snipped>

It's a problem with the site itself; I can't access it either. Looks like
it's trying to redirect you to a site that doesn't exist, namely
"/en_US/deerecom/usa_canada.html". Note that your browser interprets this as
an absolute address, not a relative one.

Try connecting to port 80 of 164.121.249.14 and try it yourself:

GET / HTTP/1.1
Host: 164.121.249.14

HTTP/1.0 200 OK
Connection: close
Server: Netscape-Enterprise/4.1
Date: Tue, 22 Apr 2003 03:13:43 GMT
Content-type: text/html; charset=utf-8
Content-length: 77

<META HTTP-equiv="refresh" content="0; URL=/en_US/deerecom/usa_canada.html">

Note that if you specify your protocol as HTTP/1.0, it will return a page
redirecting you to "http://siteunavailable.deere.com".

--
Andy Zhang

Remove "remove_this" to reply by email