Need EXPERT tcpdump interpreter-port 80

Discussion in 'Linux Networking' started by mark, Sep 18, 2003.

  1. mark

    mark Guest

    Our network served by 65.116.161.134 cannot display the web site
    served by
    164.121.249.14. Below is results by my ISP looking at my firewall when
    my client machine tried to hit the 164.121.249.14 server. Any ideas as
    to what or where I need to look.
    Thanks in advance
    Mark

    15:33:04.464233 65.116.161.134.1791 > 164.121.249.14.80: S
    377769106:377769106(0) win 5840 <mss 1460,sackOK,timestamp 63162783
    0,nop,wscale 0> (DF)
    15:33:04.465029 65.116.161.134.1791 > 164.121.249.14.80: S
    377769106:377769106(0) win 5840 <mss 1460,sackOK,timestamp 63162783
    0,nop,wscale 0> (DF)
    15:33:04.474789 164.121.249.14.80 > 65.116.161.134.1791: S
    1942975210:1942975210(0) ack 377769107 win 8192 <mss 1460>
    15:33:04.475038 164.121.249.14.80 > 65.116.161.134.1791: S
    1942975210:1942975210(0) ack 377769107 win 8192 <mss 1460>
    15:33:04.505676 65.116.161.134.1791 > 164.121.249.14.80: . ack 1 win
    5840 (DF)
    15:33:04.506046 65.116.161.134.1791 > 164.121.249.14.80: . ack 1 win
    5840 (DF)
    15:33:04.506593 65.116.161.134.1791 > 164.121.249.14.80: P 1:4(3) ack
    1 win 5840 (DF)
    15:33:04.507048 65.116.161.134.1791 > 164.121.249.14.80: P 1:4(3) ack
    1 win 5840 (DF)
    15:33:04.518108 164.121.249.14.80 > 65.116.161.134.1791: . ack 4 win
    8192
    15:33:04.518632 164.121.249.14.80 > 65.116.161.134.1791: . ack 4 win
    8192
    15:33:08.504098 65.116.161.134.1791 > 164.121.249.14.80: F 4:4(0) ack
    1 win 5840 (DF)
    15:33:08.504295 65.116.161.134.1791 > 164.121.249.14.80: F 4:4(0) ack
    1 win 5840 (DF)
    15:33:08.515874 164.121.249.14.80 > 65.116.161.134.1791: F 1:1(0) ack
    5 win 8192
    15:33:08.516312 164.121.249.14.80 > 65.116.161.134.1791: F 1:1(0) ack
    5 win 8192
    15:33:08.539295 65.116.161.134.1791 > 164.121.249.14.80: . ack 2 win
    5840 (DF)
    15:33:08.539856 65.116.161.134.1791 > 164.121.249.14.80: . ack 2 win
    5840 (DF)
     
    mark, Sep 18, 2003
    #1
    1. Advertisements

  2. mark

    Andy Zhang Guest

    <dump snipped>

    It's a problem with the site itself; I can't access it either. Looks like
    it's trying to redirect you to a site that doesn't exist, namely
    "/en_US/deerecom/usa_canada.html". Note that your browser interprets this as
    an absolute address, not a relative one.

    Try connecting to port 80 of 164.121.249.14 and try it yourself:

    GET / HTTP/1.1
    Host: 164.121.249.14

    HTTP/1.0 200 OK
    Connection: close
    Server: Netscape-Enterprise/4.1
    Date: Tue, 22 Apr 2003 03:13:43 GMT
    Content-type: text/html; charset=utf-8
    Content-length: 77

    <META HTTP-equiv="refresh" content="0; URL=/en_US/deerecom/usa_canada.html">

    Note that if you specify your protocol as HTTP/1.0, it will return a page
    redirecting you to "http://siteunavailable.deere.com".
     
    Andy Zhang, Sep 19, 2003
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.