December 2017
Intermediate to advanced
410 pages
11h 5m
English
Just to revise, 3-way handshake is one of the mandatory processes which are part of TCP protocol for communication between two entities.
The following output is part of TCP 3-way handshake captured by tcpdump:
root@mykplabs:~$ sudo tcpdump –i wlan0 host 139.162.21.95
20:34:10.082148 IP 10.10.0.210.52251 > 139.162.21.95.80: Flags [S], seq 3508972439, win 29200, options [mss 1460,sackOK,TS val 4720684 ecr 0,nop,wscale 7], length 0
20:34:10.175930 IP 139.162.21.95.80 > 10.10.0.210.52251: Flags [S.], seq 1849891626, ack 3508972440, win 28960, options [mss 1326,sackOK,TS val 3482350049 ecr 4720684,nop,wscale 7], length 0
20:34:10.176028 IP 10.10.0.210.52251 > 139.162.21.95.80: Flags [.], ack 1, win 229, options [nop,nop,TS val ...Read now
Unlock full access