Share your knowledge at the LQ Wiki.
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 01-25-2011, 05:25 AM   #1
Registered: May 2008
Location: India
Distribution: Ubuntu 10.04, CentOS
Posts: 179

Rep: Reputation: 27
Question explanation on tcpdump output

Hi All,

OS: CentOS 5.5 64bit
IBM x3550

Need some explanation on the below output.

10:41:50.335250 IP (tos 0x0, ttl 117, id 30367, offset 0, flags [none], proto: TCP (6), length: 576) > . 102034896:102035432(536) ack 152861222 win 65535

10:41:50.335257 IP (tos 0x0, ttl 117, id 30368, offset 0, flags [none], proto: TCP (6), length: 333) > P 536:829(293) ack 1 win 65535
From the above output of tcpdump wherever there is flags [none] the window size is always 65535

can anyone explain me why the flag is set to none and why not DF and for having none why the window size is 65535?
Old 01-25-2011, 02:36 PM   #2
Senior Member
Registered: Apr 2009
Posts: 1,212

Rep: Reputation: 114Reputation: 114
It is explained in the tcpdump man page under the section "OUTPUT FORMAT" for flags.
Flags are some combination of S (SYN), F (FIN), P (PUSH), R (RST), W(ECN CWR) or E (ECN-Echo), or a single . (no flags).
Window size isn't relative to TCP flags.


output, tcpdump

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Netstat command output explanation. nobitavn Linux - Newbie 8 10-13-2010 11:21 AM
Need explanation how does the output comes????? immadisetty Programming 7 03-03-2010 03:11 AM
Explanation of iwconfig output? SlowCoder Linux - Networking 1 05-21-2009 04:19 AM
wlan diag output explanation shinystuffrox Linux - Wireless Networking 1 01-17-2008 06:08 PM
tcpdump output hampel Linux - Security 9 07-18-2003 12:53 AM

All times are GMT -5. The time now is 12:29 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration