[Openswan Users] KLIPS 2.4.x set tcp window to 0

Marco Berizzi pupilla at hotmail.com
Wed Dec 7 17:48:50 CET 2005


Marco Berizzi wrote:

>>PS: This month I posted some messages complaining that linux box was
>>extremely slow and sending out lot of packets. I wrongly thought that
>>behaviour was related to "klips_error:ipsec_sa_put: null pointer passed 
>>in!".
>>I'm thinking that behavior is related to this problem. I will try ASAP.

>Ok. Setting fragicmp=no resolves this problem.

This problem isn't solved. I will try to describe it.
This my network schema:

ftp client (windows nt4) 172.22.1.14
|
|
|172.22.1.254 (network 172.22.1.0/24)
linux box Openswan 2.4.4 IPsec
| public ip
|
|
internet
|
|
| public ip
linux box kernel 2.6.14 (NETKEY)
| 172.16.1.1 (network 172.16.0.0/23)
|
|
| 172.16.1.253
router (it's doing SNAT)
|
|
ftp server  10.180.71.9

The two networks 172.22.1.0/24 and 172.16.0.0/23 are connected with an ipsec 
tunnel implemented by Openswan 2.4.4 (KLIPS) on the 172.22.1.254 box and by 
Openswan 2.4.4 (NEYKEY) on the 172.16.1.1 box.
I'm snatting packets from 172.22.1.0/24 -->> 10.0.0.0/8 to 172.16.1.1 on the 
2.6.14 linux box. Then on the 172.16.1.1 box there is static route that 
forward all packets with DST ip 10.0.0.0/8 to 172.16.1.253
Today people complain that ftp GET (PUT is fine) isn't working anymore from 
the (for example) 172.22.1.14 to the 10.180.71.9 host.
I have tried to download a pretty small file (194122 bytes) and ncftp on 
windows is downloading only 18980 bytes (both active and passive mode). 
After a while ncftp is telling me "connection reset by peer".
The KLIPS 2.4.4 box has fragicmp set to no.

This is the tcpdump capture on the 2.6.14 box (tcpdump -n -p -i eth2 ip host 
10.180.71.9):

17:15:06.547724 IP (tos 0x10, ttl  54, id 24346, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42717 > 172.16.1.1.1334: . 
2739649786:2739651246(1460) ack 2282813263 win 65535
17:15:32.708428 IP (tos 0x10, ttl  54, id 25931, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42912 > 172.16.1.1.1360: . 
4260815896:4260817356(1460) ack 2346367135 win 65535
17:15:36.258178 IP (tos 0x0, ttl 126, id 43179, offset 0, flags [DF], proto: 
TCP (6), length: 59) 172.16.1.1.1321 > 10.180.71.9.21: P, cksum 0x3847 
(correct), 2243331842:2243331861(19) ack 2800541527 win 8760
17:15:36.264275 IP (tos 0x10, ttl  54, id 26011, offset 0, flags [none], 
proto: TCP (6), length: 52) 10.180.71.9.21 > 172.16.1.1.1321: P, cksum 
0x0eac (correct), 1:13(12) ack 19 win 65535
17:15:36.293443 IP (tos 0x0, ttl 126, id 43947, offset 0, flags [DF], proto: 
TCP (6), length: 59) 172.16.1.1.1321 > 10.180.71.9.21: P, cksum 0x4431 
(correct), 19:38(19) ack 13 win 8748
17:15:36.299554 IP (tos 0x10, ttl  54, id 26013, offset 0, flags [none], 
proto: TCP (6), length: 60) 10.180.71.9.21 > 172.16.1.1.1321: P, cksum 
0x49b3 (correct), 13:33(20) ack 38 win 65535
17:15:36.330105 IP (tos 0x0, ttl 126, id 44971, offset 0, flags [DF], proto: 
TCP (6), length: 46) 172.16.1.1.1321 > 10.180.71.9.21: P, cksum 0x45bd 
(correct), 38:44(6) ack 33 win 8728
17:15:36.336409 IP (tos 0x10, ttl  54, id 26014, offset 0, flags [none], 
proto: TCP (6), length: 88) 10.180.71.9.21 > 172.16.1.1.1321: P 33:81(48) 
ack 44 win 65535
17:15:36.375794 IP (tos 0x0, ttl 126, id 45483, offset 0, flags [DF], proto: 
TCP (6), length: 44) 172.16.1.1.1365 > 10.180.71.9.43049: S, cksum 0x0501 
(correct), 2395682829:2395682829(0) win 8192 <mss 1460>
17:15:36.387245 IP (tos 0x0, ttl  54, id 26015, offset 0, flags [none], 
proto: TCP (6), length: 44) 10.180.71.9.43049 > 172.16.1.1.1365: S, cksum 
0x8805 (correct), 29203245:29203245(0) ack 2395682830 win 65535 <mss 1460>
17:15:36.418587 IP (tos 0x0, ttl 126, id 45739, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x7d8a 
(correct), 1:1(0) ack 1 win 8760
17:15:36.420139 IP (tos 0x0, ttl 126, id 46507, offset 0, flags [DF], proto: 
TCP (6), length: 59) 172.16.1.1.1321 > 10.180.71.9.21: P, cksum 0x3f12 
(correct), 44:63(19) ack 81 win 8680
17:15:36.426501 IP (tos 0x10, ttl  54, id 26017, offset 0, flags [none], 
proto: TCP (6), length: 102) 10.180.71.9.21 > 172.16.1.1.1321: P 81:143(62) 
ack 63 win 65535
17:15:36.434135 IP (tos 0x10, ttl  54, id 26018, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
1:1461(1460) ack 1 win 65535
17:15:36.440041 IP (tos 0x10, ttl  54, id 26019, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
1461:2921(1460) ack 1 win 65535
17:15:36.440045 IP (tos 0x10, ttl  54, id 26021, offset 0, flags [none], 
proto: TCP (6), length: 64) 10.180.71.9.21 > 172.16.1.1.1321: P, cksum 
0x48e8 (correct), 143:167(24) ack 63 win 65535
17:15:36.446757 IP (tos 0x10, ttl  54, id 26020, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
2921:4381(1460) ack 1 win 65535
17:15:36.477041 IP (tos 0x0, ttl 126, id 47019, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x7222 
(correct), 1:1(0) ack 2921 win 8760
17:15:36.477967 IP (tos 0x0, ttl 126, id 47275, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1321 > 10.180.71.9.21: ., cksum 0xf651 
(correct), 63:63(0) ack 167 win 8594
17:15:36.483059 IP (tos 0x0, ttl 126, id 47531, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x6c6c 
(correct), 1:1(0) ack 4381 win 8760
17:15:36.489089 IP (tos 0x10, ttl  54, id 26024, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
4381:5841(1460) ack 1 win 65535
17:15:36.494991 IP (tos 0x10, ttl  54, id 26025, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
5841:7301(1460) ack 1 win 65535
17:15:36.501351 IP (tos 0x10, ttl  54, id 26026, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
7301:8761(1460) ack 1 win 65535
17:15:36.532281 IP (tos 0x0, ttl 126, id 48299, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x6106 
(correct), 1:1(0) ack 7301 win 8760
17:15:36.536893 IP (tos 0x0, ttl 126, id 48555, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x5b52 
(correct), 1:1(0) ack 8761 win 8760
17:15:36.544470 IP (tos 0x10, ttl  54, id 26027, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
8761:10221(1460) ack 1 win 65535
17:15:36.550374 IP (tos 0x10, ttl  54, id 26028, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
10221:11681(1460) ack 1 win 65535
17:15:36.556732 IP (tos 0x10, ttl  54, id 26029, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
11681:13141(1460) ack 1 win 65535
17:15:36.562634 IP (tos 0x10, ttl  54, id 26030, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
13141:14601(1460) ack 1 win 65535
17:15:36.568992 IP (tos 0x10, ttl  54, id 26031, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
14601:16061(1460) ack 1 win 65535
17:15:36.574897 IP (tos 0x10, ttl  54, id 26032, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
16061:17521(1460) ack 1 win 65535
17:15:36.583546 IP (tos 0x0, ttl 126, id 49067, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x4fea 
(correct), 1:1(0) ack 11681 win 8760
17:15:36.593221 IP (tos 0x0, ttl 126, id 49323, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x4a36 
(correct), 1:1(0) ack 13141 win 8760
17:15:36.605163 IP (tos 0x10, ttl  54, id 26033, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
17521:18981(1460) ack 1 win 65535
17:15:36.610376 IP (tos 0x0, ttl 126, id 49835, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x4482 
(correct), 1:1(0) ack 14601 win 8760
17:15:36.611068 IP (tos 0x10, ttl  54, id 26034, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:15:36.617424 IP (tos 0x10, ttl  54, id 26035, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
20441:21901(1460) ack 1 win 65535
17:15:36.623327 IP (tos 0x10, ttl  54, id 26036, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
21901:23361(1460) ack 1 win 65535
17:15:36.650645 IP (tos 0x0, ttl 126, id 50091, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x4482 
(correct), 1:1(0) ack 14601 win 8760
17:15:36.653481 IP (tos 0x0, ttl 126, id 50347, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x4482 
(correct), 1:1(0) ack 14601 win 8760
17:15:36.658056 IP (tos 0x0, ttl 126, id 50603, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x4482 
(correct), 1:1(0) ack 14601 win 8760
17:15:36.669872 IP (tos 0x10, ttl  54, id 26037, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
14601:16061(1460) ack 1 win 65535
17:15:36.700948 IP (tos 0x0, ttl 126, id 50859, offset 0, flags [DF], proto: 
TCP (6), length: 40) 172.16.1.1.1365 > 10.180.71.9.43049: ., cksum 0x3366 
(correct), 1:1(0) ack 18981 win 8760
17:15:36.712642 IP (tos 0x10, ttl  54, id 26038, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:15:36.718457 IP (tos 0x10, ttl  54, id 26039, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
23361:24821(1460) ack 1 win 65535
17:15:38.218459 IP (tos 0x10, ttl  54, id 26097, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:15:41.228486 IP (tos 0x10, ttl  54, id 26308, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:15:43.778858 IP (tos 0x10, ttl  54, id 26584, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42875 > 172.16.1.1.1358: . 
1915964949:1915966409(1460) ack 2340912482 win 65535
17:15:47.318707 IP (tos 0x10, ttl  54, id 26719, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42636 > 172.16.1.1.1331: . 
908333443:908334903(1460) ack 2264468519 win 65535
17:15:47.324525 IP (tos 0x10, ttl  54, id 26720, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:15:59.408971 IP (tos 0x10, ttl  54, id 27607, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:16:11.119084 IP (tos 0x10, ttl  54, id 28699, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42717 > 172.16.1.1.1334: . 
0:1460(1460) ack 1 win 65535
17:16:23.760621 IP (tos 0x10, ttl  54, id 29040, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:16:37.340060 IP (tos 0x10, ttl  54, id 29604, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42912 > 172.16.1.1.1360: . 
0:1460(1460) ack 1 win 65535
17:16:48.470893 IP (tos 0x10, ttl  54, id 30044, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42875 > 172.16.1.1.1358: . 
0:1460(1460) ack 1 win 65535
17:16:51.986240 IP (tos 0x10, ttl  54, id 30133, offset 0, flags [none], 
proto: TCP (6), length: 40) 10.180.71.9.42636 > 172.16.1.1.1331: R, cksum 
0x0df7 (correct), 7300:7300(0) ack 1 win 65535
17:17:12.110450 IP (tos 0x10, ttl  54, id 30851, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:17:15.614600 IP (tos 0x10, ttl  54, id 30949, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42717 > 172.16.1.1.1334: . 
0:1460(1460) ack 1 win 65535
17:17:41.706430 IP (tos 0x10, ttl  54, id 31501, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42912 > 172.16.1.1.1360: . 
0:1460(1460) ack 1 win 65535
17:17:52.808282 IP (tos 0x10, ttl  54, id 31741, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42875 > 172.16.1.1.1358: . 
0:1460(1460) ack 1 win 65535
17:18:16.442355 IP (tos 0x10, ttl  54, id 32776, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:18:19.938728 IP (tos 0x10, ttl  54, id 32894, offset 0, flags [none], 
proto: TCP (6), length: 40) 10.180.71.9.42717 > 172.16.1.1.1334: R, cksum 
0x0310 (correct), 8760:8760(0) ack 1 win 65535
17:18:46.093447 IP (tos 0x10, ttl  54, id 33460, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42912 > 172.16.1.1.1360: . 
0:1460(1460) ack 1 win 65535
17:18:57.154983 IP (tos 0x10, ttl  54, id 33645, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42875 > 172.16.1.1.1358: . 
0:1460(1460) ack 1 win 65535
17:19:20.781708 IP (tos 0x10, ttl  54, id 34382, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:19:50.509880 IP (tos 0x10, ttl  54, id 39421, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42912 > 172.16.1.1.1360: . 
0:1460(1460) ack 1 win 65535
17:20:01.609381 IP (tos 0x10, ttl  54, id 40574, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42875 > 172.16.1.1.1358: . 
0:1460(1460) ack 1 win 65535
17:20:25.296845 IP (tos 0x10, ttl  54, id 43700, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:20:55.016260 IP (tos 0x10, ttl  54, id 51231, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.42912 > 172.16.1.1.1360: . 
0:1460(1460) ack 1 win 65535
17:21:06.102182 IP (tos 0x10, ttl  54, id 52899, offset 0, flags [none], 
proto: TCP (6), length: 40) 10.180.71.9.42875 > 172.16.1.1.1358: R, cksum 
0x18ce (correct), 8760:8760(0) ack 1 win 65535
17:21:29.762998 IP (tos 0x10, ttl  54, id 57499, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:21:59.505606 IP (tos 0x10, ttl  54, id 61417, offset 0, flags [none], 
proto: TCP (6), length: 40) 10.180.71.9.42912 > 172.16.1.1.1360: R, cksum 
0xbb4f (correct), 8760:8760(0) ack 1 win 65535
17:22:34.296136 IP (tos 0x10, ttl  54, id 343, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:23:38.866224 IP (tos 0x10, ttl  54, id 4147, offset 0, flags [none], 
proto: TCP (6), length: 1500) 10.180.71.9.43049 > 172.16.1.1.1365: . 
18981:20441(1460) ack 1 win 65535
17:24:43.252005 IP (tos 0x10, ttl  54, id 7871, offset 0, flags [none], 
proto: TCP (6), length: 40) 10.180.71.9.43049 > 172.16.1.1.1365: R, cksum 
0x3eca (correct), 24821:24821(0) ack 1 win 65535

and this is the tcpdump capture on the KLIPS box (tcpdump -n -p -i ipsec0 ip 
host 10.180.71.9):

17:15:37.707048 IP (tos 0x0, ttl 127, id 43179, offset 0, flags [DF], 
length: 59) 172.22.1.14.1321 > 10.180.71.9.21: P [tcp sum ok] 
2243331842:2243331861(19) ack 2800541527 win 8760
17:15:37.743010 IP (tos 0x10, ttl  53, id 26011, offset 0, flags [none], 
length: 52) 10.180.71.9.21 > 172.22.1.14.1321: P [tcp sum ok] 1:13(12) ack 
19 win 65535
17:15:37.744227 IP (tos 0x0, ttl 127, id 43947, offset 0, flags [DF], 
length: 59) 172.22.1.14.1321 > 10.180.71.9.21: P [tcp sum ok] 19:38(19) ack 
13 win 8748
17:15:37.778629 IP (tos 0x10, ttl  53, id 26013, offset 0, flags [none], 
length: 60) 10.180.71.9.21 > 172.22.1.14.1321: P [tcp sum ok] 13:33(20) ack 
38 win 65535
17:15:37.780917 IP (tos 0x0, ttl 127, id 44971, offset 0, flags [DF], 
length: 46) 172.22.1.14.1321 > 10.180.71.9.21: P [tcp sum ok] 38:44(6) ack 
33 win 8728
17:15:37.814955 IP (tos 0x10, ttl  53, id 26014, offset 0, flags [none], 
length: 88) 10.180.71.9.21 > 172.22.1.14.1321: P 33:81(48) ack 44 win 65535
17:15:37.826280 IP (tos 0x0, ttl 127, id 45483, offset 0, flags [DF], 
length: 44) 172.22.1.14.1365 > 10.180.71.9.43049: S [tcp sum ok] 
2395682829:2395682829(0) win 8192 <mss 1460>
17:15:37.868829 IP (tos 0x0, ttl  53, id 26015, offset 0, flags [none], 
length: 44) 10.180.71.9.43049 > 172.22.1.14.1365: S [tcp sum ok] 
29203245:29203245(0) ack 2395682830 win 65535 <mss 1460>
17:15:37.869444 IP (tos 0x0, ttl 127, id 45739, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
1 win 8760
17:15:37.870240 IP (tos 0x0, ttl 127, id 46507, offset 0, flags [DF], 
length: 59) 172.22.1.14.1321 > 10.180.71.9.21: P [tcp sum ok] 44:63(19) ack 
81 win 8680
17:15:37.909652 IP (tos 0x10, ttl  53, id 26017, offset 0, flags [none], 
length: 102) 10.180.71.9.21 > 172.22.1.14.1321: P 81:143(62) ack 63 win 
65535
17:15:37.923158 IP (tos 0x10, ttl  53, id 26018, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 1:1389(1388) ack 1 win 
65535
17:15:37.923581 IP (tos 0x10, ttl  53, id 26018, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:37.926284 IP (tos 0x10, ttl  53, id 26019, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 1461:2849(1388) ack 1 
win 65535
17:15:37.926782 IP (tos 0x10, ttl  53, id 26019, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:37.927340 IP (tos 0x10, ttl  53, id 26021, offset 0, flags [none], 
length: 64) 10.180.71.9.21 > 172.22.1.14.1321: P [tcp sum ok] 143:167(24) 
ack 63 win 65535
17:15:37.928387 IP (tos 0x0, ttl 127, id 47019, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
2921 win 8760
17:15:37.928835 IP (tos 0x0, ttl 127, id 47275, offset 0, flags [DF], 
length: 40) 172.22.1.14.1321 > 10.180.71.9.21: . [tcp sum ok] 63:63(0) ack 
167 win 8594
17:15:37.932623 IP (tos 0x10, ttl  53, id 26020, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 2921:4309(1388) ack 1 
win 65535
17:15:37.933088 IP (tos 0x10, ttl  53, id 26020, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:37.934406 IP (tos 0x0, ttl 127, id 47531, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
4381 win 8760
17:15:37.973301 IP (tos 0x10, ttl  53, id 26024, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 4381:5769(1388) ack 1 
win 65535
17:15:37.973777 IP (tos 0x10, ttl  53, id 26024, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:37.982410 IP (tos 0x10, ttl  53, id 26025, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 5841:7229(1388) ack 1 
win 65535
17:15:37.982902 IP (tos 0x10, ttl  53, id 26025, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:37.984176 IP (tos 0x0, ttl 127, id 48299, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
7301 win 8760
17:15:37.986110 IP (tos 0x10, ttl  53, id 26026, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 7301:8689(1388) ack 1 
win 65535
17:15:37.986597 IP (tos 0x10, ttl  53, id 26026, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:37.987867 IP (tos 0x0, ttl 127, id 48555, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
8761 win 8760
17:15:38.028184 IP (tos 0x10, ttl  53, id 26027, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 8761:10149(1388) ack 1 
win 65535
17:15:38.028753 IP (tos 0x10, ttl  53, id 26027, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.033299 IP (tos 0x10, ttl  53, id 26028, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 10221:11609(1388) ack 
1 win 65535
17:15:38.033814 IP (tos 0x10, ttl  53, id 26028, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.035003 IP (tos 0x0, ttl 127, id 49067, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
11681 win 8760
17:15:38.041255 IP (tos 0x10, ttl  53, id 26029, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 11681:13069(1388) ack 
1 win 65535
17:15:38.041669 IP (tos 0x10, ttl  53, id 26029, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.042967 IP (tos 0x0, ttl 127, id 49323, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
13141 win 8760
17:15:38.045716 IP (tos 0x10, ttl  53, id 26030, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 13141:14529(1388) ack 
1 win 65535
17:15:38.046201 IP (tos 0x10, ttl  53, id 26030, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.053400 IP (tos 0x10, ttl  53, id 26031, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.059326 IP (tos 0x10, ttl  53, id 26032, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 16061:17449(1388) ack 
1 win 65535
17:15:38.059820 IP (tos 0x10, ttl  53, id 26032, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.061091 IP (tos 0x0, ttl 127, id 49835, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
14601 win 8760
17:15:38.087740 IP (tos 0x10, ttl  53, id 26033, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 17521:18909(1388) ack 
1 win 65535
17:15:38.088102 IP (tos 0x10, ttl  53, id 26033, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.089422 IP (tos 0x0, ttl 127, id 50091, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
14601 win 8760
17:15:38.096316 IP (tos 0x10, ttl  53, id 26034, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:15:38.102472 IP (tos 0x10, ttl  53, id 26035, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 20441:21829(1388) ack 
1 win 65535
17:15:38.102904 IP (tos 0x10, ttl  53, id 26035, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.104207 IP (tos 0x0, ttl 127, id 50347, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
14601 win 8760
17:15:38.107650 IP (tos 0x10, ttl  53, id 26036, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 21901:23289(1388) ack 
1 win 65535
17:15:38.108133 IP (tos 0x10, ttl  53, id 26036, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.109388 IP (tos 0x0, ttl 127, id 50603, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
14601 win 8760
17:15:38.151445 IP (tos 0x10, ttl  53, id 26037, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 14601:15989(1388) ack 
1 win 65535
17:15:38.151972 IP (tos 0x10, ttl  53, id 26037, offset 1408, flags [none], 
length: 92) 10.180.71.9 > 172.22.1.14: tcp
17:15:38.153030 IP (tos 0x0, ttl 127, id 50859, offset 0, flags [DF], 
length: 40) 172.22.1.14.1365 > 10.180.71.9.43049: . [tcp sum ok] 1:1(0) ack 
18981 win 8760
17:15:38.196509 IP (tos 0x10, ttl  53, id 26038, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:15:38.203432 IP (tos 0x10, ttl  53, id 26039, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 23361:24749(1388) ack 
1 win 65535
17:15:39.703129 IP (tos 0x10, ttl  53, id 26097, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:15:42.714740 IP (tos 0x10, ttl  53, id 26308, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:15:48.809293 IP (tos 0x10, ttl  53, id 26720, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:16:00.893634 IP (tos 0x10, ttl  53, id 27607, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:16:25.246332 IP (tos 0x10, ttl  53, id 29040, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:17:13.597427 IP (tos 0x10, ttl  53, id 30851, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:18:17.931314 IP (tos 0x10, ttl  53, id 32776, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:19:22.274858 IP (tos 0x10, ttl  53, id 34382, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:20:26.790019 IP (tos 0x10, ttl  53, id 43700, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:21:31.258485 IP (tos 0x10, ttl  53, id 57499, offset 0, flags [+], 
length: 1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 
1 win 65535
17:22:35.793613 IP (tos 0x10, ttl  53, id 343, offset 0, flags [+], length: 
1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 1 win 
65535
17:23:40.366337 IP (tos 0x10, ttl  53, id 4147, offset 0, flags [+], length: 
1428) 10.180.71.9.43049 > 172.22.1.14.1365: . 18981:20369(1388) ack 1 win 
65535
17:24:44.748067 IP (tos 0x10, ttl  53, id 7871, offset 0, flags [none], 
length: 40) 10.180.71.9.43049 > 172.22.1.14.1365: R [tcp sum ok] 
24821:24821(0) ack 1 win 65535

Switching the Openswan KLIPS 2.4.4 box to FreeS/WAN 2.05 resolves the 
problem (setting both icmpfrag=yes & no). Here is the tcpdump capture on 
FreeS/WAN 2.05:

17:20:25.028973 IP (tos 0x0, ttl 127, id 4219, offset 0, flags [DF], length: 
63) 172.17.1.13.1335 > 10.180.71.9.21: P [tcp sum ok] 
2022743550:2022743573(23) ack 3335466894 win 8647
17:20:25.059911 IP (tos 0x10, ttl  53, id 983, offset 0, flags [none], 
length: 70) 10.180.71.9.21 > 172.17.1.13.1335: P [tcp sum ok] 1:31(30) ack 
23 win 65535
17:20:25.065348 IP (tos 0x0, ttl 127, id 4475, offset 0, flags [DF], length: 
51) 172.17.1.13.1335 > 10.180.71.9.21: P [tcp sum ok] 23:34(11) ack 31 win 
8617
17:20:25.111691 IP (tos 0x8, ttl  53, id 986, offset 0, flags [none], 
length: 60) 10.180.71.9.20 > 172.17.1.13.1347: S [tcp sum ok] 
3154287132:3154287132(0) win 65535 <mss 1460,nop,wscale 3,nop,nop,timestamp 
1137344486 0>
17:20:25.112142 IP (tos 0x0, ttl 127, id 4987, offset 0, flags [DF], length: 
44) 172.17.1.13.1347 > 10.180.71.9.20: S [tcp sum ok] 
2127376289:2127376289(0) ack 3154287133 win 8760 <mss 1460>
17:20:25.138944 IP (tos 0x10, ttl  53, id 988, offset 0, flags [none], 
length: 40) 10.180.71.9.21 > 172.17.1.13.1335: . [tcp sum ok] 31:31(0) ack 
34 win 65535
17:20:25.139582 IP (tos 0x8, ttl  53, id 989, offset 0, flags [none], 
length: 40) 10.180.71.9.20 > 172.17.1.13.1347: . [tcp sum ok] 1:1(0) ack 1 
win 65535
17:20:25.141841 IP (tos 0x10, ttl  53, id 990, offset 0, flags [none], 
length: 94) 10.180.71.9.21 > 172.17.1.13.1335: P 31:85(54) ack 34 win 65535
17:20:25.155468 IP (tos 0x8, ttl  53, id 991, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 1:1405(1404) ack 1 win 65535
17:20:25.155827 IP (tos 0x8, ttl  53, id 991, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.163918 IP (tos 0x8, ttl  53, id 992, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 1461:2865(1404) ack 1 win 65535
17:20:25.164625 IP (tos 0x8, ttl  53, id 992, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.164756 IP (tos 0x10, ttl  53, id 993, offset 0, flags [none], 
length: 64) 10.180.71.9.21 > 172.17.1.13.1335: P [tcp sum ok] 85:109(24) ack 
34 win 65535
17:20:25.165541 IP (tos 0x0, ttl 127, id 5243, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 2921 win 
8760
17:20:25.165880 IP (tos 0x0, ttl 127, id 5499, offset 0, flags [DF], length: 
40) 172.17.1.13.1335 > 10.180.71.9.21: . [tcp sum ok] 34:34(0) ack 109 win 
8539
17:20:25.223759 IP (tos 0x8, ttl  53, id 994, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 2921:4325(1404) ack 1 win 65535
17:20:25.224244 IP (tos 0x8, ttl  53, id 994, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.225098 IP (tos 0x0, ttl 127, id 6267, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 4381 win 
8760
17:20:25.226570 IP (tos 0x8, ttl  53, id 995, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 4381:5785(1404) ack 1 win 65535
17:20:25.227524 IP (tos 0x8, ttl  53, id 995, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.233639 IP (tos 0x8, ttl  53, id 996, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 5841:7245(1404) ack 1 win 65535
17:20:25.234372 IP (tos 0x8, ttl  53, id 996, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.235061 IP (tos 0x0, ttl 127, id 6523, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 7301 win 
8760
17:20:25.283358 IP (tos 0x8, ttl  53, id 997, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 7301:8705(1404) ack 1 win 65535
17:20:25.283649 IP (tos 0x8, ttl  53, id 997, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.284667 IP (tos 0x0, ttl 127, id 6779, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 8761 win 
8760
17:20:25.289130 IP (tos 0x8, ttl  53, id 998, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 8761:10165(1404) ack 1 win 65535
17:20:25.289545 IP (tos 0x8, ttl  53, id 998, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.293152 IP (tos 0x8, ttl  53, id 999, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 10221:11625(1404) ack 1 win 65535
17:20:25.293459 IP (tos 0x8, ttl  53, id 999, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.294426 IP (tos 0x0, ttl 127, id 7035, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 11681 win 
8760
17:20:25.298634 IP (tos 0x8, ttl  53, id 1000, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 11681:13085(1404) ack 1 win 65535
17:20:25.298958 IP (tos 0x8, ttl  53, id 1000, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.299900 IP (tos 0x0, ttl 127, id 7291, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 13141 win 
8760
17:20:25.313005 IP (tos 0x8, ttl  53, id 1001, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 13141:14545(1404) ack 1 win 65535
17:20:25.313324 IP (tos 0x8, ttl  53, id 1001, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.332890 IP (tos 0x8, ttl  53, id 1003, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 14601:16005(1404) ack 1 win 65535
17:20:25.333341 IP (tos 0x8, ttl  53, id 1003, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.334014 IP (tos 0x0, ttl 127, id 7547, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 16061 win 
8760
17:20:25.343590 IP (tos 0x8, ttl  53, id 1004, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 16061:17465(1404) ack 1 win 65535
17:20:25.344091 IP (tos 0x8, ttl  53, id 1004, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.344946 IP (tos 0x0, ttl 127, id 7803, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 17521 win 
8760
17:20:25.348828 IP (tos 0x8, ttl  53, id 1005, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 17521:18925(1404) ack 1 win 65535
17:20:25.349143 IP (tos 0x8, ttl  53, id 1005, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.353402 IP (tos 0x8, ttl  53, id 1006, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 18981:20385(1404) ack 1 win 65535
17:20:25.353708 IP (tos 0x8, ttl  53, id 1006, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.354687 IP (tos 0x0, ttl 127, id 8059, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 20441 win 
8760
17:20:25.359425 IP (tos 0x8, ttl  53, id 1007, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 20441:21845(1404) ack 1 win 65535
17:20:25.360058 IP (tos 0x8, ttl  53, id 1007, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.360780 IP (tos 0x0, ttl 127, id 8315, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 21901 win 
8760
17:20:25.389408 IP (tos 0x8, ttl  53, id 1008, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 21901:23305(1404) ack 1 win 65535
17:20:25.389671 IP (tos 0x8, ttl  53, id 1008, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.393800 IP (tos 0x8, ttl  53, id 1009, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 23361:24765(1404) ack 1 win 65535
17:20:25.394467 IP (tos 0x8, ttl  53, id 1009, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.395149 IP (tos 0x0, ttl 127, id 8571, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 24821 win 
8760
17:20:25.398894 IP (tos 0x8, ttl  53, id 1010, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 24821:26225(1404) ack 1 win 65535
17:20:25.399209 IP (tos 0x8, ttl  53, id 1010, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.403352 IP (tos 0x0, ttl 127, id 8827, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 26281 win 
8760
17:20:25.403650 IP (tos 0x8, ttl  53, id 1011, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 26281:27685(1404) ack 1 win 65535
17:20:25.403947 IP (tos 0x8, ttl  53, id 1011, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.410712 IP (tos 0x8, ttl  53, id 1012, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 27741:29145(1404) ack 1 win 65535
17:20:25.411109 IP (tos 0x8, ttl  53, id 1012, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.412110 IP (tos 0x0, ttl 127, id 9083, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 29201 win 
8760
17:20:25.419868 IP (tos 0x8, ttl  53, id 1013, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 29201:30605(1404) ack 1 win 65535
17:20:25.420500 IP (tos 0x8, ttl  53, id 1013, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.421284 IP (tos 0x0, ttl 127, id 9339, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 30661 win 
8760
17:20:25.443214 IP (tos 0x8, ttl  53, id 1014, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 30661:32065(1404) ack 1 win 65535
17:20:25.443531 IP (tos 0x8, ttl  53, id 1014, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.449037 IP (tos 0x8, ttl  53, id 1015, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 32121:33525(1404) ack 1 win 65535
17:20:25.449345 IP (tos 0x8, ttl  53, id 1015, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.450301 IP (tos 0x0, ttl 127, id 9851, offset 0, flags [DF], length: 
40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 33581 win 
8760
17:20:25.454667 IP (tos 0x8, ttl  53, id 1016, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 33581:34985(1404) ack 1 win 65535
17:20:25.455003 IP (tos 0x8, ttl  53, id 1016, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.456015 IP (tos 0x0, ttl 127, id 10363, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
35041 win 8760
17:20:25.471944 IP (tos 0x8, ttl  53, id 1017, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.483545 IP (tos 0x8, ttl  53, id 1018, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 36501:37905(1404) ack 1 win 65535
17:20:25.485710 IP (tos 0x8, ttl  53, id 1019, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 37961:39365(1404) ack 1 win 65535
17:20:25.498975 IP (tos 0x8, ttl  53, id 1020, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 39421:40825(1404) ack 1 win 65535
17:20:25.499292 IP (tos 0x8, ttl  53, id 1020, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.500232 IP (tos 0x0, ttl 127, id 10619, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
35041 win 8760
17:20:25.503086 IP (tos 0x8, ttl  53, id 1021, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 40881:42285(1404) ack 1 win 65535
17:20:25.503405 IP (tos 0x8, ttl  53, id 1021, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.504320 IP (tos 0x0, ttl 127, id 10875, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
35041 win 8760
17:20:25.509277 IP (tos 0x8, ttl  53, id 1022, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 42341:43745(1404) ack 1 win 65535
17:20:25.509611 IP (tos 0x8, ttl  53, id 1022, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.510559 IP (tos 0x0, ttl 127, id 11131, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
35041 win 8760
17:20:25.558783 IP (tos 0x8, ttl  53, id 1023, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 35041:36445(1404) ack 1 win 65535
17:20:25.559105 IP (tos 0x8, ttl  53, id 1023, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.660308 IP (tos 0x0, ttl 127, id 11643, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
36501 win 8760
17:20:25.703585 IP (tos 0x8, ttl  53, id 1025, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 36501:37905(1404) ack 1 win 65535
17:20:25.704063 IP (tos 0x8, ttl  53, id 1025, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.710029 IP (tos 0x8, ttl  53, id 1026, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 43801:45205(1404) ack 1 win 65535
17:20:25.710601 IP (tos 0x8, ttl  53, id 1026, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.711434 IP (tos 0x0, ttl 127, id 11899, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
37961 win 8760
17:20:25.753719 IP (tos 0x8, ttl  53, id 1027, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 37961:39365(1404) ack 1 win 65535
17:20:25.754270 IP (tos 0x8, ttl  53, id 1027, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.755107 IP (tos 0x0, ttl 127, id 12155, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
45261 win 8760
17:20:25.760518 IP (tos 0x8, ttl  53, id 1028, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 45261:46665(1404) ack 1 win 65535
17:20:25.760898 IP (tos 0x8, ttl  53, id 1028, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.799610 IP (tos 0x8, ttl  53, id 1030, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 46721:48125(1404) ack 1 win 65535
17:20:25.800064 IP (tos 0x8, ttl  53, id 1030, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.800958 IP (tos 0x0, ttl 127, id 12411, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
48181 win 8760
17:20:25.803912 IP (tos 0x8, ttl  53, id 1031, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 48181:49585(1404) ack 1 win 65535
17:20:25.804325 IP (tos 0x8, ttl  53, id 1031, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.805261 IP (tos 0x0, ttl 127, id 12667, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
49641 win 8760
17:20:25.809791 IP (tos 0x8, ttl  53, id 1032, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 49641:51045(1404) ack 1 win 65535
17:20:25.810280 IP (tos 0x8, ttl  53, id 1032, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.849377 IP (tos 0x8, ttl  53, id 1033, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 51101:52505(1404) ack 1 win 65535
17:20:25.849949 IP (tos 0x8, ttl  53, id 1033, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.850683 IP (tos 0x0, ttl 127, id 12923, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
52561 win 8760
17:20:25.854241 IP (tos 0x8, ttl  53, id 1034, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 52561:53965(1404) ack 1 win 65535
17:20:25.854831 IP (tos 0x8, ttl  53, id 1034, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.855633 IP (tos 0x0, ttl 127, id 13179, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
54021 win 8760
17:20:25.859169 IP (tos 0x8, ttl  53, id 1035, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 54021:55425(1404) ack 1 win 65535
17:20:25.859484 IP (tos 0x8, ttl  53, id 1035, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.899935 IP (tos 0x8, ttl  53, id 1036, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 55481:56885(1404) ack 1 win 65535
17:20:25.900508 IP (tos 0x8, ttl  53, id 1036, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.901314 IP (tos 0x0, ttl 127, id 13435, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
56941 win 8760
17:20:25.903863 IP (tos 0x8, ttl  53, id 1037, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 56941:58345(1404) ack 1 win 65535
17:20:25.904206 IP (tos 0x8, ttl  53, id 1037, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.905197 IP (tos 0x0, ttl 127, id 13691, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
58401 win 8760
17:20:25.919854 IP (tos 0x8, ttl  53, id 1038, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 58401:59805(1404) ack 1 win 65535
17:20:25.950593 IP (tos 0x8, ttl  53, id 1041, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 59861:61265(1404) ack 1 win 65535
17:20:25.950682 IP (tos 0x8, ttl  53, id 1041, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.951991 IP (tos 0x0, ttl 127, id 13947, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
58401 win 8760
17:20:25.954420 IP (tos 0x8, ttl  53, id 1042, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 61321:62725(1404) ack 1 win 65535
17:20:25.954805 IP (tos 0x8, ttl  53, id 1042, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.955725 IP (tos 0x0, ttl 127, id 14203, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
58401 win 8760
17:20:25.959616 IP (tos 0x8, ttl  53, id 1043, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 62781:64185(1404) ack 1 win 65535
17:20:25.959927 IP (tos 0x8, ttl  53, id 1043, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:25.960906 IP (tos 0x0, ttl 127, id 14459, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
58401 win 8760
17:20:26.004166 IP (tos 0x8, ttl  53, id 1044, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 58401:59805(1404) ack 1 win 65535
17:20:26.004408 IP (tos 0x8, ttl  53, id 1044, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.005658 IP (tos 0x0, ttl 127, id 14715, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
64241 win 8760
17:20:26.049918 IP (tos 0x8, ttl  53, id 1045, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 64241:65645(1404) ack 1 win 65535
17:20:26.050478 IP (tos 0x8, ttl  53, id 1045, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.055537 IP (tos 0x8, ttl  53, id 1046, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 65701:67105(1404) ack 1 win 65535
17:20:26.055833 IP (tos 0x8, ttl  53, id 1046, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.056910 IP (tos 0x0, ttl 127, id 14971, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
67161 win 8760
17:20:26.059260 IP (tos 0x8, ttl  53, id 1047, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 67161:68565(1404) ack 1 win 65535
17:20:26.059695 IP (tos 0x8, ttl  53, id 1047, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.060557 IP (tos 0x0, ttl 127, id 15227, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
68621 win 8760
17:20:26.099457 IP (tos 0x8, ttl  53, id 1048, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 68621:70025(1404) ack 1 win 65535
17:20:26.099763 IP (tos 0x8, ttl  53, id 1048, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.105298 IP (tos 0x8, ttl  53, id 1049, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 70081:71485(1404) ack 1 win 65535
17:20:26.105759 IP (tos 0x8, ttl  53, id 1049, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.106722 IP (tos 0x0, ttl 127, id 15739, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
71541 win 8760
17:20:26.149634 IP (tos 0x8, ttl  53, id 1053, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 71541:72945(1404) ack 1 win 65535
17:20:26.150066 IP (tos 0x8, ttl  53, id 1053, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.151075 IP (tos 0x0, ttl 127, id 15995, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
73001 win 8760
17:20:26.154021 IP (tos 0x8, ttl  53, id 1054, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 73001:74405(1404) ack 1 win 65535
17:20:26.154328 IP (tos 0x8, ttl  53, id 1054, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.160098 IP (tos 0x8, ttl  53, id 1055, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 74461:75865(1404) ack 1 win 65535
17:20:26.160305 IP (tos 0x8, ttl  53, id 1055, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.161470 IP (tos 0x0, ttl 127, id 16251, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
75921 win 8760
17:20:26.204209 IP (tos 0x8, ttl  53, id 1057, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 75921:77325(1404) ack 1 win 65535
17:20:26.204598 IP (tos 0x8, ttl  53, id 1057, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.205507 IP (tos 0x0, ttl 127, id 16507, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
77381 win 8760
17:20:26.209962 IP (tos 0x8, ttl  53, id 1058, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 77381:78785(1404) ack 1 win 65535
17:20:26.210551 IP (tos 0x8, ttl  53, id 1058, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.213969 IP (tos 0x8, ttl  53, id 1059, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 78841:80245(1404) ack 1 win 65535
17:20:26.214727 IP (tos 0x8, ttl  53, id 1059, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.215419 IP (tos 0x0, ttl 127, id 16763, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
80301 win 8760
17:20:26.224083 IP (tos 0x8, ttl  53, id 1060, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 80301:81705(1404) ack 1 win 65535
17:20:26.224621 IP (tos 0x8, ttl  53, id 1060, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.225452 IP (tos 0x0, ttl 127, id 17019, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
81761 win 8760
17:20:26.274401 IP (tos 0x8, ttl  53, id 1061, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 81761:83165(1404) ack 1 win 65535
17:20:26.274638 IP (tos 0x8, ttl  53, id 1061, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.283877 IP (tos 0x8, ttl  53, id 1062, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 83221:84625(1404) ack 1 win 65535
17:20:26.284447 IP (tos 0x8, ttl  53, id 1062, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.285194 IP (tos 0x0, ttl 127, id 17275, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
84681 win 8760
17:20:26.290264 IP (tos 0x8, ttl  53, id 1063, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 84681:86085(1404) ack 1 win 65535
17:20:26.290489 IP (tos 0x8, ttl  53, id 1063, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.291661 IP (tos 0x0, ttl 127, id 17787, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
86141 win 8760
17:20:26.329569 IP (tos 0x8, ttl  53, id 1065, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 86141:87545(1404) ack 1 win 65535
17:20:26.329904 IP (tos 0x8, ttl  53, id 1065, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.333887 IP (tos 0x8, ttl  53, id 1066, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 87601:89005(1404) ack 1 win 65535
17:20:26.334643 IP (tos 0x8, ttl  53, id 1066, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.335337 IP (tos 0x0, ttl 127, id 18299, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
89061 win 8760
17:20:26.339470 IP (tos 0x8, ttl  53, id 1067, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 89061:90465(1404) ack 1 win 65535
17:20:26.339781 IP (tos 0x8, ttl  53, id 1067, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.340760 IP (tos 0x0, ttl 127, id 18555, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
90521 win 8760
17:20:26.343937 IP (tos 0x8, ttl  53, id 1068, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 90521:91925(1404) ack 1 win 65535
17:20:26.344179 IP (tos 0x8, ttl  53, id 1068, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.380326 IP (tos 0x8, ttl  53, id 1069, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 91981:93385(1404) ack 1 win 65535
17:20:26.380602 IP (tos 0x8, ttl  53, id 1069, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.381690 IP (tos 0x0, ttl 127, id 19323, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
93441 win 8760
17:20:26.383871 IP (tos 0x8, ttl  53, id 1070, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 93441:94845(1404) ack 1 win 65535
17:20:26.384244 IP (tos 0x8, ttl  53, id 1070, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.385211 IP (tos 0x0, ttl 127, id 19579, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
94901 win 8760
17:20:26.389691 IP (tos 0x8, ttl  53, id 1071, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 94901:96305(1404) ack 1 win 65535
17:20:26.390141 IP (tos 0x8, ttl  53, id 1071, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.423908 IP (tos 0x8, ttl  53, id 1073, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 96361:97765(1404) ack 1 win 65535
17:20:26.424447 IP (tos 0x8, ttl  53, id 1073, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.425255 IP (tos 0x0, ttl 127, id 20091, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
97821 win 8760
17:20:26.430216 IP (tos 0x8, ttl  53, id 1074, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 97821:99225(1404) ack 1 win 65535
17:20:26.430454 IP (tos 0x8, ttl  53, id 1074, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.431655 IP (tos 0x0, ttl 127, id 20347, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
99281 win 8760
17:20:26.435953 IP (tos 0x8, ttl  53, id 1075, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 99281:100685(1404) ack 1 win 
65535
17:20:26.436466 IP (tos 0x8, ttl  53, id 1075, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.470341 IP (tos 0x8, ttl  53, id 1077, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 100741:102145(1404) ack 1 win 
65535
17:20:26.470720 IP (tos 0x8, ttl  53, id 1077, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.471704 IP (tos 0x0, ttl 127, id 21371, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
102201 win 8760
17:20:26.474213 IP (tos 0x8, ttl  53, id 1078, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 102201:103605(1404) ack 1 win 
65535
17:20:26.474419 IP (tos 0x8, ttl  53, id 1078, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.475738 IP (tos 0x0, ttl 127, id 21627, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
103661 win 8760
17:20:26.480205 IP (tos 0x8, ttl  53, id 1079, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 103661:105065(1404) ack 1 win 
65535
17:20:26.480635 IP (tos 0x8, ttl  53, id 1079, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.483914 IP (tos 0x8, ttl  53, id 1080, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 105121:106525(1404) ack 1 win 
65535
17:20:26.484231 IP (tos 0x8, ttl  53, id 1080, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.485241 IP (tos 0x0, ttl 127, id 22139, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
106581 win 8760
17:20:26.489928 IP (tos 0x8, ttl  53, id 1081, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 106581:107985(1404) ack 1 win 
65535
17:20:26.490259 IP (tos 0x8, ttl  53, id 1081, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.491269 IP (tos 0x0, ttl 127, id 22395, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
108041 win 8760
17:20:26.520007 IP (tos 0x8, ttl  53, id 1093, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 108041:109445(1404) ack 1 win 
65535
17:20:26.520502 IP (tos 0x8, ttl  53, id 1093, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.523853 IP (tos 0x8, ttl  53, id 1094, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 109501:110905(1404) ack 1 win 
65535
17:20:26.524136 IP (tos 0x8, ttl  53, id 1094, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.525176 IP (tos 0x0, ttl 127, id 22907, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
110961 win 8760
17:20:26.529956 IP (tos 0x8, ttl  53, id 1095, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 110961:112365(1404) ack 1 win 
65535
17:20:26.530190 IP (tos 0x8, ttl  53, id 1095, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.531318 IP (tos 0x0, ttl 127, id 23163, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
112421 win 8760
17:20:26.534080 IP (tos 0x8, ttl  53, id 1096, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 112421:113825(1404) ack 1 win 
65535
17:20:26.534397 IP (tos 0x8, ttl  53, id 1096, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.539597 IP (tos 0x8, ttl  53, id 1097, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 113881:115285(1404) ack 1 win 
65535
17:20:26.540110 IP (tos 0x8, ttl  53, id 1097, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.540878 IP (tos 0x0, ttl 127, id 23419, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
115341 win 8760
17:20:26.549540 IP (tos 0x8, ttl  53, id 1098, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 115341:116745(1404) ack 1 win 
65535
17:20:26.549855 IP (tos 0x8, ttl  53, id 1098, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.550745 IP (tos 0x0, ttl 127, id 23675, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
116801 win 8760
17:20:26.574030 IP (tos 0x8, ttl  53, id 1099, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 116801:118205(1404) ack 1 win 
65535
17:20:26.574823 IP (tos 0x8, ttl  53, id 1099, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.579385 IP (tos 0x8, ttl  53, id 1100, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 118261:119665(1404) ack 1 win 
65535
17:20:26.579700 IP (tos 0x8, ttl  53, id 1100, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.580685 IP (tos 0x0, ttl 127, id 24187, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
119721 win 8760
17:20:26.583284 IP (tos 0x8, ttl  53, id 1101, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 119721:121125(1404) ack 1 win 
65535
17:20:26.583655 IP (tos 0x8, ttl  53, id 1101, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.584516 IP (tos 0x0, ttl 127, id 24443, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
121181 win 8760
17:20:26.593200 IP (tos 0x8, ttl  53, id 1102, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 121181:122585(1404) ack 1 win 
65535
17:20:26.593599 IP (tos 0x8, ttl  53, id 1102, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.599822 IP (tos 0x8, ttl  53, id 1103, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 122641:124045(1404) ack 1 win 
65535
17:20:26.601743 IP (tos 0x8, ttl  53, id 1103, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.602456 IP (tos 0x0, ttl 127, id 25211, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
124101 win 8760
17:20:26.604638 IP (tos 0x8, ttl  53, id 1104, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 124101:125505(1404) ack 1 win 
65535
17:20:26.605079 IP (tos 0x8, ttl  53, id 1104, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.605944 IP (tos 0x0, ttl 127, id 25467, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
125561 win 8760
17:20:26.623932 IP (tos 0x8, ttl  53, id 1107, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 125561:126965(1404) ack 1 win 
65535
17:20:26.624497 IP (tos 0x8, ttl  53, id 1107, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.629902 IP (tos 0x8, ttl  53, id 1108, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 127021:128425(1404) ack 1 win 
65535
17:20:26.630220 IP (tos 0x8, ttl  53, id 1108, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.631194 IP (tos 0x0, ttl 127, id 25723, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
128481 win 8760
17:20:26.635584 IP (tos 0x8, ttl  53, id 1109, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 128481:129885(1404) ack 1 win 
65535
17:20:26.636259 IP (tos 0x8, ttl  53, id 1109, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.636963 IP (tos 0x0, ttl 127, id 25979, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
129941 win 8760
17:20:26.674487 IP (tos 0x8, ttl  53, id 1110, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 129941:131345(1404) ack 1 win 
65535
17:20:26.674793 IP (tos 0x8, ttl  53, id 1110, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.680003 IP (tos 0x8, ttl  53, id 1111, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 131401:132805(1404) ack 1 win 
65535
17:20:26.680716 IP (tos 0x8, ttl  53, id 1111, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.681395 IP (tos 0x0, ttl 127, id 26491, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
132861 win 8760
17:20:26.683884 IP (tos 0x8, ttl  53, id 1112, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 132861:134265(1404) ack 1 win 
65535
17:20:26.684197 IP (tos 0x8, ttl  53, id 1112, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.685194 IP (tos 0x0, ttl 127, id 26747, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
134321 win 8760
17:20:26.694898 IP (tos 0x8, ttl  53, id 1113, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 134321:135725(1404) ack 1 win 
65535
17:20:26.695380 IP (tos 0x8, ttl  53, id 1113, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.700045 IP (tos 0x8, ttl  53, id 1114, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 135781:137185(1404) ack 1 win 
65535
17:20:26.700737 IP (tos 0x8, ttl  53, id 1114, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.701410 IP (tos 0x0, ttl 127, id 27003, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
137241 win 8760
17:20:26.705023 IP (tos 0x8, ttl  53, id 1115, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 137241:138645(1404) ack 1 win 
65535
17:20:26.705619 IP (tos 0x8, ttl  53, id 1115, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.706438 IP (tos 0x0, ttl 127, id 27259, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
138701 win 8760
17:20:26.730199 IP (tos 0x8, ttl  53, id 1116, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.734999 IP (tos 0x8, ttl  53, id 1117, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 140161:141565(1404) ack 1 win 
65535
17:20:26.735714 IP (tos 0x8, ttl  53, id 1117, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.736443 IP (tos 0x0, ttl 127, id 27771, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
138701 win 8760
17:20:26.740443 IP (tos 0x8, ttl  53, id 1118, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 141621:143025(1404) ack 1 win 
65535
17:20:26.740596 IP (tos 0x8, ttl  53, id 1118, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.741830 IP (tos 0x0, ttl 127, id 28027, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
138701 win 8760
17:20:26.750410 IP (tos 0x8, ttl  53, id 1119, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 143081:144485(1404) ack 1 win 
65535
17:20:26.751115 IP (tos 0x8, ttl  53, id 1119, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.751786 IP (tos 0x0, ttl 127, id 28283, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
138701 win 8760
17:20:26.754688 IP (tos 0x8, ttl  53, id 1120, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 144541:145945(1404) ack 1 win 
65535
17:20:26.754842 IP (tos 0x8, ttl  53, id 1120, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.756210 IP (tos 0x0, ttl 127, id 28795, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
138701 win 8760
17:20:26.765302 IP (tos 0x8, ttl  53, id 1121, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 146001:147405(1404) ack 1 win 
65535
17:20:26.765780 IP (tos 0x8, ttl  53, id 1121, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.766673 IP (tos 0x0, ttl 127, id 29051, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
138701 win 8760
17:20:26.794786 IP (tos 0x8, ttl  53, id 1124, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 138701:140105(1404) ack 1 win 
65535
17:20:26.795397 IP (tos 0x8, ttl  53, id 1124, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.796350 IP (tos 0x0, ttl 127, id 29307, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
147461 win 8760
17:20:26.839800 IP (tos 0x8, ttl  53, id 1126, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 147461:148865(1404) ack 1 win 
65535
17:20:26.840172 IP (tos 0x8, ttl  53, id 1126, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.844488 IP (tos 0x8, ttl  53, id 1127, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 148921:150325(1404) ack 1 win 
65535
17:20:26.844966 IP (tos 0x8, ttl  53, id 1127, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.846054 IP (tos 0x0, ttl 127, id 30075, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
150381 win 8760
17:20:26.850057 IP (tos 0x8, ttl  53, id 1128, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 150381:151785(1404) ack 1 win 
65535
17:20:26.850380 IP (tos 0x8, ttl  53, id 1128, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.851433 IP (tos 0x0, ttl 127, id 30331, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
151841 win 8760
17:20:26.855092 IP (tos 0x8, ttl  53, id 1129, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 151841:153245(1404) ack 1 win 
65535
17:20:26.855768 IP (tos 0x8, ttl  53, id 1129, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.894230 IP (tos 0x8, ttl  53, id 1132, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 153301:154705(1404) ack 1 win 
65535
17:20:26.894981 IP (tos 0x8, ttl  53, id 1132, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.895686 IP (tos 0x0, ttl 127, id 30843, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
154761 win 8760
17:20:26.899898 IP (tos 0x8, ttl  53, id 1133, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 154761:156165(1404) ack 1 win 
65535
17:20:26.900312 IP (tos 0x8, ttl  53, id 1133, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.901210 IP (tos 0x0, ttl 127, id 31099, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
156221 win 8760
17:20:26.906526 IP (tos 0x8, ttl  53, id 1134, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 156221:157625(1404) ack 1 win 
65535
17:20:26.908315 IP (tos 0x8, ttl  53, id 1134, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.944290 IP (tos 0x8, ttl  53, id 1136, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 157681:159085(1404) ack 1 win 
65535
17:20:26.944697 IP (tos 0x8, ttl  53, id 1136, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.945591 IP (tos 0x0, ttl 127, id 31611, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
159141 win 8760
17:20:26.950371 IP (tos 0x8, ttl  53, id 1137, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 159141:160545(1404) ack 1 win 
65535
17:20:26.950682 IP (tos 0x8, ttl  53, id 1137, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.951711 IP (tos 0x0, ttl 127, id 32123, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
160601 win 8760
17:20:26.960931 IP (tos 0x8, ttl  53, id 1138, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 160601:162005(1404) ack 1 win 
65535
17:20:26.961018 IP (tos 0x8, ttl  53, id 1138, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.991295 IP (tos 0x8, ttl  53, id 1140, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 162061:163465(1404) ack 1 win 
65535
17:20:26.991382 IP (tos 0x8, ttl  53, id 1140, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.992714 IP (tos 0x0, ttl 127, id 32635, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
163521 win 8760
17:20:26.994172 IP (tos 0x8, ttl  53, id 1141, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 163521:164925(1404) ack 1 win 
65535
17:20:26.994563 IP (tos 0x8, ttl  53, id 1141, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:26.995530 IP (tos 0x0, ttl 127, id 32891, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
164981 win 8760
17:20:27.000514 IP (tos 0x8, ttl  53, id 1142, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 164981:166385(1404) ack 1 win 
65535
17:20:27.001081 IP (tos 0x8, ttl  53, id 1142, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.035032 IP (tos 0x8, ttl  53, id 1144, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 166441:167845(1404) ack 1 win 
65535
17:20:27.035332 IP (tos 0x8, ttl  53, id 1144, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.036386 IP (tos 0x0, ttl 127, id 33403, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
167901 win 8760
17:20:27.040025 IP (tos 0x8, ttl  53, id 1145, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 167901:169305(1404) ack 1 win 
65535
17:20:27.040668 IP (tos 0x8, ttl  53, id 1145, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.041388 IP (tos 0x0, ttl 127, id 33659, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
169361 win 8760
17:20:27.045898 IP (tos 0x8, ttl  53, id 1146, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 169361:170765(1404) ack 1 win 
65535
17:20:27.046055 IP (tos 0x8, ttl  53, id 1146, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.080610 IP (tos 0x8, ttl  53, id 1147, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 170821:172225(1404) ack 1 win 
65535
17:20:27.081218 IP (tos 0x8, ttl  53, id 1147, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.081970 IP (tos 0x0, ttl 127, id 34171, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
172281 win 8760
17:20:27.086349 IP (tos 0x8, ttl  53, id 1148, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 172281:173685(1404) ack 1 win 
65535
17:20:27.086665 IP (tos 0x8, ttl  53, id 1148, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.087782 IP (tos 0x0, ttl 127, id 34427, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
173741 win 8760
17:20:27.095308 IP (tos 0x8, ttl  53, id 1149, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 173741:175145(1404) ack 1 win 
65535
17:20:27.095492 IP (tos 0x8, ttl  53, id 1149, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.125247 IP (tos 0x8, ttl  53, id 1150, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 175201:176605(1404) ack 1 win 
65535
17:20:27.125700 IP (tos 0x8, ttl  53, id 1150, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.126649 IP (tos 0x0, ttl 127, id 34683, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
176661 win 8760
17:20:27.130174 IP (tos 0x8, ttl  53, id 1151, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 176661:178065(1404) ack 1 win 
65535
17:20:27.130524 IP (tos 0x8, ttl  53, id 1151, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.131486 IP (tos 0x0, ttl 127, id 34939, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
178121 win 8760
17:20:27.136740 IP (tos 0x8, ttl  53, id 1152, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 178121:179525(1404) ack 1 win 
65535
17:20:27.137098 IP (tos 0x8, ttl  53, id 1152, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.144864 IP (tos 0x8, ttl  53, id 1153, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 179581:180985(1404) ack 1 win 
65535
17:20:27.145330 IP (tos 0x8, ttl  53, id 1153, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.146264 IP (tos 0x0, ttl 127, id 35195, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
181041 win 8760
17:20:27.150267 IP (tos 0x8, ttl  53, id 1154, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 181041:182445(1404) ack 1 win 
65535
17:20:27.150718 IP (tos 0x8, ttl  53, id 1154, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.151613 IP (tos 0x0, ttl 127, id 35451, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
182501 win 8760
17:20:27.174775 IP (tos 0x8, ttl  53, id 1155, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 182501:183905(1404) ack 1 win 
65535
17:20:27.175267 IP (tos 0x8, ttl  53, id 1155, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.180206 IP (tos 0x8, ttl  53, id 1156, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 183961:185365(1404) ack 1 win 
65535
17:20:27.180620 IP (tos 0x8, ttl  53, id 1156, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.181521 IP (tos 0x0, ttl 127, id 35707, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
185421 win 8760
17:20:27.185757 IP (tos 0x8, ttl  53, id 1157, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 185421:186825(1404) ack 1 win 
65535
17:20:27.186008 IP (tos 0x8, ttl  53, id 1157, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.187126 IP (tos 0x0, ttl 127, id 35963, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
186881 win 8760
17:20:27.194155 IP (tos 0x8, ttl  53, id 1158, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 186881:188285(1404) ack 1 win 
65535
17:20:27.194470 IP (tos 0x8, ttl  53, id 1158, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.200408 IP (tos 0x8, ttl  53, id 1159, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 188341:189745(1404) ack 1 win 
65535
17:20:27.200642 IP (tos 0x8, ttl  53, id 1159, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.201754 IP (tos 0x0, ttl 127, id 36219, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
189801 win 8760
17:20:27.210114 IP (tos 0x8, ttl  53, id 1160, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 189801:191205(1404) ack 1 win 
65535
17:20:27.244550 IP (tos 0x8, ttl  53, id 1161, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 191261:192665(1404) ack 1 win 
65535
17:20:27.245116 IP (tos 0x8, ttl  53, id 1161, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:27.245832 IP (tos 0x0, ttl 127, id 36475, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
189801 win 8760
17:20:27.290092 IP (tos 0x8, ttl  53, id 1166, offset 0, flags [none], 
length: 1442) 10.180.71.9.20 > 172.17.1.13.1347: FP 192721:194123(1402) ack 
1 win 65535
17:20:27.291159 IP (tos 0x0, ttl 127, id 36987, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
189801 win 8760
17:20:28.610756 IP (tos 0x8, ttl  53, id 1191, offset 0, flags [+], length: 
1444) 10.180.71.9.20 > 172.17.1.13.1347: . 189801:191205(1404) ack 1 win 
65535
17:20:28.611239 IP (tos 0x8, ttl  53, id 1191, offset 1424, flags [none], 
length: 76) 10.180.71.9 > 172.17.1.13: tcp
17:20:28.612133 IP (tos 0x0, ttl 127, id 38779, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
194123 win 8760
17:20:28.641005 IP (tos 0x8, ttl  53, id 1192, offset 0, flags [none], 
length: 40) 10.180.71.9.20 > 172.17.1.13.1347: F [tcp sum ok] 
194123:194123(0) ack 1 win 65535
17:20:28.641440 IP (tos 0x0, ttl 127, id 39035, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: . [tcp sum ok] 1:1(0) ack 
194124 win 8760
17:20:28.641743 IP (tos 0x0, ttl 127, id 39291, offset 0, flags [DF], 
length: 40) 172.17.1.13.1347 > 10.180.71.9.20: F [tcp sum ok] 1:1(0) ack 
194124 win 8760
17:20:28.673226 IP (tos 0x8, ttl  53, id 1193, offset 0, flags [none], 
length: 40) 10.180.71.9.20 > 172.17.1.13.1347: . [tcp sum ok] 
194124:194124(0) ack 2 win 65535

May anyone help me?




More information about the Users mailing list