[Sa] Evennet S2S ssl

[Vasil Kolev]

В 14:33 +0200 на 27.02.2012 (пн), b2 написа:
> SSLdumpa вижте какво показва , няма handshake , няма никой 
> 
> на сървъра към който идва ssl connection-a :
> 
> #ssldump -a -A -H -n -k test.key -i eth0
> New TCP connection #1: 78.128.6.188(35107) <-> 78.128.6.186(9020)
> 1    0.0013 (0.0013)  C>S  TCP RST
> New TCP connection #3: 78.128.6.188(42391) <-> 78.128.6.186(9020)
> 3    0.0013 (0.0013)  C>S  TCP RST
> New TCP connection #7: 78.128.6.186(53245) <-> 78.128.6.184(6697)
> 7    0.0012 (0.0012)  S>C  TCP RST
> New TCP connection #9: 78.128.6.184(34020) <-> 78.128.6.186(6667)
> 5    27.9712 (27.9712)  S>C  TCP FIN
> 5    27.9714 (0.0002)  C>S  TCP RST
> 
> на клиента : 
> New TCP connection #1: 78.128.6.188(35107) <-> 78.128.6.186(9020)
> 1    0.0015 (0.0015)  C>S  TCP RST
> New TCP connection #3: 78.128.6.188(42391) <-> 78.128.6.186(9020)
> 3    0.0015 (0.0015)  C>S  TCP RST
> 
> 
> разменят си RST пакети само ... странно , някои 
> идеи ? 

Можеш ли да запишеш pcap файл с tcpdump и да видим какво има в него?
(tcpdump -ni eth0 -s 1600 -w dbg.pcap port XXXX) 

-- 
Regards,
Vasil Kolev
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.ludost.net/pipermail/sa/attachments/20120227/0e709f94/attachment.pgp>