Article Figure 1 Figure 2 Listing 1 Listing 2
Listing 3 Listing 4 Listing 5 Listing 6 Listing 7
Listing 8 sep2006.tar

Listing 1 Sample capture

# tcpdump -r /tmp/http.pcap -n
reading from file /tmp/http.pcap, link-type EN10MB (Ethernet)
11:48:34.631577 IP 192.168.239.1.4474 > 192.168.239.128.80: S 2677641850:2677641850(0) win 65535 \
  <mss 1460,nop,nop,sackOK>
11:48:34.632046 IP 192.168.239.128.80 > 192.168.239.1.4474: S 17594653:17594653(0) ack 2677641851 \
  win 5840 <mss 1460,nop,nop,sackOK>
11:48:34.632656 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 1 win 65535
11:48:34.646763 IP 192.168.239.1.4474 > 192.168.239.128.80: P 1:451(450) ack 1 win 65535
11:48:34.648251 IP 192.168.239.128.80 > 192.168.239.1.4474: . ack 451 win 6432
11:48:34.649956 IP 192.168.239.128.80 > 192.168.239.1.4474: . 1:1461(1460) ack 451 win 6432
11:48:34.650145 IP 192.168.239.128.80 > 192.168.239.1.4474: . 1461:2921(1460) ack 451 win 6432
11:48:34.650316 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 2921 win 65535
11:48:34.650339 IP 192.168.239.128.80 > 192.168.239.1.4474: . 2921:4381(1460) ack 451 win 6432
11:48:34.650793 IP 192.168.239.128.80 > 192.168.239.1.4474: P 4381:5578(1197) ack 451 win 6432
11:48:34.650779 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 4381 win 65535
11:48:34.676586 IP 192.168.239.1.4474 > 192.168.239.128.80: P 451:871(420) ack 5578 win 64338
11:48:34.676588 IP 192.168.239.1.4475 > 192.168.239.128.80: S 948449952:948449952(0) win 65535 \
  <mss 1460,nop,nop,sackOK>
11:48:34.676614 IP 192.168.239.128.80 > 192.168.239.1.4475: S 20714603:20714603(0) ack 948449953 \
  win 5840 <mss 1460,nop,nop,sackOK>
11:48:34.676952 IP 192.168.239.1.4475 > 192.168.239.128.80: . ack 1 win 65535
11:48:34.679135 IP 192.168.239.128.80 > 192.168.239.1.4474: . 5578:7038(1460) ack 871 win 7504
11:48:34.679277 IP 192.168.239.128.80 > 192.168.239.1.4474: . 7038:8498(1460) ack 871 win 7504
11:48:34.679392 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 8498 win 65535
11:48:34.679402 IP 192.168.239.128.80 > 192.168.239.1.4474: . 8498:9958(1460) ack 871 win 7504
11:48:34.679519 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 9958 win 65535
11:48:34.679671 IP 192.168.239.128.80 > 192.168.239.1.4474: . 9958:11418(1460) ack 871 win 7504
11:48:34.679772 IP 192.168.239.128.80 > 192.168.239.1.4474: . 11418:12878(1460) ack 871 win 7504
11:48:34.679869 IP 192.168.239.128.80 > 192.168.239.1.4474: . 12878:14338(1460) ack 871 win 7504
11:48:34.679989 IP 192.168.239.128.80 > 192.168.239.1.4474: . 14338:15798(1460) ack 871 win 7504
11:48:34.680085 IP 192.168.239.128.80 > 192.168.239.1.4474: . 15798:17258(1460) ack 871 win 7504
11:48:34.679864 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 12878 win 65535
11:48:34.680181 IP 192.168.239.128.80 > 192.168.239.1.4474: P 17258:18718(1460) ack 871 win 7504
11:48:34.679976 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 14338 win 65535
11:48:34.680172 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 17258 win 62615
11:48:34.680282 IP 192.168.239.128.80 > 192.168.239.1.4474: . 18718:20178(1460) ack 871 win 7504
11:48:34.680402 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 20178 win 59695
11:48:34.680411 IP 192.168.239.128.80 > 192.168.239.1.4474: . 20178:21638(1460) ack 871 win 7504
11:48:34.680504 IP 192.168.239.128.80 > 192.168.239.1.4474: P 21638:22282(644) ack 871 win 7504
11:48:34.680610 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 22282 win 57591
11:48:34.696644 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 22282 win 61351
11:48:34.696647 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 22282 win 65535
11:48:34.696648 IP 192.168.239.1.4475 > 192.168.239.128.80: P 1:433(432) ack 1 win 65535
11:48:34.696649 IP 192.168.239.1.4474 > 192.168.239.128.80: P 871:1294(423) ack 22282 win 65535
11:48:34.696693 IP 192.168.239.128.80 > 192.168.239.1.4475: . ack 433 win 6432
11:48:34.698587 IP 192.168.239.128.80 > 192.168.239.1.4475: . 1:1461(1460) ack 433 win 6432
11:48:34.698719 IP 192.168.239.128.80 > 192.168.239.1.4475: P 1461:1558(97) ack 433 win 6432
11:48:34.699170 IP 192.168.239.1.4475 > 192.168.239.128.80: . ack 1558 win 65535
11:48:34.699809 IP 192.168.239.128.80 > 192.168.239.1.4474: . 22282:23742(1460) ack 1294 win 8576
11:48:34.699971 IP 192.168.239.128.80 > 192.168.239.1.4474: P 23742:24721(979) ack 1294 win 8576
11:48:34.700352 IP 192.168.239.1.4474 > 192.168.239.128.80: . ack 24721 win 65535