The Transport Control Protocol (TCP) is a low-level part of the protocol stack used by the Internet. It sits directly above the IP layer and is responsible for making sure that dropped packets are resent.

learn more… | top users | synonyms

0
votes
1answer
30 views

Itcpdump output - why is it showing an Ethernet status?

tcpdump -i mlan0 -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on mlan0, link-type EN10MB (Ethernet), capture size 262144 bytes Why is this ...
3
votes
1answer
109 views

Why are these connections not classified as “established” under conntrack?

I have the following rule for iptables: -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT such that outgoing connections not classified as established will be logged. Occasionally, the ...
1
vote
2answers
968 views

Redirect stdin and stdout to ports

I'd like to take a program P that reads from stdin & writes to stdout, but connect it to nc or whatever such that it reads from a certain port and outputs to another port. # The reading is easy, ...
-1
votes
2answers
102 views

If I send SYN / ACK with one IP and other packets with another, what happens?

I'm learning about UNIX and network programming. I'm not yet sure how to implement this. But I'm wondering: If I forge IP packets of a TCP connection to a server, so that the SYN / ACK packets use ...
1
vote
2answers
70 views

Capturing data from a Fluke 1620a via netcat

I am trying to pull temperature and humidity data from Fluke DewK 1620a thermo-hygrometers and write the temp/humidity readings to a log. I can connect to the device via netcat with a simple 'nc ...
1
vote
1answer
121 views

Relay server for generic TCP traffic?

Here's my situation: I have a computer (Mac) on a school network that I want to port forward TCP 5222 to for ejabberd, but of course I can't. I have a server at home (Mac with FreeBSD VM) that I can ...
2
votes
1answer
108 views

bound, but not listening process

python code for simple daemon import socket import time import signal s=socket.socket() s.bind(('127.0.1.1', 20201)) def stop(*a, **k): global work work = False ...
1
vote
1answer
55 views

Start a service on a network request (socket activation)

I have a program that under normal activation listens on some port. I don't want the program running continuously. Is there a "quick and dirty" way to wrap the application in a shell script or ...
6
votes
1answer
403 views

Is there a way to see if process listening on TCP port receives a message?

According to tcpdump, my server receives the following TCP packet: 12:52:29.603233 00:19:e2:9e:df:f0 00:16:3e:6a:25:3f, ethertype IPv4 (0x0800), length 74: 10.10.10.65.38869 192.168.215.82.22: ...
2
votes
1answer
270 views

What are the semantics of getting a EADDRINUSE when no listening socket is bound, but connections are open

Consider a parent process which completes a socket/bind/accept, and will fork children with that socket open for them to communicate with, while the parent continues accepting connections. That parent ...
2
votes
2answers
319 views

How to find out how many TCP retransmits are occurring?

I am running Debian Wheezy on an ARMHF platform and do most of the communications over fairly unreliable cell phone networks. Is there a way to read the no. of re-transmits the TCP stack has done ...
0
votes
0answers
55 views

Can spawn-fcgi be user for tcp/udp server

Spawn-fcgi by lighty labs It only uses unix socket functions socket(), bind(), connect(), listen(). Is it possible to use it not for FastCGI server, but TCP or UDP server?
1
vote
1answer
337 views

Networking issue in IBM x3650 after install Ubuntu 14.04.1

I have a problem making TCP connections after a fresh Ubuntu 14.04 installation. First of all, after booting the interface is always off. In my case the interface is manually configured and named em2. ...
2
votes
1answer
75 views

Down single connection

There are many connections to the external interface(s) on the specified port e.g. ![netstat |grep 1521][1] tcp….1540….…0 172.17.40.33:36791……..172.17.40.90:1521…….…..ESTABLISHED tcp….1540….…0 ...
2
votes
0answers
82 views

Exclude a loopback interface or address from processes listening on the “any” address

I'm trying to create a setup where I can connect to some service running on a host only reachable through a SOCKS proxy by the host's actual name and the port the service actually uses (so that ...
1
vote
2answers
347 views

Drop TCP packets and prevent TCP retransmission

I have an application that sends TCP data to a server. My server is made to intentionally drop the packets sent by the application, and as a result the client retransmits the packets. I need to ...
3
votes
2answers
118 views

How can I determine what program or user connected to a particular port after the fact?

I am examining the egress IPTABLES log of my computer for yesterday and notice the following: IN= OUT=eth0 SRC=192.168.1.1 DST=69.46.36.10 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=12345 DF PROTO=TCP ...
1
vote
2answers
514 views

How to troubleshooting failing ping to router on a linux box?

I have a home network 192.168.0.x from which I am posting this message, on this network I have a CentOS7 host 192.168.0.3 which is running a DNS server for the network. I can ssh into 192.168.0.3 I ...
3
votes
1answer
103 views

Force application to use specific port on Fedora machine

I have an application on my fedora machine that sends SIP TCP requests to the server. The application chooses a random source port to send the requests. Is there some way I can force the application ...
2
votes
0answers
168 views

Rsync - Corrupted MAC on input

Background I have a script on my NAS which is a Synology DS212J which is running on a special distro where uname -a gives me Linux DS212J 2.6.32.12 #4493 Wed Jul 16 11:37:16 CST 2014 armv5tel ...
0
votes
1answer
17 views

tcpdump Filter with certain file types?

I use the unix command tcpdump with these extensions -A -s0 -ien0 port 80 I know how to add, for example a new host, that would be and \ host random.com Can I sniff for certain filetypes? I have ...
4
votes
6answers
736 views

How do I work out which port to log in on with SSH?

I have an Ubuntu 10.04 server setup remotely that I setup a while back. While I recorded the username and password, I seem to have been clever and changed the usual ssh port from 22 to... something ...
3
votes
1answer
256 views

Allow non-root unmodifiable sofware to bind to ports 80 & 443

The company I'm in uses the Java Secure Application Manager to "secure" non-internal connections their webmail and electronic collaboration software. Aside from using expired certificates, and ...
1
vote
1answer
70 views

Analyzing network traffic

I want to get a good overview what kind of network communication is going on on my computer. One way would be starting wireshark, which is fine for very low-level problems but is quite cumbersome to ...
2
votes
1answer
4k views

Kill any service running at a specific port

I am trying to write a script that kills service running at a specific port. This is my script: a=$(ps ax | grep 4990 | grep java | awk '{print $1}') kill -9 $a It's a java program. This script ...
1
vote
0answers
300 views

tcpdump not capturing http or tcp/ssl traffic

I have been trying to learn tcpdump and I am using this command to attempt to monitor my network: sudo tcpdump -I -i en1 But this gives me a bunch of stuff I don't want, so I used this version to ...
2
votes
1answer
299 views

nc -l in background closes immediately (nc -l 1234 &)

When I put this nc -l 12345 >nc_out in a shell script, run it and then connect from other shell using telnet, it allows me to type some text and have it end up in nc_out. But if I start nc in ...
23
votes
5answers
8k views

How to close ports in Linux?

I have some question in closing port, I think I got some strange things. When I use execute nmap --top-ports 10 192.168.1.1 it shows that 23/TCP port is open. But when I execute nmap --top-ports ...
4
votes
1answer
610 views

How to investigate a random reset on TCP client port connected via loopback interface to a server

I have a test suite which initializes a server on the localhost and then runs thousands of stress tests which include starting and stopping clients connecting to this local server on same machine. I ...
5
votes
1answer
7k views

how to connect ssh 'with' specified port?

I know how to connect 'to' a certain port when ssh'ing. ssh user@remotehostip -p XXX but is there a way to establish a ssh 'with' a certain port? I mean, is there a way to specify the port which ...
2
votes
2answers
182 views

“tcpdump” to capture the last packets

I am monitoring a certain port, because my application uses that port, it seems that the connection drops at random times, I want to see what are the last packets passing through before the connection ...
2
votes
1answer
428 views

Linux “ip route” changes source address of TCP but not UDP

When sending packets from an application that binds to a local address TCP uses a different source address than UDP. For example, bind to 10.10.0.51 (alias IP), the src addr for UDP is 10.10.0.51 but ...
1
vote
0answers
443 views

Improving TCP performance over a gigabit network

I have two machines both network cards speed is 10Gbps. The inbound bandwidth between the two machines is 10Gbps, the outbound bandwidth internet bandwidth is 500Mpbs. Both machines are using public ...
0
votes
1answer
993 views

Server Not accepting TCP/IP Connections

I have a Wt application running in a CentOS server machine(Machine A) in the port number 9798. Application is up and I could view the web page with the URL, http://localhost:9798 But application ...
1
vote
2answers
157 views

Is this kernel warning a major problem that needs my attention?

Our Linux based Thecus N12000 NAS recently experienced this message in its dmesg log. [2014-05-21 11:34:56] ------------[ cut here ]------------ [2014-05-21 11:34:56] WARNING: at ...
3
votes
1answer
1k views

Which TCP congestion control algorithm is best for low speed radio modems?

On my project we have remote Linux nodes that communicate over the Internet via very low speed CDMA cell modems. The bandwidth on these modems is about 2kbyte/second and the RTT back to the server is ...
2
votes
1answer
778 views

WITHOUT using network command lines in linux, how to know list of open ports and the process that owns them?

I want to know which ports are used by which processes in embedded-linux. Since it is simple embedded-linux, there are no network command lines such as netstat, lsof. (only basic command lines such as ...
29
votes
3answers
4k views

Can TCP provide more than 65535 ports?

Is it possible to setup a Linux system so that it provides more than 65,535 ports? The intent would be to have more than 65k daemons listening on a given system. Clearly there are ports being used ...
2
votes
1answer
67 views

Discovering the Cause of tcp rcvpruned?

I get a few rcv pruned packets on my load balancers a day and I would like to know what the cause is: However, based on my tcp_mem vs tcp_mem usage I don't understand why some packets are being ...
4
votes
1answer
347 views

Can iptables be used to monitor TCP timeouts/resets system-wide?

I'm trying to determine if an application's connection to a database is internal to the application or due to a networking event. This seems like something netfilter would have system-wide visibility ...
7
votes
3answers
1k views

How does one capture traffic on virtual interfaces?

I would like to capture traffic on Linux virtual interfaces, for debugging purposes. I have been experimenting with veth, tun and dummy interface types; on all three, I am having trouble getting ...
12
votes
1answer
6k views

Why is my TCP throughput much greater than UDP throughput?

I haven't done anything unusual to my hardware or kernel configurations (all default settings, fresh OS install, Linux kernel 3.11 TCP/IP stack) and I'm averaging about 3.83 million messages per ...
3
votes
1answer
3k views

How to use netperf on specific NIC port?

I have two servers, SERVER and CLIENT. Each server has its own onboard 1 GbE ports, and its own NIC with a 10 GbE port. SERVER and CLIENT are interconnected on both a 1 GbE switch (administrative ...
2
votes
2answers
8k views

nc: bind failed: Address already in use

I am trying to execute nc command from a script , my script is executing nc command on different ports of Destination using the same source port. e.g: nc -p 8140 -z -v -n 10.X.X.9 9090 nc -p 8140 -z ...
1
vote
1answer
92 views

How can I tell which ports have been used for reverse SSH tunnels?

I have two machines, client and server. client has created a reverse-tunnel on server with something like ssh -R 12345:localhost:12345 server. When logged into server how could I find ports which ...
4
votes
3answers
7k views

tcp6 in the output netstat

What does column 'tcp6' mean on output netstat? Please anyone explain the follow output of netstat: tcp6 0 0 dmz.local.net:www 5.140.235.6%14631:49964 ESTABLISHED 21393/apache2 What does tcp6 mean? ...
2
votes
1answer
94 views

How does the kernel know which file descriptor to write data to after fork() in a concurrent server?

Basic concurrent client/server architecture: There's a main loop listening for requests on a port (for example 3000), after accepting the connection the server spawns a child process that ends up ...
3
votes
3answers
1k views

How to record an interactice socat TCP/TLS session?

Socat is great for interactively testing line based human readable protocols like HTTP or IMAP. For example: $ socat -d -d READLINE,history=$HOME/s.hist openssl:host:port,crnl,cafile=some.ca For ...
2
votes
1answer
2k views

Meaning of bash -i >& /dev/tcp/HOST/PORT 0>&1?

I tried this bash -i >& /dev/tcp/HOST/PORT 0>&1, but it does not seem to work behind firewall. What does this code actually do, which ports are forwarded and could it work behind ...
3
votes
0answers
431 views

graph TCP connection performance based on `ss -i`

A nearby question has brought to my attention the ss utility on Linux, another utility to investigate sockets. It would appear that it may be a great tool to monitor the performance of, say, an ssh ...