TCP Connection Establishment

• Three-way handshake

  SYN
  
  SYN + ACK
  ACK

tcpdump: Look for window sizes, window scale, timestamps, MTU,

SackOK, Don’t-Fragment

15:52:08.756479 dexter.20 > tesla.1391: S 137432:137432(0) win 65535

<mss 1460,nop,wscale 1,nop,nop,timestamp 12966275 0>

15:52:08.756524 tesla.1391 > dexter.20: S 294199:294199(0) ack 137433 win 16384

<mss 1460,nop,wscale 0,nop,nop,timestamp 12966020 12966275>

Previous slide

Next slide

Back to first slide

View graphic version