[tor-talk] What is the meaning of the following in tcpdump files?

luis redondo luis.redondo30 at outlook.com
Fri May 31 18:32:50 UTC 2013


Analysing a tcpdump file of a Tor only connection(with Wireshark) a lot of times I get (EXTRACT) :

298517    2174.409794    "Destination IP"    192.168.1.64    TCP    etlservicemgr > 44861 [ACK] Seq=272869289 Ack=9508575 Win=501 Len=1440[Packet size limited during capture]

298518    2174.410803    "Destination IP"    192.168.1.64    TCP    etlservicemgr > 44861 [ACK] Seq=272870729 Ack=9508575 Win=501 Len=1440[Packet size limited during capture]

298519    2174.411750    192.168.1.64    "Destination IP"    TCP    44861 > etlservicemgr [ACK] Seq=9508575 Ack=272872169 Win=994 Len=0[Packet size limited during capture]

Other times instead of: "...etlservicemgr...",I get "...https...",or "...SSH...".I guess it is related to the entry node I use.So,is this "...etlservicemgr..." a connection really encrypted? Or is there any form for an entry node "FORCE" a non-encrypted connection?
 		 	   		  


More information about the tor-talk mailing list