[tor-talk] What is the meaning of the following in tcpdump files?
luis redondo
luis.redondo30 at outlook.com
Fri May 31 18:32:50 UTC 2013
Analysing a tcpdump file of a Tor only connection(with Wireshark) a lot of times I get (EXTRACT) :
298517 2174.409794 "Destination IP" 192.168.1.64 TCP etlservicemgr > 44861 [ACK] Seq=272869289 Ack=9508575 Win=501 Len=1440[Packet size limited during capture]
298518 2174.410803 "Destination IP" 192.168.1.64 TCP etlservicemgr > 44861 [ACK] Seq=272870729 Ack=9508575 Win=501 Len=1440[Packet size limited during capture]
298519 2174.411750 192.168.1.64 "Destination IP" TCP 44861 > etlservicemgr [ACK] Seq=9508575 Ack=272872169 Win=994 Len=0[Packet size limited during capture]
Other times instead of: "...etlservicemgr...",I get "...https...",or "...SSH...".I guess it is related to the entry node I use.So,is this "...etlservicemgr..." a connection really encrypted? Or is there any form for an entry node "FORCE" a non-encrypted connection?
More information about the tor-talk
mailing list