From owner-freebsd-stable@FreeBSD.ORG Wed Apr 1 05:53:07 2009 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 483451065744 for ; Wed, 1 Apr 2009 05:53:07 +0000 (UTC) (envelope-from pluknet@gmail.com) Received: from mail-bw0-f164.google.com (mail-bw0-f164.google.com [209.85.218.164]) by mx1.freebsd.org (Postfix) with ESMTP id 9832A8FC1D for ; Wed, 1 Apr 2009 05:53:06 +0000 (UTC) (envelope-from pluknet@gmail.com) Received: by bwz8 with SMTP id 8so2579851bwz.43 for ; Tue, 31 Mar 2009 22:53:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=fpRo4hL4AS4NrtDC9XIKkztclSlV+1oPVI4u5fKD9OI=; b=LN+AfEYxHWnJAhGzesQEW+b0vBjhCYfp2mBNmquExjNzfHsvveTskVEgzZPS+h0Irf DefzcQ1dLpV3doCKI+ufXxU+6j7+QO1aHc1cW4ykhn0JniZlUFmjBiEQWTrG323ujsJT Ws1T0QU4uk/ziPzPYyWbtDFJy70kpbFcE/Btg= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=qH8x99kfigCt3mO8CHXtsQdJt1rMJiaWth8JNpOHcMPakzIzv44w4x6a5DKrpouJKr jLaLkXOtl3hcdfrw4RKaYgASnbhZPHfNUutkEKrfvmIIY9+Mauk4WyKO05xJlrh4LAvs UVIPggvdc64Aea5JA36X7KGpmzSaznWpIiE8M= MIME-Version: 1.0 Received: by 10.103.212.2 with SMTP id o2mr2643982muq.69.1238565185608; Tue, 31 Mar 2009 22:53:05 -0700 (PDT) In-Reply-To: <20090331223024.GA70541@dan.emsphone.com> References: <20090331223024.GA70541@dan.emsphone.com> Date: Wed, 1 Apr 2009 09:53:05 +0400 Message-ID: From: pluknet To: Dan Nelson Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: FreeBSD Stable Mailing List Subject: Re: incorrect port value in tcpdump output X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2009 05:53:07 -0000 2009/4/1 Dan Nelson : > In the last episode (Apr 01), pluknet said: >> tcpdump'ed from RELENG_7, kernel and modules as of Mar 22 are in sync, >> world as of Mar 18. >> >> I caught this while building kernel via NFS. The subj host is an NFS ser= ver. >> >> 23:22:03.056098 IP (tos 0x0, ttl 64, id 26932, offset 0, flags [DF], pro= to TCP (6), length 160) 172.17.5.168.2355868444 > 172.17.5.167.2049: 108 ge= tattr [|nfs] >> =A0 =A0 =A0 =A0 0x0000: =A04500 00a0 6934 4000 4006 6db2 ac11 05a8 >> =A0 =A0 =A0 =A0 0x0010: =A0ac11 05a7 0396 0801 7631 7eb4 37c6 db06 >> =A0 =A0 =A0 =A0 0x0020: =A08018 40cc 54c6 0000 0101 080a 00a5 d95b >> =A0 =A0 =A0 =A0 0x0030: =A0da0f fa92 8000 0068 8c6b b31c 0000 0000 >> =A0 =A0 =A0 =A0 0x0040: =A00000 0002 0001 86a3 0000 0003 0000 0001 >> =A0 =A0 =A0 =A0 0x0050: =A00000 >> 23:22:03.056180 IP (tos 0x0, ttl 128, id 10841, offset 0, flags [DF], pr= oto TCP (6), length 168) 172.17.5.167.2049 > 172.17.5.168.2355868444: reply= ok 116 getattr [|nfs] >> =A0 =A0 =A0 =A0 0x0000: =A04500 00a8 2a59 4000 8006 6c85 ac11 05a7 >> =A0 =A0 =A0 =A0 0x0010: =A0ac11 05a8 0801 0396 37c6 db06 7631 7f20 >> =A0 =A0 =A0 =A0 0x0020: =A08018 71c7 7a07 0000 0101 080a da0f fa93 >> =A0 =A0 =A0 =A0 0x0030: =A000a5 d95b 8000 0070 8c6b b31c 0000 0001 >> =A0 =A0 =A0 =A0 0x0040: =A00000 0000 0000 0000 0000 0000 0000 0000 >> =A0 =A0 =A0 =A0 0x0050: =A00000 >> >> If you'd look in tcp header then 2355868444 value should be 918 actually >> (as htons(918) returns expected 9603 in hex (0396 in net order)). > > That's not the port number; that's the NFS transaction id. =A0See the tcp= dump > manpage, under the section "NFS Requests and Replies". > Gah.. thank you, I was too dumb to read the man page. --=20 wbr, pluknet