[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-talk] What is the meaning of the following in tcpdump files?



Analysing a tcpdump file of a Tor only connection(with Wireshark) a lot of times I get (EXTRACT) :

298517    2174.409794    "Destination IP"    192.168.1.64    TCP    etlservicemgr > 44861 [ACK] Seq=272869289 Ack=9508575 Win=501 Len=1440[Packet size limited during capture]

298518    2174.410803    "Destination IP"    192.168.1.64    TCP    etlservicemgr > 44861 [ACK] Seq=272870729 Ack=9508575 Win=501 Len=1440[Packet size limited during capture]

298519    2174.411750    192.168.1.64    "Destination IP"    TCP    44861 > etlservicemgr [ACK] Seq=9508575 Ack=272872169 Win=994 Len=0[Packet size limited during capture]

Other times instead of: "...etlservicemgr...",I get "...https...",or "...SSH...".I guess it is related to the entry node I use.So,is this "...etlservicemgr..." a connection really encrypted? Or is there any form for an entry node "FORCE" a non-encrypted connection?
 		 	   		  
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk