使用tcpdump观察tcp的三次握手，四次挥手，以及http的keep-alive机制

最新推荐文章于 2023-04-13 13:28:39 发布
最新推荐文章于 2023-04-13 13:28:39 发布
阅读量1.7k 收藏 1
点赞数
分类专栏： 网络编程 Linux 文章标签： tcp/ip tcpdump http
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/cwdben/article/details/122155298
版权

测试方法：

服务器使用自己写的，架设在阿里云服务器上。

打开两个终端，分别运行

cwd@cwd:~$ sudo tcpdump dst 116.62.35.197 and tcp

cwd@cwd:~$ sudo tcpdump src 116.62.35.197 and tcp

测试一：

使用postman发送有keep-alive标志的get请求一次，观察报文情况。

测试结果：

客户端发向服务器报文：

cwd@cwd:~$ sudo tcpdump dst 116.62.35.197 and tcp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlx08beac178ecb, link-type EN10MB (Ethernet), capture size 262144 bytes
10:40:16.033775 IP cwd.42002 > 116.62.35.197.1316: Flags [S], seq 163528420, win 64240, options [mss 1460,sackOK,TS val 671676829 ecr 0,nop,wscale 7], length 0
10:40:16.064634 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 463238398, win 502, options [nop,nop,TS val 671676860 ecr 666326916], length 0
10:40:16.064791 IP cwd.42002 > 116.62.35.197.1316: Flags [P.], seq 0:205, ack 1, win 502, options [nop,nop,TS val 671676860 ecr 666326916], length 205
10:40:16.102490 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 1379, win 501, options [nop,nop,TS val 671676898 ecr 666326948], length 0
10:40:16.104605 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 2757, win 501, options [nop,nop,TS val 671676900 ecr 666326948], length 0
10:40:16.119269 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 4135, win 501, options [nop,nop,TS val 671676914 ecr 666326948], length 0
10:40:16.119355 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 5513, win 496, options [nop,nop,TS val 671676914 ecr 666326948], length 0
10:40:16.121233 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 6891, win 501, options [nop,nop,TS val 671676916 ecr 666326948], length 0
10:40:16.121297 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 8269, win 496, options [nop,nop,TS val 671676916 ecr 666326948], length 0
10:40:16.121333 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 9647, win 488, options [nop,nop,TS val 671676916 ecr 666326948], length 0
10:40:16.121387 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 11025, win 480, options [nop,nop,TS val 671676917 ecr 666326948], length 0
10:40:16.121450 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 12403, win 486, options [nop,nop,TS val 671676917 ecr 666326948], length 0
10:40:16.121491 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 13781, win 478, options [nop,nop,TS val 671676917 ecr 666326948], length 0
10:40:16.134047 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 15159, win 501, options [nop,nop,TS val 671676929 ecr 666326985], length 0
10:40:16.136276 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 16537, win 501, options [nop,nop,TS val 671676931 ecr 666326987], length 0
10:40:16.151144 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 17915, win 501, options [nop,nop,TS val 671676946 ecr 666327002], length 0
10:40:16.159700 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 19293, win 501, options [nop,nop,TS val 671676955 ecr 666327004], length 0
10:40:16.161791 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 20671, win 501, options [nop,nop,TS val 671676957 ecr 666327004], length 0
10:40:16.161875 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 22049, win 496, options [nop,nop,TS val 671676957 ecr 666327004], length 0
10:40:16.161992 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 27561, win 501, options [nop,nop,TS val 671676957 ecr 666327004], length 0
10:40:16.167504 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 30317, win 501, options [nop,nop,TS val 671676963 ecr 666327016], length 0
10:40:16.192847 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 33073, win 501, options [nop,nop,TS val 671676988 ecr 666327034], length 0
10:40:16.200573 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 35829, win 501, options [nop,nop,TS val 671676996 ecr 666327044], length 0
10:40:16.200678 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671676996 ecr 666327045], length 0
10:40:17.214774 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671678010 ecr 666327045], length 0
10:40:18.246541 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671679042 ecr 666328097], length 0
**************************************************省略很多一样的报文****************************************************************
10:41:14.014789 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671734810 ecr 666383865], length 0
10:41:15.046784 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671735842 ecr 666384897], length 0
10:41:16.078756 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671736874 ecr 666385929], length 0
10:41:16.156591 IP cwd.42002 > 116.62.35.197.1316: Flags [F.], seq 205, ack 38124, win 501, options [nop,nop,TS val 671736952 ecr 666387004], length 0

服务器发向客户端报文：

cwd@cwd:~$ sudo tcpdump src 116.62.35.197 and tcp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlx08beac178ecb, link-type EN10MB (Ethernet), capture size 262144 bytes
10:40:16.064606 IP 116.62.35.197.1316 > cwd.42002: Flags [S.], seq 463238397, ack 163528421, win 65160, options [mss 1390,sackOK,TS val 666326916 ecr 671676829,nop,wscale 7], length 0
10:40:16.098902 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666326947 ecr 671676860], length 0
10:40:16.102441 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 1:1379, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.104577 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 1379:2757, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.119222 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 2757:4135, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.119332 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 4135:5513, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121199 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 5513:6891, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121284 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 6891:8269, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121314 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 8269:9647, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121348 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 9647:11025, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121410 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 11025:12403, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121421 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 12403:13781, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.134001 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 13781:15159, ack 206, win 508, options [nop,nop,TS val 666326985 ecr 671676898], length 1378
10:40:16.136244 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 15159:16537, ack 206, win 508, options [nop,nop,TS val 666326987 ecr 671676900], length 1378
10:40:16.151100 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 16537:17915, ack 206, win 508, options [nop,nop,TS val 666327002 ecr 671676914], length 1378
10:40:16.159649 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 17915:19293, ack 206, win 508, options [nop,nop,TS val 666327004 ecr 671676916], length 1378
10:40:16.161757 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 19293:20671, ack 206, win 508, options [nop,nop,TS val 666327004 ecr 671676916], length 1378
10:40:16.161861 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 20671:22049, ack 206, win 508, options [nop,nop,TS val 666327004 ecr 671676916], length 1378
10:40:16.161892 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 22049:23427, ack 206, win 508, options [nop,nop,TS val 666327004 ecr 671676916], length 1378
10:40:16.161913 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 23427:24805, ack 206, win 508, options [nop,nop,TS val 666327005 ecr 671676917], length 1378
10:40:16.161919 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 24805:26183, ack 206, win 508, options [nop,nop,TS val 666327005 ecr 671676917], length 1378
10:40:16.161923 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 26183:27561, ack 206, win 508, options [nop,nop,TS val 666327005 ecr 671676917], length 1378
10:40:16.167181 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 27561:28939, ack 206, win 508, options [nop,nop,TS val 666327016 ecr 671676929], length 1378
10:40:16.167471 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 28939:30317, ack 206, win 508, options [nop,nop,TS val 666327019 ecr 671676931], length 1378
10:40:16.185391 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 30317:31695, ack 206, win 508, options [nop,nop,TS val 666327034 ecr 671676946], length 1378
10:40:16.192822 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 31695:33073, ack 206, win 508, options [nop,nop,TS val 666327042 ecr 671676955], length 1378
10:40:16.193108 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 33073:34451, ack 206, win 508, options [nop,nop,TS val 666327044 ecr 671676957], length 1378
10:40:16.200554 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 34451:35829, ack 206, win 508, options [nop,nop,TS val 666327045 ecr 671676957], length 1378
10:40:16.200593 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 35829:37207, ack 206, win 508, options [nop,nop,TS val 666327045 ecr 671676957], length 1378
10:40:16.200604 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 37207:38123, ack 206, win 508, options [nop,nop,TS val 666327045 ecr 671676957], length 916
10:40:17.245177 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666328097 ecr 671676996], length 0
10:40:18.277847 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666329129 ecr 671676996], length 0
10:40:19.312514 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666330164 ecr 671676996], length 0
**************************************************省略很多一样的报文****************************************************************
10:41:14.045376 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666384897 ecr 671676996], length 0
10:41:15.078391 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666385929 ecr 671676996], length 0
10:41:16.109577 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666386961 ecr 671676996], length 0
10:41:16.155710 IP 116.62.35.197.1316 > cwd.42002: Flags [F.], seq 38123, ack 206, win 508, options [nop,nop,TS val 666387004 ecr 671676996], length 0
10:41:16.187787 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 207, win 508, options [nop,nop,TS val 666387038 ecr 671736952], length 0

三次握手

#客户端发向服务器
10:40:16.033775 IP cwd.42002 > 116.62.35.197.1316: Flags [S], seq 163528420, win 64240, options [mss 1460,sackOK,TS val 671676829 ecr 0,nop,wscale 7], length 0
10:40:16.064634 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 463238398, win 502, options [nop,nop,TS val 671676860 ecr 666326916], length 0
#服务器发向客户端
10:40:16.064606 IP 116.62.35.197.1316 > cwd.42002: Flags [S.], seq 463238397, ack 163528421, win 65160, options [mss 1390,sackOK,TS val 666326916 ecr 671676829,nop,wscale 7], length 0
10:40:16.098902 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666326947 ecr 671676860], length 0
  1. Client 将标志位 SYN 置为 1(Flags[S]表示SYN置位)， 随机产生一个值 seq=J=163528420， 并将该数据包发送给 Server， Client进入 SYN_SENT 状态， 等待 Server 确认。
  2. Server 收到数据包后由标志位 SYN=1 知道 Client 请求建立连接， Server 将标志位 SYN和 ACK 都置为 1， ack=J+1=163528421， 随机产生一个值 seq=K=463238397， 并将该数据包发送给 Client 以确认连接请求， Server 进入 SYN_RCVD 状态。
  3. Client 收到确认后， 检查 ack 是否为 J+1， ACK 是否为 1， 如果正确则将标志位 ACK 置为1， ack=K+1=463238398， 并将该数据包发送给 Server， Server 检查 ack 是否为 K+1， ACK 是否为 1， 如果正确则连接建立成功， Client 和 Server 进入 ESTABLISHED 状态， 完成三次握手， 随后 Client 与Server 之间可以开始传输数据了。
  4. 观察之后的就是服务端发送数据过来了。

传输数据

每一次客户端收到服务器哦给他发的数据，会回一个ack，ack号就是受到的seq的头。

#客户端发向服务器
10:40:16.064791 IP cwd.42002 > 116.62.35.197.1316: Flags [P.], seq 0:205, ack 1, win 502, options [nop,nop,TS val 671676860 ecr 666326916], length 205
10:40:16.102490 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 1379, win 501, options [nop,nop,TS val 671676898 ecr 666326948], length 0
10:40:16.104605 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 2757, win 501, options [nop,nop,TS val 671676900 ecr 666326948], length 0
10:40:16.119269 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 4135, win 501, options [nop,nop,TS val 671676914 ecr 666326948], length 0
10:40:16.119355 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 5513, win 496, options [nop,nop,TS val 671676914 ecr 666326948], length 0
10:40:16.121233 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 6891, win 501, options [nop,nop,TS val 671676916 ecr 666326948], length 0
10:40:16.121297 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 8269, win 496, options [nop,nop,TS val 671676916 ecr 666326948], length 0
10:40:16.121333 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 9647, win 488, options [nop,nop,TS val 671676916 ecr 666326948], length 0
10:40:16.121387 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 11025, win 480, options [nop,nop,TS val 671676917 ecr 666326948], length 0
10:40:16.121450 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 12403, win 486, options [nop,nop,TS val 671676917 ecr 666326948], length 0
10:40:16.121491 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 13781, win 478, options [nop,nop,TS val 671676917 ecr 666326948], length 0
10:40:16.134047 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 15159, win 501, options [nop,nop,TS val 671676929 ecr 666326985], length 0
10:40:16.136276 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 16537, win 501, options [nop,nop,TS val 671676931 ecr 666326987], length 0
10:40:16.151144 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 17915, win 501, options [nop,nop,TS val 671676946 ecr 666327002], length 0
10:40:16.159700 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 19293, win 501, options [nop,nop,TS val 671676955 ecr 666327004], length 0
10:40:16.161791 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 20671, win 501, options [nop,nop,TS val 671676957 ecr 666327004], length 0
10:40:16.161875 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 22049, win 496, options [nop,nop,TS val 671676957 ecr 666327004], length 0
10:40:16.161992 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 27561, win 501, options [nop,nop,TS val 671676957 ecr 666327004], length 0
10:40:16.167504 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 30317, win 501, options [nop,nop,TS val 671676963 ecr 666327016], length 0
10:40:16.192847 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 33073, win 501, options [nop,nop,TS val 671676988 ecr 666327034], length 0
10:40:16.200573 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 35829, win 501, options [nop,nop,TS val 671676996 ecr 666327044], length 0
#服务器发向客户端
10:40:16.098902 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666326947 ecr 671676860], length 0
10:40:16.102441 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 1:1379, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.104577 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 1379:2757, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.119222 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 2757:4135, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.119332 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 4135:5513, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121199 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 5513:6891, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121284 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 6891:8269, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121314 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 8269:9647, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121348 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 9647:11025, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121410 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 11025:12403, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.121421 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 12403:13781, ack 206, win 508, options [nop,nop,TS val 666326948 ecr 671676860], length 1378
10:40:16.134001 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 13781:15159, ack 206, win 508, options [nop,nop,TS val 666326985 ecr 671676898], length 1378
10:40:16.136244 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 15159:16537, ack 206, win 508, options [nop,nop,TS val 666326987 ecr 671676900], length 1378
10:40:16.151100 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 16537:17915, ack 206, win 508, options [nop,nop,TS val 666327002 ecr 671676914], length 1378
10:40:16.159649 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 17915:19293, ack 206, win 508, options [nop,nop,TS val 666327004 ecr 671676916], length 1378
10:40:16.161757 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 19293:20671, ack 206, win 508, options [nop,nop,TS val 666327004 ecr 671676916], length 1378
10:40:16.161861 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 20671:22049, ack 206, win 508, options [nop,nop,TS val 666327004 ecr 671676916], length 1378
10:40:16.161892 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 22049:23427, ack 206, win 508, options [nop,nop,TS val 666327004 ecr 671676916], length 1378
10:40:16.161913 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 23427:24805, ack 206, win 508, options [nop,nop,TS val 666327005 ecr 671676917], length 1378
10:40:16.161919 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 24805:26183, ack 206, win 508, options [nop,nop,TS val 666327005 ecr 671676917], length 1378
10:40:16.161923 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 26183:27561, ack 206, win 508, options [nop,nop,TS val 666327005 ecr 671676917], length 1378
10:40:16.167181 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 27561:28939, ack 206, win 508, options [nop,nop,TS val 666327016 ecr 671676929], length 1378
10:40:16.167471 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 28939:30317, ack 206, win 508, options [nop,nop,TS val 666327019 ecr 671676931], length 1378
10:40:16.185391 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 30317:31695, ack 206, win 508, options [nop,nop,TS val 666327034 ecr 671676946], length 1378
10:40:16.192822 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 31695:33073, ack 206, win 508, options [nop,nop,TS val 666327042 ecr 671676955], length 1378
10:40:16.193108 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 33073:34451, ack 206, win 508, options [nop,nop,TS val 666327044 ecr 671676957], length 1378
10:40:16.200554 IP 116.62.35.197.1316 > cwd.42002: Flags [.], seq 34451:35829, ack 206, win 508, options [nop,nop,TS val 666327045 ecr 671676957], length 1378
10:40:16.200593 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 35829:37207, ack 206, win 508, options [nop,nop,TS val 666327045 ecr 671676957], length 1378
10:40:16.200604 IP 116.62.35.197.1316 > cwd.42002: Flags [P.], seq 37207:38123, ack 206, win 508, options [nop,nop,TS val 666327045 ecr 671676957], length 916

keep-alive

在HTTP/1.0中，默认使用的是短连接。也就是说，浏览器和服务器每进行一次HTTP操作，就建立一次连接，但任务结束就中断连接。如果客户端浏览器访问的某个HTML或其他类型的 Web页中包含有其他的Web资源，如JavaScript文件、图像文件、CSS文件等；当浏览器每遇到这样一个Web资源，就会建立一个HTTP会话。

但从 HTTP/1.1起，默认使用长连接，用以保持连接特性。使用长连接的HTTP协议，会在响应头加上Connection Keep-Alive字段。在一个内容传输完毕后并不关闭连接，等待一定时间后仍没有数据传输才关闭。这个时间一般为60s。

在这个时间里，仍要确定这个连接是保持着的，如果哪一方断开了就直接关闭连接。此时客户端会一直发送最后一个ack的，长度为0的空报文，服务器也回应一个空报文。持续一分钟。这里的一分钟是由http的keep-alive机制定下来的，但是这一分钟里，一秒发一个的机制测试连接是否还存在，是tcp的keepalive机制。

区别：http的keep-clive是为了节省资源设计的，其中hold住socket连接是需要tcp的keepalive技术作为支持的。

#客户端发向服务器

10:40:16.200678 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671676996 ecr 666327045], length 0
10:40:17.214774 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671678010 ecr 666327045], length 0
10:40:18.246541 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671679042 ecr 666328097], length 0
**************************************************省略很多一样的报文****************************************************************
10:41:14.014789 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671734810 ecr 666383865], length 0
10:41:15.046784 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671735842 ecr 666384897], length 0
10:41:16.078756 IP cwd.42002 > 116.62.35.197.1316: Flags [.], ack 38123, win 501, options [nop,nop,TS val 671736874 ecr 666385929], length 0
#服务器发向客户端
10:40:17.245177 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666328097 ecr 671676996], length 0
10:40:18.277847 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666329129 ecr 671676996], length 0
10:40:19.312514 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666330164 ecr 671676996], length 0
**************************************************省略很多一样的报文****************************************************************
10:41:14.045376 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666384897 ecr 671676996], length 0
10:41:15.078391 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666385929 ecr 671676996], length 0
10:41:16.109577 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 206, win 508, options [nop,nop,TS val 666386961 ecr 671676996], length 0

四次挥手

#客户端发向服务器
10:41:16.156591 IP cwd.42002 > 116.62.35.197.1316: Flags [F.], seq 205, ack 38124, win 501, options [nop,nop,TS val 671736952 ecr 666387004], length 0
#服务器发向客户端
10:41:16.155710 IP 116.62.35.197.1316 > cwd.42002: Flags [F.], seq 38123, ack 206, win 508, options [nop,nop,TS val 666387004 ecr 671676996], length 0
10:41:16.187787 IP 116.62.35.197.1316 > cwd.42002: Flags [.], ack 207, win 508, options [nop,nop,TS val 666387038 ecr 671736952], length 0

在这里插入图片描述

客户端： （被动关闭）

  1. 客户端收到服务器发来的带有FIN的报文。其中seq=38123。进入CLOSE_WAIT状态。
  2. 客户端回复一个ack=38124，同时已经没有数据要传输，此报文也置位FIN。进入LAST_ACK状态。此时等待服务器最后发来ACK即可。
  3. 收到服务器发来的ack。 关闭。

服务器: (主动关闭)

  1. 发起关闭，向客户端发送带有FIN标志的报文，其中随机生成一个seq=38123。该报文中的ack与之前的数据传输有关，为206。
  2. 收到客户端发来的报文，和对了ack=38123+1，且上面有FIN。
  3. 发送ACK报文，直接进入TIME_WAIT状态。

测试二：

使用postman发送有connect 标志为closed的get请求一次，观察报文情况。

测试结果：

#客户端发向服务器
14:34:06.496360 IP cwd.43476 > 116.62.35.197.1316: Flags [S], seq 2373531687, win 64240, options [mss 1460,sackOK,TS val 684346357 ecr 0,nop,wscale 7], length 0
14:34:06.531072 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 1190842776, win 502, options [nop,nop,TS val 684346392 ecr 680357374], length 0
14:34:06.532722 IP cwd.43476 > 116.62.35.197.1316: Flags [P.], seq 0:201, ack 1, win 502, options [nop,nop,TS val 684346394 ecr 680357374], length 201
14:34:06.585013 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 1379, win 501, options [nop,nop,TS val 684346446 ecr 680357411], length 0
14:34:06.602166 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 2757, win 501, options [nop,nop,TS val 684346463 ecr 680357411], length 0
14:34:06.602283 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 4135, win 496, options [nop,nop,TS val 684346463 ecr 680357411], length 0
14:34:06.602564 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 5513, win 488, options [nop,nop,TS val 684346464 ecr 680357411], length 0
14:34:06.602844 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 6891, win 480, options [nop,nop,TS val 684346464 ecr 680357411], length 0
14:34:06.602912 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 8269, win 473, options [nop,nop,TS val 684346464 ecr 680357411], length 0
14:34:06.602983 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 9647, win 465, options [nop,nop,TS val 684346464 ecr 680357411], length 0
14:34:06.603063 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 11025, win 457, options [nop,nop,TS val 684346464 ecr 680357411], length 0
14:34:06.603147 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 12403, win 449, options [nop,nop,TS val 684346464 ecr 680357411], length 0
14:34:06.603226 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 13781, win 442, options [nop,nop,TS val 684346464 ecr 680357411], length 0
14:34:06.618638 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 15159, win 501, options [nop,nop,TS val 684346480 ecr 680357463], length 0
14:34:06.620760 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 16537, win 501, options [nop,nop,TS val 684346482 ecr 680357463], length 0
14:34:06.634519 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 17915, win 501, options [nop,nop,TS val 684346496 ecr 680357480], length 0
14:34:06.634576 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 19293, win 496, options [nop,nop,TS val 684346496 ecr 680357480], length 0
14:34:06.639228 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 20671, win 501, options [nop,nop,TS val 684346500 ecr 680357480], length 0
14:34:06.639285 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 22049, win 496, options [nop,nop,TS val 684346500 ecr 680357480], length 0
14:34:06.651209 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 24805, win 501, options [nop,nop,TS val 684346512 ecr 680357480], length 0
14:34:06.651493 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 33073, win 496, options [nop,nop,TS val 684346513 ecr 680357480], length 0
14:34:06.651875 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 35829, win 501, options [nop,nop,TS val 684346513 ecr 680357480], length 0
14:34:06.653020 IP cwd.43476 > 116.62.35.197.1316: Flags [.], ack 38087, win 501, options [nop,nop,TS val 684346514 ecr 680357481], length 0
14:34:06.664077 IP cwd.43476 > 116.62.35.197.1316: Flags [F.], seq 201, ack 38087, win 501, options [nop,nop,TS val 684346525 ecr 680357481], length 0
#服务器发向客户端
14:34:06.530960 IP 116.62.35.197.1316 > cwd.43476: Flags [S.], seq 1190842775, ack 2373531688, win 65160, options [mss 1390,sackOK,TS val 680357374 ecr 684346357,nop,wscale 7], length 0
14:34:06.570964 IP 116.62.35.197.1316 > cwd.43476: Flags [.], ack 202, win 508, options [nop,nop,TS val 680357410 ecr 684346394], length 0
14:34:06.584959 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 1:1379, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.602115 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 1379:2757, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.602260 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 2757:4135, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.602517 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 4135:5513, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.602794 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 5513:6891, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.602867 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 6891:8269, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.602961 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 8269:9647, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.602995 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 9647:11025, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.603123 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 11025:12403, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.603204 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 12403:13781, ack 202, win 508, options [nop,nop,TS val 680357411 ecr 684346394], length 1378
14:34:06.618588 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 13781:15159, ack 202, win 508, options [nop,nop,TS val 680357463 ecr 684346446], length 1378
14:34:06.620710 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 15159:16537, ack 202, win 508, options [nop,nop,TS val 680357463 ecr 684346446], length 1378
14:34:06.634485 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 16537:17915, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346463], length 1378
14:34:06.634553 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 17915:19293, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346463], length 1378
14:34:06.639206 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 19293:20671, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346463], length 1378
14:34:06.639240 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 20671:22049, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346463], length 1378
14:34:06.639297 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 22049:23427, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651170 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 23427:24805, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651226 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 24805:26183, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651282 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 26183:27561, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651305 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 27561:28939, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651327 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 28939:30317, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651425 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 30317:31695, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651448 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 31695:33073, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651471 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 33073:34451, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.651482 IP 116.62.35.197.1316 > cwd.43476: Flags [P.], seq 34451:35829, ack 202, win 508, options [nop,nop,TS val 680357480 ecr 684346464], length 1378
14:34:06.652313 IP 116.62.35.197.1316 > cwd.43476: Flags [.], seq 35829:37207, ack 202, win 508, options [nop,nop,TS val 680357481 ecr 684346464], length 1378
14:34:06.652998 IP 116.62.35.197.1316 > cwd.43476: Flags [FP.], seq 37207:38086, ack 202, win 508, options [nop,nop,TS val 680357481 ecr 684346464], length 879
14:34:06.697029 IP 116.62.35.197.1316 > cwd.43476: Flags [.], ack 203, win 508, options [nop,nop,TS val 680357545 ecr 684346525], length 0

其中三次握手和数据传输基本一致。

四次挥手

#客户端发向服务器
14:34:06.664077 IP cwd.43476 > 116.62.35.197.1316: Flags [F.], seq 201, ack 38087, win 501, options [nop,nop,TS val 684346525 ecr 680357481], length 0
#服务器发向客户端
14:34:06.652998 IP 116.62.35.197.1316 > cwd.43476: Flags [FP.], seq 37207:38086, ack 202, win 508, options [nop,nop,TS val 680357481 ecr 684346464], length 879
14:34:06.697029 IP 116.62.35.197.1316 > cwd.43476: Flags [.], ack 203, win 508, options [nop,nop,TS val 680357545 ecr 684346525], length 0

需注意最后的标识[FP],表示在发送数据的同时，FIN标志位置位。在多次测试中，客户端发送ack和FIN可以是一个报文，可以以是两个报文连续发送。

cwdben
关注
  • 0
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
tcpdump显示报文内容_tcpdump/Wireshark验证HTTP Keep-Alive
weixin_39719165的博客
12-01 1883
通过这篇文章，能直观地了解到以下4个知识点：1，TCP四次挥手的状态跳转2，HTTP Keep-Alive配置的作用3，HTTP长连接4，利用tcpdump和Wireshark做一个简单的网络数据包分析准备1，需要启动一个nginx服务，nginx.conf配置如下，端口号是10011。worker_processes 1; error_log logs/error.log; events {...
TCP的keepalive
...
06-08 390
  TCP的keepalive 一般是服务端开启这个功能，当然双方都可以使用。对于客户端来说会处于以下四种状态之一： 1.客户主机依然正常运行，并从服务器可达。客户端的TCP响应正常，而服务端也知道对方是正常工作的，服务器再两小时以后将keepalive定时器复位。如果在两个小时定时器时间达到之前有应用程序的通信量通过此连接，则定时器在交换数据后的未来2小时再复位。   2.客户端主...
浅谈 TCP 握手/数据传输/挥手过程以及 tcpdump 抓包工具使用
vnjohn 博主 > 主线分享后端领域业务设计知识、源码思想、架构设计
03-05 2873
该文章浅谈了 TCP 三次握手、数据传输、四次挥手的交互过程，通过 tcpdump 抓包工具对这三个流程进行了信息的输出以及介绍，文末整理了一些操作 TCP 常用的命令以及一些常见的问题，当然，对于整个 TCP 可靠性协议，这些只是皮毛一角了，后续会细究出更多内容进行输出
使用tcpdump,netstat简单看下tcp连接握手与挥手的过程和内核缓冲区的变化
kang2618的专栏
11-11 603
package main import ( "fmt" "net" ) func main() { listener, err := net.Listen("tcp", "127.0.0.1:8080") if err != nil { fmt.Printf("listen failed err: %v", err) return } var a int // 阻塞在这里 fmt.Scanf("%d", &a) fmt.Println("start accept")
TCP三次握手详解-深入浅出
Dream It Possible
03-29 4078
1. 准备 TCP是属于网络分层中的运输层(有的书也翻译为传输层)，因为OSI分为7层，感觉太麻烦了，所以分为四层就好了，简单。 分层以及每层的协议，TCP是属于运输层(有的书也翻译为传输层)，如下两张图： TCP三次握手会涉及到状态转换所以这里贴出TCP的状态转换图如下： 2.TCP三次握手简述 要想简单了解TCP三次握手，我们首先要了解TCP头部结构，如下： TCP传递给IP层的信息单位称为报文段或段，下面都用段做单位。 TCP三次握手如图： 2.1 第一次握手...
TCP三次握手及四次挥手详细图解.docx
05-24
TCP 三次握手及四次挥手详细图解 TCP 三次握手是指建立一个 TCP 连接时，需要客户端和服务器总共发送 3 个包。三次握手的目的是连接服务器指定端口，建立 TCP 连接，并同步连接双方的序列号和确认号并交换 TCP 窗口...
linux下通过命令来观察TCP三次握手过程(数据包)
01-07
本篇文章将详细介绍如何在Linux环境下通过命令行工具观察TCP三次握手的过程，并理解相关数据包的作用。 首先，让我们来解析TCP三次握手的具体步骤： 1. **第一次握手：SYN（同步序列编号）** 在这个阶段，客户端...
wireshark tcp三次握手
08-03
标题中的“wireshark tcp三次握手”指的是使用Wireshark这一网络封包分析软件来观察和理解TCP（传输控制协议）的三次握手过程。在TCP/IP通信协议中，三次握手是一种建立连接的方法，确保双方都能正常通信。在这个...
_04TCP四次握手与抓包分析.zip_TCP捂手分析_抓包 tcp
09-24
标题中的“_04TCP四次握手与抓包分析.zip_TCP捂手分析_抓包 tcp”指的是一个关于TCP协议连接建立（三次握手）和断开（四次挥手）的讲解资料，结合网络抓包工具进行分析。这个压缩包可能包含了一个PPT文件，用于详细...
tcpdump-master.zip_tcp dump_tcpdump_zip
09-23
tcpdump是一款广泛使用的网络数据包分析工具，主要在类UNIX操作系统如Linux、BSD以及 macOS 上运行，但在Windows系统中也有相应的实现。这个“tcpdump-master.zip”文件很可能包含了一个适用于Windows平台的tcpdump...
TCP三次握手和四次挥手
weixin_51259834的博客
10-14 961
一. TCP概述 通过TCP/IP协议的学习，我们可以了解到－－TCP是一种面向连接的、可靠的、基于字节流的通信协议，数据在传输前要建立连接（三次握手），传输完毕后要断开连接（四次握手）。 二. TCP三次握手 TCP头部结构： 　1 序号：Seq序号（32位），用来标识从计算机A发送到计算机B的数据包的序号，计算机发送数据时对此进行标记。 2 确认号：Ack确认号（32位），Ack = Seq + 1。 3 标志位：每个标志位占用1Bit，分为 URG、ACK、PSH、RST、SYN、FIN，具体含义
详解TCP三次握手的首次握手协议数据
zhuanzhuantech的博客
08-10 1296
我们之前学习计算机网络，都会提到TCP的三次握手、四次挥手，相信不少小伙伴都能简单描述但一直似懂非懂。那么双方主机到底是如何进行协议交互的？今天带领大家从二进制协议数据层面进行深入分析。本文通过tcpdump抓包，并使用强大的wireshark工具对三次握手的1号报文进行抽丝剥茧，有利于大家对网络协议有更深层次的认识。 ......
一文彻底搞懂TCP三次握手、四次挥手过程及原理，
最新发布
xv7777666的博客
04-13 227
由于TCP连接是全双工的，因此，每个方向都必须要单独进行关闭，这一原则是当一方完成数据发送任务后，发送一个FIN来终止这一方向的连接，收到一个FIN只是意味着这一方向上没有数据流动了，即不会再收到数据了，但是在这个TCP连接上仍然能够发送数据，直到这一方向也发送了FIN。客户端收到确认后，检查ack是否为J+1，ACK是否为1，如果正确则将标志位ACK置为1，ack=K+1，并将该数据包发送给服务器端，服务器端检查ack是否为K+1，ACK是否为1，如果正确则连接建立成功，客户端和服务器端进入。
通过抓包分析keepalived的浮动IP是如何飘移的
贾己人的博客
08-10 6502
首先介绍下环境: 两台机器：192.168.100.101（MASTER）,192.168.100.102 （BACKUP） 浮动IP：192.168.100.10 在两台机器上安装配置keepalived，此文不做安装具体步骤描述，可以参考我的另一篇文章keepalived安装配置 贴出此环境使用的配置文件： ! Configuration File for keepali...
Http协议三次握手过程知识点
_夜渐凉
06-04 2667
前言：HTTP协议是在TCP协议之上的，所以建立一个HTTP连接就需要一次三次握手的过程。但是HTTP有持续连接和非持久连接的区分，就是HTTP请求首部里面的Connection字段，如果是Connection:Keep-Alive就表示持续连接，除非一方主动断开，客户端和服务器的网络连接是持续的，也就是多个HTTP请求都是这一个网络连接；如果是Connection:close，一个HTTP请求在...
http keepalive
php程序员日志
10-12 298
http keepalive 在http早期 ，每个http请求都要求打开一个tpc socket连接，并且使用一次之后就断开这个tcp连接。使用keep-alive可以改善这种状态，即在一次TCP连接中可以持续发送多份数据而不会断开连接。通过使用keep-alive机制，可以减少tcp连接建立次数，也意味着可以减少TIME_WAIT状态连接，以此提高性能和提高httpd服务器的吞吐率(更少的t...
当http连接池遇上keepalive
hetaohappy的专栏
07-07 1万+
最近在使用netty作为http客户端通过pool连接tomcat的时候，出现了很多Connection reset by peer 的IOException的异常。便对问题的根源做了细致的调研。
关于keep-alive的几点疑惑
sumdeveloper的博客
11-29 1万+
一、http的keep-alive与tcp的keep-alive http keep-alive： 在一次tcp连接中可以连续发送多次数据，即可以保持一段时间的tcp连接，在这个保持的通道上有多个request、多个response。而不用每发一次数据就要重新进行三次握手连接，发完一次数据就要立即进行四次挥手释放连接。 这样可以提高性能和吞吐率。tcp keep-alive： 为了检测tcp的
tcpdump 详细使用指南（请尽情食用）
热门推荐
叮当猫的喵i
09-06 1万+
本文主要介绍了tcpdump的基本语法和使用方法，并通过一些示例来展示它强大的过滤功能。将 tcpdump 与 wireshark 进行组合可以发挥更强大的功效，本文也展示了如何优雅顺滑地结合 tcpdump 和 wireshark。如果你想了解更多的细节，可以查看 tcpdump 的man手册。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值