TCP连接过程（tcpdump）

 

连接和断开

#客户端发送SYN同步信号和客户端初始序列号
16:46:13.098117 IP x.47398 > 39.156.66.18.http: Flags [S], seq 3833285689, win 64240, options [mss 1460,sackOK,TS val 577056687 ecr 0,nop,wscale 7], length 0
#服务端发送ACK确认信号和服务端初始序号，若返回RST重建连接信号则拒绝连接
16:46:13.122892 IP 39.156.66.18.http > x.47398: Flags [S.], seq 1625161224, ack 3833285690, win 8192, options [mss 1360,sackOK,nop,nop,nop,nop,nop,nop,nop,nop,nop,nop,nop,wscale 5], length 0
#客户端发送ACK确认信号，建立连接完成
16:46:13.122930 IP x.47398 > 39.156.66.18.http: Flags [.], ack 1, win 502, length 0
#客户端发送FIN结束信号
16:46:24.619431 IP x.47398 > 39.156.66.18.http: Flags [F.], seq 1, ack 1, win 502, length 0
#服务端返回ACK确认信号
16:46:24.658344 IP 39.156.66.18.http > x.47398: Flags [.], ack 2, win 916, length 0
#服务端发送FIN结束信号
16:46:24.658819 IP 39.156.66.18.http > x.47398: Flags [F.], seq 1, ack 2, win 916, length 0
#客户端返回ACK确认信号
16:46:24.658830 IP x.47398 > 39.156.66.18.http: Flags [.], ack 2, win 502, length 0
16:46:27.793825 IP 39.156.66.18.http > x.47398: Flags [R], seq 1625161226, win 0, length 0

SYN和FIN占用一个序号，ACK的值为下一个期望获取的报文段的第一个字节的序号

http请求过程

16:56:31.351967 IP x.33810 > 39.156.66.14.http: Flags [S], seq 2419066577, win 64240, options [mss 1460,sackOK,TS val 3345856674 ecr 0,nop,wscale 7], length 0
16:56:31.380951 IP 39.156.66.14.http > x.33810: Flags [S.], seq 1487342450, ack 2419066578, win 8192, options [mss 1360,sackOK,nop,nop,nop,nop,nop,nop,nop,nop,nop,nop,nop,wscale 5], length 0
16:56:31.381010 IP x.33810 > 39.156.66.14.http: Flags [.], ack 1, win 502, length 0
16:56:37.785854 IP x.33810 > 39.156.66.14.http: Flags [P.], seq 1:17, ack 1, win 502, length 16: HTTP: GET / HTTP/1.1
16:56:37.866089 IP 39.156.66.14.http > x.33810: Flags [.], ack 17, win 65535, length 0
16:56:39.196094 IP x.33810 > 39.156.66.14.http: Flags [P.], seq 17:19, ack 1, win 502, length 2: HTTP
16:56:39.252117 IP 39.156.66.14.http > x.33810: Flags [.], ack 19, win 2452, length 0
16:56:39.253889 IP 39.156.66.14.http > x.33810: Flags [.], seq 1:1361, ack 19, win 2452, length 1360: HTTP: HTTP/1.1 200 OK
16:56:39.253914 IP x.33810 > 39.156.66.14.http: Flags [.], ack 1361, win 493, length 0
16:56:39.254933 IP 39.156.66.14.http > x.33810: Flags [.], seq 1361:2721, ack 19, win 2452, length 1360: HTTP
16:56:39.254945 IP x.33810 > 39.156.66.14.http: Flags [.], ack 2721, win 493, length 0
16:56:39.258045 IP 39.156.66.14.http > x.33810: Flags [.], seq 2721:4081, ack 19, win 2452, length 1360: HTTP
16:56:39.258054 IP x.33810 > 39.156.66.14.http: Flags [.], ack 4081, win 493, length 0
16:56:39.258586 IP 39.156.66.14.http > x.33810: Flags [P.], seq 4081:4097, ack 19, win 2452, length 16: HTTP
16:56:39.258595 IP x.33810 > 39.156.66.14.http: Flags [.], ack 4097, win 501, length 0
16:56:39.259035 IP 39.156.66.14.http > x.33810: Flags [.], seq 4097:5457, ack 19, win 2452, length 1360: HTTP
16:56:39.259043 IP x.33810 > 39.156.66.14.http: Flags [.], ack 5457, win 493, length 0
16:56:39.261538 IP 39.156.66.14.http > x.33810: Flags [.], seq 5457:6817, ack 19, win 2452, length 1360: HTTP
16:56:39.261556 IP x.33810 > 39.156.66.14.http: Flags [.], ack 6817, win 493, length 0
16:56:39.261977 IP 39.156.66.14.http > x.33810: Flags [.], seq 6817:8177, ack 19, win 2452, length 1360: HTTP
16:56:39.261986 IP x.33810 > 39.156.66.14.http: Flags [.], ack 8177, win 493, length 0
16:56:39.263540 IP 39.156.66.14.http > x.33810: Flags [P.], seq 8177:15575, ack 19, win 2452, length 7398: HTTP
16:56:39.263544 IP 39.156.66.14.http > x.33810: Flags [P.], seq 14977:15575, ack 19, win 2452, length 598: HTTP
16:56:39.263556 IP x.33810 > 39.156.66.14.http: Flags [.], ack 15575, win 436, length 0
16:56:39.263567 IP x.33810 > 39.156.66.14.http: Flags [.], ack 15575, win 436, options [nop,nop,sack 1 {14977:15575}], length 0
16:56:54.536600 IP 39.156.66.14.http > x.33810: Flags [.], ack 19, win 2452, length 0
16:56:54.536632 IP x.33810 > 39.156.66.14.http: Flags [.], ack 15575, win 501, length 0
16:57:10.307902 IP 39.156.66.14.http > x.33810: Flags [.], ack 19, win 2452, length 0
16:57:10.307938 IP x.33810 > 39.156.66.14.http: Flags [.], ack 15575, win 501, length 0
16:57:26.077638 IP 39.156.66.14.http > x.33810: Flags [.], ack 19, win 2452, length 0
16:57:26.077654 IP x.33810 > 39.156.66.14.http: Flags [.], ack 15575, win 501, length 0
16:57:39.800009 IP 39.156.66.14.http > x.33810: Flags [F.], seq 15575, ack 19, win 2452, length 0
16:57:39.800013 IP 39.156.66.14.http > x.33810: Flags [F.], seq 15575, ack 19, win 2452, length 0
16:57:39.800013 IP 39.156.66.14.http > x.33810: Flags [F.], seq 15575, ack 19, win 2452, length 0
16:57:39.800030 IP x.33810 > 39.156.66.14.http: Flags [.], ack 15576, win 501, options [nop,nop,sack 1 {15575:15576}], length 0
16:57:39.800037 IP x.33810 > 39.156.66.14.http: Flags [.], ack 15576, win 501, options [nop,nop,sack 1 {15575:15576}], length 0
16:57:39.800110 IP x.33810 > 39.156.66.14.http: Flags [F.], seq 19, ack 15576, win 501, length 0
16:57:39.830759 IP 39.156.66.14.http > x.33810: Flags [.], ack 20, win 2452, length 0
16:57:39.832387 IP 39.156.66.14.http > x.33810: Flags [.], ack 20, win 2452, length 0
16:57:39.832407 IP x.33810 > 39.156.66.14.http: Flags [R], seq 2419066597, win 0, length 0