Last active
September 14, 2017 14:21
-
-
Save willwhui/7283897f6a50ab169043d00bb83bdedb to your computer and use it in GitHub Desktop.
客户端Ubuntu的DNS解析防污染（废）
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 客户端Ubuntu的DNS解析防污染 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
继续排查：
sudo tcpdump -i any host localhost
可见大量如下结果：
17:56:37.657024 IP localhost.1088 > localhost.50016: Flags [.], ack 234, win 350, options [nop,nop,TS val 156575 ecr 156575], length 0
17:56:37.660530 IP localhost.1088 > localhost.50020: Flags [F.], seq 13, ack 229, win 350, options [nop,nop,TS val 156576 ecr 156529], length 0
17:56:37.660703 IP localhost.50020 > localhost.1088: Flags [F.], seq 229, ack 14, win 342, options [nop,nop,TS val 156576 ecr 156576], length 0
sudo tcpdump -i any dst localhost and tcp port 1088
可见大量如下结果：
21:43:33.008249 IP localhost.51686 > localhost.1088: Flags [F.], seq 223, ack 14, win 342, options [nop,nop,TS val 273141 ecr 273141], length 0
21:43:33.008262 IP localhost.1088 > localhost.51686: Flags [.], ack 224, win 350, options [nop,nop,TS val 273141 ecr 273141], length 0
21:43:39.989639 IP localhost.1088 > localhost.51618: Flags [F.], seq 13, ack 229, win 350, options [nop,nop,TS val 274886 ecr 272385], length 0
21:43:39.989817 IP localhost.51618 > localhost.1088: Flags [F.], seq 229, ack 14, win 342, options [nop,nop,TS val 274886 ecr 274886], length 0
21:43:39.989835 IP localhost.1088 > localhost.51618: Flags [.], ack 230, win 350, options [nop,nop,TS val 274886 ecr 274886], length 0