NodePort 통신할 때 TCP-DUMP 분석

1. 진입점이 Pod가 위치하지 않은 Node일 때

(1) Pod가 위치하지 않은 Node

 이 때에는 tunl0를 거쳐간다.

[root@s1 ~]# tcpdump -i tunl0 -nn | grep 10.244.111.5
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tunl0, link-type RAW (Raw IP), capture size 262144 bytes

18:44:25.127713 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [P.], seq 1295099361:1295100093, ack 742718106, win 16526, length 732: HTTP: GET /hypercloud-osp/ HTTP/1.1
18:44:25.128027 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 1:140, ack 732, win 88, length 139: HTTP: HTTP/1.1 304 Not Modified
18:44:25.171988 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 140, win 16526, length 0
18:44:25.883263 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [P.], seq 732:1362, ack 140, win 16526, length 630: HTTP: GET /hypercloud-osp/res/favicon.png?1586735279544 HTTP/1.1
18:44:25.883636 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 140:1565, ack 1362, win 88, length 1425: HTTP: HTTP/1.1 200 OK
18:44:25.885478 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 140, win 16526, options [nop,nop,sack 1 {1540:1565}], length 0
18:44:25.885550 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 1565, win 16526, length 0
18:44:26.080563 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [P.], seq 1362:1941, ack 1565, win 16526, length 579: HTTP: GET /v3/_api/infra-name HTTP/1.1
18:44:26.084953 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 1565:1963, ack 1941, win 88, length 398: HTTP: HTTP/1.1 200 OK
18:44:26.084963 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 1963:2462, ack 1941, win 88, length 499: HTTP
18:44:26.084978 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 2462:2467, ack 1941, win 88, length 5: HTTP
18:44:26.086877 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 1963, win 16525, options [nop,nop,sack 1 {2462:2467}], length 0
18:44:26.086895 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 2467, win 16523, length 0
18:44:32.613227 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [P.], seq 1941:2673, ack 2467, win 16523, length 732: HTTP: GET /hypercloud-osp/ HTTP/1.1
18:44:32.613565 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 2467:2606, ack 2673, win 88, length 139: HTTP: HTTP/1.1 304 Not Modified
18:44:32.656114 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 2606, win 16522, length 0
18:44:32.941179 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [P.], seq 2673:3303, ack 2606, win 16522, length 630: HTTP: GET /hypercloud-osp/res/favicon.png?1586735279544 HTTP/1.1
18:44:32.941551 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 2606:4031, ack 3303, win 88, length 1425: HTTP: HTTP/1.1 200 OK
18:44:32.944070 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 2606, win 16522, options [nop,nop,sack 1 {4006:4031}], length 0
18:44:32.944090 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 4031, win 16526, length 0
18:44:33.131014 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [P.], seq 3303:3882, ack 4031, win 16526, length 579: HTTP: GET /v3/_api/infra-name HTTP/1.1
18:44:33.136517 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 4031:4429, ack 3882, win 88, length 398: HTTP: HTTP/1.1 200 OK
18:44:33.136542 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 4429:4928, ack 3882, win 88, length 499: HTTP
18:44:33.136667 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [P.], seq 4928:4933, ack 3882, win 88, length 5: HTTP
18:44:33.139800 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 4933, win 16523, length 0
18:44:54.848751 IP 10.244.210.64.58519 > 10.244.111.5.80: Flags [.], seq 254292329:254292330, ack 1086493486, win 1025, length 1: HTTP
18:44:54.848988 IP 10.244.111.5.80 > 10.244.210.64.58519: Flags [.], ack 1, win 27, options [nop,nop,sack 1 {0:1}], length 0
18:44:54.850755 IP 10.244.210.64.58515 > 10.244.111.5.80: Flags [.], seq 189538831:189538832, ack 2314157664, win 1028, length 1: HTTP
18:44:54.850931 IP 10.244.111.5.80 > 10.244.210.64.58515: Flags [.], ack 1, win 51, options [nop,nop,sack 1 {0:1}], length 0
18:44:55.629909 IP 10.244.210.64.58494 > 10.244.111.5.80: Flags [.], seq 2246490550:2246490551, ack 2793251086, win 16526, length 1: HTTP
18:44:55.630127 IP 10.244.111.5.80 > 10.244.210.64.58494: Flags [.], ack 1, win 51, options [nop,nop,sack 1 {0:1}], length 0
18:44:55.631132 IP 10.244.210.64.58492 > 10.244.111.5.80: Flags [.], seq 882917502:882917503, ack 4077000164, win 1028, length 1: HTTP
18:44:55.631301 IP 10.244.111.5.80 > 10.244.210.64.58492: Flags [.], ack 1, win 87, options [nop,nop,sack 1 {0:1}], length 0
18:44:56.141337 IP 10.244.210.64.58518 > 10.244.111.5.80: Flags [.], seq 1153179547:1153179548, ack 608191849, win 16526, length 1: HTTP
18:44:56.141532 IP 10.244.111.5.80 > 10.244.210.64.58518: Flags [.], ack 1, win 28, options [nop,nop,sack 1 {0:1}], length 0
18:45:09.367401 IP 10.244.111.5.80 > 10.244.210.64.58515: Flags [F.], seq 1, ack 1, win 51, length 0
18:45:09.367434 IP 10.244.111.5.80 > 10.244.210.64.58518: Flags [F.], seq 1, ack 1, win 28, length 0
18:45:09.367442 IP 10.244.111.5.80 > 10.244.210.64.58519: Flags [F.], seq 1, ack 1, win 27, length 0
18:45:09.369704 IP 10.244.210.64.58518 > 10.244.111.5.80: Flags [.], ack 2, win 16526, length 0
18:45:09.369711 IP 10.244.210.64.58519 > 10.244.111.5.80: Flags [.], ack 2, win 1025, length 0
18:45:09.369746 IP 10.244.210.64.58515 > 10.244.111.5.80: Flags [.], ack 2, win 1028, length 0
18:45:10.371812 IP 10.244.111.5.80 > 10.244.210.64.58492: Flags [F.], seq 1, ack 1, win 87, length 0
18:45:10.371842 IP 10.244.111.5.80 > 10.244.210.64.58494: Flags [F.], seq 1, ack 1, win 51, length 0
18:45:10.374087 IP 10.244.210.64.58492 > 10.244.111.5.80: Flags [.], ack 2, win 1028, length 0
18:45:10.374098 IP 10.244.210.64.58494 > 10.244.111.5.80: Flags [.], ack 2, win 16526, length 0
18:45:18.140577 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], seq 3881:3882, ack 4933, win 16523, length 1: HTTP
18:45:18.140812 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [.], ack 3882, win 88, options [nop,nop,sack 1 {3881:3882}], length 0
18:45:21.740186 IP 10.244.210.64.58515 > 10.244.111.5.80: Flags [F.], seq 1, ack 2, win 1028, length 0
18:45:21.740233 IP 10.244.210.64.58519 > 10.244.111.5.80: Flags [F.], seq 1, ack 2, win 1025, length 0
18:45:21.740234 IP 10.244.210.64.58494 > 10.244.111.5.80: Flags [F.], seq 1, ack 2, win 16526, length 0
18:45:21.740248 IP 10.244.210.64.58492 > 10.244.111.5.80: Flags [F.], seq 1, ack 2, win 1028, length 0
18:45:21.740398 IP 10.244.210.64.58518 > 10.244.111.5.80: Flags [F.], seq 1, ack 2, win 16526, length 0
18:45:21.740483 IP 10.244.111.5.80 > 10.244.210.64.58515: Flags [.], ack 2, win 51, length 0
18:45:21.740499 IP 10.244.111.5.80 > 10.244.210.64.58519: Flags [.], ack 2, win 27, length 0
18:45:21.740509 IP 10.244.111.5.80 > 10.244.210.64.58494: Flags [.], ack 2, win 51, length 0
18:45:21.740520 IP 10.244.111.5.80 > 10.244.210.64.58492: Flags [.], ack 2, win 87, length 0
18:45:21.740537 IP 10.244.111.5.80 > 10.244.210.64.58518: Flags [.], ack 2, win 28, length 0
18:45:33.392158 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [F.], seq 4933, ack 3882, win 88, length 0
18:45:33.394832 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [.], ack 4934, win 16523, length 0
18:45:48.254066 IP 10.244.210.64.58491 > 10.244.111.5.80: Flags [F.], seq 3882, ack 4934, win 16523, length 0
18:45:48.254317 IP 10.244.111.5.80 > 10.244.210.64.58491: Flags [.], ack 3883, win 88, length 0
18:47:04.763042 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [S], seq 2262622634, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
18:47:04.763249 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [S.], seq 1633579193, ack 2262622635, win 43400, options [mss 1400,nop,nop,sackOK,nop,wscale 11], length 0
18:47:04.763407 IP 10.244.210.64.58602 > 10.244.111.5.80: Flags [S], seq 3038824026, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
18:47:04.763573 IP 10.244.111.5.80 > 10.244.210.64.58602: Flags [S.], seq 2884851385, ack 3038824027, win 43400, options [mss 1400,nop,nop,sackOK,nop,wscale 11], length 0
18:47:04.764989 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 1, win 1028, length 0
18:47:04.765061 IP 10.244.210.64.58602 > 10.244.111.5.80: Flags [.], ack 1, win 1028, length 0
18:47:04.765655 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [P.], seq 1:733, ack 1, win 1028, length 732: HTTP: GET /hypercloud-osp/ HTTP/1.1
18:47:04.765845 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [.], ack 733, win 22, length 0
18:47:04.765903 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 1:140, ack 733, win 22, length 139: HTTP: HTTP/1.1 304 Not Modified
18:47:04.809318 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 140, win 1027, length 0
18:47:05.600768 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [P.], seq 733:1363, ack 140, win 1027, length 630: HTTP: GET /hypercloud-osp/res/favicon.png?1586735279544 HTTP/1.1
18:47:05.601259 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 140:1565, ack 1363, win 23, length 1425: HTTP: HTTP/1.1 200 OK
18:47:05.602900 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 140, win 1027, options [nop,nop,sack 1 {1540:1565}], length 0
18:47:05.603039 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 1565, win 1028, length 0
18:47:05.841240 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [P.], seq 1363:1942, ack 1565, win 1028, length 579: HTTP: GET /v3/_api/infra-name HTTP/1.1
18:47:05.846764 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 1565:1963, ack 1942, win 24, length 398: HTTP: HTTP/1.1 200 OK
18:47:05.846778 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 1963:2462, ack 1942, win 24, length 499: HTTP
18:47:05.846854 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 2462:2467, ack 1942, win 24, length 5: HTTP
18:47:05.848370 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 2467, win 1024, length 0
18:47:15.082426 IP 10.244.210.64.58602 > 10.244.111.5.80: Flags [F.], seq 1, ack 1, win 1028, length 0
18:47:15.082653 IP 10.244.111.5.80 > 10.244.210.64.58602: Flags [F.], seq 1, ack 2, win 22, length 0
18:47:15.084127 IP 10.244.210.64.58602 > 10.244.111.5.80: Flags [.], ack 2, win 1028, length 0
18:47:50.848810 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], seq 1941:1942, ack 2467, win 1024, length 1: HTTP
18:47:50.848997 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [.], ack 1942, win 24, options [nop,nop,sack 1 {1941:1942}], length 0
18:48:05.521068 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [F.], seq 2467, ack 1942, win 24, length 0
18:48:05.522828 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 2468, win 1024, length 0

(2) Pod가 떠있는 노드

 route -n [pod-ip]를 통해 calico 인터페이스 이름을 찾고 tcpdump를 뜬다.

[root@c1 ~]# tcpdump -i caliba13782b83d -nn
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on caliba13782b83d, link-type EN10MB (Ethernet), capture size 262144 bytes

18:47:04.760831 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [S], seq 2262622634, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
18:47:04.760853 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [S.], seq 1633579193, ack 2262622635, win 43400, options [mss 1400,nop,nop,sackOK,nop,wscale 11], length 0
18:47:04.761187 IP 10.244.210.64.58602 > 10.244.111.5.80: Flags [S], seq 3038824026, win 64240, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
18:47:04.761200 IP 10.244.111.5.80 > 10.244.210.64.58602: Flags [S.], seq 2884851385, ack 3038824027, win 43400, options [mss 1400,nop,nop,sackOK,nop,wscale 11], length 0
18:47:04.762778 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 1, win 1028, length 0
18:47:04.762858 IP 10.244.210.64.58602 > 10.244.111.5.80: Flags [.], ack 1, win 1028, length 0
18:47:04.763432 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [P.], seq 1:733, ack 1, win 1028, length 732: HTTP: GET /hypercloud-osp/ HTTP/1.1
18:47:04.763444 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [.], ack 733, win 22, length 0
18:47:04.763519 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 1:140, ack 733, win 22, length 139: HTTP: HTTP/1.1 304 Not Modified
18:47:04.807111 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 140, win 1027, length 0
18:47:05.598588 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [P.], seq 733:1363, ack 140, win 1027, length 630: HTTP: GET /hypercloud-osp/res/favicon.png?1586735279544 HTTP/1.1
18:47:05.598778 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 140:1565, ack 1363, win 23, length 1425: HTTP: HTTP/1.1 200 OK
18:47:05.600686 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 140, win 1027, options [nop,nop,sack 1 {1540:1565}], length 0
18:47:05.600800 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 1565, win 1028, length 0
18:47:05.839058 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [P.], seq 1363:1942, ack 1565, win 1028, length 579: HTTP: GET /v3/_api/infra-name HTTP/1.1
18:47:05.839163 IP 10.244.111.5.46716 > 172.21.2.19.30113: Flags [S], seq 1921685820, win 43400, options [mss 1400,sackOK,TS val 361150619 ecr 0,nop,wscale 11], length 0
18:47:05.839455 IP 172.21.2.19.30113 > 10.244.111.5.46716: Flags [S.], seq 1491150663, ack 1921685821, win 43028, options [mss 1400,sackOK,TS val 909534272 ecr 361150619,nop,wscale 11], length 0
18:47:05.839481 IP 10.244.111.5.46716 > 172.21.2.19.30113: Flags [.], ack 1, win 22, options [nop,nop,TS val 361150620 ecr 909534272], length 0
18:47:05.839503 IP 10.244.111.5.46716 > 172.21.2.19.30113: Flags [P.], seq 1:677, ack 1, win 22, options [nop,nop,TS val 361150620 ecr 909534272], length 676
18:47:05.839666 IP 172.21.2.19.30113 > 10.244.111.5.46716: Flags [.], ack 677, win 22, options [nop,nop,TS val 909534272 ecr 361150620], length 0
18:47:05.844320 IP 172.21.2.19.30113 > 10.244.111.5.46716: Flags [P.], seq 1:898, ack 677, win 22, options [nop,nop,TS val 909534277 ecr 361150620], length 897
18:47:05.844332 IP 10.244.111.5.46716 > 172.21.2.19.30113: Flags [.], ack 898, win 23, options [nop,nop,TS val 361150624 ecr 909534277], length 0
18:47:05.844356 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 1565:1963, ack 1942, win 24, length 398: HTTP: HTTP/1.1 200 OK
18:47:05.844376 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 1963:2462, ack 1942, win 24, length 499: HTTP
18:47:05.844415 IP 172.21.2.19.30113 > 10.244.111.5.46716: Flags [P.], seq 898:903, ack 677, win 22, options [nop,nop,TS val 909534277 ecr 361150620], length 5
18:47:05.844424 IP 10.244.111.5.46716 > 172.21.2.19.30113: Flags [.], ack 903, win 23, options [nop,nop,TS val 361150624 ecr 909534277], length 0
18:47:05.844443 IP 10.244.111.5.46716 > 172.21.2.19.30113: Flags [F.], seq 677, ack 903, win 23, options [nop,nop,TS val 361150624 ecr 909534277], length 0
18:47:05.844469 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [P.], seq 2462:2467, ack 1942, win 24, length 5: HTTP
18:47:05.845250 IP 172.21.2.19.30113 > 10.244.111.5.46716: Flags [F.], seq 903, ack 678, win 22, options [nop,nop,TS val 909534278 ecr 361150624], length 0
18:47:05.845261 IP 10.244.111.5.46716 > 172.21.2.19.30113: Flags [.], ack 904, win 23, options [nop,nop,TS val 361150625 ecr 909534278], length 0
18:47:05.846159 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 2467, win 1024, length 0
18:47:09.779493 ARP, Request who-has 10.244.111.5 tell 172.21.2.19, length 28
18:47:09.779525 ARP, Reply 10.244.111.5 is-at a6:ca:c7:ac:3d:69, length 28
18:47:15.080181 IP 10.244.210.64.58602 > 10.244.111.5.80: Flags [F.], seq 1, ack 1, win 1028, length 0
18:47:15.080222 IP 10.244.111.5.80 > 10.244.210.64.58602: Flags [F.], seq 1, ack 2, win 22, length 0
18:47:15.081875 IP 10.244.210.64.58602 > 10.244.111.5.80: Flags [.], ack 2, win 1028, length 0
18:47:50.846551 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], seq 1941:1942, ack 2467, win 1024, length 1: HTTP
18:47:50.846571 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [.], ack 1942, win 24, options [nop,nop,sack 1 {1941:1942}], length 0
18:47:55.859472 ARP, Request who-has 10.244.111.5 tell 172.21.2.19, length 28
18:47:55.859491 ARP, Reply 10.244.111.5 is-at a6:ca:c7:ac:3d:69, length 28
18:48:05.518570 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [F.], seq 2467, ack 1942, win 24, length 0
18:48:05.520563 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [.], ack 2468, win 1024, length 0
18:48:23.522734 IP 10.244.210.64.58601 > 10.244.111.5.80: Flags [F.], seq 1942, ack 2468, win 1024, length 0
18:48:23.522761 IP 10.244.111.5.80 > 10.244.210.64.58601: Flags [.], ack 1943, win 24, length 0
18:48:28.531505 ARP, Request who-has 10.244.111.5 tell 172.21.2.19, length 28
18:48:28.531519 ARP, Reply 10.244.111.5 is-at a6:ca:c7:ac:3d:69, length 28

2. Pod가 떠있는 노드로 진입할 때

 이 때에는 다른 node의 인터페이스를 거치지 않으며 calico 인터페이스만을 거친다.

[root@c1 ~]# tcpdump -i caliba13782b83d -nn 
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on caliba13782b83d, link-type EN10MB (Ethernet), capture size 262144 bytes
18:50:14.837816 IP 172.21.2.19.58694 > 10.244.111.5.80: Flags [P.], seq 1547831079:1547831861, ack 2784701982, win 1028, length 782: HTTP: GET /hypercloud-osp/ HTTP/1.1
18:50:14.837899 IP 10.244.111.5.80 > 172.21.2.19.58694: Flags [P.], seq 1:140, ack 782, win 59, length 139: HTTP: HTTP/1.1 304 Not Modified
18:50:14.881106 IP 172.21.2.19.58694 > 10.244.111.5.80: Flags [.], ack 140, win 1027, length 0
18:50:15.372813 IP 172.21.2.19.58694 > 10.244.111.5.80: Flags [P.], seq 782:1462, ack 140, win 1027, length 680: HTTP: GET /hypercloud-osp/res/favicon.png?1586735279544 HTTP/1.1
18:50:15.372962 IP 10.244.111.5.80 > 172.21.2.19.58694: Flags [P.], seq 140:1565, ack 1462, win 60, length 1425: HTTP: HTTP/1.1 200 OK
18:50:15.375295 IP 172.21.2.19.58694 > 10.244.111.5.80: Flags [.], ack 140, win 1027, options [nop,nop,sack 1 {1540:1565}], length 0
18:50:15.375301 IP 172.21.2.19.58694 > 10.244.111.5.80: Flags [.], ack 1565, win 1028, length 0
18:50:15.564694 IP 172.21.2.19.58694 > 10.244.111.5.80: Flags [P.], seq 1462:2091, ack 1565, win 1028, length 629: HTTP: GET /v3/_api/infra-name HTTP/1.1
18:50:15.564792 IP 10.244.111.5.48590 > 172.21.2.19.30113: Flags [S], seq 456530123, win 43400, options [mss 1400,sackOK,TS val 361340345 ecr 0,nop,wscale 11], length 0
18:50:15.565125 IP 172.21.2.19.30113 > 10.244.111.5.48590: Flags [S.], seq 2719168241, ack 456530124, win 43028, options [mss 1400,sackOK,TS val 909723998 ecr 361340345,nop,wscale 11], length 0
18:50:15.565141 IP 10.244.111.5.48590 > 172.21.2.19.30113: Flags [.], ack 1, win 22, options [nop,nop,TS val 361340345 ecr 909723998], length 0
18:50:15.565169 IP 10.244.111.5.48590 > 172.21.2.19.30113: Flags [P.], seq 1:725, ack 1, win 22, options [nop,nop,TS val 361340345 ecr 909723998], length 724
18:50:15.565386 IP 172.21.2.19.30113 > 10.244.111.5.48590: Flags [.], ack 725, win 22, options [nop,nop,TS val 909723998 ecr 361340345], length 0
18:50:15.570886 IP 172.21.2.19.30113 > 10.244.111.5.48590: Flags [P.], seq 1:898, ack 725, win 22, options [nop,nop,TS val 909724004 ecr 361340345], length 897
18:50:15.570898 IP 10.244.111.5.48590 > 172.21.2.19.30113: Flags [.], ack 898, win 23, options [nop,nop,TS val 361340351 ecr 909724004], length 0
18:50:15.570933 IP 10.244.111.5.80 > 172.21.2.19.58694: Flags [P.], seq 1565:1963, ack 2091, win 61, length 398: HTTP: HTTP/1.1 200 OK
18:50:15.570952 IP 10.244.111.5.80 > 172.21.2.19.58694: Flags [P.], seq 1963:2462, ack 2091, win 61, length 499: HTTP
18:50:15.570980 IP 172.21.2.19.30113 > 10.244.111.5.48590: Flags [P.], seq 898:903, ack 725, win 22, options [nop,nop,TS val 909724004 ecr 361340345], length 5
18:50:15.570989 IP 10.244.111.5.48590 > 172.21.2.19.30113: Flags [.], ack 903, win 23, options [nop,nop,TS val 361340351 ecr 909724004], length 0
18:50:15.571022 IP 10.244.111.5.48590 > 172.21.2.19.30113: Flags [F.], seq 725, ack 903, win 23, options [nop,nop,TS val 361340351 ecr 909724004], length 0
18:50:15.571045 IP 10.244.111.5.80 > 172.21.2.19.58694: Flags [P.], seq 2462:2467, ack 2091, win 61, length 5: HTTP
18:50:15.571332 IP 172.21.2.19.30113 > 10.244.111.5.48590: Flags [F.], seq 903, ack 726, win 22, options [nop,nop,TS val 909724004 ecr 361340351], length 0
18:50:15.571343 IP 10.244.111.5.48590 > 172.21.2.19.30113: Flags [.], ack 904, win 23, options [nop,nop,TS val 361340351 ecr 909724004], length 0
18:50:15.573426 IP 172.21.2.19.58694 > 10.244.111.5.80: Flags [.], ack 2467, win 1024, length 0