Here with another question :) Not sure if it is a dumb one .. I was experimenting with the tcpdump command and want to know how to analyse the logs once captured For example: 06:47:41.060885 IP > ip-.us-west-2.compute.internal.ssh: Flags [.], ack 144, win 256, length 0 06:47:41.779943 IP ip-6.us-west-2.compute.internal.ssh > : Flags [P.], seq 144:208, ack 1, win 284, length 64
What do the fields indicate and how do you confirm there is an issue with the traffic? Thankyou