Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a tcpdump log with the following entry:

14:53:31.428570 IP 10.4.65.65.16666 > 192.168.201.10.80: RP 587:687(100) ack 48545454154 win 0

My Problem is that i have never seen an RP paket before.. What does it mean?

Is it kind of a reset paket?

Thanks in advance!

share|improve this question

2 Answers 2

up vote 4 down vote accepted

Flags are some combination of S (SYN), F (FIN), P (PUSH), R (RST), W (ECN CWR) or E (ECN-Echo), or a single `.' (no flags).

© man tcpdump

So, here you have TCP packet with RST (which means that it actually is a reset packet) and PUSH flags set.

share|improve this answer

In network related situations I only know RP as "Rendevouz Point" in Protocol Independent Multicast (Sparse Mode) - PIM-SM.

Unfortunately I am not sure about what the packets would look like. You might want to compare the ports or take a decision based on the environment you recorded the tcpdump. (These packages are not that common AFAIK)

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.