TEST:

Command : tcpdump -A -w piggy tcp and host testbed10.ittc.ku.edu and port 22

The modified tcpdump records the messages from local host testbed10.ittc.ku.edu
and port 22.

The messages with the seqence number 34,290, 930,1018, 1050, 1098 and the dst host
piggy.ittc.ku.edu or dst host kermit.ittc.ku.edu are retransmitted. 
The tcpdump catched all the retransmitted and window size changes messages.

retransmitted message in red
window size change messge in blue

===============================================================================

Result of tcpdump:

DATE=20000408201724.427487 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Usage
NL.EVNT=TCPD_WIN CHG=-40 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4440
DATE=20000408201724.445587 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Usage
NL.EVNT=TCPD_WIN CHG=40 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4440
DATE=20000408201746.639308 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=34 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4660
DATE=20000408201746.937123 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=290 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4660
DATE=20000408201747.351824 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=290 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4660
DATE=20000408201747.668589 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=930 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4660
DATE=20000408201749.434088 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=1018 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4660
DATE=20000408201749.449379 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=1050 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4660
DATE=20000408201749.502678 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=1098 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=piggy.ittc.ku.edu DST_PORT=4660
DATE=20000408201805.413945 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=34 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=kermit.ittc.ku.edu DST_PORT=1825
DATE=20000408201805.555556 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=290 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=kermit.ittc.ku.edu DST_PORT=1825
DATE=20000408201806.124994 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=290 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=kermit.ittc.ku.edu DST_PORT=1825
DATE=20000408201806.486892 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=930 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=kermit.ittc.ku.edu DST_PORT=1825
DATE=20000408201807.407336 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=1018 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=kermit.ittc.ku.edu DST_PORT=1825
DATE=20000408201807.491352 HOST=testbed10.ittc.ku.edu PROG=tcpdump LVL=Error
NL.EVNT=TCPD_REXSEG SN=1098 SRC_HOST=testbed10.ittc.ku.edu SRC_PORT=22
DST_HOST=kermit.ittc.ku.edu DST_PORT=1825

All of the messages with the source host testbed10 and port 21:

SEQ=1 WIN= 32120 d_host=piggy.ittc.ku.edu dport=3816
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4629
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4630
SEQ=1 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4631
SEQ=41 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=81 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=121 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=161 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4632
SEQ=201 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4633
SEQ=65 WIN= 32120 d_host=piggy.ittc.ku.edu dport=3816
SEQ=105 WIN= 32120 d_host=piggy.ittc.ku.edu dport=3816
SEQ=145 WIN= 32120 d_host=piggy.ittc.ku.edu dport=3816
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4634
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4635
SEQ=297 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=337 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=377 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=417 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=489 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=1217 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=2009 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=2753 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=3009 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4636
SEQ=3449 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=3489 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=3529 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=3569 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=3641 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=4369 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=5161 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=5297 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=6041 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4637
SEQ=6601 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=6641 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=6681 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=6721 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=6793 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=7521 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=8313 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=9057 WIN= 32080 d_host=piggy.ittc.ku.edu dport=4440
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4638
SEQ=9249 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=9753 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=9793 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=9833 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4639
SEQ=9873 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=9913 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=9953 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=10137 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=10138 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4440
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4640
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4641
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4642
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4643
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4644
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4645
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4646
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4647
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4648
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4649
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4650
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4651
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4652
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4653
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4654
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4655
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4656
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4657
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4658
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4659
SEQ=2109756013 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=34 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=34 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4661
SEQ=290 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=290 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=290 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=914 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=930 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=930 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=962 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4662
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4663
SEQ=1018 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1018 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1050 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1050 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1098 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1098 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1130 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1210 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=1986 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4664
SEQ=2578 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=2618 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=3378 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=4106 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4665
SEQ=4266 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=4330 WIN= 32120 d_host=piggy.ittc.ku.edu dport=4660
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4666
SEQ=1 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4667
SEQ=41 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=81 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=121 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=161 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=201 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4668
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4669
SEQ=297 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=337 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4670
SEQ=377 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=417 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=457 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=497 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4671
SEQ=537 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=577 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=617 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4672
SEQ=673 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=713 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=753 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=793 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=889 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=1681 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=2449 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3209 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3281 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4673
SEQ=3417 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3457 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3497 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3537 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3577 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3617 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4674
SEQ=3713 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3753 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3793 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3833 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4675
SEQ=3873 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=3913 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=4097 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=4098 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1824
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4676
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4677
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4678
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4679
SEQ=2120617394 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=1 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=34 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=34 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=290 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=290 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4680
SEQ=290 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=914 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=930 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=930 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=962 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4681
SEQ=1018 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=1018 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=1050 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=1098 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=1098 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=1130 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=2018 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=2066 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=2106 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=2866 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=3594 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4682
SEQ=3754 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=3818 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4683
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4684
SEQ=3874 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=3914 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4685
SEQ=3954 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=3994 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=4090 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=4882 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=5650 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=5938 WIN= 32120 d_host=kermit.ittc.ku.edu dport=1825
SEQ=0 WIN= 0 d_host=piggy.ittc.ku.edu dport=4686