(20 puntos) Utilizando httpie, hagan una solicitud de HTTP al servidor - http GET https://nrywhite.lat/23044/20250128.txt HTTP/1.1 200 OK Accept-Ranges: bytes CF-RAY: 90f91d461b5ecc76-TPA Connection: keep-alive Content-Length: 29 Content-Type: text/plain Date: Mon, 10 Feb 2025 03:46:49 GMT ETag: "67999e10-1d" Last-Modified: Wed, 29 Jan 2025 03:18:40 GMT NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJEQpSr8eSL9pgZVgo5BGQtmMQFVmegVMfZJXVBcVeGVVOzjZnYHbP8jgzS1ypcmuw8VHfkQMUW%2FxlFd4t%2BU1gx5VGnSI32P0vfBiWdvp5aUEveEBUNFDABaxvZvpB0%3D"}],"group":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC server-timing: cfL4;desc="?proto=TCP&rtt=43982&min_rtt=42339&rtt_var=17051&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3055&recv_bytes=770&delivery_rate=102600&cwnd=252&unsent_bytes=0&cid=1097a8d315650a3e&ts=106&x=0" Asistencia Adriana Palacios 2. (10 puntos) Utilizando curl, hagan una solicitud de HTTP al servidor curl -X GET https://nrywhite.lat/23044/20250128.txt Asistencia Adriana Palacios -(5 puntos) Que pasa si tratan de hacer una solicitud de HTTP desde el servidor hacia su computadora? 3. (10 puntos) Utilizando tail dentro del servidor, obtengan las últimas 15 líneas del archivo /var/log/nginx/access.log 2025-02-10 04:05 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~ ○ → tail -n 15 /var/log/nginx/access.log 172.68.76.136 - - [10/Feb/2025:04:02:30 +0000] "GET /23748/Laboratorios/ HTTP/1.1" 200 177 "https://nrywhite.lat/23748/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 127.0.0.1 - - [10/Feb/2025:04:02:53 +0000] "GET /PruebaSync/pruebasync.html HTTP/1.1" 404 162 "-" "curl/8.5.0" 162.158.11.159 - - [10/Feb/2025:04:04:39 +0000] "GET / HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" 162.158.11.159 - - [10/Feb/2025:04:04:39 +0000] "GET /banners/kickBt.png HTTP/1.1" 404 196 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:04:50 +0000] "GET / HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.170 - - [10/Feb/2025:04:04:50 +0000] "GET /banners/kickBt.png HTTP/1.1" 404 196 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.162 - - [10/Feb/2025:04:04:54 +0000] "GET / HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:04:54 +0000] "GET /23197/ HTTP/1.1" 200 215 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.136 - - [10/Feb/2025:04:04:54 +0000] "GET /banners/messi1.jpg HTTP/1.1" 200 96946 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:05:04 +0000] "GET /23197/ HTTP/1.1" 200 215 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:05:13 +0000] "GET /23748/ HTTP/1.1" 200 227 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.160 - - [10/Feb/2025:04:05:25 +0000] "GET /23748/ HTTP/1.1" 200 227 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.160 - - [10/Feb/2025:04:05:28 +0000] "GET /23645/ HTTP/1.1" 200 224 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:06:13 +0000] "GET / HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.136 - - [10/Feb/2025:04:06:16 +0000] "GET /23267/ HTTP/1.1" 200 225 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 4. (10 puntos) Utilizando ps y grep identifiquen qué procesos está corriendo amazon dentro del servidor → ps aux | grep amazon root 526 0.0 1.6 1759296 15692 ? Ssl Feb09 0:02 /snap/amazon-ssm-agent/11092/amazon-ssm-agent root 955 0.0 2.3 1860804 22860 ? Sl Feb09 0:06 /snap/amazon-ssm-agent/11092/ssm-agent-worker ubuntu 93210 0.0 0.2 7076 2048 pts/18 S+ 04:16 0:00 grep --color=auto --exclude-dir=.bzr --exclude-dir=CVS --exclude-dir=.git --exclude-dir=.hg --exclude-dir=.svn amazon 5. (10 puntos) Utilizando dig dentro del servidor, obtengan la ip que resuelve al hacer un dns lookup uvg.edu.gt IP: 45.223.56.41 ○ → dig uvg.edu.gt ; <<>> DiG 9.18.30-0ubuntu0.24.04.2-Ubuntu <<>> uvg.edu.gt ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60330 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 65494 ;; QUESTION SECTION: ;uvg.edu.gt. IN A ;; ANSWER SECTION: uvg.edu.gt. 300 IN A 45.223.56.41 uvg.edu.gt. 300 IN A 45.223.155.41 ;; Query time: 84 msec ;; SERVER: 127.0.0.53#53(127.0.0.53) (UDP) ;; WHEN: Mon Feb 10 04:17:28 UTC 2025 ;; MSG SIZE rcvd: 71 6. (5 puntos) Cuanta memoria RAM, total usada y libre, tiene el servidor? (su respuesta debe estar en MB) ○ → free -m total used free shared buff/cache available Mem: 957 581 129 20 447 375 Swap: 0 0 0 7. (5 puntos) Cuanta espacio de disco, total usado y disponible, tiene el servidor? (su respuesta debe estar en MB) 2025-02-10 04:19 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~ ○ → df -m Filesystem 1M-blocks Used Available Use% Mounted on /dev/root 28691 7605 21070 27% / tmpfs 479 20 460 5% /dev/shm tmpfs 192 2 191 1% /run tmpfs 5 0 5 0% /run/lock /dev/xvda16 881 76 744 10% /boot /dev/xvda15 105 7 99 6% /boot/efi tmpfs 96 1 96 1% /run/user/1000 8.(5 puntos) Utilizando el comando ip obtengan la ip del servidor 2025-02-10 04:23 ⌚ njs v18.19.1|py |go 16% ip-172-31-31-175 (172.31.31.175) in ~ ○ → ip -o address 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever 1: lo inet6 ::1/128 scope host noprefixroute \ valid_lft forever preferred_lft forever 2: enX0 inet 172.31.31.175/20 metric 100 brd 172.31.31.255 scope global dynamic enX0\ valid_lft 3106sec preferred_lft 3106sec 2: enX0 inet6 fe80::8ff:d6ff:fec1:6da5/64 scope link \ valid_lft forever preferred_lft forever 3: docker0 inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0\ valid_lft forever preferred_lft forever 3: docker0 inet6 fe80::42:47ff:fec1:f27d/64 scope link \ valid_lft forever preferred_lft forever 7: veth236a14f inet6 fe80::cf7:78ff:fe3b:d0f5/64 scope link \ valid_lft forever preferred_lft forever 9. (10 puntos) lsof lista los archivos abiertos. Identifiquen los archivos abiertos por el protocolo TCP en el puerto 80 2025-02-10 04:29 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo lsof -i TCP:80 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME nginx 72557 root 5u IPv4 298176 0t0 TCP *:http (LISTEN) nginx 72557 root 7u IPv6 298178 0t0 TCP *:http (LISTEN) nginx 72558 www-data 5u IPv4 298176 0t0 TCP *:http (LISTEN) nginx 72558 www-data 7u IPv6 298178 0t0 TCP *:http (LISTEN) 10.(20 puntos) Utilizando netstat, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de netstat (esto es un solo comando con estas opciones): -tcp -udp -numeric (muestra los puertos por número) -program (muestra qué programa es el que está escuchando) 2025-02-10 04:29 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo netstat -tulnp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.54:53 0.0.0.0:* LISTEN 301/systemd-resolve tcp 0 0 0.0.0.0:90 0.0.0.0:* LISTEN 1107/docker-proxy tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 72557/nginx: master tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 72557/nginx: master tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 301/systemd-resolve tcp6 0 0 :::10 :::* LISTEN 1/init tcp6 0 0 :::90 :::* LISTEN 1117/docker-proxy tcp6 0 0 :::80 :::* LISTEN 72557/nginx: master udp 0 0 127.0.0.54:53 0.0.0.0:* 301/systemd-resolve udp 0 0 127.0.0.53:53 0.0.0.0:* 301/systemd-resolve udp 0 0 172.31.31.175:68 0.0.0.0:* 465/systemd-network udp 0 0 127.0.0.1:323 0.0.0.0:* 594/chronyd udp6 0 0 ::1:323 :::* 594/chronyd 11. (30 puntos) Utilizando ss, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de ss (esto es un solo comando con estas opciones): summary tcp conexiones establecidas resuelvan los puertos numericos uso de memoria información interna de tcp proceso que usa el socket 2025-02-10 04:35 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo ss -s -t -a -n -m -i -p Total: 269 TCP: 23 (estab 11, closed 4, orphaned 0, timewait 3) Transport Total IP IPv6 RAW 1 0 1 UDP 5 4 1 TCP 19 6 13 INET 25 10 15 FRAG 0 0 0 State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=301,fd=17)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 LISTEN 0 4096 0.0.0.0:90 0.0.0.0:* users:(("docker-proxy",pid=1107,fd=4)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 LISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:(("nginx",pid=72558,fd=5),("nginx",pid=72557,fd=5)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d11) cubic cwnd:10 LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=72558,fd=6),("nginx",pid=72557,fd=6)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d14) cubic cwnd:10 LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=301,fd=15)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 TIME-WAIT 0 0 172.31.31.175:443 172.68.76.163:31302 ESTAB 0 0 172.31.31.175:42364 209.54.183.5:443 users:(("ssm-agent-worke",pid=955,fd=14)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) cubic wscale:6,7 rto:203 rtt:2.577/1.732 ato:40 mss:1460 pmtu:9001 rcvmss:1460 advmss:8961 cwnd:10 bytes_sent:10485 bytes_acked:10486 bytes_received:12040 segs_out:947 segs_in:770 data_segs_out:194 data_segs_in:197 send 45324020bps lastsnd:45399 lastrcv:45397 lastack:14560 pacing_rate 90648040bps delivery_rate 30981432bps delivered:195 app_limited busy:459ms rcv_space:56575 rcv_ssthresh:56575 minrtt:0.698 snd_wnd:59520 TIME-WAIT 0 0 172.31.31.175:443 162.158.11.157:51694 TIME-WAIT 0 0 172.31.31.175:443 162.158.11.149:37628 LISTEN 0 4096 *:10 *:* users:(("sshd",pid=1327,fd=3),("systemd",pid=1,fd=90)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d13) cubic cwnd:10 LISTEN 0 4096 [::]:90 [::]:* users:(("docker-proxy",pid=1117,fd=4)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 LISTEN 0 511 [::]:80 [::]:* users:(("nginx",pid=72558,fd=7),("nginx",pid=72557,fd=7)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 ESTAB 0 108 [::ffff:172.31.31.175]:10 [::ffff:181.174.105.92]:51421 users:(("sshd",pid=95754,fd=4),("sshd",pid=95642,fd=4)) skmem:(r0,rb2149520,t0,tb87040,f1300,w2796,o0,bl0,d1) cubic wscale:6,7 rto:261 rtt:60.709/1.8 ato:42 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:22 bytes_sent:116634 bytes_acked:116526 bytes_received:98725 segs_out:2733 segs_in:5364 data_segs_out:2722 data_segs_in:2677 send 4197862bps lastsnd:4 lastrcv:4 lastack:4 pacing_rate 8395720bps delivery_rate 2126920bps delivered:2720 app_limited busy:58628ms unacked:3 rcv_rtt:213732 rcv_space:62761 rcv_ssthresh:56575 minrtt:54.212 snd_wnd:131072 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.105.73]:21356 users:(("sshd",pid=74166,fd=4),("sshd",pid=74096,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d57) cubic wscale:6,7 rto:274 rtt:71.291/3.813 ato:43 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:15 ssthresh:10 bytes_sent:194162 bytes_retrans:3796 bytes_acked:190366 bytes_received:178037 segs_out:4482 segs_in:8290 data_segs_out:3883 data_segs_in:4655 send 2437334bps lastsnd:4358072 lastrcv:4358072 lastack:4357995 pacing_rate 2924784bps delivery_rate 1577792bps delivered:3868 app_limited busy:117801ms retrans:0/16 dsack_dups:14 rcv_rtt:3938.25 rcv_space:56575 rcv_ssthresh:56575 minrtt:57.579 rcv_ooopack:142 snd_wnd:131008 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.106.91]:4397 users:(("sshd",pid=71096,fd=4),("sshd",pid=71026,fd=4)) skmem:(r0,rb1371933,t0,tb87040,f0,w0,o0,bl0,d0) cubic wscale:7,7 rto:283 rtt:82.154/11.352 ato:45 mss:1448 pmtu:9001 rcvmss:1208 advmss:8949 cwnd:6 ssthresh:6 bytes_sent:157098 bytes_retrans:144 bytes_acked:156954 bytes_received:148710 segs_out:4065 segs_in:4540 data_segs_out:4050 data_segs_in:4000 send 846021bps lastsnd:6542588 lastrcv:6542694 lastack:6542522 pacing_rate 1015216bps delivery_rate 1390376bps delivered:4047 app_limited busy:86643ms retrans:0/4 rcv_rtt:67276.3 rcv_space:62714 rcv_ssthresh:58991 minrtt:61.348 snd_wnd:64128 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.201.215]:17248 users:(("sshd",pid=72715,fd=4),("sshd",pid=72601,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) cubic wscale:7,7 rto:302 rtt:101.671/8.497 ato:40 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:26 bytes_sent:61046 bytes_acked:61046 bytes_received:45573 segs_out:1227 segs_in:1326 data_segs_out:1219 data_segs_in:1172 send 2962339bps lastsnd:6483956 lastrcv:6483956 lastack:6483834 pacing_rate 5924664bps delivery_rate 2045360bps delivered:1220 app_limited busy:24946ms rcv_rtt:98 rcv_space:56575 rcv_ssthresh:56575 minrtt:78.322 snd_wnd:62464 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.152.170]:36788 users:(("sshd",pid=91850,fd=4),("sshd",pid=91753,fd=4)) skmem:(r0,rb2146159,t0,tb87040,f0,w0,o0,bl0,d86) cubic wscale:7,7 rto:287 rtt:86.878/8.882 ato:42 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:26 bytes_sent:221318 bytes_acked:221318 bytes_received:136966 segs_out:3937 segs_in:4266 data_segs_out:3874 data_segs_in:3669 send 3466746bps lastsnd:1206295 lastrcv:1206295 lastack:1206217 pacing_rate 6933416bps delivery_rate 2362968bps delivered:3875 app_limited busy:75476ms rcv_rtt:126398 rcv_space:62718 rcv_ssthresh:56575 minrtt:74.049 snd_wnd:64128 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.117.30]:48494 users:(("sshd",pid=68791,fd=4),("sshd",pid=68672,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d1949) cubic wscale:6,7 rto:287 rtt:86.022/2.122 ato:45 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:10 bytes_sent:1076874 bytes_acked:1076874 bytes_received:977589 segs_out:28805 segs_in:54077 data_segs_out:28050 data_segs_in:26999 send 1346632bps lastsnd:6324390 lastrcv:6324390 lastack:6324302 pacing_rate 2693240bps delivery_rate 2315272bps delivered:28051 app_limited busy:595921ms rcv_rtt:87 rcv_space:56575 rcv_ssthresh:56575 minrtt:78.241 snd_wnd:131008 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.195.167]:21059 users:(("sshd",pid=82676,fd=4),("sshd",pid=82402,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d2) cubic wscale:6,7 rto:266 rtt:65.349/2.963 ato:45 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:10 bytes_sent:8654 bytes_retrans:268 bytes_acked:8386 bytes_received:5269 segs_out:102 segs_in:162 data_segs_out:93 data_segs_in:81 send 1772636bps lastsnd:3831595 lastrcv:3831595 lastack:3831529 pacing_rate 3545248bps delivery_rate 1634048bps delivered:94 app_limited busy:2522ms retrans:0/1 dsack_dups:1 rcv_rtt:68 rcv_space:56575 rcv_ssthresh:56575 minrtt:58.517 snd_wnd:130944 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.117.30]:55681 users:(("sshd",pid=78160,fd=4),("sshd",pid=78041,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d122) cubic wscale:6,7 rto:287 rtt:86.788/2.495 ato:48 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:14 bytes_sent:62374 bytes_acked:62374 bytes_received:55721 segs_out:1519 segs_in:2882 data_segs_out:1471 data_segs_in:1436 send 1868645bps lastsnd:4553001 lastrcv:4553001 lastack:4552913 pacing_rate 3737280bps delivery_rate 1230752bps delivered:1472 app_limited busy:32672ms rcv_space:56575 rcv_ssthresh:56575 minrtt:78.487 snd_wnd:131008 ESTAB 0 1448 [::ffff:172.31.31.175]:10 [::ffff:181.209.195.167]:34321 users:(("sshd",pid=91448,fd=4),("sshd",pid=91378,fd=4)) skmem:(r0,rb1737499,t0,tb87040,f984,w11304,o0,bl0,d342) cubic wscale:6,7 rto:275 rtt:74.662/10.036 ato:47 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:10 ssthresh:7 bytes_sent:370642 bytes_retrans:844 bytes_acked:368682 bytes_received:332037 segs_out:9444 segs_in:17867 data_segs_out:9056 data_segs_in:9151 send 1551526bps lastsnd:2 lastrcv:25 lastack:25 pacing_rate 1861808bps delivery_rate 713672bps delivered:9037 app_limited busy:204825ms unacked:10 retrans:0/13 dsack_dups:4 rcv_rtt:52694.3 rcv_space:82512 rcv_ssthresh:73951 notsent:332 minrtt:58.148 rcv_ooopack:78 snd_wnd:131072 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.105.222]:52732 users:(("sshd",pid=90420,fd=4),("sshd",pid=90359,fd=4)) skmem:(r0,rb2144282,t0,tb87040,f0,w0,o0,bl0,d1) cubic wscale:7,7 rto:268 rtt:67.107/2.703 ato:93 mss:1448 pmtu:9001 rcvmss:1290 advmss:8949 cwnd:10 bytes_sent:787922 bytes_retrans:280 bytes_acked:787642 bytes_received:202002 segs_out:11391 segs_in:9493 data_segs_out:11339 data_segs_in:4531 send 1726198bps lastsnd:788815 lastrcv:789249 lastack:788752 pacing_rate 3452384bps delivery_rate 4793160bps delivered:11338 app_limited busy:159997ms retrans:0/4 dsack_dups:4 rcv_rtt:348453 rcv_space:67424 rcv_ssthresh:76009 minrtt:55.391 snd_wnd:64128