# Lab 2 ### (20 puntos) Utilizando httpie, hagan una solicitud de HTTP al servidor ``` ╭─@  ~ ╰─http GET https://nrywhite.lat/23542/20250128.txt HTTP/1.1 200 OK Accept-Ranges: bytes CF-RAY: 90f91b97ffbcb0b9-GUA Connection: keep-alive Content-Length: 40 Content-Type: text/plain Date: Mon, 10 Feb 2025 03:45:41 GMT ETag: "67999cf6-28" Last-Modified: Wed, 29 Jan 2025 03:13:58 GMT NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EBliS75cWFYxSUQl7yvZCFZ1s6lAs775jCyw5YVXBuLujGyfL4B%2FP%2B0WRaVccZH3e4K9%2B5nHjOVPupY33UGJJ3aT%2Fgf59YOITLXq4I5ioirP9qaj3VBBeGSyAO7w%2B04%3D"}],"group":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400 cf-cache-status: DYNAMIC server-timing: cfL4;desc="?proto=TCP&rtt=11687&min_rtt=11599&rtt_var=4525&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3055&recv_bytes=770&delivery_rate=353084&cwnd=252&unsent_bytes=0&cid=008eea2b598053cb&ts=85&x=0" Hola, soy Bryan, esta es mi asistenica. ``` #### (10 puntos) Utilizando curl, hagan una solicitud de HTTP al servidor ``` ─@  ~ ╰─curl -X GET https://nrywhite.lat/23542/PruebaSync/pruebasync.html Top 10 Canciones Más Escuchadas - Mi Spotify

Mi Top 10 de Canciones Más Escuchadas

Introducción

Esta será una página en la que colocaré mi top 10 de canciones más escuchadas en el último mes según Spotify.

Lista de Canciones

  1. Felices x Siempre - María Becerra
  2. el ingeniero - Alleh, Yorghaki
  3. Nueva Era - Duki, Myke Towers
  4. YaMeFui - Bizarrap, Duki, Nicki Nicole
  5. Empty Out Your Pockets - Juice WRLD
  6. Neighbors - Nate Mitchell
  7. Ni Me Debes Ni Te Debo - Carin Leon, Camilo
  8. A tus Pies - LIT killah, Rusherking
  9. Mi Refe - Beéle, Ovy On The Drums
  10. Mil Maneras de Morir - 3AM
``` ### (5 puntos) Que pasa si tratan de hacer una solicitud de HTTP desde el servidor hacia su computadora? No se logrará establecer la conexión, no estamos en la misma red entonces no se logra concretar. ``` 2025-02-10 04:02 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~ ○ → curl -X GET http://127.0.0.1/PruebaSync/pruebasync.html 404 Not Found

404 Not Found

nginx/1.24.0 (Ubuntu)
``` ### (10 puntos) Utilizando tail dentro del servidor, obtengan las últimas 15 líneas del archivo /var/log/nginx/access.log - Aquí están todos los Requests ``` 2025-02-10 04:05 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~ ○ → tail -n 15 /var/log/nginx/access.log 172.68.76.160 - - [10/Feb/2025:04:02:17 +0000] "GET /23218/Elinternetantesdelaweb/El%20internet%20antes%20de%20la%20web.docx HTTP/1.1" 304 0 "https://nrywhite.lat/23218/Elinternetantesdelaweb/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.136 - - [10/Feb/2025:04:02:25 +0000] "GET /23748/ HTTP/1.1" 200 227 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.136 - - [10/Feb/2025:04:02:30 +0000] "GET /23748/Laboratorios/ HTTP/1.1" 200 177 "https://nrywhite.lat/23748/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 127.0.0.1 - - [10/Feb/2025:04:02:53 +0000] "GET /PruebaSync/pruebasync.html HTTP/1.1" 404 162 "-" "curl/8.5.0" 162.158.11.159 - - [10/Feb/2025:04:04:39 +0000] "GET / HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" 162.158.11.159 - - [10/Feb/2025:04:04:39 +0000] "GET /banners/kickBt.png HTTP/1.1" 404 196 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:04:50 +0000] "GET / HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.170 - - [10/Feb/2025:04:04:50 +0000] "GET /banners/kickBt.png HTTP/1.1" 404 196 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.162 - - [10/Feb/2025:04:04:54 +0000] "GET / HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:04:54 +0000] "GET /23197/ HTTP/1.1" 200 215 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.136 - - [10/Feb/2025:04:04:54 +0000] "GET /banners/messi1.jpg HTTP/1.1" 200 96946 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:05:04 +0000] "GET /23197/ HTTP/1.1" 200 215 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.130 - - [10/Feb/2025:04:05:13 +0000] "GET /23748/ HTTP/1.1" 200 227 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.160 - - [10/Feb/2025:04:05:25 +0000] "GET /23748/ HTTP/1.1" 200 227 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" 172.68.76.160 - - [10/Feb/2025:04:05:28 +0000] "GET /23645/ HTTP/1.1" 200 224 "https://nrywhite.lat/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0" ``` ### (10 puntos) Utilizando ps y grep identifiquen qué procesos está corriendo amazon dentro del servidor ``` 2025-02-10 04:15 ⌚ njs v18.19.1|py |go 10% ip-172-31-31-175 (172.31.31.175) in ~ ○ → ps aux | grep amazon root 526 0.0 1.6 1759296 15692 ? Ssl Feb09 0:02 /snap/amazon-ssm-agent/11092/amazon-ssm-agent root 955 0.0 2.3 1860804 22860 ? Sl Feb09 0:06 /snap/amazon-ssm-agent/11092/ssm-agent-worker ubuntu 93079 0.0 0.2 7076 2048 pts/11 S+ 04:15 0:00 grep --color=auto --exclude-dir=.bzr --exclude-dir=CVS --exclude-dir=.git --exclude-dir=.hg --exclude-dir=.svn amazon ``` ### (10 puntos) Utilizando dig dentro del servidor, obtengan la ip que resuelve al hacer un dns lookup uvg.edu.gt La IP es 45.223.56.41 ``` ╭─@  ~ ╰─dig uvg.edu.gt ; <<>> DiG 9.10.6 <<>> uvg.edu.gt ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28753 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;uvg.edu.gt. IN A ;; ANSWER SECTION: uvg.edu.gt. 1946 IN A 45.223.56.41 uvg.edu.gt. 1946 IN A 45.223.155.41 ;; Query time: 2 msec ;; SERVER: 192.168.1.1#53(192.168.1.1) ;; WHEN: Sun Feb 09 22:17:21 CST 2025 ;; MSG SIZE rcvd: 71 ``` ### (5 puntos) Cuanta memoria RAM, total usada y libre, tiene el servidor? (su respuesta debe estar en MB) ``` 2025-02-10 04:15 ⌚ njs v18.19.1|py |go 16% ip-172-31-31-175 (172.31.31.175) in ~ ○ → free -m total used free shared buff/cache available Mem: 957 581 129 20 447 375 Swap: 0 0 0 ``` ### (5 puntos) Cuanta espacio de disco, total usado y disponible, tiene el servidor? (su respuesta debe estar en MB) ``` 2025-02-10 04:20 ⌚ njs v18.19.1|py |go 10% ip-172-31-31-175 (172.31.31.175) in ~ ○ → df -m Filesystem 1M-blocks Used Available Use% Mounted on /dev/root 28691 7605 21070 27% / tmpfs 479 20 460 5% /dev/shm tmpfs 192 2 191 1% /run tmpfs 5 0 5 0% /run/lock /dev/xvda16 881 76 744 10% /boot /dev/xvda15 105 7 99 6% /boot/efi tmpfs 96 1 96 1% /run/user/1000 ``` ### (5 puntos) Utilizando el comando ip obtengan la ip del servidor IP Server - 172.31.31.175/20 ``` 2025-02-10 04:23 ⌚ njs v18.19.1|py |go 9% ip-172-31-31-175 (172.31.31.175) in ~ ○ → ip -o address 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever 1: lo inet6 ::1/128 scope host noprefixroute \ valid_lft forever preferred_lft forever 2: enX0 inet 172.31.31.175/20 metric 100 brd 172.31.31.255 scope global dynamic enX0\ valid_lft 3115sec preferred_lft 3115sec 2: enX0 inet6 fe80::8ff:d6ff:fec1:6da5/64 scope link \ valid_lft forever preferred_lft forever 3: docker0 inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0\ valid_lft forever preferred_lft forever 3: docker0 inet6 fe80::42:47ff:fec1:f27d/64 scope link \ valid_lft forever preferred_lft forever 7: veth236a14f inet6 fe80::cf7:78ff:fe3b:d0f5/64 scope link \ valid_lft forever preferred_lft forever ``` ### (10 puntos) lsof lista los archivos abiertos. Identifiquen los archivos abiertos por el protocolo TCP en el puerto 80 ``` 2025-02-10 04:28 ⌚ njs v18.19.1|py |go 10% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo lsof -i TCP:80 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME nginx 72557 root 5u IPv4 298176 0t0 TCP *:http (LISTEN) nginx 72557 root 7u IPv6 298178 0t0 TCP *:http (LISTEN) nginx 72558 www-data 5u IPv4 298176 0t0 TCP *:http (LISTEN) nginx 72558 www-data 7u IPv6 298178 0t0 TCP *:http (LISTEN) ``` ### (20 puntos) Utilizando netstat, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de netstat (esto es un solo comando con estas opciones): ``` 2025-02-10 04:34 ⌚ njs v18.19.1|py |go 16% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo netstat -tulnp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.54:53 0.0.0.0:* LISTEN 301/systemd-resolve tcp 0 0 0.0.0.0:90 0.0.0.0:* LISTEN 1107/docker-proxy tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 72557/nginx: master tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 72557/nginx: master tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 301/systemd-resolve tcp6 0 0 :::10 :::* LISTEN 1/init tcp6 0 0 :::90 :::* LISTEN 1117/docker-proxy tcp6 0 0 :::80 :::* LISTEN 72557/nginx: master udp 0 0 127.0.0.54:53 0.0.0.0:* 301/systemd-resolve udp 0 0 127.0.0.53:53 0.0.0.0:* 301/systemd-resolve udp 0 0 172.31.31.175:68 0.0.0.0:* 465/systemd-network udp 0 0 127.0.0.1:323 0.0.0.0:* 594/chronyd udp6 0 0 ::1:323 :::* 594/chronyd ``` ### (30 puntos) Utilizando ss, listen los puertos por los que está escuchando el servidor. Deben filtrar usando las siguientes opciones de ss (esto es un solo comando con estas opciones): - summary - tcp - conextiones establecidas - resuelvan los puertos numericos - uso de memoria - informacion interna de tcp - proceso que usa el socket ``` 2025-02-10 04:38 ⌚ njs v18.19.1|py |go 0% ip-172-31-31-175 (172.31.31.175) in ~ ○ → sudo ss -s -t -a -n -m -i -p Total: 270 TCP: 23 (estab 12, closed 3, orphaned 0, timewait 2) Transport Total IP IPv6 RAW 1 0 1 UDP 5 4 1 TCP 20 7 13 INET 26 11 15 FRAG 0 0 0 State Recv-Q Send-Q Local Address:Port Peer Address:Port Process LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=301,fd=17)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 LISTEN 0 4096 0.0.0.0:90 0.0.0.0:* users:(("docker-proxy",pid=1107,fd=4)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 LISTEN 0 511 0.0.0.0:80 0.0.0.0:* users:(("nginx",pid=72558,fd=5),("nginx",pid=72557,fd=5)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d11) cubic cwnd:10 LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=72558,fd=6),("nginx",pid=72557,fd=6)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d14) cubic cwnd:10 LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=301,fd=15)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 TIME-WAIT 0 0 172.31.31.175:443 172.68.76.163:31302 ESTAB 0 0 172.31.31.175:80 162.158.166.234:48158 users:(("nginx",pid=72558,fd=8)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) cubic wscale:13,7 rto:275 rtt:74.839/28.193 ato:40 mss:1448 pmtu:9001 rcvmss:720 advmss:8949 cwnd:10 bytes_sent:442 bytes_acked:442 bytes_received:720 segs_out:2 segs_in:4 data_segs_out:1 data_segs_in:1 send 1547856bps lastsnd:5538 lastrcv:5538 lastack:5463 pacing_rate 3095712bps delivery_rate 155568bps delivered:2 app_limited busy:75ms rcv_rtt:75 rcv_space:56575 rcv_ssthresh:56575 minrtt:74.461 snd_wnd:73728 ESTAB 0 0 172.31.31.175:42364 209.54.183.5:443 users:(("ssm-agent-worke",pid=955,fd=14)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) cubic wscale:6,7 rto:203 rtt:2.453/1.545 ato:40 mss:1460 pmtu:9001 rcvmss:1460 advmss:8961 cwnd:10 bytes_sent:10522 bytes_acked:10523 bytes_received:12073 segs_out:950 segs_in:772 data_segs_out:195 data_segs_in:198 send 47615165bps lastsnd:13960 lastrcv:13958 lastack:13958 pacing_rate 95196368bps delivery_rate 30981432bps delivered:196 app_limited busy:461ms rcv_space:56575 rcv_ssthresh:56575 minrtt:0.698 snd_wnd:59520 TIME-WAIT 0 0 172.31.31.175:443 162.158.11.157:51694 LISTEN 0 4096 *:10 *:* users:(("sshd",pid=1327,fd=3),("systemd",pid=1,fd=90)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d13) cubic cwnd:10 LISTEN 0 4096 [::]:90 [::]:* users:(("docker-proxy",pid=1117,fd=4)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 LISTEN 0 511 [::]:80 [::]:* users:(("nginx",pid=72558,fd=7),("nginx",pid=72557,fd=7)) skmem:(r0,rb131072,t0,tb16384,f0,w0,o0,bl0,d0) cubic cwnd:10 ESTAB 0 1448 [::ffff:172.31.31.175]:10 [::ffff:181.174.105.92]:51421 users:(("sshd",pid=95754,fd=4),("sshd",pid=95642,fd=4)) skmem:(r0,rb2149520,t0,tb87040,f1112,w19368,o0,bl0,d1) cubic wscale:6,7 rto:263 rtt:62.715/2.197 ato:42 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:19 bytes_sent:121398 bytes_acked:120474 bytes_received:102213 segs_out:2852 segs_in:5558 data_segs_out:2841 data_segs_in:2773 send 3509463bps lastsnd:1 lastrcv:4 lastack:4 pacing_rate 7018920bps delivery_rate 2126920bps delivered:2823 app_limited busy:60725ms unacked:19 rcv_rtt:213732 rcv_space:62761 rcv_ssthresh:56575 notsent:524 minrtt:54.212 snd_wnd:131072 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.105.73]:21356 users:(("sshd",pid=74166,fd=4),("sshd",pid=74096,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d57) cubic wscale:6,7 rto:274 rtt:71.291/3.813 ato:43 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:15 ssthresh:10 bytes_sent:194162 bytes_retrans:3796 bytes_acked:190366 bytes_received:178037 segs_out:4482 segs_in:8290 data_segs_out:3883 data_segs_in:4655 send 2437334bps lastsnd:4380633 lastrcv:4380633 lastack:4380556 pacing_rate 2924784bps delivery_rate 1577792bps delivered:3868 app_limited busy:117801ms retrans:0/16 dsack_dups:14 rcv_rtt:3938.25 rcv_space:56575 rcv_ssthresh:56575 minrtt:57.579 rcv_ooopack:142 snd_wnd:131008 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.106.91]:4397 users:(("sshd",pid=71096,fd=4),("sshd",pid=71026,fd=4)) skmem:(r0,rb1371933,t0,tb87040,f0,w0,o0,bl0,d0) cubic wscale:7,7 rto:283 rtt:82.154/11.352 ato:45 mss:1448 pmtu:9001 rcvmss:1208 advmss:8949 cwnd:6 ssthresh:6 bytes_sent:157098 bytes_retrans:144 bytes_acked:156954 bytes_received:148710 segs_out:4065 segs_in:4540 data_segs_out:4050 data_segs_in:4000 send 846021bps lastsnd:6565149 lastrcv:6565255 lastack:6565083 pacing_rate 1015216bps delivery_rate 1390376bps delivered:4047 app_limited busy:86643ms retrans:0/4 rcv_rtt:67276.3 rcv_space:62714 rcv_ssthresh:58991 minrtt:61.348 snd_wnd:64128 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.201.215]:17248 users:(("sshd",pid=72715,fd=4),("sshd",pid=72601,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d0) cubic wscale:7,7 rto:302 rtt:101.671/8.497 ato:40 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:26 bytes_sent:61046 bytes_acked:61046 bytes_received:45573 segs_out:1227 segs_in:1326 data_segs_out:1219 data_segs_in:1172 send 2962339bps lastsnd:6506516 lastrcv:6506516 lastack:6506394 pacing_rate 5924664bps delivery_rate 2045360bps delivered:1220 app_limited busy:24946ms rcv_rtt:98 rcv_space:56575 rcv_ssthresh:56575 minrtt:78.322 snd_wnd:62464 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.152.170]:36788 users:(("sshd",pid=91850,fd=4),("sshd",pid=91753,fd=4)) skmem:(r0,rb2146159,t0,tb87040,f0,w0,o0,bl0,d86) cubic wscale:7,7 rto:287 rtt:86.878/8.882 ato:42 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:26 bytes_sent:221318 bytes_acked:221318 bytes_received:136966 segs_out:3937 segs_in:4266 data_segs_out:3874 data_segs_in:3669 send 3466746bps lastsnd:1228855 lastrcv:1228855 lastack:1228777 pacing_rate 6933416bps delivery_rate 2362968bps delivered:3875 app_limited busy:75476ms rcv_rtt:126398 rcv_space:62718 rcv_ssthresh:56575 minrtt:74.049 snd_wnd:64128 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.117.30]:48494 users:(("sshd",pid=68791,fd=4),("sshd",pid=68672,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d1949) cubic wscale:6,7 rto:287 rtt:86.022/2.122 ato:45 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:10 bytes_sent:1076874 bytes_acked:1076874 bytes_received:977589 segs_out:28805 segs_in:54077 data_segs_out:28050 data_segs_in:26999 send 1346632bps lastsnd:6346950 lastrcv:6346950 lastack:6346862 pacing_rate 2693240bps delivery_rate 2315272bps delivered:28051 app_limited busy:595921ms rcv_rtt:87 rcv_space:56575 rcv_ssthresh:56575 minrtt:78.241 snd_wnd:131008 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.195.167]:21059 users:(("sshd",pid=82676,fd=4),("sshd",pid=82402,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d2) cubic wscale:6,7 rto:266 rtt:65.349/2.963 ato:45 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:10 bytes_sent:8654 bytes_retrans:268 bytes_acked:8386 bytes_received:5269 segs_out:102 segs_in:162 data_segs_out:93 data_segs_in:81 send 1772636bps lastsnd:3854155 lastrcv:3854155 lastack:3854089 pacing_rate 3545248bps delivery_rate 1634048bps delivered:94 app_limited busy:2522ms retrans:0/1 dsack_dups:1 rcv_rtt:68 rcv_space:56575 rcv_ssthresh:56575 minrtt:58.517 snd_wnd:130944 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:190.56.117.30]:55681 users:(("sshd",pid=78160,fd=4),("sshd",pid=78041,fd=4)) skmem:(r0,rb131072,t0,tb87040,f0,w0,o0,bl0,d122) cubic wscale:6,7 rto:287 rtt:86.788/2.495 ato:48 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:14 bytes_sent:62374 bytes_acked:62374 bytes_received:55721 segs_out:1519 segs_in:2882 data_segs_out:1471 data_segs_in:1436 send 1868645bps lastsnd:4575561 lastrcv:4575561 lastack:4575473 pacing_rate 3737280bps delivery_rate 1230752bps delivered:1472 app_limited busy:32672ms rcv_space:56575 rcv_ssthresh:56575 minrtt:78.487 snd_wnd:131008 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.209.195.167]:34321 users:(("sshd",pid=91448,fd=4),("sshd",pid=91378,fd=4)) skmem:(r0,rb1737499,t0,tb87040,f0,w0,o0,bl0,d342) cubic wscale:6,7 rto:276 rtt:75.212/14.967 ato:43 mss:1448 pmtu:9001 rcvmss:1448 advmss:8949 cwnd:16 ssthresh:7 bytes_sent:387338 bytes_retrans:844 bytes_acked:386494 bytes_received:336069 segs_out:9567 segs_in:18085 data_segs_out:9175 data_segs_in:9263 send 2464288bps lastsnd:19973 lastrcv:19973 lastack:19910 pacing_rate 2957144bps delivery_rate 1897144bps delivered:9166 app_limited busy:207475ms retrans:0/13 dsack_dups:4 rcv_rtt:52694.3 rcv_space:82512 rcv_ssthresh:73951 minrtt:58.148 rcv_ooopack:78 snd_wnd:131008 ESTAB 0 0 [::ffff:172.31.31.175]:10 [::ffff:181.174.105.222]:52732 users:(("sshd",pid=90420,fd=4),("sshd",pid=90359,fd=4)) skmem:(r0,rb2144282,t0,tb87040,f0,w0,o0,bl0,d1) cubic wscale:7,7 rto:268 rtt:67.107/2.703 ato:93 mss:1448 pmtu:9001 rcvmss:1290 advmss:8949 cwnd:10 bytes_sent:787922 bytes_retrans:280 bytes_acked:787642 bytes_received:202002 segs_out:11391 segs_in:9493 data_segs_out:11339 data_segs_in:4531 send 1726198bps lastsnd:811375 lastrcv:811809 lastack:811312 pacing_rate 3452384bps delivery_rate 4793160bps delivered:11338 app_limited busy:159997ms retrans:0/4 dsack_dups:4 rcv_rtt:348453 rcv_space:67424 rcv_ssthresh:76009 minrtt:55.391 snd_wnd:64128 ```