# Invalid tcpdump result **URL:** \ **Category:** NGINX\ **Created:** [December 27, 2011, 7:26am UTC](https://www.ruby-forum.com/t/invalid-tcpdump-result/215218 "2011-12-27T07:26:22Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![dubstep](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cdc98d/32.png) [@dubstep](https://www.ruby-forum.com/u/dubstep)\ **Post date:** [December 27, 2011, 7:26am UTC](https://www.ruby-forum.com/t/invalid-tcpdump-result/215218/1 "2011-12-27T07:26:22Z")
Hi there, I were warned by the datacenter network admin which said that my server is doing spoofed packets. When I did tcpdump, here’s the results. It serving from 0.0.0.0:80 rather than my own IP. Can you please tell me what’s wrong with that? Thank’s before [http://pastebin.ca/2096533](http://pastebin.ca/2096533) ---
**Author:** ![Indo\_P](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/i/ce7236/32.png) [@Indo\_P](https://www.ruby-forum.com/u/Indo_P)\ **Post date:** [December 27, 2011, 8:40am UTC](https://www.ruby-forum.com/t/invalid-tcpdump-result/215218/2 "2011-12-27T08:40:20Z")
Hello! On Mon, Dec 26, 2011 at 10:25:40PM -0800, Indo P. wrote: > Hi there, > > I were warned by the datacenter network admin which said that my server is doing > spoofed packets. When I did tcpdump, here’s the results. It serving from > 0.0.0.0:80 rather than my own IP. Can you please tell me what’s wrong with that? > > Thank’s before > > [paste: Anonymous — pastebin.ca](http://pastebin.ca/2096533) It’s likely OS problem, and clearly not nginx’s one. Assuming you are using Linux, this may be relevant: [https://bbs.archlinux.org/viewtopic.php?id=129304](https://bbs.archlinux.org/viewtopic.php?id=129304) Maxim D. ---
**Author:** ![Indo\_P](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/i/ce7236/32.png) [@Indo\_P](https://www.ruby-forum.com/u/Indo_P)\ **Post date:** [December 27, 2011, 12:31pm UTC](https://www.ruby-forum.com/t/invalid-tcpdump-result/215218/3 "2011-12-27T12:31:26Z")
Yes it seems the same. But still doesn’t have any solutions. Do you have any suggestions? * * * From: Maxim D. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) To: [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) Sent: Tuesday, December 27, 2011 2:39 PM Subject: Re: Invalid tcpdump result Hello! On Mon, Dec 26, 2011 at 10:25:40PM -0800, Indo P. wrote: > Hi there, > > I were warned by the datacenter network admin which said that my server is doing > spoofed packets. When I did tcpdump, here’s the results. It serving from > 0.0.0.0:80 rather than my own IP. Can you please tell me what’s wrong with that? > > Thank’s before > > [paste: Anonymous — pastebin.ca](http://pastebin.ca/2096533) It’s likely OS problem, and clearly not nginx’s one. Assuming you are using Linux, this may be relevant: [https://bbs.archlinux.org/viewtopic.php?id=129304](https://bbs.archlinux.org/viewtopic.php?id=129304) Maxim D.