Monitoring with tcpdump, here's what I get when I run sudo certbot -vvv --apache . There is no communication using port 80, even at first. Is this normal?
jcdufour@sesstim4:~$ sudo tcpdump -i any 'tcp port 80 or tcp port 443' and host acme-v02.api.letsencrypt.org
[sudo] Mot de passe de jcdufour :
tcpdump: data link type LINUX_SLL2
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes
13:08:01.529188 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [S], seq 163416455, win 64240, options [mss 1460,sackOK,TS val 2146305057 ecr 0,nop,wscale 7], length 0
13:08:01.545351 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [S.], seq 1659856072, ack 163416456, win 65160, options [mss 1400,sackOK,TS val 268246586 ecr 2146305057,nop,wscale 13], length 0
13:08:01.545394 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 1, win 502, options [nop,nop,TS val 2146305073 ecr 268246586], length 0
13:08:01.638521 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 1:518, ack 1, win 502, options [nop,nop,TS val 2146305166 ecr 268246586], length 517
13:08:01.655277 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 518, win 7, options [nop,nop,TS val 268246696 ecr 2146305166], length 0
13:08:01.842308 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 1:2049, ack 518, win 8, options [nop,nop,TS val 268246882 ecr 2146305166], length 2048
13:08:01.842308 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 2049:3365, ack 518, win 8, options [nop,nop,TS val 268246882 ecr 2146305166], length 1316
13:08:01.842347 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 2049, win 494, options [nop,nop,TS val 2146305370 ecr 268246882], length 0
13:08:01.842362 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 3365, win 485, options [nop,nop,TS val 2146305370 ecr 268246882], length 0
13:08:01.844937 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 518:598, ack 3365, win 501, options [nop,nop,TS val 2146305372 ecr 268246882], length 80
13:08:01.845279 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 598:884, ack 3365, win 501, options [nop,nop,TS val 2146305373 ecr 268246882], length 286
13:08:01.860895 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 598, win 7, options [nop,nop,TS val 268246901 ecr 2146305372], length 0
13:08:01.861212 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 884, win 7, options [nop,nop,TS val 268246902 ecr 2146305373], length 0
13:08:02.000125 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 3365:3444, ack 884, win 8, options [nop,nop,TS val 268247040 ecr 2146305373], length 79
13:08:02.000125 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 3444:3523, ack 884, win 8, options [nop,nop,TS val 268247040 ecr 2146305373], length 79
13:08:02.000260 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 3523, win 501, options [nop,nop,TS val 2146305528 ecr 268247040], length 0
13:08:02.000682 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 3523:4555, ack 884, win 8, options [nop,nop,TS val 268247041 ecr 2146305373], length 1032
13:08:02.044187 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 4555, win 501, options [nop,nop,TS val 2146305572 ecr 268247041], length 0
13:08:12.765820 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 884:1176, ack 4555, win 501, options [nop,nop,TS val 2146316293 ecr 268247041], length 292
13:08:12.781755 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 1176, win 7, options [nop,nop,TS val 268257822 ecr 2146316293], length 0
13:08:12.921892 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 4555:4917, ack 1176, win 8, options [nop,nop,TS val 268257962 ecr 2146316293], length 362
13:08:12.921925 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 4917, win 501, options [nop,nop,TS val 2146316449 ecr 268257962], length 0
13:08:12.928293 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 1176:1526, ack 4917, win 501, options [nop,nop,TS val 2146316456 ecr 268257962], length 350
13:08:12.928327 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 1526:2366, ack 4917, win 501, options [nop,nop,TS val 2146316456 ecr 268257962], length 840
13:08:12.944400 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 1526, win 7, options [nop,nop,TS val 268257985 ecr 2146316456], length 0
13:08:12.944400 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 2366, win 7, options [nop,nop,TS val 268257985 ecr 2146316456], length 0
13:08:13.142956 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 4917:5804, ack 2366, win 8, options [nop,nop,TS val 268258183 ecr 2146316456], length 887
13:08:13.147969 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 2366:2728, ack 5804, win 501, options [nop,nop,TS val 2146316675 ecr 268258183], length 362
13:08:13.148003 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 2728:3445, ack 5804, win 501, options [nop,nop,TS val 2146316675 ecr 268258183], length 717
13:08:13.164079 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 2728, win 7, options [nop,nop,TS val 268258205 ecr 2146316675], length 0
13:08:13.164079 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 3445, win 7, options [nop,nop,TS val 268258205 ecr 2146316675], length 0
13:08:13.320322 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 5804:7061, ack 3445, win 8, options [nop,nop,TS val 268258361 ecr 2146316675], length 1257
13:08:13.364119 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 7061, win 501, options [nop,nop,TS val 2146316892 ecr 268258361], length 0
13:08:16.510836 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 3445:3814, ack 7061, win 501, options [nop,nop,TS val 2146320038 ecr 268258361], length 369
13:08:16.510872 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 3814:4544, ack 7061, win 501, options [nop,nop,TS val 2146320038 ecr 268258361], length 730
13:08:16.526481 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 3814, win 7, options [nop,nop,TS val 268261567 ecr 2146320038], length 0
13:08:16.526481 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 4544, win 7, options [nop,nop,TS val 268261567 ecr 2146320038], length 0
13:08:16.670248 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 7061:7858, ack 4544, win 8, options [nop,nop,TS val 268261711 ecr 2146320038], length 797
13:08:16.670279 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 7858, win 501, options [nop,nop,TS val 2146320198 ecr 268261711], length 0
13:08:17.676978 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 4544:4906, ack 7858, win 501, options [nop,nop,TS val 2146321204 ecr 268261711], length 362
13:08:17.677011 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 4906:5623, ack 7858, win 501, options [nop,nop,TS val 2146321204 ecr 268261711], length 717
13:08:17.692612 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 4906, win 7, options [nop,nop,TS val 268262733 ecr 2146321204], length 0
13:08:17.692612 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 5623, win 7, options [nop,nop,TS val 268262733 ecr 2146321204], length 0
13:08:17.847957 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 7858:9115, ack 5623, win 8, options [nop,nop,TS val 268262888 ecr 2146321204], length 1257
13:08:17.847986 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 9115, win 501, options [nop,nop,TS val 2146321375 ecr 268262888], length 0
13:08:20.856561 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 5623:5985, ack 9115, win 501, options [nop,nop,TS val 2146324384 ecr 268262888], length 362
13:08:20.856595 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [P.], seq 5985:6702, ack 9115, win 501, options [nop,nop,TS val 2146324384 ecr 268262888], length 717
13:08:20.872225 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 5985, win 7, options [nop,nop,TS val 268265913 ecr 2146324384], length 0
13:08:20.872225 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 6702, win 7, options [nop,nop,TS val 268265913 ecr 2146324384], length 0
13:08:21.015383 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [P.], seq 9115:10650, ack 6702, win 8, options [nop,nop,TS val 268266056 ecr 2146324384], length 1535
13:08:21.015414 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 10650, win 494, options [nop,nop,TS val 2146324543 ecr 268266056], length 0
13:08:21.257514 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [F.], seq 6702, ack 10650, win 501, options [nop,nop,TS val 2146324785 ecr 268266056], length 0
13:08:21.314078 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [.], ack 6703, win 8, options [nop,nop,TS val 268266355 ecr 2146324785], length 0
13:08:21.412272 eno1 In IP 172.65.32.248.https > sesstim4.timone.univ-amu.fr.45650: Flags [F.], seq 10650, ack 6703, win 8, options [nop,nop,TS val 268266453 ecr 2146324785], length 0
13:08:21.412311 eno1 Out IP sesstim4.timone.univ-amu.fr.45650 > 172.65.32.248.https: Flags [.], ack 10651, win 501, options [nop,nop,TS val 2146324940 ecr 268266453], length 0
By the way, my network admin has checked the palo alto side and there too, he can't see any communication on port 80 (see attached file).
