Attachment 887310 Details for Bug 1089078 – tcpdump output with OpenVPN

tcpdump output with OpenVPN

tcpdump-log.txt (text/plain), 16.09 KB, created by Matěj Cepl on 2014-04-17 20:47:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matěj Cepl

Created: 2014-04-17 20:47:01 UTC

Size: 16.09 KB

patch

obsolete

>tcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes
>22:46:14.732299 IP (tos 0x0, ttl 64, id 34654, offset 0, flags [DF], proto UDP (17), length 65)
>    192.168.122.103.48076 > wycliff.domain: 6967+ A? wiki.brq.redhat.com. (37)
>22:46:14.732299 IP (tos 0x0, ttl 64, id 34654, offset 0, flags [DF], proto UDP (17), length 65)
>    192.168.122.103.48076 > wycliff.domain: 6967+ A? wiki.brq.redhat.com. (37)
>22:46:14.732454 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 122)
>    wycliff.domain > 192.168.122.103.48076: 6967 2/0/0 wiki.brq.redhat.com. CNAME wiki.lab.eng.brq.redhat.com., wiki.lab.eng.brq.redhat.com. A 10.34.32.209 (94)
>22:46:14.732461 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 122)
>    wycliff.domain > 192.168.122.103.48076: 6967 2/0/0 wiki.brq.redhat.com. CNAME wiki.lab.eng.brq.redhat.com., wiki.lab.eng.brq.redhat.com. A 10.34.32.209 (94)
>22:46:14.732956 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 1, length 64
>22:46:14.732956 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 1, length 64
>22:46:14.808189 IP (tos 0x0, ttl 57, id 12262, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 1, length 64
>22:46:14.808212 IP (tos 0x0, ttl 57, id 12262, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 1, length 64
>22:46:14.808435 IP (tos 0x0, ttl 64, id 34673, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.44772 > wycliff.domain: 41756+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:14.808435 IP (tos 0x0, ttl 64, id 34673, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.44772 > wycliff.domain: 41756+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:14.808518 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.44772: 41756 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:14.808522 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.44772: 41756 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:15.734214 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 2, length 64
>22:46:15.734214 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 2, length 64
>22:46:15.810273 IP (tos 0x0, ttl 57, id 12263, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 2, length 64
>22:46:15.810280 IP (tos 0x0, ttl 57, id 12263, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 2, length 64
>22:46:15.810512 IP (tos 0x0, ttl 64, id 34923, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.33006 > wycliff.domain: 8575+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:15.810512 IP (tos 0x0, ttl 64, id 34923, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.33006 > wycliff.domain: 8575+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:15.810601 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.33006: 8575 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:15.810604 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.33006: 8575 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:16.735282 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 3, length 64
>22:46:16.735282 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 3, length 64
>22:46:16.809352 IP (tos 0x0, ttl 57, id 12264, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 3, length 64
>22:46:16.809367 IP (tos 0x0, ttl 57, id 12264, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 3, length 64
>22:46:16.809543 IP (tos 0x0, ttl 64, id 35173, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.45063 > wycliff.domain: 6098+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:16.809543 IP (tos 0x0, ttl 64, id 35173, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.45063 > wycliff.domain: 6098+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:16.809640 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.45063: 6098 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:16.809645 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.45063: 6098 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:17.737302 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 4, length 64
>22:46:17.737302 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 4, length 64
>22:46:17.810181 IP (tos 0x0, ttl 57, id 12265, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 4, length 64
>22:46:17.810190 IP (tos 0x0, ttl 57, id 12265, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 4, length 64
>22:46:17.810503 IP (tos 0x0, ttl 64, id 35423, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.39041 > wycliff.domain: 46505+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:17.810503 IP (tos 0x0, ttl 64, id 35423, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.39041 > wycliff.domain: 46505+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:17.810588 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.39041: 46505 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:17.810593 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.39041: 46505 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:18.739403 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 5, length 64
>22:46:18.739403 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 5, length 64
>22:46:18.815282 IP (tos 0x0, ttl 57, id 12266, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 5, length 64
>22:46:18.815307 IP (tos 0x0, ttl 57, id 12266, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 5, length 64
>22:46:18.816007 IP (tos 0x0, ttl 64, id 35675, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.53418 > wycliff.domain: 62938+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:18.816007 IP (tos 0x0, ttl 64, id 35675, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.53418 > wycliff.domain: 62938+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:18.816339 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.53418: 62938 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:18.816358 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.53418: 62938 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:19.740824 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 6, length 64
>22:46:19.740824 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 6, length 64
>22:46:19.744228 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.122.103 tell wycliff, length 28
>22:46:19.744253 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.122.103 tell wycliff, length 28
>22:46:19.744556 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.122.103 is-at 52:54:00:e8:cc:3c (oui Unknown), length 28
>22:46:19.744556 ARP, Ethernet (len 6), IPv4 (len 4), Reply 192.168.122.103 is-at 52:54:00:e8:cc:3c (oui Unknown), length 28
>22:46:19.814614 IP (tos 0x0, ttl 57, id 12267, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 6, length 64
>22:46:19.814637 IP (tos 0x0, ttl 57, id 12267, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 6, length 64
>22:46:19.815236 IP (tos 0x0, ttl 64, id 35925, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.49602 > wycliff.domain: 48855+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:19.815236 IP (tos 0x0, ttl 64, id 35925, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.49602 > wycliff.domain: 48855+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:19.815484 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.49602: 48855 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:19.815506 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.49602: 48855 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:20.742305 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 7, length 64
>22:46:20.742305 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 7, length 64
>22:46:20.815393 IP (tos 0x0, ttl 57, id 12268, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 7, length 64
>22:46:20.815421 IP (tos 0x0, ttl 57, id 12268, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 7, length 64
>22:46:20.816229 IP (tos 0x0, ttl 64, id 36175, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.46355 > wycliff.domain: 7400+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:20.816229 IP (tos 0x0, ttl 64, id 36175, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.46355 > wycliff.domain: 7400+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:20.816453 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.46355: 7400 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:20.816467 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.46355: 7400 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:21.744383 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 8, length 64
>22:46:21.744383 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 8, length 64
>22:46:21.840082 IP (tos 0x0, ttl 57, id 12269, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 8, length 64
>22:46:21.840108 IP (tos 0x0, ttl 57, id 12269, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 8, length 64
>22:46:21.840759 IP (tos 0x0, ttl 64, id 36431, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.59405 > wycliff.domain: 35220+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:21.840759 IP (tos 0x0, ttl 64, id 36431, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.59405 > wycliff.domain: 35220+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:21.841010 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.59405: 35220 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:21.841027 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.59405: 35220 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:22.745887 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 9, length 64
>22:46:22.745887 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 9, length 64
>22:46:22.820405 IP (tos 0x0, ttl 57, id 12270, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 9, length 64
>22:46:22.820434 IP (tos 0x0, ttl 57, id 12270, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 9, length 64
>22:46:22.821163 IP (tos 0x0, ttl 64, id 36676, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.48901 > wycliff.domain: 3155+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:22.821163 IP (tos 0x0, ttl 64, id 36676, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.48901 > wycliff.domain: 3155+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:22.821432 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.48901: 3155 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:22.821449 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 112)
>    wycliff.domain > 192.168.122.103.48901: 3155 1/0/0 209.32.34.10.in-addr.arpa. PTR wiki.lab.eng.brq.redhat.com. (84)
>22:46:23.746975 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 10, length 64
>22:46:23.746975 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84)
>    192.168.122.103 > wiki.lab.eng.brq.redhat.com: ICMP echo request, id 2695, seq 10, length 64
>22:46:23.822272 IP (tos 0x0, ttl 57, id 12271, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 10, length 64
>22:46:23.822290 IP (tos 0x0, ttl 57, id 12271, offset 0, flags [none], proto ICMP (1), length 84)
>    wiki.lab.eng.brq.redhat.com > 192.168.122.103: ICMP echo reply, id 2695, seq 10, length 64
>22:46:23.822500 IP (tos 0x0, ttl 64, id 36926, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.54561 > wycliff.domain: 55922+ PTR? 209.32.34.10.in-addr.arpa. (43)
>22:46:23.822500 IP (tos 0x0, ttl 64, id 36926, offset 0, flags [DF], proto UDP (17), length 71)
>    192.168.122.103.54561 >

Actions: View

Attachments on bug 1089078: 887307 | 887308 | 887310