Маршрутизация (Ногами не бить)

Для новичков как вообще в Linux, так и в конкретной теме, к которой относится вопрос.

Модератор: Bizdelnick

Ответить
Аватара пользователя
Corsair
Сообщения: 842
Статус: Местный "тролль"
ОС: Fedora

Маршрутизация

Сообщение Corsair »

Есть машинка под Центосом. Надо настроить на ней маршрутизацию между сетями. NAT не нужен.
eth0: 192.168.163.234/24
eth1: 192.168.160.5/24

1. Форвардинг включил.
2. IPTables:

Код: Выделить всё

/sbin/iptables -F
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -P OUTPUT ACCEPT
/sbin/iptables -P FORWARD DROP
/sbin/iptables -A FORWARD -s 192.168.160.0/24 -d 192.168.163.0/24 -j ACCEPT
/sbin/iptables -A FORWARD -s 192.168.163.0/24 -d 192.168.160.0/24 -j ACCEPT
/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A INPUT -s 127.0.0.1 -p all -j ACCEPT
/sbin/iptables -A OUTPUT -d 127.0.0.1 -p all -j ACCEPT
/sbin/iptables -A INPUT -p tcp --dport 80 -j ACCEPT
/sbin/iptables -A INPUT -p tcp --dport 22 -j ACCEPT


3. route

Код: Выделить всё

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.163.0   *               255.255.255.0   U     0      0        0 eth0
192.168.160.0   *               255.255.255.0   U     0      0        0 eth1
169.254.0.0     *               255.255.0.0     U     0      0        0 eth1
default         192.168.163.1   0.0.0.0         UG    0      0        0 eth0


Проблема, как не трудно догадаться, в том, что я из 160 сети не вижу компы в 163. Из 160 пингуется только 192.168.163.234 - то есть 163 интерфейс маршрутизатора.
Как быть? Что делать?
Йад пить не предлагать.

Буду признателен за помощь.

ЗЫ: поиск я выкурил, но просвятление пока не пришло. Увы
Жестокий стоячий админ (с) коллега
Спасибо сказали:
Вернуться к началу
Аватара пользователя
Black
Сообщения: 1100
ОС: ArchLinux

Re: Маршрутизация

Сообщение Black »

Фигасе вопрос новичка :)
Я конечно не спец в таких делах, но
1. Форвардинг включил.
...

Код: Выделить всё

/sbin/iptables -P FORWARD DROP

???
Компьютер служит для решения тех проблем, которых до изобретения компьютера не существовало
Спасибо сказали:
Вернуться к началу
Аватара пользователя
landgraf
Сообщения: 2142
Статус: *бунту ненавистник
ОС: linux
Контактная информация:
Контактная информация пользователя landgraf

Re: Маршрутизация

Сообщение landgraf »

Corsair
у меня собственно вопрос похожий... но у меня один eth1 - смотри в локалку (192.168.1.1) второй (белый IP) - в инет
Это Nat нужна?
Спасибо сказали:
Вернуться к началу
Аватара пользователя
Corsair
Сообщения: 842
Статус: Местный "тролль"
ОС: Fedora

Re: Маршрутизация

Сообщение Corsair »

Black, я имел в виду форвардинг в ядре.

Код: Выделить всё

/sbin/iptables -P FORWARD DROP

это установка политики по умолчанию

Код: Выделить всё

/sbin/iptables -A FORWARD -s 192.168.160.0/24 -d 192.168.163.0/24 -j ACCEPT
/sbin/iptables -A FORWARD -s 192.168.163.0/24 -d 192.168.160.0/24 -j ACCEPT

этими правилами у меня явно разрешено хождение пакетов между интерфейсами шлюза.
Тем более я могу пропинговать из одной сети интерфейс шлюза, смотрящий в другую сеть, но дальше пакеты не идут.
Мне вообще кажется что дело тут не в IPTables, а в маршрутизации, просто опыта у меня в данной сфере, к сожалению, маловато.

landgraf, да.

Код: Выделить всё

iptables -t nat -A POSTROUTING -p all -o $INET_IFACE -j SNAT --to-source $INET_IP


По памяти писал, проверьте.
Жестокий стоячий админ (с) коллега
Спасибо сказали:
Вернуться к началу
IMB
Сообщения: 2561
ОС: Debian

Re: Маршрутизация

Сообщение IMB »

Corsair писал(а): ↑
25.06.2008 20:13
Проблема, как не трудно догадаться, в том, что я из 160 сети не вижу компы в 163. Из 160 пингуется только 192.168.163.234 - то есть 163 интерфейс маршрутизатора.
Как быть? Что делать?
Йад пить не предлагать.

Буду признателен за помощь.

ЗЫ: поиск я выкурил, но просвятление пока не пришло. Увы

Скорее всего проблема в удаленных клиентах. Они, клиенты из другой подсети, знают о маршруте до Вашей подсети? Что на клиентах настроено в качестве гейта? Если гейта нет, надо прописать маршруты руками.
При корректных настройках, если сомневаетесь выложите ip r из разных подсетей, на клиентах остается только воспользоваться tcpdump-ом.
Спасибо сказали:
Вернуться к началу
Аватара пользователя
mint_99
Сообщения: 673
ОС: OpenSUSE 42.1

Re: Маршрутизация

Сообщение mint_99 »

landgraf писал(а): ↑
25.06.2008 22:49
Corsair
у меня собственно вопрос похожий... но у меня один eth1 - смотри в локалку (192.168.1.1) второй (белый IP) - в инет
Это Nat нужна?

Я делаю так.
Можно на "ты".
Спасибо сказали:
Вернуться к началу
Аватара пользователя
Corsair
Сообщения: 842
Статус: Местный "тролль"
ОС: Fedora

Re: Маршрутизация

Сообщение Corsair »

Неа, не арбайтен.
Взял две машинки из разных сетей, прописал из шлюзы по-умолчанию. Пробовал даже конкретно по хостам прописывать. Не работает.
Пингуются только оба интерфейса шлюза, но не дальше.

Еще идеи?
Я в замешательстве.
Жестокий стоячий админ (с) коллега
Спасибо сказали:
Вернуться к началу
IMB
Сообщения: 2561
ОС: Debian

Re: Маршрутизация

Сообщение IMB »

tcpdump на разных участках.
Спасибо сказали:
Вернуться к началу
Аватара пользователя
landgraf
Сообщения: 2142
Статус: *бунту ненавистник
ОС: linux
Контактная информация:
Контактная информация пользователя landgraf

Re: Маршрутизация

Сообщение landgraf »

Corsair
а SELinux?
Спасибо сказали:
Вернуться к началу
Аватара пользователя
Corsair
Сообщения: 842
Статус: Местный "тролль"
ОС: Fedora

Re: Маршрутизация

Сообщение Corsair »

Пинг с 160.159(stud-wds) на 163.9

Код:

[root@stud-wds ~]# tcpdump -v tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 15:54:37.677206 IP (tos 0x0, ttl 64, id 15962, offset 0, flags [DF], proto TCP (6), length 60) stud-wds.stud.rosnou.ru.53383 > rules.stud.rosnou.ru.ldap: S, cksum 0xb21a (correct), 699069338:699069338(0) win 5840 <mss 1460,sackOK,timestamp 839104 0,nop,wscale 6> 15:54:37.677674 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60) rules.stud.rosnou.ru.ldap > stud-wds.stud.rosnou.ru.53383: S, cksum 0xb3af (correct), 2009475555:2009475555(0) ack 699069339 win 5792 <mss 1460,sackOK,timestamp 497827635 839104,nop,wscale 7> 15:54:37.677696 IP (tos 0x0, ttl 64, id 15963, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.53383 > rules.stud.rosnou.ru.ldap: ., cksum 0xf8be (correct), ack 1 win 92 <nop,nop,timestamp 839105 497827635> 15:54:37.677748 IP (tos 0x0, ttl 64, id 15964, offset 0, flags [DF], proto TCP (6), length 111) stud-wds.stud.rosnou.ru.53383 > rules.stud.rosnou.ru.ldap: P 1:60(59) ack 1 win 92 <nop,nop,timestamp 839105 497827635> 15:54:37.678667 IP (tos 0x0, ttl 64, id 5847, offset 0, flags [DF], proto TCP (6), length 52) rules.stud.rosnou.ru.ldap > stud-wds.stud.rosnou.ru.53383: ., cksum 0xf8b1 (correct), ack 60 win 46 <nop,nop,timestamp 497827635 839105> 15:54:37.678674 IP (tos 0x0, ttl 64, id 5848, offset 0, flags [DF], proto TCP (6), length 66) rules.stud.rosnou.ru.ldap > stud-wds.stud.rosnou.ru.53383: P, cksum 0xb522 (correct), 1:15(14) ack 60 win 46 <nop,nop,timestamp 497827636 839105> 15:54:37.678678 IP (tos 0x0, ttl 64, id 15965, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.53383 > rules.stud.rosnou.ru.ldap: ., cksum 0xf873 (correct), ack 15 win 92 <nop,nop,timestamp 839106 497827636> 15:54:37.678743 IP (tos 0x0, ttl 64, id 15966, offset 0, flags [DF], proto TCP (6), length 148) stud-wds.stud.rosnou.ru.53383 > rules.stud.rosnou.ru.ldap: P 60:156(96) ack 15 win 92 <nop,nop,timestamp 839106 497827636> 15:54:37.679666 IP (tos 0x0, ttl 64, id 5849, offset 0, flags [DF], proto TCP (6), length 66) rules.stud.rosnou.ru.ldap > stud-wds.stud.rosnou.ru.53383: P, cksum 0xb3ae (correct), 15:29(14) ack 156 win 46 <nop,nop,timestamp 497827637 839106> 15:54:37.679733 IP (tos 0x0, ttl 64, id 15967, offset 0, flags [DF], proto TCP (6), length 163) stud-wds.stud.rosnou.ru.53383 > rules.stud.rosnou.ru.ldap: P 156:267(111) ack 29 win 92 <nop,nop,timestamp 839107 497827637> 15:54:37.680665 IP (tos 0x0, ttl 64, id 5850, offset 0, flags [DF], proto TCP (6), length 66) rules.stud.rosnou.ru.ldap > stud-wds.stud.rosnou.ru.53383: P, cksum 0xb22f (correct), 29:43(14) ack 267 win 46 <nop,nop,timestamp 497827638 839107> 15:54:37.681023 IP (tos 0x0, ttl 64, id 52676, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 37153+ PTR? 7.160.168.192.in-addr.arpa. (44) 15:54:37.681665 IP (tos 0x0, ttl 128, id 43901, offset 0, flags [none], proto UDP (17), length 174) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 37153* 4/0/0 7.160.168.192.in-addr.arpa.[|domain] 15:54:37.682036 IP (tos 0x0, ttl 64, id 52677, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 31705+ PTR? 9.160.168.192.in-addr.arpa. (44) 15:54:37.682665 IP (tos 0x0, ttl 128, id 43902, offset 0, flags [none], proto UDP (17), length 103) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 31705* 1/0/0 9.160.168.192.in-addr.arpa. (75) 15:54:37.684661 arp who-has us405-08.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:37.684667 arp who-has us405-05 tell dc.stud.rosnou.ru 15:54:37.684670 arp who-has us405-10.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:37.684732 IP (tos 0x0, ttl 64, id 52680, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 13620+ PTR? 58.160.168.192.in-addr.arpa. (45) 15:54:37.685662 IP (tos 0x0, ttl 128, id 43906, offset 0, flags [none], proto UDP (17), length 110) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 13620* 1/0/0 58.160.168.192.in-addr.arpa. (82) 15:54:37.685747 IP (tos 0x0, ttl 64, id 52681, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 44658+ PTR? 59.160.168.192.in-addr.arpa. (45) 15:54:37.686662 IP (tos 0x0, ttl 128, id 43907, offset 0, flags [none], proto UDP (17), length 132) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 44658* 2/0/0 59.160.168.192.in-addr.arpa.[|domain] 15:54:37.686743 IP (tos 0x0, ttl 64, id 52682, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 54523+ PTR? 60.160.168.192.in-addr.arpa. (45) 15:54:37.687661 IP (tos 0x0, ttl 128, id 43908, offset 0, flags [none], proto UDP (17), length 133) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 54523* 2/0/0 60.160.168.192.in-addr.arpa.[|domain] 15:54:37.721443 IP (tos 0x0, ttl 64, id 15968, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.53383 > rules.stud.rosnou.ru.ldap: ., cksum 0xf75c (correct), ack 43 win 92 <nop,nop,timestamp 839148 497827638> 15:54:37.953454 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 14, length 64 15:54:37.953590 IP (tos 0x0, ttl 64, id 52949, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 35759+ PTR? 9.163.168.192.in-addr.arpa. (44) 15:54:37.954467 IP (tos 0x0, ttl 128, id 43909, offset 0, flags [none], proto UDP (17), length 142) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 35759 NXDomain 0/1/0 (114) 15:54:38.012420 arp who-has us602-05.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:38.012435 arp who-has us602-06.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:38.012563 IP (tos 0x0, ttl 64, id 53008, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 9223+ PTR? 62.160.168.192.in-addr.arpa. (45) 15:54:38.013416 IP (tos 0x0, ttl 128, id 43912, offset 0, flags [none], proto UDP (17), length 133) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 9223* 2/0/0 62.160.168.192.in-addr.arpa.[|domain] 15:54:38.013525 IP (tos 0x0, ttl 64, id 53009, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 47180+ PTR? 61.160.168.192.in-addr.arpa. (45) 15:54:38.014415 IP (tos 0x0, ttl 128, id 43913, offset 0, flags [none], proto UDP (17), length 155) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 47180* 3/0/0 61.160.168.192.in-addr.arpa.[|domain] 15:54:38.953455 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 15, length 64 15:54:39.953452 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 16, length 64 15:54:40.174488 IP (tos 0x0, ttl 64, id 49794, offset 0, flags [DF], proto TCP (6), length 188) stud-wds.stud.rosnou.ru.1996298270 > rules.stud.rosnou.ru.nfs: 136 access [|nfs] 15:54:40.174788 IP (tos 0x0, ttl 64, id 53149, offset 0, flags [DF], proto TCP (6), length 176) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.1996298270: reply ok 124 access [|nfs] 15:54:40.174805 IP (tos 0x0, ttl 64, id 49795, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x7824 (correct), ack 827916752 win 108 <nop,nop,timestamp 841602 497830133> 15:54:40.174855 IP (tos 0x0, ttl 64, id 49796, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2013075486 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:54:40.175784 IP (tos 0x0, ttl 64, id 53150, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2013075486: reply ok 116 getattr [|nfs] 15:54:40.216442 IP (tos 0x0, ttl 64, id 49797, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x76fb (correct), ack 117 win 108 <nop,nop,timestamp 841643 497830133> 15:54:40.241745 IP (tos 0xc0, ttl 2, id 0, offset 0, flags [none], proto UDP (17), length 52) 192.168.160.254.router > rip2-routers.mcast.net.router: RIPv2, Response, length: 24, routes: 1 AFI: IPv4: 192.168.163.0/24, tag 0x0000, metric: 1, next-hop: self 15:54:40.241965 IP (tos 0x0, ttl 64, id 55237, offset 0, flags [DF], proto UDP (17), length 68) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 63048+ PTR? 9.0.0.224.in-addr.arpa. (40) 15:54:40.242737 IP (tos 0x0, ttl 128, id 43914, offset 0, flags [none], proto UDP (17), length 104) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 63048 1/0/0 9.0.0.224.in-addr.arpa. PTR[|domain] 15:54:40.242812 IP (tos 0x0, ttl 64, id 55238, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 432+ PTR? 254.160.168.192.in-addr.arpa. (46) 15:54:40.243735 IP (tos 0x0, ttl 128, id 43915, offset 0, flags [none], proto UDP (17), length 162) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 432 NXDomain* 0/1/0 (134) 15:54:40.243826 IP (tos 0x0, ttl 64, id 55239, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 2021+ PTR? 0.163.168.192.in-addr.arpa. (44) 15:54:40.244735 arp who-has 192.168.160.254 tell dc.stud.rosnou.ru 15:54:40.745356 arp who-has us405-05 tell dc.stud.rosnou.ru 15:54:40.745371 arp who-has us405-08.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:40.745374 arp who-has us405-10.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:40.953455 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 17, length 64 15:54:41.953432 arp who-has 192.168.160.5 tell stud-wds.stud.rosnou.ru 15:54:41.953459 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 18, length 64 15:54:41.954447 arp reply 192.168.160.5 is-at 00:0e:a6:34:f9:5e (oui Unknown) 15:54:42.208251 IP (tos 0x0, ttl 128, id 4843, offset 0, flags [none], proto UDP (17), length 229) lab.stud.rosnou.ru.netbios-dgm > 192.168.160.255.netbios-dgm: NBT UDP PACKET(138) 15:54:42.953443 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 19, length 64 15:54:43.953450 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 20, length 64 15:54:44.953441 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 21, length 64 15:54:45.174480 IP (tos 0x0, ttl 64, id 49798, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2029852702 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:54:45.175013 IP (tos 0x0, ttl 64, id 53151, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2029852702: reply ok 116 getattr [|nfs] 15:54:45.175027 IP (tos 0x0, ttl 64, id 49799, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x4f14 (correct), ack 233 win 108 <nop,nop,timestamp 846602 497835133> 15:54:45.244443 arp who-has dc2.stud.rosnou.ru tell stud-wds.stud.rosnou.ru 15:54:45.244961 arp reply dc2.stud.rosnou.ru is-at 00:15:e9:3d:93:49 (oui Unknown) 15:54:45.244967 IP (tos 0x0, ttl 64, id 60239, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32850 > dc2.stud.rosnou.ru.domain: 2021+ PTR? 0.163.168.192.in-addr.arpa. (44) 15:54:45.953442 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 22, length 64 15:54:45.980405 IP (tos 0x0, ttl 128, id 43924, offset 0, flags [none], proto UDP (17), length 166) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 2021 NXDomain* 0/1/0 (138) 15:54:46.650901 arp who-has us405-05 tell dc.stud.rosnou.ru 15:54:46.650908 arp who-has us405-08.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:46.650912 arp who-has us405-10.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:46.953439 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 23, length 64 15:54:46.979652 arp who-has us602-05.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:46.979657 arp who-has us602-06.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:47.953441 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 24, length 64 15:54:48.243466 IP (tos 0x0, ttl 64, id 63239, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32851 > c179-44.ntt.ru.domain: 2021+ PTR? 0.163.168.192.in-addr.arpa. (44) 15:54:48.265683 arp who-has prepod.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:48.953441 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 25, length 64 15:54:49.953440 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 26, length 64 15:54:50.174479 IP (tos 0x0, ttl 64, id 49800, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2046629918 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:54:50.175243 IP (tos 0x0, ttl 64, id 53152, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2046629918: reply ok 116 getattr [|nfs] 15:54:50.175255 IP (tos 0x0, ttl 64, id 49801, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x2703 (correct), ack 349 win 108 <nop,nop,timestamp 851602 497840134> 15:54:50.418060 arp who-has us602-13.stud.rosnou.ru tell dc2.stud.rosnou.ru 15:54:50.953440 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 27, length 64 15:54:51.953444 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 28, length 64 15:54:52.953439 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 29, length 64 15:54:53.953442 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 30, length 64 15:54:54.243443 IP (tos 0x0, ttl 64, id 55240, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32849 > dc.stud.rosnou.ru.domain: 2021+ PTR? 0.163.168.192.in-addr.arpa. (44) 15:54:54.243768 IP (tos 0x0, ttl 64, id 3703, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32851 > dc.stud.rosnou.ru.domain: 1510+ PTR? 5.160.168.192.in-addr.arpa. (44) 15:54:54.244176 IP (tos 0x0, ttl 128, id 43940, offset 0, flags [none], proto UDP (17), length 142) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 2021 NXDomain 0/1/0 (114) 15:54:54.244187 IP (tos 0xc0, ttl 64, id 53434, offset 0, flags [none], proto ICMP (1), length 170) stud-wds.stud.rosnou.ru > dc.stud.rosnou.ru: ICMP stud-wds.stud.rosnou.ru udp port 32849 unreachable, length 150 IP (tos 0x0, ttl 128, id 43940, offset 0, flags [none], proto UDP (17), length 142) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32849: 2021 NXDomain[|domain][|icmp] 15:54:54.244191 IP (tos 0x0, ttl 128, id 43941, offset 0, flags [none], proto UDP (17), length 160) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32851: 1510 NXDomain* 0/1/0 (132) 15:54:54.244345 IP (tos 0x0, ttl 64, id 3703, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32851 > dc.stud.rosnou.ru.domain: 47989+ PTR? 255.160.168.192.in-addr.arpa. (46) 15:54:54.245174 IP (tos 0x0, ttl 128, id 43942, offset 0, flags [none], proto UDP (17), length 162) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32851: 47989 NXDomain* 0/1/0 (134) 15:54:54.245240 IP (tos 0x0, ttl 64, id 3704, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32851 > dc.stud.rosnou.ru.domain: 16760+ PTR? 6.160.168.192.in-addr.arpa. (44) 15:54:54.246172 IP (tos 0x0, ttl 128, id 43943, offset 0, flags [none], proto UDP (17), length 104) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32851: 16760* 1/0/0 6.160.168.192.in-addr.arpa. (76) 15:54:54.246378 IP (tos 0x0, ttl 64, id 3705, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32851 > dc.stud.rosnou.ru.domain: 65491+ PTR? 10.160.168.192.in-addr.arpa. (45) 15:54:54.247171 IP (tos 0x0, ttl 128, id 43944, offset 0, flags [none], proto UDP (17), length 105) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32851: 65491* 1/0/0 10.160.168.192.in-addr.arpa. (77) 15:54:54.247443 IP (tos 0x0, ttl 64, id 3707, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32851 > dc.stud.rosnou.ru.domain: 1612+ PTR? 179.44.28.195.in-addr.arpa. (44) 15:54:54.953453 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 31, length 64 15:54:55.174492 IP (tos 0x0, ttl 64, id 49802, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2063407134 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:54:55.175473 IP (tos 0x0, ttl 64, id 53153, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2063407134: reply ok 116 getattr [|nfs] 15:54:55.175489 IP (tos 0x0, ttl 64, id 49803, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0xfef0 (correct), ack 465 win 108 <nop,nop,timestamp 856603 497845135> 15:54:55.953446 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 32, length 64 15:54:56.953440 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 33, length 64 15:54:57.953440 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 34, length 64 15:54:58.680828 arp who-has us405-14.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:58.680839 arp who-has us405-13.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:58.681825 arp who-has minint-bq42vo4.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:58.953440 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 35, length 64 15:54:59.009579 arp who-has us609-20.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:59.009583 arp who-has us602-12.stud.rosnou.ru tell dc.stud.rosnou.ru 15:54:59.247461 IP (tos 0x0, ttl 64, id 8707, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32852 > dc2.stud.rosnou.ru.domain: 1612+ PTR? 179.44.28.195.in-addr.arpa. (44) 15:54:59.953459 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 36, length 64 15:54:59.984844 IP (tos 0x0, ttl 128, id 43955, offset 0, flags [none], proto UDP (17), length 167) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32851: 1612 1/2/2 179.44.28.195.in-addr.arpa. (139) 15:55:00.174493 IP (tos 0x0, ttl 64, id 49804, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2080184350 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:55:00.175700 IP (tos 0x0, ttl 64, id 53154, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2080184350: reply ok 116 getattr [|nfs] 15:55:00.175713 IP (tos 0x0, ttl 64, id 49805, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0xd6e0 (correct), ack 581 win 108 <nop,nop,timestamp 861603 497850135> 15:55:00.744271 IP (tos 0x0, ttl 128, id 14089, offset 0, flags [none], proto UDP (17), length 72) dc2.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32850: 2021 ServFail 0/0/0 (44) 15:55:00.744290 IP (tos 0xc0, ttl 64, id 27858, offset 0, flags [none], proto ICMP (1), length 100) stud-wds.stud.rosnou.ru > dc2.stud.rosnou.ru: ICMP stud-wds.stud.rosnou.ru udp port 32850 unreachable, length 80 IP (tos 0x0, ttl 128, id 14089, offset 0, flags [none], proto UDP (17), length 72) dc2.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32850: 2021 ServFail[|domain] 15:55:00.953441 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 37, length 64 15:55:01.079018 IP (tos 0x0, ttl 128, id 56159, offset 0, flags [none], proto UDP (17), length 328) us604-05.stud.rosnou.ru.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:11:d8:e7:a4:5c (oui Unknown), length 300, xid 0x8b985f67, Flags [none] Client-IP us604-05.stud.rosnou.ru Client-Ethernet-Address 00:11:d8:e7:a4:5c (oui Unknown) [|bootp] 15:55:01.079025 arp who-has us604-05.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:01.742519 arp who-has us405-13.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:01.742528 arp who-has us405-14.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:01.742531 arp who-has minint-bq42vo4.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:01.953440 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 38, length 64 15:55:02.247465 IP (tos 0x0, ttl 64, id 11707, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32853 > c179-44.ntt.ru.domain: 1612+ PTR? 179.44.28.195.in-addr.arpa. (44) 15:55:02.698795 IP (tos 0x0, ttl 63, id 53434, offset 0, flags [DF], proto TCP (6), length 1500) 192.168.163.1.squid > stud-wds.stud.rosnou.ru.39952: . 2744376822:2744378270(1448) ack 1013760052 win 33304 <nop,nop,timestamp 497683766 614813> 15:55:02.698803 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 40) stud-wds.stud.rosnou.ru.39952 > 192.168.163.1.squid: R, cksum 0x4605 (correct), 1013760052:1013760052(0) win 0 15:55:02.953440 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 39, length 64 15:55:03.715032 IP (tos 0x0, ttl 128, id 14220, offset 0, flags [none], proto UDP (17), length 78) dc2.stud.rosnou.ru.netbios-ns > 192.168.160.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 15:55:03.953441 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 40, length 64 15:55:04.078756 IP (tos 0x0, ttl 128, id 56169, offset 0, flags [none], proto UDP (17), length 328) us604-05.stud.rosnou.ru.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:11:d8:e7:a4:5c (oui Unknown), length 300, xid 0x8b985f67, secs 768, Flags [none] Client-IP us604-05.stud.rosnou.ru Client-Ethernet-Address 00:11:d8:e7:a4:5c (oui Unknown) [|bootp] 15:55:04.462467 IP (tos 0x0, ttl 128, id 14221, offset 0, flags [none], proto UDP (17), length 78) dc2.stud.rosnou.ru.netbios-ns > 192.168.160.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 15:55:04.953446 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 41, length 64 15:55:05.174486 IP (tos 0x0, ttl 64, id 49806, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2096961566 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:55:05.174930 IP (tos 0x0, ttl 64, id 53155, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2096961566: reply ok 116 getattr [|nfs] 15:55:05.174943 IP (tos 0x0, ttl 64, id 49807, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0xaed0 (correct), ack 697 win 108 <nop,nop,timestamp 866602 497855136> 15:55:05.212901 IP (tos 0x0, ttl 128, id 14254, offset 0, flags [none], proto UDP (17), length 78) dc2.stud.rosnou.ru.netbios-ns > 192.168.160.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 15:55:05.953472 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 42, length 64 15:55:06.953439 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 43, length 64 15:55:07.648066 arp who-has us405-13.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:07.648077 arp who-has us405-14.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:07.648082 arp who-has minint-bq42vo4.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:07.953442 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 44, length 64 15:55:07.975816 arp who-has us602-12.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:07.975819 arp who-has us609-20.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:08.247453 IP (tos 0x0, ttl 64, id 3708, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32851 > dc.stud.rosnou.ru.domain: 1612+ PTR? 179.44.28.195.in-addr.arpa. (44) 15:55:08.247610 IP (tos 0x0, ttl 64, id 17707, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 63277+ PTR? 8.160.168.192.in-addr.arpa. (44) 15:55:08.248613 IP (tos 0x0, ttl 128, id 44036, offset 0, flags [none], proto UDP (17), length 100) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32851: 1612 1/0/0 179.44.28.195.in-addr.arpa. (72) 15:55:08.248626 IP (tos 0xc0, ttl 64, id 53435, offset 0, flags [none], proto ICMP (1), length 128) stud-wds.stud.rosnou.ru > dc.stud.rosnou.ru: ICMP stud-wds.stud.rosnou.ru udp port 32851 unreachable, length 108 IP (tos 0x0, ttl 128, id 44036, offset 0, flags [none], proto UDP (17), length 100) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32851: 1612[|domain] 15:55:08.248629 IP (tos 0x0, ttl 128, id 44037, offset 0, flags [none], proto UDP (17), length 107) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 63277* 1/0/0 8.160.168.192.in-addr.arpa. (79) 15:55:08.248816 IP (tos 0x0, ttl 64, id 17708, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 627+ PTR? 123.160.168.192.in-addr.arpa. (46) 15:55:08.249612 IP (tos 0x0, ttl 128, id 44038, offset 0, flags [none], proto UDP (17), length 111) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 627* 1/0/0 123.160.168.192.in-addr.arpa. (83) 15:55:08.250143 IP (tos 0x0, ttl 64, id 17709, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 48759+ PTR? 64.160.168.192.in-addr.arpa. (45) 15:55:08.250611 IP (tos 0x0, ttl 128, id 44039, offset 0, flags [none], proto UDP (17), length 162) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 48759* 3/0/0 64.160.168.192.in-addr.arpa.[|domain] 15:55:08.250696 IP (tos 0x0, ttl 64, id 17710, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 50489+ PTR? 63.160.168.192.in-addr.arpa. (45) 15:55:08.251610 IP (tos 0x0, ttl 128, id 44040, offset 0, flags [none], proto UDP (17), length 133) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 50489* 2/0/0 63.160.168.192.in-addr.arpa.[|domain] 15:55:08.251691 IP (tos 0x0, ttl 64, id 17711, offset 0, flags [DF], proto UDP (17), length 73) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 29762+ PTR? 65.160.168.192.in-addr.arpa. (45) 15:55:08.252609 IP (tos 0x0, ttl 128, id 44041, offset 0, flags [none], proto UDP (17), length 139) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 29762* 2/0/0 65.160.168.192.in-addr.arpa.[|domain] 15:55:08.252709 IP (tos 0x0, ttl 64, id 17712, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 42550+ PTR? 190.160.168.192.in-addr.arpa. (46) 15:55:08.253608 IP (tos 0x0, ttl 128, id 44042, offset 0, flags [none], proto UDP (17), length 111) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 42550* 1/0/0 190.160.168.192.in-addr.arpa. (83) 15:55:08.253690 IP (tos 0x0, ttl 64, id 17713, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 61194+ PTR? 122.160.168.192.in-addr.arpa. (46) 15:55:08.254607 IP (tos 0x0, ttl 128, id 44043, offset 0, flags [none], proto UDP (17), length 111) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 61194* 1/0/0 122.160.168.192.in-addr.arpa. (83) 15:55:08.254859 IP (tos 0x0, ttl 64, id 17714, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 53008+ PTR? 255.255.255.255.in-addr.arpa. (46) 15:55:08.255607 IP (tos 0x0, ttl 128, id 44044, offset 0, flags [none], proto UDP (17), length 154) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 53008 NXDomain* 0/1/0 (126) 15:55:08.255673 IP (tos 0x0, ttl 64, id 17715, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 41787+ PTR? 135.160.168.192.in-addr.arpa. (46) 15:55:08.256606 IP (tos 0x0, ttl 128, id 44045, offset 0, flags [none], proto UDP (17), length 134) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 41787* 2/0/0 135.160.168.192.in-addr.arpa.[|domain] 15:55:08.256828 IP (tos 0x0, ttl 64, id 17716, offset 0, flags [DF], proto UDP (17), length 72) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 21558+ PTR? 1.163.168.192.in-addr.arpa. (44) 15:55:08.257605 IP (tos 0x0, ttl 128, id 44046, offset 0, flags [none], proto UDP (17), length 142) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 21558 NXDomain 0/1/0 (114) 15:55:08.953474 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 45, length 64 15:55:09.438718 IP (tos 0xc0, ttl 2, id 0, offset 0, flags [none], proto UDP (17), length 52) 192.168.160.254.router > rip2-routers.mcast.net.router: RIPv2, Response, length: 24, routes: 1 AFI: IPv4: 192.168.163.0/24, tag 0x0000, metric: 1, next-hop: self 15:55:09.953456 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 46, length 64 15:55:10.174504 IP (tos 0x0, ttl 64, id 49808, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2113738782 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:55:10.175162 IP (tos 0x0, ttl 64, id 53156, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2113738782: reply ok 116 getattr [|nfs] 15:55:10.175178 IP (tos 0x0, ttl 64, id 49809, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x86bf (correct), ack 813 win 108 <nop,nop,timestamp 871602 497860137> 15:55:10.953453 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 47, length 64 15:55:11.953453 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 48, length 64 15:55:12.080725 IP (tos 0x0, ttl 128, id 56190, offset 0, flags [none], proto UDP (17), length 78) us604-05.stud.rosnou.ru.netbios-ns > 192.168.160.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 15:55:12.830156 IP (tos 0x0, ttl 128, id 56191, offset 0, flags [none], proto UDP (17), length 78) us604-05.stud.rosnou.ru.netbios-ns > 192.168.160.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 15:55:12.953471 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 49, length 64 15:55:13.247433 arp who-has dc.stud.rosnou.ru tell stud-wds.stud.rosnou.ru 15:55:13.247845 arp reply dc.stud.rosnou.ru is-at 00:13:21:b4:ca:0a (oui Unknown) 15:55:13.579596 IP (tos 0x0, ttl 128, id 56192, offset 0, flags [none], proto UDP (17), length 78) us604-05.stud.rosnou.ru.netbios-ns > 192.168.160.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 15:55:13.953456 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 50, length 64 15:55:14.742715 IP (tos 0x0, ttl 128, id 14657, offset 0, flags [none], proto UDP (17), length 72) dc2.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32852: 1612 ServFail 0/0/0 (44) 15:55:14.742737 IP (tos 0xc0, ttl 64, id 27859, offset 0, flags [none], proto ICMP (1), length 100) stud-wds.stud.rosnou.ru > dc2.stud.rosnou.ru: ICMP stud-wds.stud.rosnou.ru udp port 32852 unreachable, length 80 IP (tos 0x0, ttl 128, id 14657, offset 0, flags [none], proto UDP (17), length 72) dc2.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32852: 1612 ServFail[|domain] 15:55:14.953430 arp who-has 192.168.160.5 tell stud-wds.stud.rosnou.ru 15:55:14.953498 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 51, length 64 15:55:14.953559 arp reply 192.168.160.5 is-at 00:0e:a6:34:f9:5e (oui Unknown) 15:55:15.174494 IP (tos 0x0, ttl 64, id 49810, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2130515998 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:55:15.175391 IP (tos 0x0, ttl 64, id 53157, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2130515998: reply ok 116 getattr [|nfs] 15:55:15.175408 IP (tos 0x0, ttl 64, id 49811, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x5eae (correct), ack 929 win 108 <nop,nop,timestamp 876602 497865138> 15:55:15.175474 IP (tos 0x0, ttl 64, id 49812, offset 0, flags [DF], proto TCP (6), length 196) stud-wds.stud.rosnou.ru.2147293214 > rules.stud.rosnou.ru.nfs: 144 access [|nfs] 15:55:15.176387 IP (tos 0x0, ttl 64, id 53158, offset 0, flags [DF], proto TCP (6), length 176) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2147293214: reply ok 124 access [|nfs] 15:55:15.215442 IP (tos 0x0, ttl 64, id 49813, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x5d79 (correct), ack 1053 win 108 <nop,nop,timestamp 876643 497865138> 15:55:15.953452 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 52, length 64 15:55:16.953453 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 53, length 64 15:55:17.953452 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 54, length 64 15:55:18.953453 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 55, length 64 15:55:19.677995 arp who-has us611-08.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:19.678129 IP (tos 0x0, ttl 64, id 29137, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 51587+ PTR? 198.160.168.192.in-addr.arpa. (46) 15:55:19.678991 IP (tos 0x0, ttl 128, id 44051, offset 0, flags [none], proto UDP (17), length 111) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 51587* 1/0/0 198.160.168.192.in-addr.arpa. (83) 15:55:19.742450 arp who-has dc2.stud.rosnou.ru tell stud-wds.stud.rosnou.ru 15:55:19.742945 arp reply dc2.stud.rosnou.ru is-at 00:15:e9:3d:93:49 (oui Unknown) 15:55:19.953461 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 56, length 64 15:55:20.175503 IP (tos 0x0, ttl 64, id 49814, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2164070430 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:55:20.176615 IP (tos 0x0, ttl 64, id 53159, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2164070430: reply ok 116 getattr [|nfs] 15:55:20.176632 IP (tos 0x0, ttl 64, id 49815, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x358f (correct), ack 1169 win 108 <nop,nop,timestamp 881604 497870139> 15:55:20.953457 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 57, length 64 15:55:21.953461 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 58, length 64 15:55:22.739688 arp who-has us611-08.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:22.953495 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 59, length 64 15:55:23.953454 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 60, length 64 15:55:24.953453 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 61, length 64 15:55:25.175504 IP (tos 0x0, ttl 64, id 49816, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2180847646 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:55:25.175849 IP (tos 0x0, ttl 64, id 53160, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2180847646: reply ok 116 getattr [|nfs] 15:55:25.175866 IP (tos 0x0, ttl 64, id 49817, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0x0d7f (correct), ack 1285 win 108 <nop,nop,timestamp 886603 497875140> 15:55:25.953453 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 62, length 64 15:55:26.953472 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 63, length 64 15:55:27.953473 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) stud-wds.stud.rosnou.ru > 192.168.163.9: ICMP echo request, id 41484, seq 64, length 64 15:55:28.645229 arp who-has us611-08.stud.rosnou.ru tell dc.stud.rosnou.ru 15:55:28.913031 arp who-has us604-01.stud.rosnou.ru tell dc2.stud.rosnou.ru 15:55:28.913200 IP (tos 0x0, ttl 64, id 38372, offset 0, flags [DF], proto UDP (17), length 74) stud-wds.stud.rosnou.ru.32853 > dc.stud.rosnou.ru.domain: 22470+ PTR? 131.160.168.192.in-addr.arpa. (46) 15:55:28.914027 IP (tos 0x0, ttl 128, id 44056, offset 0, flags [none], proto UDP (17), length 111) dc.stud.rosnou.ru.domain > stud-wds.stud.rosnou.ru.32853: 22470* 1/0/0 131.160.168.192.in-addr.arpa. (83) 15:55:30.175501 IP (tos 0x0, ttl 64, id 49818, offset 0, flags [DF], proto TCP (6), length 192) stud-wds.stud.rosnou.ru.2197624862 > rules.stud.rosnou.ru.nfs: 140 getattr [|nfs] 15:55:30.176078 IP (tos 0x0, ttl 64, id 53161, offset 0, flags [DF], proto TCP (6), length 168) rules.stud.rosnou.ru.nfs > stud-wds.stud.rosnou.ru.2197624862: reply ok 116 getattr [|nfs] 15:55:30.176094 IP (tos 0x0, ttl 64, id 49819, offset 0, flags [DF], proto TCP (6), length 52) stud-wds.stud.rosnou.ru.netrcs > rules.stud.rosnou.ru.nfs: ., cksum 0xe56d (correct), ack 1401 win 108 <nop,nop,timestamp 891603 497880141> 229 packets captured 229 packets received by filter 0 packets dropped by kernel


Пинг наоборот

Код:

16:02:39.627996 IP (tos 0x0, ttl 64, id 35609, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.48218 > octopus.radio.rosnou.ru.domain: 18385+ PTR? 114.163.168.192.in-addr.arpa. (46) 16:02:39.628490 IP (tos 0x0, ttl 64, id 35610, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.39057 > octopus.radio.rosnou.ru.domain: 64827+ PTR? 104.163.168.192.in-addr.arpa. (46) 16:02:39.629025 IP (tos 0x0, ttl 64, id 35610, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.57840 > octopus.radio.rosnou.ru.domain: 30599+ PTR? 224.163.168.192.in-addr.arpa. (46) 16:02:39.629480 IP (tos 0x0, ttl 64, id 35611, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.35756 > octopus.radio.rosnou.ru.domain: 4381+ PTR? 148.163.168.192.in-addr.arpa. (46) 16:02:39.630138 IP (tos 0x0, ttl 64, id 35611, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.42827 > octopus.radio.rosnou.ru.domain: 39874+ PTR? 157.163.168.192.in-addr.arpa. (46) 16:02:39.630781 IP (tos 0x0, ttl 64, id 35612, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.42968 > octopus.radio.rosnou.ru.domain: 14832+ PTR? 47.163.168.192.in-addr.arpa. (45) 16:02:39.631551 IP (tos 0x0, ttl 64, id 35613, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.38316 > octopus.radio.rosnou.ru.domain: 35721+ PTR? 236.163.168.192.in-addr.arpa. (46) 16:02:39.631946 IP (tos 0x0, ttl 128, id 6163, offset 0, flags [none], proto UDP (17), length 95) octopus.radio.rosnou.ru.domain > 192.168.163.9.38316: 35721* 1/0/0 236.163.168.192.in-addr.arpa. (67) 16:02:39.632152 IP (tos 0x0, ttl 64, id 35613, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.43445 > octopus.radio.rosnou.ru.domain: 26992+ PTR? 49.163.168.192.in-addr.arpa. (45) 16:02:39.632789 IP (tos 0x0, ttl 64, id 35614, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.45516 > octopus.radio.rosnou.ru.domain: 51134+ PTR? 161.163.168.192.in-addr.arpa. (46) 16:02:39.633184 IP (tos 0x0, ttl 128, id 6165, offset 0, flags [none], proto UDP (17), length 168) octopus.radio.rosnou.ru.domain > 192.168.163.9.45516: 51134 NXDomain* 0/1/0 (140) 16:02:39.633433 IP (tos 0x0, ttl 64, id 35615, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.45504 > octopus.radio.rosnou.ru.domain: 56736+ PTR? 208.163.168.192.in-addr.arpa. (46) 16:02:39.633651 IP (tos 0x0, ttl 128, id 6166, offset 0, flags [none], proto UDP (17), length 111) octopus.radio.rosnou.ru.domain > 192.168.163.9.45504: 56736* 1/0/0 208.163.168.192.in-addr.arpa. (83) 16:02:39.633884 IP (tos 0x0, ttl 64, id 35615, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.41203 > octopus.radio.rosnou.ru.domain: 824+ PTR? 72.163.168.192.in-addr.arpa. (45) 16:02:39.634136 IP (tos 0x0, ttl 128, id 6167, offset 0, flags [none], proto UDP (17), length 111) octopus.radio.rosnou.ru.domain > 192.168.163.9.41203: 824* 1/0/0 72.163.168.192.in-addr.arpa. (83) 16:02:39.634332 IP (tos 0x0, ttl 64, id 35616, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.42365 > octopus.radio.rosnou.ru.domain: 54644+ PTR? 231.163.168.192.in-addr.arpa. (46) 16:02:39.634811 IP (tos 0x0, ttl 64, id 35616, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.53490 > octopus.radio.rosnou.ru.domain: 56144+ PTR? 130.163.168.192.in-addr.arpa. (46) 16:02:39.635345 IP (tos 0x0, ttl 64, id 35617, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.50065 > octopus.radio.rosnou.ru.domain: 33128+ PTR? 205.163.168.192.in-addr.arpa. (46) 16:02:39.635804 IP (tos 0x0, ttl 64, id 35617, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.34386 > octopus.radio.rosnou.ru.domain: 46973+ PTR? 85.163.168.192.in-addr.arpa. (45) 16:02:39.636297 IP (tos 0x0, ttl 64, id 35618, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.37956 > octopus.radio.rosnou.ru.domain: 49563+ PTR? 234.163.168.192.in-addr.arpa. (46) 16:02:39.636590 IP (tos 0x0, ttl 128, id 6172, offset 0, flags [none], proto UDP (17), length 168) octopus.radio.rosnou.ru.domain > 192.168.163.9.37956: 49563 NXDomain* 0/1/0 (140) 16:02:39.636884 IP (tos 0x0, ttl 64, id 35618, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.40200 > octopus.radio.rosnou.ru.domain: 42905+ PTR? 193.163.168.192.in-addr.arpa. (46) 16:02:39.637301 IP (tos 0x0, ttl 128, id 6173, offset 0, flags [none], proto UDP (17), length 116) octopus.radio.rosnou.ru.domain > 192.168.163.9.40200: 42905* 2/0/0 193.163.168.192.in-addr.arpa.[|domain] 16:02:39.637494 IP (tos 0x0, ttl 64, id 35619, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.44172 > octopus.radio.rosnou.ru.domain: 35113+ PTR? 239.163.168.192.in-addr.arpa. (46) 16:02:39.637990 IP (tos 0x0, ttl 64, id 35619, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.39479 > octopus.radio.rosnou.ru.domain: 23507+ PTR? 152.163.168.192.in-addr.arpa. (46) 16:02:39.638469 IP (tos 0x0, ttl 64, id 35620, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.39005 > octopus.radio.rosnou.ru.domain: 2310+ PTR? 26.163.168.192.in-addr.arpa. (45) 16:02:39.639144 IP (tos 0x0, ttl 64, id 35620, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.60683 > octopus.radio.rosnou.ru.domain: 12234+ PTR? 240.163.168.192.in-addr.arpa. (46) 16:02:39.639508 IP (tos 0x0, ttl 128, id 6177, offset 0, flags [none], proto UDP (17), length 168) octopus.radio.rosnou.ru.domain > 192.168.163.9.60683: 12234 NXDomain* 0/1/0 (140) 16:02:39.639689 IP (tos 0x0, ttl 64, id 35621, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.58332 > octopus.radio.rosnou.ru.domain: 17705+ PTR? 204.163.168.192.in-addr.arpa. (46) 16:02:39.640389 IP (tos 0x0, ttl 64, id 35622, offset 0, flags [DF], proto UDP (17), length 69) 192.168.163.9.56356 > octopus.radio.rosnou.ru.domain: 20431+ PTR? 24.1.0.224.in-addr.arpa. (41) 16:02:39.707959 IP (tos 0x0, ttl 128, id 2960, offset 0, flags [none], proto UDP (17), length 78) us209-5.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:02:59.644508 IP (tos 0x0, ttl 64, id 55626, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.42899 > octopus.radio.rosnou.ru.domain: 33757+ PTR? 58.163.168.192.in-addr.arpa. (45) 16:02:59.645219 IP (tos 0x0, ttl 64, id 55627, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.38295 > octopus.radio.rosnou.ru.domain: 2023+ PTR? 155.163.168.192.in-addr.arpa. (46) 16:02:59.645798 IP (tos 0x0, ttl 64, id 55627, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.51782 > octopus.radio.rosnou.ru.domain: 32746+ PTR? 79.163.168.192.in-addr.arpa. (45) 16:02:59.646212 IP (tos 0x0, ttl 64, id 55628, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.51586 > octopus.radio.rosnou.ru.domain: 10116+ PTR? 232.163.168.192.in-addr.arpa. (46) 16:02:59.646671 IP (tos 0x0, ttl 64, id 55628, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.58324 > octopus.radio.rosnou.ru.domain: 31687+ PTR? 191.163.168.192.in-addr.arpa. (46) 16:02:59.647192 IP (tos 0x0, ttl 64, id 55629, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.52554 > octopus.radio.rosnou.ru.domain: 1865+ PTR? 189.163.168.192.in-addr.arpa. (46) 16:02:59.647648 IP (tos 0x0, ttl 64, id 55629, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.59039 > octopus.radio.rosnou.ru.domain: 65510+ PTR? 111.163.168.192.in-addr.arpa. (46) 16:02:59.648156 IP (tos 0x0, ttl 64, id 55630, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.35804 > octopus.radio.rosnou.ru.domain: 46998+ PTR? 30.163.168.192.in-addr.arpa. (45) 16:02:59.648632 IP (tos 0x0, ttl 64, id 55630, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.43721 > octopus.radio.rosnou.ru.domain: 6591+ PTR? 34.163.168.192.in-addr.arpa. (45) 16:02:59.649119 IP (tos 0x0, ttl 64, id 55631, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.41145 > octopus.radio.rosnou.ru.domain: 5421+ PTR? 61.163.168.192.in-addr.arpa. (45) 16:02:59.649486 IP (tos 0x0, ttl 64, id 55631, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.46901 > octopus.radio.rosnou.ru.domain: 23315+ PTR? 201.163.168.192.in-addr.arpa. (46) 16:02:59.650110 IP (tos 0x0, ttl 64, id 55632, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.39171 > octopus.radio.rosnou.ru.domain: 792+ PTR? 42.163.168.192.in-addr.arpa. (45) 16:02:59.650577 IP (tos 0x0, ttl 64, id 55632, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.53515 > octopus.radio.rosnou.ru.domain: 34741+ PTR? 29.163.168.192.in-addr.arpa. (45) 16:02:59.650922 IP (tos 0x0, ttl 128, id 6454, offset 0, flags [none], proto UDP (17), length 108) octopus.radio.rosnou.ru.domain > 192.168.163.9.53515: 34741* 1/0/0 29.163.168.192.in-addr.arpa. (80) 16:02:59.651125 IP (tos 0x0, ttl 64, id 55633, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.46841 > octopus.radio.rosnou.ru.domain: 54581+ PTR? 67.163.168.192.in-addr.arpa. (45) 16:02:59.651415 IP (tos 0x0, ttl 128, id 6455, offset 0, flags [none], proto UDP (17), length 129) octopus.radio.rosnou.ru.domain > 192.168.163.9.46841: 54581* 2/0/0 67.163.168.192.in-addr.arpa.[|domain] 16:02:59.651547 IP (tos 0x0, ttl 64, id 55633, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.49087 > octopus.radio.rosnou.ru.domain: 17796+ PTR? 51.163.168.192.in-addr.arpa. (45) 16:02:59.651838 IP (tos 0x0, ttl 128, id 6456, offset 0, flags [none], proto UDP (17), length 107) octopus.radio.rosnou.ru.domain > 192.168.163.9.49087: 17796* 1/0/0 51.163.168.192.in-addr.arpa. (79) 16:02:59.651925 IP (tos 0x0, ttl 64, id 55633, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.51872 > octopus.radio.rosnou.ru.domain: 7079+ PTR? 158.163.168.192.in-addr.arpa. (46) 16:02:59.652449 IP (tos 0x0, ttl 64, id 55634, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.39005 > octopus.radio.rosnou.ru.domain: 43817+ PTR? 40.163.168.192.in-addr.arpa. (45) 16:02:59.653018 IP (tos 0x0, ttl 64, id 55634, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.38181 > octopus.radio.rosnou.ru.domain: 23508+ PTR? 210.163.168.192.in-addr.arpa. (46) 16:02:59.653435 IP (tos 0x0, ttl 64, id 55635, offset 0, flags [DF], proto UDP (17), length 71) 192.168.163.9.39381 > octopus.radio.rosnou.ru.domain: 42776+ PTR? 83.68.80.235.in-addr.arpa. (43) 16:02:59.658175 IP (tos 0x0, ttl 64, id 55640, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.43633 > octopus.radio.rosnou.ru.domain: 33241+ PTR? 16.163.168.192.in-addr.arpa. (45) 16:02:59.658635 IP (tos 0x0, ttl 64, id 55640, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.58328 > octopus.radio.rosnou.ru.domain: 65415+ PTR? 32.163.168.192.in-addr.arpa. (45) 16:02:59.658949 IP (tos 0x0, ttl 128, id 6463, offset 0, flags [none], proto UDP (17), length 110) octopus.radio.rosnou.ru.domain > 192.168.163.9.58328: 65415* 1/0/0 32.163.168.192.in-addr.arpa. (82) 16:02:59.659094 IP (tos 0x0, ttl 64, id 55640, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.37637 > octopus.radio.rosnou.ru.domain: 16328+ PTR? 54.163.168.192.in-addr.arpa. (45) 16:02:59.659473 IP (tos 0x0, ttl 64, id 55641, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.40124 > octopus.radio.rosnou.ru.domain: 8669+ PTR? 230.163.168.192.in-addr.arpa. (46) 16:02:59.660107 IP (tos 0x0, ttl 64, id 55641, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.51580 > octopus.radio.rosnou.ru.domain: 2496+ PTR? 168.163.168.192.in-addr.arpa. (46) 16:02:59.660356 IP (tos 0x0, ttl 128, id 6466, offset 0, flags [none], proto UDP (17), length 136) octopus.radio.rosnou.ru.domain > 192.168.163.9.51580: 2496* 2/0/0 168.163.168.192.in-addr.arpa.[|domain] 16:02:59.660528 IP (tos 0x0, ttl 64, id 55642, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.42752 > octopus.radio.rosnou.ru.domain: 36267+ PTR? 241.163.168.192.in-addr.arpa. (46) 16:02:59.660912 IP (tos 0x0, ttl 128, id 6467, offset 0, flags [none], proto UDP (17), length 168) octopus.radio.rosnou.ru.domain > 192.168.163.9.42752: 36267 NXDomain* 0/1/0 (140) 16:02:59.661145 IP (tos 0x0, ttl 64, id 55642, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.49500 > octopus.radio.rosnou.ru.domain: 10083+ PTR? 245.163.168.192.in-addr.arpa. (46) 16:02:59.661621 IP (tos 0x0, ttl 128, id 6468, offset 0, flags [none], proto UDP (17), length 106) octopus.radio.rosnou.ru.domain > 192.168.163.9.49500: 10083* 1/0/0 245.163.168.192.in-addr.arpa. (78) 16:02:59.661721 IP (tos 0x0, ttl 64, id 55643, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.38860 > octopus.radio.rosnou.ru.domain: 15710+ PTR? 247.163.168.192.in-addr.arpa. (46) 16:02:59.662109 IP (tos 0x0, ttl 128, id 6469, offset 0, flags [none], proto UDP (17), length 106) octopus.radio.rosnou.ru.domain > 192.168.163.9.38860: 15710* 1/0/0 247.163.168.192.in-addr.arpa. (78) 16:02:59.662480 IP (tos 0x0, ttl 64, id 55644, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.nimcontroller > octopus.radio.rosnou.ru.domain: 61774+ PTR? 177.163.168.192.in-addr.arpa. (46) 16:02:59.662832 IP (tos 0x0, ttl 128, id 6470, offset 0, flags [none], proto UDP (17), length 97) octopus.radio.rosnou.ru.domain > 192.168.163.9.nimcontroller: 61774* 1/0/0 177.163.168.192.in-addr.arpa. (69) 16:02:59.663010 IP (tos 0x0, ttl 64, id 55644, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.55046 > octopus.radio.rosnou.ru.domain: 32655+ PTR? 244.163.168.192.in-addr.arpa. (46) 16:02:59.663304 IP (tos 0x0, ttl 128, id 6471, offset 0, flags [none], proto UDP (17), length 168) octopus.radio.rosnou.ru.domain > 192.168.163.9.55046: 32655 NXDomain* 0/1/0 (140) 16:02:59.663489 IP (tos 0x0, ttl 64, id 55645, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.36375 > octopus.radio.rosnou.ru.domain: 51193+ PTR? 246.163.168.192.in-addr.arpa. (46) 16:02:59.663904 IP (tos 0x0, ttl 128, id 6472, offset 0, flags [none], proto UDP (17), length 168) octopus.radio.rosnou.ru.domain > 192.168.163.9.36375: 51193 NXDomain* 0/1/0 (140) 16:02:59.664104 IP (tos 0x0, ttl 64, id 55645, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.54047 > octopus.radio.rosnou.ru.domain: 35298+ PTR? 12.163.168.192.in-addr.arpa. (45) 16:02:59.664485 IP (tos 0x0, ttl 128, id 6473, offset 0, flags [none], proto UDP (17), length 106) octopus.radio.rosnou.ru.domain > 192.168.163.9.54047: 35298* 1/0/0 12.163.168.192.in-addr.arpa. (78) 16:02:59.665371 IP (tos 0x0, ttl 64, id 55647, offset 0, flags [DF], proto UDP (17), length 72) 192.168.163.9.52643 > octopus.radio.rosnou.ru.domain: 52706+ PTR? 1.163.168.192.in-addr.arpa. (44) 16:02:59.665774 IP (tos 0x0, ttl 128, id 6474, offset 0, flags [none], proto UDP (17), length 166) octopus.radio.rosnou.ru.domain > 192.168.163.9.52643: 52706 NXDomain* 0/1/0 (138) 16:02:59.665940 IP (tos 0x0, ttl 64, id 55647, offset 0, flags [DF], proto UDP (17), length 68) 192.168.163.9.36704 > octopus.radio.rosnou.ru.domain: 47615+ PTR? 9.0.0.224.in-addr.arpa. (40) 16:02:59.666164 IP (tos 0x0, ttl 128, id 6475, offset 0, flags [none], proto UDP (17), length 104) octopus.radio.rosnou.ru.domain > 192.168.163.9.36704: 47615 1/0/0 9.0.0.224.in-addr.arpa. PTR[|domain] 16:02:59.666224 IP (tos 0x0, ttl 64, id 55647, offset 0, flags [DF], proto UDP (17), length 72) 192.168.163.9.58355 > octopus.radio.rosnou.ru.domain: 11534+ PTR? 5.163.168.192.in-addr.arpa. (44) 16:02:59.666487 IP (tos 0x0, ttl 128, id 6476, offset 0, flags [none], proto UDP (17), length 110) octopus.radio.rosnou.ru.domain > 192.168.163.9.58355: 11534* 1/0/0 5.163.168.192.in-addr.arpa. (82) 16:02:59.666616 IP (tos 0x0, ttl 64, id 55648, offset 0, flags [DF], proto UDP (17), length 72) 192.168.163.9.35902 > octopus.radio.rosnou.ru.domain: 47450+ PTR? 0.160.168.192.in-addr.arpa. (44) 16:02:59.684185 IP (tos 0x0, ttl 128, id 6478, offset 0, flags [none], proto UDP (17), length 128) octopus.radio.rosnou.ru.domain > 192.168.163.9.35902: 47450 NXDomain* 0/1/0 (100) 16:02:59.684684 IP (tos 0x0, ttl 64, id 55666, offset 0, flags [DF], proto UDP (17), length 73) 192.168.163.9.53338 > octopus.radio.rosnou.ru.domain: 5484+ PTR? 90.163.168.192.in-addr.arpa. (45) 16:02:59.684906 IP (tos 0x0, ttl 128, id 6479, offset 0, flags [none], proto UDP (17), length 130) octopus.radio.rosnou.ru.domain > 192.168.163.9.53338: 5484* 2/0/0 90.163.168.192.in-addr.arpa.[|domain] 16:02:59.694012 IP (tos 0x0, ttl 64, id 55675, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.50367 > octopus.radio.rosnou.ru.domain: 33264+ PTR? 100.163.168.192.in-addr.arpa. (46) 16:02:59.694381 IP (tos 0x0, ttl 128, id 6480, offset 0, flags [none], proto UDP (17), length 111) octopus.radio.rosnou.ru.domain > 192.168.163.9.50367: 33264* 1/0/0 100.163.168.192.in-addr.arpa. (83) 16:02:59.741190 IP (tos 0x0, ttl 128, id 8239, offset 0, flags [none], proto UDP (17), length 78) us428-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:02:59.828209 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 84, length 64 16:02:59.899785 arp who-has roverbook (Broadcast) tell roverbook 16:03:00.076877 arp who-has us422-5.radio.rosnou.ru tell squid.radio.rosnou.ru 16:03:00.828226 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 85, length 64 16:03:00.979095 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:01.380116 IP (tos 0x0, ttl 128, id 29242, offset 0, flags [none], proto UDP (17), length 78) us606-4.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:01.380140 arp who-has us606-4.radio.rosnou.ru tell tvd.radio.rosnou.ru 16:03:01.450730 arp who-has roverbook (Broadcast) tell roverbook 16:03:01.501927 02:01:00:00:00:00 (oui Unknown) > Broadcast, ethertype Unknown (0x886f), length 82: 0x0000: c001 dec0 0402 0000 0100 0000 0000 0000 ................ 0x0010: 0000 0000 0106 0000 0000 0000 6400 6f00 ............d.o. 0x0020: 2e00 7200 6100 6400 6900 6f00 2e00 7200 ..r.a.d.i.o...r. 0x0030: 6f00 7300 6e00 6f00 7500 2e00 7200 7500 o.s.n.o.u...r.u. 0x0040: 0000 0000 .... 16:03:01.767292 IP (tos 0x0, ttl 128, id 1498, offset 0, flags [none], proto UDP (17), length 229) 192.168.163.85.netbios-dgm > 192.168.163.255.netbios-dgm: NBT UDP PACKET(138) 16:03:01.828239 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 86, length 64 16:03:01.850353 IP (tos 0x0, ttl 128, id 14205, offset 0, flags [none], proto UDP (17), length 78) us327-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:02.586234 IP (tos 0x0, ttl 128, id 14206, offset 0, flags [none], proto UDP (17), length 78) us327-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:02.828214 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 87, length 64 16:03:02.999178 arp who-has roverbook (Broadcast) tell roverbook 16:03:03.042116 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:03.336226 IP (tos 0x0, ttl 128, id 14207, offset 0, flags [none], proto UDP (17), length 78) us327-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:03.795486 NBF Packet: Datagram 16:03:03.828075 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 88, length 64 16:03:04.536885 arp who-has roverbook (Broadcast) tell roverbook 16:03:04.644311 arp who-has octopus.radio.rosnou.ru tell 192.168.163.9 16:03:04.644489 arp reply octopus.radio.rosnou.ru is-at 00:0e:0c:4a:71:a2 (oui Unknown) 16:03:04.828240 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 89, length 64 16:03:05.105548 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:05.828205 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 90, length 64 16:03:06.084496 arp who-has roverbook (Broadcast) tell roverbook 16:03:06.357946 IP (tos 0x0, ttl 128, id 50434, offset 0, flags [none], proto UDP (17), length 229) vus.radio.rosnou.ru.netbios-dgm > 192.168.163.255.netbios-dgm: NBT UDP PACKET(138) 16:03:06.358246 IP (tos 0x0, ttl 64, id 62340, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.46957 > octopus.radio.rosnou.ru.domain: 29014+ PTR? 192.163.168.192.in-addr.arpa. (46) 16:03:06.358732 IP (tos 0x0, ttl 128, id 6482, offset 0, flags [none], proto UDP (17), length 107) octopus.radio.rosnou.ru.domain > 192.168.163.9.46957: 29014* 1/0/0 192.163.168.192.in-addr.arpa. (79) 16:03:06.828228 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 91, length 64 16:03:07.181848 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:07.632049 arp who-has roverbook (Broadcast) tell roverbook 16:03:07.828177 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 92, length 64 16:03:08.472183 arp who-has us518-1.radio.rosnou.ru tell octopus.radio.rosnou.ru 16:03:08.473338 IP (tos 0x0, ttl 128, id 31970, offset 0, flags [none], proto UDP (17), length 78) us518-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:08.828221 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 93, length 64 16:03:09.179617 arp who-has roverbook (Broadcast) tell roverbook 16:03:09.223052 IP (tos 0x0, ttl 128, id 31971, offset 0, flags [none], proto UDP (17), length 78) us518-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:09.232405 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:09.604928 IP (tos 0x0, ttl 128, id 64245, offset 0, flags [none], proto UDP (17), length 78) 192.168.163.138.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:09.828213 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 94, length 64 16:03:09.973139 IP (tos 0x0, ttl 128, id 31972, offset 0, flags [none], proto UDP (17), length 78) us518-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:10.354825 IP (tos 0x0, ttl 128, id 64246, offset 0, flags [none], proto UDP (17), length 78) 192.168.163.138.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:10.727772 arp who-has roverbook (Broadcast) tell roverbook 16:03:10.828240 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 95, length 64 16:03:11.020688 arp who-has us305-3.radio.rosnou.ru tell octopus.radio.rosnou.ru 16:03:11.105101 IP (tos 0x0, ttl 128, id 64247, offset 0, flags [none], proto UDP (17), length 78) 192.168.163.138.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:11.308187 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:11.501674 02:01:00:00:00:00 (oui Unknown) > Broadcast, ethertype Unknown (0x886f), length 82: 0x0000: c001 dec0 0402 0000 0100 0000 0000 0000 ................ 0x0010: 0000 0000 0106 0000 0000 0000 6400 6f00 ............d.o. 0x0020: 2e00 7200 6100 6400 6900 6f00 2e00 7200 ..r.a.d.i.o...r. 0x0030: 6f00 7300 6e00 6f00 7500 2e00 7200 7500 o.s.n.o.u...r.u. 0x0040: 0000 0000 .... 16:03:11.742792 arp who-has us107-2.radio.rosnou.ru tell squid.radio.rosnou.ru 16:03:11.828206 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 96, length 64 16:03:12.071685 IP (tos 0x0, ttl 128, id 3251, offset 0, flags [none], proto UDP (17), length 78) us413-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:12.275368 arp who-has roverbook (Broadcast) tell roverbook 16:03:12.821094 IP (tos 0x0, ttl 128, id 3252, offset 0, flags [none], proto UDP (17), length 78) us413-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:12.828233 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 97, length 64 16:03:13.358882 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:13.571095 IP (tos 0x0, ttl 128, id 3253, offset 0, flags [none], proto UDP (17), length 78) us413-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:13.828207 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 98, length 64 16:03:13.828718 arp who-has roverbook (Broadcast) tell roverbook 16:03:14.298421 arp who-has 192.168.163.84 tell us801-4.radio.rosnou.ru 16:03:14.394453 IP (tos 0xc0, ttl 2, id 0, offset 0, flags [none], proto UDP (17), length 52) gw-class.radio.rosnou.ru.router > rip2-routers.mcast.net.router: RIPv2, Response, length: 24, routes: 1 AFI: IPv4: 192.168.160.0/24, tag 0x0000, metric: 1, next-hop: self 16:03:14.395111 arp who-has us518-3.radio.rosnou.ru tell us518-2.radio.rosnou.ru 16:03:14.828252 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 99, length 64 16:03:15.380502 arp who-has roverbook (Broadcast) tell roverbook 16:03:15.431055 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:15.828201 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 100, length 64 16:03:16.824362 IP (tos 0x0, ttl 128, id 9010, offset 0, flags [none], proto UDP (17), length 78) us518-3.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:16.828231 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 101, length 64 16:03:16.929558 arp who-has roverbook (Broadcast) tell roverbook 16:03:17.485925 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:17.574249 IP (tos 0x0, ttl 128, id 9012, offset 0, flags [none], proto UDP (17), length 78) us518-3.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:17.828048 arp who-has 192.168.163.234 tell 192.168.163.9 16:03:17.828138 arp reply 192.168.163.234 is-at 00:c0:df:0d:65:fa (oui Unknown) 16:03:17.828171 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 102, length 64 16:03:18.324356 IP (tos 0x0, ttl 128, id 9013, offset 0, flags [none], proto UDP (17), length 78) us518-3.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:18.387373 arp who-has 192.168.163.151 tell us332-2.radio.rosnou.ru 16:03:18.387552 IP (tos 0x0, ttl 64, id 8833, offset 0, flags [DF], proto UDP (17), length 74) 192.168.163.9.41545 > octopus.radio.rosnou.ru.domain: 22993+ PTR? 151.163.168.192.in-addr.arpa. (46) 16:03:18.388004 IP (tos 0x0, ttl 128, id 6525, offset 0, flags [none], proto UDP (17), length 168) octopus.radio.rosnou.ru.domain > 192.168.163.9.41545: 22993 NXDomain* 0/1/0 (140) 16:03:18.466814 arp who-has roverbook (Broadcast) tell roverbook 16:03:18.764641 arp who-has us622-2.radio.rosnou.ru tell us622-1.radio.rosnou.ru 16:03:18.828245 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 103, length 64 16:03:19.518228 IP (tos 0x0, ttl 128, id 10041, offset 0, flags [none], proto UDP (17), length 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:19.555030 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:19.828267 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 104, length 64 16:03:20.014667 arp who-has roverbook (Broadcast) tell roverbook 16:03:20.267483 IP (tos 0x0, ttl 128, id 10042, offset 0, flags [none], proto UDP (17), length 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:20.828206 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 105, length 64 16:03:21.017512 IP (tos 0x0, ttl 128, id 10043, offset 0, flags [none], proto UDP (17), length 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:21.501408 02:01:00:00:00:00 (oui Unknown) > Broadcast, ethertype Unknown (0x886f), length 82: 0x0000: c001 dec0 0402 0000 0100 0000 0000 0000 ................ 0x0010: 0000 0000 0106 0000 0000 0000 6400 6f00 ............d.o. 0x0020: 2e00 7200 6100 6400 6900 6f00 2e00 7200 ..r.a.d.i.o...r. 0x0030: 6f00 7300 6e00 6f00 7500 2e00 7200 7500 o.s.n.o.u...r.u. 0x0040: 0000 0000 .... 16:03:21.562299 arp who-has roverbook (Broadcast) tell roverbook 16:03:21.612371 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:03:21.828216 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 106, length 64 16:03:21.892587 IP (tos 0x0, ttl 128, id 10044, offset 0, flags [none], proto UDP (17), length 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:22.331105 arp who-has sprut.radio.rosnou.ru tell vector-srv.radio.rosnou.ru 16:03:22.331389 IP (tos 0x0, ttl 64, id 12777, offset 0, flags [DF], proto UDP (17), length 72) 192.168.163.9.58986 > octopus.radio.rosnou.ru.domain: 58275+ PTR? 2.163.168.192.in-addr.arpa. (44) 16:03:22.331835 IP (tos 0x0, ttl 128, id 6529, offset 0, flags [none], proto UDP (17), length 112) octopus.radio.rosnou.ru.domain > 192.168.163.9.58986: 58275* 1/0/0 2.163.168.192.in-addr.arpa. (84) 16:03:22.433083 arp who-has us300-2.radio.rosnou.ru tell octopus.radio.rosnou.ru 16:03:22.619729 arp who-has us518-4.radio.rosnou.ru tell squid.radio.rosnou.ru 16:03:22.642433 IP (tos 0x0, ttl 128, id 10045, offset 0, flags [none], proto UDP (17), length 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:03:22.828225 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 192.168.163.9 > 159.160.private.rosnou.ru: ICMP echo request, id 36387, seq 107, length 64 ^C 641 packets captured 872 packets received by filter 231 packets dropped by kernel
Жестокий стоячий админ (с) коллега
Спасибо сказали:
Вернуться к началу
Аватара пользователя
Corsair
Сообщения: 842
Статус: Местный "тролль"
ОС: Fedora

Re: Маршрутизация

Сообщение Corsair »

landgraf, отключен
Жестокий стоячий админ (с) коллега
Спасибо сказали:
Вернуться к началу
IMB
Сообщения: 2561
ОС: Debian

Re: Маршрутизация

Сообщение IMB »

Ну и tcpdump на шлюзе.
Спасибо сказали:
Вернуться к началу
Аватара пользователя
Corsair
Сообщения: 842
Статус: Местный "тролль"
ОС: Fedora

Re: Маршрутизация

Сообщение Corsair »

Во время пинга с 160.159 на 163.164

Код:

16:21:35.226517 IP (tos 0x0, ttl 64, id 33943, offset 0, flags [DF], proto: UDP (17), length: 73) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 51742+ PTR? 17.163.168.192.in-addr.arpa. (45) 16:21:35.226893 IP (tos 0x0, ttl 128, id 39368, offset 0, flags [none], proto: UDP (17), length: 110) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 51742* 1/0/0 17.163.168.192.in-addr.arpa. (82) 16:21:35.229278 IP (tos 0x0, ttl 64, id 33946, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 44754+ PTR? 189.163.168.192.in-addr.arpa. (46) 16:21:35.229567 IP (tos 0x0, ttl 128, id 39369, offset 0, flags [none], proto: UDP (17), length: 111) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 44754* 1/0/0 189.163.168.192.in-addr.arpa. (83) 16:21:35.231619 IP (tos 0x0, ttl 64, id 33948, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 46016+ PTR? 110.163.168.192.in-addr.arpa. (46) 16:21:35.232006 IP (tos 0x0, ttl 128, id 39370, offset 0, flags [none], proto: UDP (17), length: 128) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 46016* 2/0/0 110.163.168.192.in-addr.arpa.[|domain] 16:21:35.241588 IP (tos 0x0, ttl 64, id 33958, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 12605+ PTR? 207.163.168.192.in-addr.arpa. (46) 16:21:35.241993 IP (tos 0x0, ttl 128, id 39371, offset 0, flags [none], proto: UDP (17), length: 168) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 12605 NXDomain* 0/1/0 (140) 16:21:35.242144 IP (tos 0x0, ttl 64, id 33959, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 38201+ PTR? 160.163.168.192.in-addr.arpa. (46) 16:21:35.242455 IP (tos 0x0, ttl 128, id 39372, offset 0, flags [none], proto: UDP (17), length: 111) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 38201* 1/0/0 160.163.168.192.in-addr.arpa. (83) 16:21:35.242564 IP (tos 0x0, ttl 64, id 33959, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 32007+ PTR? 184.163.168.192.in-addr.arpa. (46) 16:21:35.242949 IP (tos 0x0, ttl 128, id 39373, offset 0, flags [none], proto: UDP (17), length: 129) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 32007* 2/0/0 184.163.168.192.in-addr.arpa.[|domain] 16:21:35.243079 IP (tos 0x0, ttl 64, id 33960, offset 0, flags [DF], proto: UDP (17), length: 69) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 2378+ PTR? 24.1.0.224.in-addr.arpa. (41) 16:21:35.246682 IP (tos 0x0, ttl 128, id 39375, offset 0, flags [none], proto: UDP (17), length: 282) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 2378 1/3/5 24.1.0.224.in-addr.arpa. PTR[|domain] 16:21:35.246777 IP (tos 0x0, ttl 64, id 33964, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 47424+ PTR? 130.163.168.192.in-addr.arpa. (46) 16:21:35.247087 IP (tos 0x0, ttl 128, id 39376, offset 0, flags [none], proto: UDP (17), length: 134) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 47424* 2/0/0 130.163.168.192.in-addr.arpa.[|domain] 16:21:35.247217 IP (tos 0x0, ttl 64, id 33964, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 63888+ PTR? 142.163.168.192.in-addr.arpa. (46) 16:21:35.247565 IP (tos 0x0, ttl 128, id 39377, offset 0, flags [none], proto: UDP (17), length: 114) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 63888* 2/0/0 142.163.168.192.in-addr.arpa.[|domain] 16:21:35.247689 IP (tos 0x0, ttl 64, id 33965, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 7190+ PTR? 136.163.168.192.in-addr.arpa. (46) 16:21:35.248050 IP (tos 0x0, ttl 128, id 39378, offset 0, flags [none], proto: UDP (17), length: 111) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 7190* 1/0/0 136.163.168.192.in-addr.arpa. (83) 16:21:35.248150 IP (tos 0x0, ttl 64, id 33965, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 52365+ PTR? 162.163.168.192.in-addr.arpa. (46) 16:21:35.248556 IP (tos 0x0, ttl 128, id 39379, offset 0, flags [none], proto: UDP (17), length: 168) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 52365 NXDomain* 0/1/0 (140) 16:21:35.248657 IP (tos 0x0, ttl 64, id 33965, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 11297+ PTR? 152.163.168.192.in-addr.arpa. (46) 16:21:35.249021 IP (tos 0x0, ttl 128, id 39380, offset 0, flags [none], proto: UDP (17), length: 110) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 11297* 1/0/0 152.163.168.192.in-addr.arpa. (82) 16:21:35.249123 IP (tos 0x0, ttl 64, id 33966, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 12509+ PTR? 240.163.168.192.in-addr.arpa. (46) 16:21:35.249532 IP (tos 0x0, ttl 128, id 39381, offset 0, flags [none], proto: UDP (17), length: 168) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 12509 NXDomain* 0/1/0 (140) 16:21:35.249613 IP (tos 0x0, ttl 64, id 33966, offset 0, flags [DF], proto: UDP (17), length: 71) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 53850+ PTR? 83.68.80.235.in-addr.arpa. (43) 16:21:35.253412 IP (tos 0x0, ttl 128, id 39383, offset 0, flags [none], proto: UDP (17), length: 128) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 53850 NXDomain 0/1/0 (100) 16:21:35.254787 IP (tos 0x0, ttl 64, id 33972, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 10575+ PTR? 193.163.168.192.in-addr.arpa. (46) 16:21:35.255108 IP (tos 0x0, ttl 128, id 39384, offset 0, flags [none], proto: UDP (17), length: 116) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 10575* 2/0/0 193.163.168.192.in-addr.arpa.[|domain] 16:21:35.264595 IP (tos 0x0, ttl 64, id 33981, offset 0, flags [DF], proto: UDP (17), length: 73) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 23251+ PTR? 93.163.168.192.in-addr.arpa. (45) 16:21:35.264835 IP (tos 0x0, ttl 128, id 39385, offset 0, flags [none], proto: UDP (17), length: 110) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 23251* 1/0/0 93.163.168.192.in-addr.arpa. (82) 16:21:35.267209 IP (tos 0x0, ttl 64, id 33984, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 10270+ PTR? 202.163.168.192.in-addr.arpa. (46) 16:21:35.267530 IP (tos 0x0, ttl 128, id 39386, offset 0, flags [none], proto: UDP (17), length: 168) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 10270 NXDomain* 0/1/0 (140) 16:21:35.267674 IP (tos 0x0, ttl 64, id 33985, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 15612+ PTR? 151.163.168.192.in-addr.arpa. (46) 16:21:35.268013 IP (tos 0x0, ttl 128, id 39387, offset 0, flags [none], proto: UDP (17), length: 168) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 15612 NXDomain* 0/1/0 (140) 16:21:35.268091 IP (tos 0x0, ttl 64, id 33985, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 33173+ PTR? 185.163.168.192.in-addr.arpa. (46) 16:21:35.268528 IP (tos 0x0, ttl 128, id 39388, offset 0, flags [none], proto: UDP (17), length: 116) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 33173* 1/0/0 185.163.168.192.in-addr.arpa. (88) 16:21:35.268714 IP (tos 0x0, ttl 64, id 33986, offset 0, flags [DF], proto: UDP (17), length: 73) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 15783+ PTR? 63.163.168.192.in-addr.arpa. (45) 16:21:35.268967 IP (tos 0x0, ttl 128, id 39389, offset 0, flags [none], proto: UDP (17), length: 110) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 15783* 1/0/0 63.163.168.192.in-addr.arpa. (82) 16:21:35.269069 IP (tos 0x0, ttl 64, id 33986, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 11950+ PTR? 255.255.255.255.in-addr.arpa. (46) 16:21:35.269471 IP (tos 0x0, ttl 128, id 39390, offset 0, flags [none], proto: UDP (17), length: 160) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 11950 NXDomain* 0/1/0 (132) 16:21:35.327745 IP (tos 0x0, ttl 128, id 11392, offset 0, flags [none], proto: UDP (17), length: 78) us428-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:35.450036 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:35.632745 IP (tos 0x0, ttl 128, id 20624, offset 0, flags [none], proto: UDP (17), length: 78) 192.168.163.207.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:35.656168 IP (tos 0x0, ttl 1, id 50574, offset 0, flags [none], proto: IGMP (2), length: 28) 192.168.163.124 > 239.255.255.100: igmp v1 report 239.255.255.100 16:21:35.664474 IP (tos 0x0, ttl 64, id 34381, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 45324+ PTR? 100.255.255.239.in-addr.arpa. (46) 16:21:35.930834 IP (tos 0x0, ttl 128, id 10058, offset 0, flags [none], proto: UDP (17), length: 229) us224.radio.rosnou.ru.netbios-dgm > 192.168.163.255.netbios-dgm: NBT UDP PACKET(138) 16:21:35.943786 arp who-has roverbook (Broadcast) tell roverbook 16:21:36.077737 IP (tos 0x0, ttl 128, id 11394, offset 0, flags [none], proto: UDP (17), length: 78) us428-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:36.382726 IP (tos 0x0, ttl 128, id 20631, offset 0, flags [none], proto: UDP (17), length: 78) 192.168.163.207.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:37.491582 arp who-has roverbook (Broadcast) tell roverbook 16:21:37.525616 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:37.614030 arp who-has us218-1.radio.rosnou.ru tell octopus.radio.rosnou.ru 16:21:38.166238 IP (tos 0x0, ttl 128, id 39505, offset 0, flags [none], proto: UDP (17), length: 131) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 45324 NXDomain 0/1/0 (103) 16:21:38.166485 IP (tos 0x0, ttl 64, id 36884, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 55739+ PTR? 124.163.168.192.in-addr.arpa. (46) 16:21:38.166918 IP (tos 0x0, ttl 128, id 39506, offset 0, flags [none], proto: UDP (17), length: 168) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 55739 NXDomain* 0/1/0 (140) 16:21:38.167073 IP (tos 0x0, ttl 64, id 36884, offset 0, flags [DF], proto: UDP (17), length: 73) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 59782+ PTR? 29.163.168.192.in-addr.arpa. (45) 16:21:38.167385 IP (tos 0x0, ttl 128, id 39507, offset 0, flags [none], proto: UDP (17), length: 108) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 59782* 1/0/0 29.163.168.192.in-addr.arpa. (80) 16:21:38.636662 arp who-has 192.168.163.151 tell prorectstaff.radio.rosnou.ru 16:21:39.039359 arp who-has roverbook (Broadcast) tell roverbook 16:21:39.576415 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:40.315819 IP (tos 0x0, ttl 128, id 470, offset 0, flags [none], proto: UDP (17), length: 78) us319-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:40.316059 IP (tos 0x0, ttl 64, id 39034, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 1199+ PTR? 187.163.168.192.in-addr.arpa. (46) 16:21:40.316313 IP (tos 0x0, ttl 128, id 39510, offset 0, flags [none], proto: UDP (17), length: 111) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 1199* 1/0/0 187.163.168.192.in-addr.arpa. (83) 16:21:40.592272 arp who-has roverbook (Broadcast) tell roverbook 16:21:41.024982 arp who-has us428-2.radio.rosnou.ru tell squid.radio.rosnou.ru 16:21:41.057493 IP (tos 0x0, ttl 128, id 471, offset 0, flags [none], proto: UDP (17), length: 78) us319-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:41.648279 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:41.807560 IP (tos 0x0, ttl 128, id 472, offset 0, flags [none], proto: UDP (17), length: 78) us319-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:42.141880 arp who-has roverbook (Broadcast) tell roverbook 16:21:42.408840 IP (tos 0x0, ttl 128, id 39512, offset 0, flags [none], proto: UDP (17), length: 72) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-tms: 23651 ServFail 0/0/0 (44) 16:21:42.408898 IP (tos 0xc0, ttl 64, id 65191, offset 0, flags [none], proto: ICMP (1), length: 100) 192.168.163.234 > octopus.radio.rosnou.ru: ICMP 192.168.163.234 udp port filenet-tms unreachable, length 80 IP (tos 0x0, ttl 128, id 39512, offset 0, flags [none], proto: UDP (17), length: 72) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-tms: 23651 ServFail[|domain] 16:21:43.692235 arp who-has roverbook (Broadcast) tell roverbook 16:21:43.703405 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:44.558025 02:01:00:00:00:00 (oui Unknown) > Broadcast, ethertype Unknown (0x886f), length 82: 0x0000: c001 dec0 0402 0000 0100 0000 0000 0000 ................ 0x0010: 0000 0000 0106 0000 0000 0000 6400 6f00 ............d.o. 0x0020: 2e00 7200 6100 6400 6900 6f00 2e00 7200 ..r.a.d.i.o...r. 0x0030: 6f00 7300 6e00 6f00 7500 2e00 7200 7500 o.s.n.o.u...r.u. 0x0040: 0000 0000 .... 16:21:44.630306 IP (tos 0x0, ttl 128, id 27272, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:44.630547 IP (tos 0x0, ttl 64, id 43349, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 54135+ PTR? 126.163.168.192.in-addr.arpa. (46) 16:21:44.630872 IP (tos 0x0, ttl 128, id 39515, offset 0, flags [none], proto: UDP (17), length: 97) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 54135* 1/0/0 126.163.168.192.in-addr.arpa. (69) 16:21:44.636325 arp who-has 192.168.163.151 tell prorectstaff.radio.rosnou.ru 16:21:45.230548 arp who-has roverbook (Broadcast) tell roverbook 16:21:45.379678 IP (tos 0x0, ttl 128, id 27273, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:45.408763 IP (tos 0x0, ttl 128, id 39516, offset 0, flags [none], proto: UDP (17), length: 72) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-rpc: 23651 ServFail 0/0/0 (44) 16:21:45.408826 IP (tos 0xc0, ttl 64, id 65192, offset 0, flags [none], proto: ICMP (1), length: 100) 192.168.163.234 > octopus.radio.rosnou.ru: ICMP 192.168.163.234 udp port filenet-rpc unreachable, length 80 IP (tos 0x0, ttl 128, id 39516, offset 0, flags [none], proto: UDP (17), length: 72) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-rpc: 23651 ServFail[|domain] 16:21:45.772793 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:46.129684 IP (tos 0x0, ttl 128, id 27274, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:46.778436 arp who-has roverbook (Broadcast) tell roverbook 16:21:46.939527 IP (tos 0x0, ttl 128, id 27275, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:47.689245 IP (tos 0x0, ttl 128, id 27276, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:47.742231 IP (tos 0x0, ttl 128, id 1466, offset 0, flags [none], proto: UDP (17), length: 229) us610-2.radio.rosnou.ru.netbios-dgm > 192.168.163.255.netbios-dgm: NBT UDP PACKET(138) 16:21:47.829462 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:48.028260 arp who-has us422-5.radio.rosnou.ru tell squid.radio.rosnou.ru 16:21:48.152244 IP (tos 0x0, ttl 128, id 6069, offset 0, flags [none], proto: UDP (17), length: 78) us422-5.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:48.325852 arp who-has roverbook (Broadcast) tell roverbook 16:21:48.439250 IP (tos 0x0, ttl 128, id 27277, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:48.623296 arp who-has 192.168.163.1 tell us328-1.radio.rosnou.ru 16:21:48.623515 IP (tos 0x0, ttl 64, id 47343, offset 0, flags [DF], proto: UDP (17), length: 72) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 55674+ PTR? 1.163.168.192.in-addr.arpa. (44) 16:21:48.623934 IP (tos 0x0, ttl 128, id 39527, offset 0, flags [none], proto: UDP (17), length: 166) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 55674 NXDomain* 0/1/0 (138) 16:21:49.255630 IP (tos 0x0, ttl 128, id 27278, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:49.834577 IP (tos 0x0, ttl 128, id 19864, offset 0, flags [none], proto: UDP (17), length: 78) us706-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:49.873418 arp who-has roverbook (Broadcast) tell roverbook 16:21:49.893180 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:50.004678 IP (tos 0x0, ttl 128, id 27279, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:50.361702 arp who-has do.radio.rosnou.ru tell octopus.radio.rosnou.ru 16:21:50.361918 IP (tos 0x0, ttl 64, id 49082, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 28270+ PTR? 249.163.168.192.in-addr.arpa. (46) 16:21:50.362264 IP (tos 0x0, ttl 128, id 39531, offset 0, flags [none], proto: UDP (17), length: 106) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 28270* 1/0/0 249.163.168.192.in-addr.arpa. (78) 16:21:50.584223 IP (tos 0x0, ttl 128, id 19865, offset 0, flags [none], proto: UDP (17), length: 78) us706-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:50.636538 arp who-has 192.168.163.151 tell prorectstaff.radio.rosnou.ru 16:21:50.754676 IP (tos 0x0, ttl 128, id 27280, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:51.071078 IP (tos 0x0, ttl 128, id 6805, offset 0, flags [none], proto: UDP (17), length: 249) us419-2.radio.rosnou.ru.netbios-dgm > 192.168.163.255.netbios-dgm: NBT UDP PACKET(138) 16:21:51.071330 IP (tos 0x0, ttl 64, id 49791, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 53450+ PTR? 116.163.168.192.in-addr.arpa. (46) 16:21:51.071674 IP (tos 0x0, ttl 128, id 39537, offset 0, flags [none], proto: UDP (17), length: 133) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 53450* 2/0/0 116.163.168.192.in-addr.arpa.[|domain] 16:21:51.334223 IP (tos 0x0, ttl 128, id 19866, offset 0, flags [none], proto: UDP (17), length: 78) us706-1.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:51.422440 arp who-has roverbook (Broadcast) tell roverbook 16:21:51.591846 arp who-has 192.168.163.151 tell andrew 16:21:51.592040 IP (tos 0x0, ttl 64, id 50312, offset 0, flags [DF], proto: UDP (17), length: 73) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 26679+ PTR? 16.163.168.192.in-addr.arpa. (45) 16:21:51.592396 IP (tos 0x0, ttl 128, id 39538, offset 0, flags [none], proto: UDP (17), length: 149) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 26679* 3/0/0 16.163.168.192.in-addr.arpa.[|domain] 16:21:51.676359 IP (tos 0x0, ttl 128, id 27281, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:51.956103 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:52.425564 IP (tos 0x0, ttl 128, id 27282, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:52.540712 arp who-has us425-2.radio.rosnou.ru tell 192.168.163.1 16:21:52.968708 arp who-has roverbook (Broadcast) tell roverbook 16:21:53.175576 IP (tos 0x0, ttl 128, id 27283, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:53.742065 NBF Packet: Datagram 16:21:53.989268 IP (tos 0x0, ttl 128, id 27284, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:54.019471 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:54.076746 IP (tos 0x0, ttl 128, id 6145, offset 0, flags [none], proto: UDP (17), length: 229) us332-1.radio.rosnou.ru.netbios-dgm > 192.168.163.255.netbios-dgm: NBT UDP PACKET(138) 16:21:54.337375 IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:21:54.516196 arp who-has roverbook (Broadcast) tell roverbook 16:21:54.557491 02:01:00:00:00:00 (oui Unknown) > Broadcast, ethertype Unknown (0x886f), length 82: 0x0000: c001 dec0 0402 0000 0100 0000 0000 0000 ................ 0x0010: 0000 0000 0106 0000 0000 0000 6400 6f00 ............d.o. 0x0020: 2e00 7200 6100 6400 6900 6f00 2e00 7200 ..r.a.d.i.o...r. 0x0030: 6f00 7300 6e00 6f00 7500 2e00 7200 7500 o.s.n.o.u...r.u. 0x0040: 0000 0000 .... 16:21:54.606747 IP (tos 0x0, ttl 128, id 3652, offset 0, flags [none], proto: UDP (17), length: 78) umu-413.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:54.723967 IP (tos 0xc0, ttl 2, id 0, offset 0, flags [none], proto: UDP (17), length: 52) gw-class.radio.rosnou.ru.router > rip2-routers.mcast.net.router: RIPv2, Response, length: 24, routes: 1 AFI: IPv4: 192.168.160.0/24, tag 0x0000, metric: 1, next-hop: self 16:21:54.739059 IP (tos 0x0, ttl 128, id 27285, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:55.341228 IP (tos 0x0, ttl 128, id 3653, offset 0, flags [none], proto: UDP (17), length: 78) umu-413.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:55.354082 (NOV-ETHII) IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:21:55.489061 IP (tos 0x0, ttl 128, id 27286, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:56.070559 arp who-has roverbook (Broadcast) tell roverbook 16:21:56.082632 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:56.091220 IP (tos 0x0, ttl 128, id 3654, offset 0, flags [none], proto: UDP (17), length: 78) umu-413.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:56.154712 arp who-has vus2.radio.rosnou.ru tell octopus.radio.rosnou.ru 16:21:56.154827 arp who-has vus2.radio.rosnou.ru tell squid.radio.rosnou.ru 16:21:56.302894 IP (tos 0x0, ttl 128, id 27287, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:56.370182 (NOV-ETHII) IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:21:57.052558 IP (tos 0x0, ttl 128, id 27288, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:57.385636 00:00:74:a0:77:a0 (oui Unknown) > Broadcast OSI Information, send seq 0, rcv seq 17, Flags [Command, Poll], length 46 16:21:57.479178 arp who-has us706-2.radio.rosnou.ru tell octopus.radio.rosnou.ru 16:21:57.484081 IP (tos 0x0, ttl 128, id 13580, offset 0, flags [none], proto: UDP (17), length: 78) us706-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:57.605466 arp who-has 192.168.163.151 tell andrew 16:21:57.620391 arp who-has roverbook (Broadcast) tell roverbook 16:21:57.802563 IP (tos 0x0, ttl 128, id 27289, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:58.145919 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:21:58.221014 IP (tos 0x0, ttl 128, id 13581, offset 0, flags [none], proto: UDP (17), length: 78) us706-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:58.401992 IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:21:58.403019 arp who-has us425-1.radio.rosnou.ru tell octopus.radio.rosnou.ru 16:21:58.431787 IP (tos 0x0, ttl 128, id 51386, offset 0, flags [none], proto: UDP (17), length: 229) 192.168.163.162.netbios-dgm > 192.168.163.255.netbios-dgm: NBT UDP PACKET(138) 16:21:58.625421 IP (tos 0x0, ttl 128, id 27290, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:58.971024 IP (tos 0x0, ttl 128, id 13582, offset 0, flags [none], proto: UDP (17), length: 78) us706-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:59.170309 arp who-has roverbook (Broadcast) tell roverbook 16:21:59.374833 IP (tos 0x0, ttl 128, id 27291, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:21:59.417492 (NOV-ETHII) IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:22:00.124833 IP (tos 0x0, ttl 128, id 27292, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:00.221949 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:22:00.433480 (NOV-ETHII) IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:22:00.708743 arp who-has roverbook (Broadcast) tell roverbook 16:22:00.938115 IP (tos 0x0, ttl 128, id 27293, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:01.448829 00:00:74:a0:77:a0 (oui Unknown) > Broadcast OSI Information, send seq 0, rcv seq 17, Flags [Command, Poll], length 46 16:22:01.628210 arp who-has 192.168.163.71 tell 192.168.163.71 16:22:01.628456 IP (tos 0x0, ttl 64, id 60351, offset 0, flags [DF], proto: UDP (17), length: 73) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 21074+ PTR? 71.163.168.192.in-addr.arpa. (45) 16:22:01.628639 00:1c:f0:cd:bf:61 (oui Unknown) > Broadcast, ethertype Unknown (0xcccc), length 334: 0x0000: 0001 0203 0400 0600 0000 0000 0000 000f ................ 0x0010: 1000 0000 0000 1600 0000 0000 0000 0000 ................ 0x0020: 2021 2223 2425 2627 2800 0000 0000 0000 .!"#$%&'(....... 0x0030: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0x0040: 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0x0050: 0000 .. 16:22:01.628874 IP (tos 0x0, ttl 128, id 39598, offset 0, flags [none], proto: UDP (17), length: 167) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 21074 NXDomain* 0/1/0 (139) 16:22:01.687329 IP (tos 0x0, ttl 128, id 27294, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:02.255277 arp who-has roverbook (Broadcast) tell roverbook 16:22:02.272441 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:22:02.437332 IP (tos 0x0, ttl 128, id 27295, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:02.465405 IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:22:03.254040 IP (tos 0x0, ttl 128, id 27296, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:03.453230 arp who-has kolledge_209 tell octopus.radio.rosnou.ru 16:22:03.481113 (NOV-ETHII) IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:22:03.616191 arp who-has 192.168.163.151 tell andrew 16:22:03.802786 arp who-has roverbook (Broadcast) tell roverbook 16:22:04.003737 IP (tos 0x0, ttl 128, id 27297, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:04.348260 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:22:04.496601 (NOV-ETHII) IPX 00000000.00:00:74:a0:77:a0.4100 > 00000000.ff:ff:ff:ff:ff:ff.0452: ipx-sap-nearest-req FileServer 16:22:04.556987 02:01:00:00:00:00 (oui Unknown) > Broadcast, ethertype Unknown (0x886f), length 82: 0x0000: c001 dec0 0402 0000 0100 0000 0000 0000 ................ 0x0010: 0000 0000 0106 0000 0000 0000 6400 6f00 ............d.o. 0x0020: 2e00 7200 6100 6400 6900 6f00 2e00 7200 ..r.a.d.i.o...r. 0x0030: 6f00 7300 6e00 6f00 7500 2e00 7200 7500 o.s.n.o.u...r.u. 0x0040: 0000 0000 .... 16:22:04.568269 IP (tos 0x0, ttl 128, id 1471, offset 0, flags [none], proto: UDP (17), length: 78) us610-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:04.753739 IP (tos 0x0, ttl 128, id 27298, offset 0, flags [none], proto: UDP (17), length: 78) eksternat.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:05.317317 IP (tos 0x0, ttl 128, id 1472, offset 0, flags [none], proto: UDP (17), length: 78) us610-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:05.350520 arp who-has roverbook (Broadcast) tell roverbook 16:22:05.510920 arp who-has 192.168.163.206 tell 192.168.163.240 16:22:05.511143 IP (tos 0x0, ttl 64, id 64234, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 3098+ PTR? 206.163.168.192.in-addr.arpa. (46) 16:22:05.511484 IP (tos 0x0, ttl 128, id 39697, offset 0, flags [none], proto: UDP (17), length: 168) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 3098 NXDomain* 0/1/0 (140) 16:22:05.514101 00:00:74:a0:77:a0 (oui Unknown) > Broadcast OSI Information, send seq 0, rcv seq 17, Flags [Command, Poll], length 46 16:22:06.067281 IP (tos 0x0, ttl 128, id 1473, offset 0, flags [none], proto: UDP (17), length: 78) us610-2.radio.rosnou.ru.netbios-ns > 192.168.163.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 16:22:06.399127 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 16:22:06.428579 arp who-has us209-5.radio.rosnou.ru tell squid.radio.rosnou.ru 16:22:06.428807 IP (tos 0x0, ttl 64, id 65152, offset 0, flags [DF], proto: UDP (17), length: 74) 192.168.163.234.filenet-nch > octopus.radio.rosnou.ru.domain: 15129+ PTR? 100.163.168.192.in-addr.arpa. (46) 16:22:06.429034 IP (tos 0x0, ttl 128, id 39699, offset 0, flags [none], proto: UDP (17), length: 111) octopus.radio.rosnou.ru.domain > 192.168.163.234.filenet-nch: 15129* 1/0/0 100.163.168.192.in-addr.arpa. (83) 16:22:06.897822 arp who-has roverbook (Broadcast) tell roverbook 16:22:07.878703 arp who-has us424-2.radio.rosnou.ru tell us424-1 16:22:08.445508 arp who-has roverbook (Broadcast) tell roverbook 16:22:08.471072 arp who-has 192.168.30.32 (Broadcast) tell 192.168.30.32 484 packets captured 968 packets received by filter 0 packets dropped by kernel


Я не вижу здесь 163.164 вообще. octopus это DNS 163 сети.
Но ведь интервейс-то, смотрящий в 163, пингуется.
Жестокий стоячий админ (с) коллега
Спасибо сказали:
Вернуться к началу
Аватара пользователя
DaemonTux
Сообщения: 1480
Статус: Юный падаван
ОС: Gentoo

Re: Маршрутизация

Сообщение DaemonTux »

а если отрубить фаирвол то пинги ходют? Это все правила iptables или есть ещё какието?

cat /proc/sys/net/ipv4/ip_forward что паказывает?
Vladivostok Linux User Group
Спасибо сказали:
Вернуться к началу
Аватара пользователя
Corsair
Сообщения: 842
Статус: Местный "тролль"
ОС: Fedora

Re: Маршрутизация

Сообщение Corsair »

Всем спасибо. Проблема решилась. Кривые руки - корень всего зла, как обычно.
Жестокий стоячий админ (с) коллега
Спасибо сказали:
Вернуться к началу
Ответить

Вернуться в «Вопрос новичка»