> Le 31 mai 2022 à 21:55, Raphael Mazelier <r...@futomaki.net> a écrit :
> 
> Alors déjà que tu puisse voir le trafic downstream des autres clients c'est 
> étrange. Mais soit admettons les datas sont la à ta porte donc si le trafic 
> est en clair et que l'ont se met en mode sniffing (ca doit exister) pourquoi 
> pas. 
> 
> Mais alors l'upstream alors la je vois même pas comment c'est possible. Si tu 
> vois l'upstream cela veut dire que tu l'as d'abord reçu pour le renvoyer ?! 
> une sorte de bounce. Mais ca doit créer un bazar pas possible.
> 
> 
J’arrive plus à reproduire, donc au temps pour moi, je me suis peut-être 
planté, je finis par m’embrouiller à force, surtout que certains clients 
semblent avoir des VPN IPsec encore 2 opérateurs clients de Kosc.
Je vais chercher encore, mais je préfère autant ça, parce que c’était vraiment 
incohérent/impossible.

> En tout cas c'est plutôt rigolo et intéressant si tu as le fin mot de 
> l'histoire. (ça sent quand même la méga mauvaise config coté kosc)

Oui.
Pour ceux qui encore un doute, petit exemple de ce que ça donne sur un client 
de Paritel dont je viens de voir le traffic sur le FTTH de mon client.

Ping depuis mon FTTH perso Bouygues à Paris:

% ping 5.134.101.211
PING 5.134.101.211 (5.134.101.211): 56 data bytes
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=20.505 ms
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=26.913 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=33.350 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=36.826 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=36.839 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=37.523 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=41.796 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=43.910 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=48.683 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=235 time=54.345 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=54.361 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=54.812 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=55.675 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=59.009 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=59.186 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=61.327 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=61.769 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=63.421 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=64.797 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=64.807 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=66.407 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=67.501 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=67.837 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=77.831 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=77.885 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=78.357 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=78.899 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=80.323 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=235 time=80.638 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=80.646 ms (DUP!)
36 bytes from host.211-101-134-5.rev.paritel.fr (5.134.101.211): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  28 5400 9755   0 0000  01  01 f8ed 192.168.253.60  5.134.101.211

36 bytes from host.211-101-134-5.rev.paritel.fr (5.134.101.211): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  28 5400 9755   0 0000  01  01 f8ed 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=84.338 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=237 time=84.342 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=86.014 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=86.288 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=86.290 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=231 time=89.717 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=243 time=89.951 ms (DUP!)
36 bytes from 158.255.97.54: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from v3.ae10.ter3.eqx2.par.as8218.eu (64.125.30.183): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  28 5400 9755   0 0000  01  01 f8ed 192.168.253.60  5.134.101.211

36 bytes from v3.ae10.ter3.eqx2.par.as8218.eu (64.125.30.183): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  28 5400 9755   0 0000  01  01 f8ed 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=96.406 ms (DUP!)
36 bytes from et-2-0-0.tcr1.rb.par.core.as8218.eu (83.167.55.148): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=231 time=98.768 ms (DUP!)
36 bytes from et-2-0-0.tcr1.rb.par.core.as8218.eu (83.167.55.148): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=102.652 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=102.656 ms (DUP!)
36 bytes from paritel-optimitel-gw1.tcr1.rb.par.cust.as8218.eu (213.152.16.11): 
Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 137.221.57.185.flex.network (185.57.221.137): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 137.221.57.185.flex.network (185.57.221.137): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 158.255.97.54: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 158.255.97.54: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 158.255.97.54: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=109.268 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=231 time=109.521 ms (DUP!)
92 bytes from 12-3-93-130.reverse.alphalink.fr (130.93.3.12): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 2-3-93-130.reverse.alphalink.fr (130.93.3.2): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=113.583 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=115.546 ms (DUP!)
36 bytes from 137.221.57.185.flex.network (185.57.221.137): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 137.221.57.185.flex.network (185.57.221.137): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=117.296 ms (DUP!)
36 bytes from 158.255.97.54: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 158.255.97.54: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=121.254 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=229 time=121.257 ms (DUP!)
92 bytes from 218.94.240.87.halloma.com (87.240.94.218): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

76 bytes from te0-7-0-10.rcr21.b019498-0.par01.atlas.cogentco.com 
(149.11.0.109): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

76 bytes from te0-7-0-10.rcr21.b019498-0.par01.atlas.cogentco.com 
(149.11.0.109): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=124.178 ms (DUP!)
76 bytes from te0-7-0-10.rcr21.b019498-0.par01.atlas.cogentco.com 
(149.11.0.109): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 103-154-93-130.reverse.alphalink.fr (130.93.154.103): Time to 
live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from et-3-0-0.tcr1.th2.par.core.as8218.eu (83.167.55.46): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from et-3-0-0.tcr1.th2.par.core.as8218.eu (83.167.55.46): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from et-3-0-0.tcr1.th2.par.core.as8218.eu (83.167.55.46): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from et-3-0-0.tcr1.th2.par.core.as8218.eu (83.167.55.46): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 218.94.240.87.halloma.com (87.240.94.218): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 79.141.13.65: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=129.219 ms (DUP!)
92 bytes from 85-31-111-205.netw.fr (85.31.111.205): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 62-151-93-130.reverse.alphalink.fr (130.93.151.62): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from conseil-telecomreseaux.com (130.93.135.48): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 103-154-93-130.reverse.alphalink.fr (130.93.154.103): Time to 
live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host68.224.242.91.as39305.net (91.242.224.68): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host227.65.211.91.as39305.net (91.211.65.227): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 71.67.240.87.halloma.com (87.240.67.71): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 218.94.240.87.halloma.com (87.240.94.218): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 218.94.240.87.halloma.com (87.240.94.218): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 204.82.240.87.halloma.com (87.240.82.204): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 82.138.105.67: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 83.167.146.238: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=136.751 ms (DUP!)
92 bytes from 79.141.13.65: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 85-31-111-205.netw.fr (85.31.111.205): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 18-17-93-130.reverse.alphalink.fr (130.93.17.18): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 62-151-93-130.reverse.alphalink.fr (130.93.151.62): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 46.21.128.4: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from conseil-telecomreseaux.com (130.93.135.48): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 157.143.179.118: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 46.21.128.4: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 103-154-93-130.reverse.alphalink.fr (130.93.154.103): Time to 
live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host68.224.242.91.as39305.net (91.242.224.68): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 103-154-93-130.reverse.alphalink.fr (130.93.154.103): Time to 
live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host21.63.196.185.as39305.net (185.196.63.21): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host227.65.211.91.as39305.net (91.211.65.227): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 71.67.240.87.halloma.com (87.240.67.71): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 204.82.240.87.halloma.com (87.240.82.204): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 83.167.146.238: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 83.167.146.238: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 79.141.13.65: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 79.141.13.65: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host30.63.196.185.as39305.net (185.196.63.30): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 82.138.105.67: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=143.588 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=143.591 ms (DUP!)
92 bytes from 85-31-111-205.netw.fr (85.31.111.205): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 18-17-93-130.reverse.alphalink.fr (130.93.17.18): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 85-31-111-205.netw.fr (85.31.111.205): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 238-5-140-95.reverse.alphalink.fr (95.140.5.238): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 62-151-93-130.reverse.alphalink.fr (130.93.151.62): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 238-5-140-95.reverse.alphalink.fr (95.140.5.238): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=145.744 ms (DUP!)
64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=145.998 ms (DUP!)
92 bytes from 62-151-93-130.reverse.alphalink.fr (130.93.151.62): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from conseil-telecomreseaux.com (130.93.135.48): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from conseil-telecomreseaux.com (130.93.135.48): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host68.224.242.91.as39305.net (91.242.224.68): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 157.143.179.118: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 157.143.179.118: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host68.224.242.91.as39305.net (91.242.224.68): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host21.63.196.185.as39305.net (185.196.63.21): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

64 bytes from 5.134.101.211: icmp_seq=0 ttl=232 time=148.402 ms (DUP!)
92 bytes from 149.71.60.63: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 149.71.60.63: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 149.71.60.63: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host21.63.196.185.as39305.net (185.196.63.21): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host227.65.211.91.as39305.net (91.211.65.227): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host227.65.211.91.as39305.net (91.211.65.227): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 150-150-167-83.reverse.alphalink.fr (83.167.150.150): Time to 
live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 71.67.240.87.halloma.com (87.240.67.71): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 204.82.240.87.halloma.com (87.240.82.204): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 204.82.240.87.halloma.com (87.240.82.204): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 149.71.60.63: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 71.67.240.87.halloma.com (87.240.67.71): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 82.138.105.67: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 150-150-167-83.reverse.alphalink.fr (83.167.150.150): Time to 
live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 82.138.105.67: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host30.63.196.185.as39305.net (185.196.63.30): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from host30.63.196.185.as39305.net (185.196.63.30): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 18-17-93-130.reverse.alphalink.fr (130.93.17.18): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

92 bytes from 18-17-93-130.reverse.alphalink.fr (130.93.17.18): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 46.21.128.4: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 46.21.128.4: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 46.21.128.4: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 46.21.128.4: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 46.21.128.4: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

36 bytes from 46.21.128.4: Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211

^C92 bytes from 30-64-93-130.reverse.alphalink.fr (130.93.64.30): Time to live 
exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
 4  5  00 5400 9755   0 0000  01  01 f915 192.168.253.60  5.134.101.211


--- 5.134.101.211 ping statistics ---
1 packets transmitted, 1 packets received, +55 duplicates, 0.0% packet loss
round-trip min/avg/max/stddev = 20.505/83.371/148.402/33.396 ms

Je jure que je n’ai absolument pas altérer le résultat, j’ai juste fait un 
ctrl-C pour arrêter les frais :)

Y a des réponses venant de Kertel, de Convergence, d'Alphalink, de Networth, 
etc….

Le truc amusant, c’est que si je veux arrêter de recevoir ce traffic parasite 
chez mon client, j’ai juste à faire tomber le PPPoE.
Quand il remonte, c’est clean, pendant quelques minutes et après ça revient.

PS: je le répète, d’après Kosc, c’est un problème sur certains OLT des RIP 
Altitude, pas sur les OLT de Kosc.
Mais bon, maintenant que c’est la même maison, ils vont voir ça en interne.


---------------------------
Liste de diffusion du FRnOG
http://www.frnog.org/

Répondre à