Catalin Patulea <[email protected]> writes:
tcpdump from wan
--8<---------------cut here---------------start------------->8---
22:46:52.357336 IP (tos 0x0, ttl 55, id 5252, offset 0, flags [DF], proto TCP
(6), length 60)
87-207-254-205.dynamic.chello.pl.46078 >
178235053240.warszawa.vectranet.pl.ssh: Flags [S], cksum 0x7ac1 (correct), seq
3366450687, win 14600, options [mss 1460,sackOK,TS val 9167227 ecr 0,nop,wscale
2], length 0
22:46:52.397528 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
178235053240.warszawa.vectranet.pl.ssh >
87-207-254-205.dynamic.chello.pl.46078: Flags [S.], cksum 0xd94f (correct), seq
3039009019, ack 3366450688, win 28960, options [mss 1460,sackOK,TS val 47061078
ecr 9167227,nop,wscale 7], length 0
22:46:54.844891 IP (tos 0x0, ttl 55, id 5255, offset 0, flags [DF], proto TCP
(6), length 52)
87-207-254-205.dynamic.chello.pl.46078 >
178235053240.warszawa.vectranet.pl.ssh: Flags [F.], cksum 0x69da (correct), seq
1, ack 33, win 3650, options [nop,nop,TS val 9167476 ecr 47061084], length 0
22:46:54.845882 IP (tos 0x0, ttl 63, id 32935, offset 0, flags [DF], proto TCP
(6), length 52)
178235053240.warszawa.vectranet.pl.ssh >
87-207-254-205.dynamic.chello.pl.46078: Flags [F.], cksum 0x74da (correct), seq
33, ack 2, win 227, options [nop,nop,TS val 47061690 ecr 9167476], length 0
22:46:57.022703 IP (tos 0x0, ttl 55, id 46649, offset 0, flags [DF], proto TCP
(6), length 60)
87-207-254-205.dynamic.chello.pl.46079 >
178235053240.warszawa.vectranet.pl.ssh: Flags [S], cksum 0x9bc6 (correct), seq
1180128631, win 14600, options [mss 1460,sackOK,TS val 9167694 ecr 0,nop,wscale
2], length 0
22:46:57.063039 IP (tos 0x0, ttl 63, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
178235053240.warszawa.vectranet.pl.ssh >
87-207-254-205.dynamic.chello.pl.46079: Flags [S.], cksum 0x61ae (correct), seq
3992908856, ack 1180128632, win 28960, options [mss 1460,sackOK,TS val 47062244
ecr 9167694,nop,wscale 7], length 0
22:46:58.924997 IP (tos 0x0, ttl 55, id 46652, offset 0, flags [DF], proto TCP
(6), length 52)
87-207-254-205.dynamic.chello.pl.46079 >
178235053240.warszawa.vectranet.pl.ssh: Flags [F.], cksum 0xf269 (correct), seq
1, ack 33, win 3650, options [nop,nop,TS val 9167884 ecr 47062260], length 0
22:46:58.925830 IP (tos 0x0, ttl 63, id 59596, offset 0, flags [DF], proto TCP
(6), length 52)
178235053240.warszawa.vectranet.pl.ssh >
87-207-254-205.dynamic.chello.pl.46079: Flags [F.], cksum 0xfe06 (correct), seq
33, ack 2, win 227, options [nop,nop,TS val 47062709 ecr 9167884], length 0
--8<---------------cut here---------------end--------------->8---
tcpdump from br-lan
--8<---------------cut here---------------start------------->8---
22:46:52.397265 IP (tos 0x0, ttl 54, id 5252, offset 0, flags [DF], proto TCP
(6), length 60)
87-207-254-205.dynamic.chello.pl.46078 > 192.168.200.200.ssh: Flags [S],
cksum 0xda2b (correct), seq 3366450687, win 14600, options [mss 1460,sackOK,TS
val 9167227 ecr 0,nop,wscale 2], length 0
22:46:52.397462 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
192.168.200.200.ssh > 87-207-254-205.dynamic.chello.pl.46078: Flags [S.],
cksum 0x38ba (correct), seq 3039009019, ack 3366450688, win 28960, options [mss
1460,sackOK,TS val 47061078 ecr 9167227,nop,wscale 7], length 0
22:46:54.844988 IP (tos 0x0, ttl 54, id 5255, offset 0, flags [DF], proto TCP
(6), length 52)
87-207-254-205.dynamic.chello.pl.46078 > 192.168.200.200.ssh: Flags [F.],
cksum 0xc944 (correct), seq 1, ack 33, win 3650, options [nop,nop,TS val
9167476 ecr 47061084], length 0
22:46:54.845827 IP (tos 0x0, ttl 64, id 32935, offset 0, flags [DF], proto TCP
(6), length 52)
192.168.200.200.ssh > 87-207-254-205.dynamic.chello.pl.46078: Flags [F.],
cksum 0xd444 (correct), seq 33, ack 2, win 227, options [nop,nop,TS val
47061690 ecr 9167476], length 0
22:46:57.062843 IP (tos 0x0, ttl 54, id 46649, offset 0, flags [DF], proto TCP
(6), length 60)
87-207-254-205.dynamic.chello.pl.46079 > 192.168.200.200.ssh: Flags [S],
cksum 0xfb30 (correct), seq 1180128631, win 14600, options [mss 1460,sackOK,TS
val 9167694 ecr 0,nop,wscale 2], length 0
22:46:57.062981 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6),
length 60)
192.168.200.200.ssh > 87-207-254-205.dynamic.chello.pl.46079: Flags [S.],
cksum 0xc118 (correct), seq 3992908856, ack 1180128632, win 28960, options [mss
1460,sackOK,TS val 47062244 ecr 9167694,nop,wscale 7], length 0
22:46:58.925082 IP (tos 0x0, ttl 54, id 46652, offset 0, flags [DF], proto TCP
(6), length 52)
87-207-254-205.dynamic.chello.pl.46079 > 192.168.200.200.ssh: Flags [F.],
cksum 0x51d4 (correct), seq 1, ack 33, win 3650, options [nop,nop,TS val
9167884 ecr 47062260], length 0
22:46:58.925778 IP (tos 0x0, ttl 64, id 59596, offset 0, flags [DF], proto TCP
(6), length 52)
192.168.200.200.ssh > 87-207-254-205.dynamic.chello.pl.46079: Flags [F.],
cksum 0x5d71 (correct), seq 33, ack 2, win 227, options [nop,nop,TS val
47062709 ecr 9167884], length 0
--8<---------------cut here---------------end--------------->8---
In router logs logged only packets with SYN flag, no packets with
RST/FIN
KJ
--
http://wolnelektury.pl/wesprzyj/teraz/
_______________________________________________
openwrt-users mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-users
