Shorewall 4.4.11.6 Dump at vpn.citys.local - Tue Dec 10 10:47:42 BRST 2013

Counters reset Tue Dec 10 10:25:19 BRST 2013

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
20058 1165K dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
43029 9683K net2fw     all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
20248 1183K loc2fw     all  --  br0    *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2fw     all  --  tun0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2fw     all  --  tun1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:INPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
51662   18M dynamic    all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 net_frwd   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
 102K   35M loc_frwd   all  --  br0    *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn_frwd   all  --  tun0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 vpn_frwd   all  --  tun1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:FORWARD:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
96565   40M fw2net     all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
  206 96601 fw2loc     all  --  *      br0     0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vpn     all  --  *      tun0    0.0.0.0/0            0.0.0.0/0           
    0     0 fw2vpn     all  --  *      tun1    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:OUTPUT:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain Drop (3 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    44            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
    1    44 dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    1    44 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain Reject (11 references)
 pkts bytes target     prot opt in     out     source               destination         
19985 1144K            all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 /* Auth */ 
19985 1144K dropBcast  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 3 code 4 /* Needed ICMP types */ 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 11 /* Needed ICMP types */ 
    0     0 dropInvalid  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,445 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:137:139 /* SMB */ 
    0     0 reject     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:137 dpts:1024:65535 /* SMB */ 
    0     0 reject     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 135,139,445 /* SMB */ 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1900 /* UPnP */ 
    0     0 dropNotSyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:53 /* Late DNS Replies */ 

Chain dropBcast (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 9810  818K DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match dst-type BROADCAST 
10175  326K DROP       all  --  *      *       0.0.0.0/0            224.0.0.0/4         

Chain dropInvalid (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    44 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID 

Chain dropNotSyn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:!0x17/0x02 

Chain dynamic (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
  206 96601 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0             udp dpt:1194 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 21,22,7779 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2loc:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain fw2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
96565   40M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0             udp dpt:1194 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            187.75.209.97       udp dpt:1195 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw2vpn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:fw2vpn:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   61 20362 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
  193 18123 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0              0.0.0.0/0           udp dpt:1194 
    9   468 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 21,22,7779 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1194 
19985 1144K Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:loc2fw:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:loc2net:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc2vpn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:loc2vpn:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain loc_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   81 28002 ACCEPT     udp  --  *      br0     0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    0     0 loc2net    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
 102K   35M ACCEPT     all  --  *      br0     0.0.0.0/0            0.0.0.0/0           
    0     0 loc2vpn    all  --  *      tun0    0.0.0.0/0            0.0.0.0/0           
    0     0 loc2vpn    all  --  *      tun1    0.0.0.0/0            0.0.0.0/0           

Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logflags (5 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 4 level 6 prefix `Shorewall:logflags:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    3   160 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:67:68 
    1    44 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
43026 9683K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0              0.0.0.0/0           udp dpt:1194 
    0     0 ACCEPT     udp  --  *      *       187.75.209.97        0.0.0.0/0           udp dpt:1195 
    2   116 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 /* Ping */ 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 21,22,7779 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1194 
    1    44 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2fw:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            172.16.8.54         tcp dpt:80 ctorigdstport 9088 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2loc:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net2vpn (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Drop       all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:net2vpn:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain net_frwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 smurfs     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate INVALID,NEW 
    0     0 tcpflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 net2loc    all  --  *      br0     0.0.0.0/0            0.0.0.0/0           
    0     0 net2vpn    all  --  *      tun0    0.0.0.0/0            0.0.0.0/0           
    0     0 net2vpn    all  --  *      tun1    0.0.0.0/0            0.0.0.0/0           

Chain reject (18 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           ADDRTYPE match src-type BROADCAST 
    0     0 DROP       all  --  *      *       224.0.0.0/4          0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 

Chain shorewall (0 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain smurflog (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:smurfs:DROP:' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain smurfs (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 smurflog   all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] ADDRTYPE match src-type BROADCAST 
    0     0 smurflog   all  --  *      *       224.0.0.0/4          0.0.0.0/0           [goto] 

Chain tcpflags (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x29 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x3F/0x00 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x06/0x06 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp flags:0x03/0x03 
    0     0 logflags   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] tcp spt:0 flags:0x17/0x02 

Chain vpn2fw (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2fw:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain vpn2loc (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2loc:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain vpn2net (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           ctstate RELATED,ESTABLISHED 
    0     0 Reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           LOG flags 0 level 6 prefix `Shorewall:vpn2net:REJECT:' 
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0           [goto] 

Chain vpn_frwd (2 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 vpn2net    all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           
    0     0 vpn2loc    all  --  *      br0     0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      tun0    0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  *      tun1    0.0.0.0/0            0.0.0.0/0           

Log (/var/log/messages)

Dec 10 08:52:18 net2fw:DROP:IN=eth1 OUT= SRC=177.55.200.111 DST=186.231.3.203 LEN=60 TOS=0x00 PREC=0x00 TTL=114 ID=1228 DF PROTO=TCP SPT=53431 DPT=5900 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 08:52:24 net2fw:DROP:IN=eth1 OUT= SRC=177.55.200.111 DST=186.231.3.203 LEN=56 TOS=0x00 PREC=0x00 TTL=114 ID=2041 DF PROTO=TCP SPT=53431 DPT=5900 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:47 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=16624 DF PROTO=TCP SPT=63624 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:47 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=17019 DF PROTO=TCP SPT=63624 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:48 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=48 TOS=0x00 PREC=0x00 TTL=128 ID=17408 DF PROTO=TCP SPT=63624 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:48 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=17422 DF PROTO=TCP SPT=63630 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:48 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=17551 DF PROTO=TCP SPT=63630 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:49 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=48 TOS=0x00 PREC=0x00 TTL=128 ID=17671 DF PROTO=TCP SPT=63630 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:49 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=17672 DF PROTO=TCP SPT=63636 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:49 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=17863 DF PROTO=TCP SPT=63636 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:50 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=48 TOS=0x00 PREC=0x00 TTL=128 ID=18149 DF PROTO=TCP SPT=63636 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:50 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=18152 DF PROTO=TCP SPT=63637 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:50 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=18377 DF PROTO=TCP SPT=63637 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:04:51 loc2fw:REJECT:IN=br0 OUT= PHYSIN=eth0 SRC=172.16.2.45 DST=172.16.0.4 LEN=48 TOS=0x00 PREC=0x00 TTL=128 ID=18750 DF PROTO=TCP SPT=63637 DPT=80 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:22:49 net2fw:DROP:IN=eth1 OUT= SRC=59.120.1.14 DST=186.231.3.203 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=35534 PROTO=TCP SPT=8308 DPT=443 WINDOW=4096 RES=0x00 SYN URGP=0 
Dec 10 09:27:44 net2fw:DROP:IN=eth1 OUT= SRC=77.69.148.69 DST=186.231.3.203 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=18498 DF PROTO=TCP SPT=32419 DPT=3389 WINDOW=8192 RES=0x00 SYN URGP=0 
Dec 10 09:44:05 net2fw:DROP:IN=eth1 OUT= SRC=221.6.51.115 DST=186.231.3.203 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=7000 DPT=8080 WINDOW=16384 RES=0x00 SYN URGP=0 
Dec 10 10:09:20 net2fw:DROP:IN=eth1 OUT= SRC=200.91.37.44 DST=186.231.3.203 LEN=404 TOS=0x00 PREC=0x00 TTL=35 ID=61958 PROTO=UDP SPT=3748 DPT=1434 LEN=384 
Dec 10 10:15:51 net2fw:DROP:IN=eth1 OUT= SRC=198.143.173.189 DST=186.231.3.203 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=41196 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 
Dec 10 10:23:28 net2fw:DROP:IN=eth1 OUT= SRC=59.127.157.4 DST=186.231.3.203 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=22059 PROTO=TCP SPT=9913 DPT=8332 WINDOW=4096 RES=0x00 SYN URGP=0 

NAT Table

Chain PREROUTING (policy ACCEPT 10655 packets, 1117K bytes)
 pkts bytes target     prot opt in     out     source               destination         
10655 1117K dnat       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 10630 packets, 1112K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    2   116 net_dnat   all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           

Chain net_dnat (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:9088 to:172.16.8.54:80 

Mangle Table

Chain PREROUTING (policy ACCEPT 145K packets, 45M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 145K   45M tcpre      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 63278 packets, 11M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 102K packets, 35M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 102K   35M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           MARK and 0xffffff00 
 102K   35M tcfor      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 96793 packets, 40M bytes)
 pkts bytes target     prot opt in     out     source               destination         
96793   40M tcout      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 199K packets, 75M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 199K   75M tcpost     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tcfor (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcout (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpost (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tcpre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Raw Table

Chain PREROUTING (policy ACCEPT 145K packets, 45M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 96793 packets, 40M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Conntrack Table (537 out of 65536)

unknown  2 467 src=172.16.3.231 dst=239.255.255.250 packets=25 bytes=800 [UNREPLIED] src=239.255.255.250 dst=172.16.3.231 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 9 src=172.16.3.21 dst=255.255.255.255 sport=53069 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53069 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 596 src=172.16.4.234 dst=224.0.1.60 packets=126 bytes=4032 [UNREPLIED] src=224.0.1.60 dst=172.16.4.234 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 25 src=172.16.3.21 dst=255.255.255.255 sport=53146 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53146 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 587 src=172.16.3.31 dst=239.255.255.250 packets=22 bytes=704 [UNREPLIED] src=239.255.255.250 dst=172.16.3.31 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431779 ESTABLISHED src=172.16.2.78 dst=172.16.4.252 sport=1588 dport=139 packets=61 bytes=6111 src=172.16.4.252 dst=172.16.2.78 sport=139 dport=1588 packets=58 bytes=6370 [ASSURED] mark=0 secmark=0 use=2
unknown  2 546 src=172.16.3.24 dst=239.255.255.250 packets=6 bytes=192 [UNREPLIED] src=239.255.255.250 dst=172.16.3.24 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 591 src=172.16.3.42 dst=239.255.255.250 packets=20 bytes=640 [UNREPLIED] src=239.255.255.250 dst=172.16.3.42 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431736 ESTABLISHED src=172.16.0.1 dst=172.16.2.45 sport=139 dport=53862 packets=53 bytes=5010 src=172.16.2.45 dst=172.16.0.1 sport=53862 dport=139 packets=58 bytes=4435 [ASSURED] mark=0 secmark=0 use=2
udp      17 18 src=172.16.3.21 dst=255.255.255.255 sport=53112 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53112 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431877 ESTABLISHED src=172.16.3.25 dst=172.16.0.1 sport=49230 dport=139 packets=6487 bytes=931369 src=172.16.0.1 dst=172.16.3.25 sport=139 dport=49230 packets=6437 bytes=2590895 [ASSURED] mark=0 secmark=0 use=2
udp      17 14 src=172.16.3.49 dst=224.0.0.252 sport=52717 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.49 sport=5355 dport=52717 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 8 src=172.16.3.21 dst=255.255.255.255 sport=53063 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53063 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 323 src=172.16.3.32 dst=239.255.255.250 packets=20 bytes=640 [UNREPLIED] src=239.255.255.250 dst=172.16.3.32 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.4.15 dst=239.255.255.250 packets=1097 bytes=35104 [UNREPLIED] src=239.255.255.250 dst=172.16.4.15 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 564 src=172.16.1.16 dst=239.255.255.250 packets=226 bytes=7232 [UNREPLIED] src=239.255.255.250 dst=172.16.1.16 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 397 src=172.16.1.63 dst=239.255.255.250 packets=69 bytes=2208 [UNREPLIED] src=239.255.255.250 dst=172.16.1.63 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.3.23 dst=239.255.255.250 packets=126 bytes=4032 [UNREPLIED] src=239.255.255.250 dst=172.16.3.23 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 428077 ESTABLISHED src=172.16.2.40 dst=172.16.3.238 sport=51719 dport=3389 packets=4072 bytes=493050 src=172.16.3.238 dst=172.16.2.40 sport=3389 dport=51719 packets=3870 bytes=2161762 [ASSURED] mark=0 secmark=0 use=2
unknown  2 535 src=172.16.1.71 dst=239.255.255.250 packets=4 bytes=128 [UNREPLIED] src=239.255.255.250 dst=172.16.1.71 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 597 src=172.16.1.14 dst=239.255.255.250 packets=394 bytes=12608 [UNREPLIED] src=239.255.255.250 dst=172.16.1.14 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 428333 ESTABLISHED src=172.16.3.238 dst=172.16.2.39 sport=64726 dport=135 packets=5 bytes=480 src=172.16.2.39 dst=172.16.3.238 sport=135 dport=64726 packets=3 bytes=364 [ASSURED] mark=0 secmark=0 use=2
udp      17 20 src=172.16.2.110 dst=224.0.1.60 sport=55886 dport=427 packets=1 bytes=85 [UNREPLIED] src=224.0.1.60 dst=172.16.2.110 sport=427 dport=55886 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 6 src=172.16.3.21 dst=255.255.255.255 sport=53053 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53053 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 179 src=187.50.126.222 dst=186.231.3.203 sport=1194 dport=1194 packets=167100 bytes=33083720 src=186.231.3.203 dst=187.50.126.222 sport=1194 dport=1194 packets=406870 bytes=185324008 [ASSURED] mark=0 secmark=0 use=2
unknown  2 575 src=172.16.2.84 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.2.84 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 334 src=172.16.1.65 dst=239.255.255.250 packets=59 bytes=1888 [UNREPLIED] src=239.255.255.250 dst=172.16.1.65 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 430761 ESTABLISHED src=172.16.2.13 dst=172.16.3.238 sport=55487 dport=3389 packets=3791 bytes=415027 src=172.16.3.238 dst=172.16.2.13 sport=3389 dport=55487 packets=3308 bytes=1070728 [ASSURED] mark=0 secmark=0 use=2
udp      17 10 src=172.16.3.21 dst=255.255.255.255 sport=53075 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53075 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 556 src=172.16.2.234 dst=239.255.255.250 packets=17 bytes=544 [UNREPLIED] src=239.255.255.250 dst=172.16.2.234 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 11 src=172.16.3.21 dst=255.255.255.255 sport=53077 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53077 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 593 src=172.16.1.56 dst=239.255.255.250 packets=15 bytes=480 [UNREPLIED] src=239.255.255.250 dst=172.16.1.56 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 559 src=172.16.2.14 dst=239.255.255.250 packets=31 bytes=992 [UNREPLIED] src=239.255.255.250 dst=172.16.2.14 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 19 src=172.16.3.42 dst=224.0.0.252 sport=60849 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.42 sport=5355 dport=60849 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=0.0.0.0 dst=224.0.0.1 packets=41152 bytes=1316864 [UNREPLIED] src=224.0.0.1 dst=0.0.0.0 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 594 src=172.16.0.240 dst=224.0.0.251 packets=272 bytes=8704 [UNREPLIED] src=224.0.0.251 dst=172.16.0.240 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 14 src=172.16.2.110 dst=224.0.1.60 sport=55881 dport=427 packets=1 bytes=84 [UNREPLIED] src=224.0.1.60 dst=172.16.2.110 sport=427 dport=55881 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 84 TIME_WAIT src=172.16.2.12 dst=172.16.3.52 sport=51243 dport=5357 packets=7 bytes=1244 src=172.16.3.52 dst=172.16.2.12 sport=5357 dport=51243 packets=5 bytes=2571 [ASSURED] mark=0 secmark=0 use=2
udp      17 5 src=172.16.3.21 dst=255.255.255.255 sport=53050 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53050 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 400 src=172.16.1.18 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.18 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 3 src=172.16.3.21 dst=255.255.255.255 sport=53039 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53039 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 10 src=172.16.50.51 dst=224.0.0.251 sport=5353 dport=5353 packets=11 bytes=1652 [UNREPLIED] src=224.0.0.251 dst=172.16.50.51 sport=5353 dport=5353 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431770 ESTABLISHED src=172.16.2.84 dst=172.16.4.252 sport=52020 dport=139 packets=33 bytes=3165 src=172.16.4.252 dst=172.16.2.84 sport=139 dport=52020 packets=29 bytes=2148 [ASSURED] mark=0 secmark=0 use=2
unknown  2 302 src=172.16.2.45 dst=239.255.255.250 packets=52 bytes=1664 [UNREPLIED] src=239.255.255.250 dst=172.16.2.45 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.1.63 dst=172.16.255.255 sport=17500 dport=17500 packets=1 bytes=131 [UNREPLIED] src=172.16.255.255 dst=172.16.1.63 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.3.42 dst=224.0.0.252 sport=60222 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.42 sport=5355 dport=60222 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 383 src=172.16.2.49 dst=224.0.0.2 packets=1 bytes=32 [UNREPLIED] src=224.0.0.2 dst=172.16.2.49 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=192.168.123.123 dst=224.0.0.2 packets=2187 bytes=69984 [UNREPLIED] src=224.0.0.2 dst=192.168.123.123 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 27 src=172.16.3.21 dst=255.255.255.255 sport=53156 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53156 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 17 src=172.16.3.21 dst=255.255.255.255 sport=53108 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53108 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 13 src=172.16.3.21 dst=255.255.255.255 sport=53090 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53090 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 327 src=172.16.4.232 dst=224.0.0.251 packets=2 bytes=64 [UNREPLIED] src=224.0.0.251 dst=172.16.4.232 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 0 src=172.16.3.21 dst=255.255.255.255 sport=53025 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53025 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 88 TIME_WAIT src=172.16.2.12 dst=172.16.4.74 sport=51250 dport=5357 packets=8 bytes=2236 src=172.16.4.74 dst=172.16.2.12 sport=5357 dport=51250 packets=7 bytes=5030 [ASSURED] mark=0 secmark=0 use=2
unknown  2 550 src=172.16.2.25 dst=224.0.0.251 packets=39 bytes=1248 [UNREPLIED] src=224.0.0.251 dst=172.16.2.25 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 200 src=172.16.1.97 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.97 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 94 TIME_WAIT src=172.16.2.238 dst=172.16.2.39 sport=53104 dport=139 packets=3 bytes=204 src=172.16.2.39 dst=172.16.2.238 sport=139 dport=53104 packets=3 bytes=137 [ASSURED] mark=0 secmark=0 use=2
unknown  2 86 src=192.168.5.60 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=192.168.5.60 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 117 SYN_SENT src=172.16.2.238 dst=172.16.2.14 sport=53119 dport=139 packets=1 bytes=52 [UNREPLIED] src=172.16.2.14 dst=172.16.2.238 sport=139 dport=53119 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431085 ESTABLISHED src=172.16.4.78 dst=172.16.3.238 sport=52779 dport=3389 packets=6 bytes=495 src=172.16.3.238 dst=172.16.4.78 sport=3389 dport=52779 packets=3 bytes=327 [ASSURED] mark=0 secmark=0 use=2
unknown  2 507 src=172.16.1.220 dst=224.0.1.60 packets=4 bytes=128 [UNREPLIED] src=224.0.1.60 dst=172.16.1.220 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 2 src=172.16.3.21 dst=255.255.255.255 sport=53038 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53038 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 19 src=172.16.3.21 dst=255.255.255.255 sport=53117 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53117 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 573 src=172.16.3.231 dst=224.0.0.251 packets=3 bytes=96 [UNREPLIED] src=224.0.0.251 dst=172.16.3.231 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 533 src=172.16.1.67 dst=224.0.0.251 packets=5 bytes=160 [UNREPLIED] src=224.0.0.251 dst=172.16.1.67 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.2.110 dst=224.0.1.60 sport=54651 dport=427 packets=1 bytes=149 [UNREPLIED] src=224.0.1.60 dst=172.16.2.110 sport=427 dport=54651 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 574 src=192.168.5.60 dst=224.0.0.253 packets=121 bytes=3872 [UNREPLIED] src=224.0.0.253 dst=192.168.5.60 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431883 ESTABLISHED src=172.16.3.42 dst=172.16.4.252 sport=49213 dport=139 packets=52 bytes=4995 src=172.16.4.252 dst=172.16.3.42 sport=139 dport=49213 packets=52 bytes=4607 [ASSURED] mark=0 secmark=0 use=2
udp      17 18 src=172.16.3.21 dst=255.255.255.255 sport=53115 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53115 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 586 src=172.16.10.50 dst=224.0.0.252 packets=289 bytes=9248 [UNREPLIED] src=224.0.0.252 dst=172.16.10.50 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 426201 ESTABLISHED src=172.16.2.252 dst=172.16.2.14 sport=139 dport=50121 packets=6 bytes=8244 [UNREPLIED] src=172.16.2.14 dst=172.16.2.252 sport=50121 dport=139 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.2.236 dst=172.16.2.110 sport=427 dport=54652 packets=1 bytes=376 [UNREPLIED] src=172.16.2.110 dst=172.16.2.236 sport=54652 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.3.49 dst=224.0.0.252 sport=61381 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.49 sport=5355 dport=61381 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 86 TIME_WAIT src=172.16.2.12 dst=172.16.4.220 sport=51252 dport=3911 packets=7 bytes=1116 src=172.16.4.220 dst=172.16.2.12 sport=3911 dport=51252 packets=7 bytes=3449 [ASSURED] mark=0 secmark=0 use=2
unknown  2 587 src=172.16.2.45 dst=224.0.0.253 packets=132 bytes=4224 [UNREPLIED] src=224.0.0.253 dst=172.16.2.45 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 549 src=172.16.4.70 dst=239.255.255.250 packets=2 bytes=64 [UNREPLIED] src=239.255.255.250 dst=172.16.4.70 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 84 src=172.16.3.238 dst=172.16.2.244 sport=58457 dport=161 packets=4 bytes=429 src=172.16.2.244 dst=172.16.3.238 sport=161 dport=58457 packets=3 bytes=364 [ASSURED] mark=0 secmark=0 use=2
udp      17 14 src=172.16.3.21 dst=255.255.255.255 sport=53095 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53095 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.8.35 dst=239.192.161.86 sport=5404 dport=5405 packets=9130 bytes=8709643 [UNREPLIED] src=239.192.161.86 dst=172.16.8.35 sport=5405 dport=5404 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 2 src=172.16.3.21 dst=255.255.255.255 sport=53034 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53034 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 405 src=172.16.2.235 dst=239.255.255.250 packets=1 bytes=32 [UNREPLIED] src=239.255.255.250 dst=172.16.2.235 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 14 src=172.16.3.21 dst=255.255.255.255 sport=53093 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53093 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 589 src=172.16.10.58 dst=224.0.0.252 packets=270 bytes=8640 [UNREPLIED] src=224.0.0.252 dst=172.16.10.58 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 28 src=172.16.2.202 dst=239.255.255.250 sport=3090 dport=3702 packets=3315 bytes=11535551 [UNREPLIED] src=239.255.255.250 dst=172.16.2.202 sport=3702 dport=3090 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 22 src=172.16.3.21 dst=255.255.255.255 sport=53133 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53133 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 0 src=172.16.3.21 dst=255.255.255.255 sport=53027 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53027 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 591 src=172.16.3.41 dst=239.255.255.250 packets=22 bytes=704 [UNREPLIED] src=239.255.255.250 dst=172.16.3.41 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.3.21 dst=255.255.255.255 sport=53140 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53140 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.3.21 dst=255.255.255.255 sport=53044 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53044 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 532 src=172.16.1.74 dst=239.255.255.250 packets=33 bytes=1056 [UNREPLIED] src=239.255.255.250 dst=172.16.1.74 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 1 src=172.16.3.21 dst=255.255.255.255 sport=53029 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53029 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 25 src=172.16.3.21 dst=255.255.255.255 sport=53148 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53148 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 463 src=172.16.3.28 dst=239.255.255.250 packets=80 bytes=2560 [UNREPLIED] src=239.255.255.250 dst=172.16.3.28 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 75 src=172.16.2.45 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.2.45 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 2 src=172.16.3.21 dst=255.255.255.255 sport=53036 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53036 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 563 src=172.16.4.73 dst=239.255.255.250 packets=20 bytes=640 [UNREPLIED] src=239.255.255.250 dst=172.16.4.73 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 586 src=172.16.1.69 dst=239.255.255.250 packets=204 bytes=6528 [UNREPLIED] src=239.255.255.250 dst=172.16.1.69 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 82 TIME_WAIT src=172.16.2.12 dst=172.16.10.52 sport=51226 dport=5357 packets=6 bytes=1204 src=172.16.10.52 dst=172.16.2.12 sport=5357 dport=51226 packets=4 bytes=2563 [ASSURED] mark=0 secmark=0 use=2
udp      17 20 src=172.16.3.21 dst=255.255.255.255 sport=53120 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53120 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 21 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=55496 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=55496 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
unknown  2 576 src=172.16.2.110 dst=239.255.255.250 packets=57 bytes=1824 [UNREPLIED] src=239.255.255.250 dst=172.16.2.110 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 590 src=172.16.8.35 dst=239.192.161.86 packets=279 bytes=8928 [UNREPLIED] src=239.192.161.86 dst=172.16.8.35 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 462 src=172.16.4.232 dst=224.0.1.60 packets=7 bytes=224 [UNREPLIED] src=224.0.1.60 dst=172.16.4.232 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 22 src=172.16.3.21 dst=255.255.255.255 sport=53130 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53130 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 17 src=172.16.2.110 dst=224.0.1.60 sport=55884 dport=427 packets=1 bytes=162 [UNREPLIED] src=224.0.1.60 dst=172.16.2.110 sport=427 dport=55884 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431918 ESTABLISHED src=172.16.4.53 dst=172.16.0.1 sport=45549 dport=139 packets=26 bytes=3306 src=172.16.0.1 dst=172.16.4.53 sport=139 dport=45549 packets=23 bytes=2645 [ASSURED] mark=0 secmark=0 use=2
unknown  2 575 src=172.16.2.16 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.2.16 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 579 src=172.16.1.57 dst=224.0.0.9 packets=138 bytes=4416 [UNREPLIED] src=224.0.0.9 dst=172.16.1.57 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 208 src=172.16.3.21 dst=239.255.255.250 packets=30 bytes=960 [UNREPLIED] src=239.255.255.250 dst=172.16.3.21 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431791 ESTABLISHED src=172.16.4.70 dst=172.16.4.238 sport=49478 dport=3389 packets=32 bytes=2421 src=172.16.4.238 dst=172.16.4.70 sport=3389 dport=49478 packets=19 bytes=1876 [ASSURED] mark=0 secmark=0 use=2
unknown  2 29 src=172.16.1.83 dst=239.255.255.250 packets=91 bytes=2912 [UNREPLIED] src=239.255.255.250 dst=172.16.1.83 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 73 src=172.16.3.47 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.3.47 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 14 src=172.16.2.110 dst=224.0.1.60 sport=55880 dport=427 packets=1 bytes=84 [UNREPLIED] src=224.0.1.60 dst=172.16.2.110 sport=427 dport=55880 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 578 src=172.16.3.105 dst=224.0.0.252 packets=23 bytes=736 [UNREPLIED] src=224.0.0.252 dst=172.16.3.105 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 13 src=172.16.4.79 dst=172.16.255.255 sport=137 dport=137 packets=12 bytes=936 [UNREPLIED] src=172.16.255.255 dst=172.16.4.79 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 11 src=172.16.3.21 dst=255.255.255.255 sport=53078 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53078 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 1 src=172.16.3.21 dst=255.255.255.255 sport=53030 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53030 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 568 src=172.16.4.234 dst=239.255.255.250 packets=281 bytes=8992 [UNREPLIED] src=239.255.255.250 dst=172.16.4.234 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 469 src=172.16.2.40 dst=239.255.255.250 packets=70 bytes=2240 [UNREPLIED] src=239.255.255.250 dst=172.16.2.40 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 6 src=172.16.3.21 dst=255.255.255.255 sport=53054 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53054 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 22 src=172.16.3.21 dst=255.255.255.255 sport=53132 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53132 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 586 src=192.168.100.20 dst=224.0.0.9 packets=103 bytes=3296 [UNREPLIED] src=224.0.0.9 dst=192.168.100.20 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 212 src=172.16.1.65 dst=224.0.0.251 packets=16 bytes=512 [UNREPLIED] src=224.0.0.251 dst=172.16.1.65 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.3.21 dst=255.255.255.255 sport=53128 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53128 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 592 src=172.16.10.52 dst=224.0.0.252 packets=285 bytes=9120 [UNREPLIED] src=224.0.0.252 dst=172.16.10.52 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 453 src=172.16.1.56 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.56 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431895 ESTABLISHED src=172.16.2.67 dst=172.16.2.238 sport=59585 dport=3389 packets=1089 bytes=145399 src=172.16.2.238 dst=172.16.2.67 sport=3389 dport=59585 packets=1063 bytes=436105 [ASSURED] mark=0 secmark=0 use=2
udp      17 23 src=172.16.2.110 dst=224.0.1.60 sport=54652 dport=427 packets=1 bytes=227 [UNREPLIED] src=224.0.1.60 dst=172.16.2.110 sport=427 dport=54652 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 11 src=172.16.3.49 dst=224.0.0.252 sport=54088 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.49 sport=5355 dport=54088 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 535 src=172.16.4.238 dst=224.0.1.24 packets=103 bytes=3296 [UNREPLIED] src=224.0.1.24 dst=172.16.4.238 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 558 src=172.16.1.59 dst=239.255.255.250 packets=63 bytes=2016 [UNREPLIED] src=239.255.255.250 dst=172.16.1.59 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.1.87 dst=255.255.255.255 sport=10001 dport=10001 packets=434 bytes=397544 [UNREPLIED] src=255.255.255.255 dst=172.16.1.87 sport=10001 dport=10001 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 75 src=172.16.10.10 dst=224.0.0.251 packets=2 bytes=64 [UNREPLIED] src=224.0.0.251 dst=172.16.10.10 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 7 src=172.16.3.21 dst=255.255.255.255 sport=53062 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53062 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 16 src=172.16.3.21 dst=255.255.255.255 sport=53101 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53101 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 51 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=50367 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=50367 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
unknown  2 599 src=172.16.1.17 dst=239.255.255.250 packets=465 bytes=14880 [UNREPLIED] src=239.255.255.250 dst=172.16.1.17 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 575 src=192.168.5.60 dst=224.0.0.251 packets=4 bytes=128 [UNREPLIED] src=224.0.0.251 dst=192.168.5.60 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 3 src=172.16.3.21 dst=255.255.255.255 sport=53041 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53041 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 507 src=172.16.3.23 dst=224.0.0.252 packets=3 bytes=96 [UNREPLIED] src=224.0.0.252 dst=172.16.3.23 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 7 src=172.16.3.21 dst=255.255.255.255 sport=53059 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53059 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 577 src=172.16.1.76 dst=239.255.255.250 packets=15 bytes=480 [UNREPLIED] src=239.255.255.250 dst=172.16.1.76 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 586 src=172.16.1.75 dst=224.0.0.251 packets=8 bytes=256 [UNREPLIED] src=224.0.0.251 dst=172.16.1.75 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 27 src=172.16.3.21 dst=255.255.255.255 sport=53154 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53154 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 31 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=55503 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=55503 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
udp      17 13 src=172.16.3.21 dst=255.255.255.255 sport=53088 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53088 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431994 ESTABLISHED src=172.16.4.252 dst=172.16.2.39 sport=139 dport=49168 packets=14 bytes=780 src=172.16.2.39 dst=172.16.4.252 sport=49168 dport=139 packets=14 bytes=732 [ASSURED] mark=0 secmark=0 use=2
udp      17 21 src=172.16.1.66 dst=172.16.255.255 sport=137 dport=137 packets=1260 bytes=98280 [UNREPLIED] src=172.16.255.255 dst=172.16.1.66 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 10 src=172.16.3.21 dst=255.255.255.255 sport=53076 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53076 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 81 TIME_WAIT src=172.16.2.12 dst=172.16.4.71 sport=51219 dport=5357 packets=7 bytes=1244 src=172.16.4.71 dst=172.16.2.12 sport=5357 dport=51219 packets=5 bytes=2571 [ASSURED] mark=0 secmark=0 use=2
udp      17 5 src=172.16.3.21 dst=255.255.255.255 sport=53052 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53052 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 582 src=172.16.1.219 dst=239.255.255.250 packets=20 bytes=640 [UNREPLIED] src=239.255.255.250 dst=172.16.1.219 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 84 src=172.16.3.238 dst=172.16.2.232 sport=58457 dport=161 packets=6 bytes=594 src=172.16.2.232 dst=172.16.3.238 sport=161 dport=58457 packets=5 bytes=567 [ASSURED] mark=0 secmark=0 use=2
udp      17 12 src=172.16.3.21 dst=255.255.255.255 sport=53086 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53086 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431600 ESTABLISHED src=172.16.3.19 dst=172.16.3.238 sport=53621 dport=3389 packets=1156 bytes=140325 src=172.16.3.238 dst=172.16.3.19 sport=3389 dport=53621 packets=1303 bytes=913090 [ASSURED] mark=0 secmark=0 use=2
udp      17 15 src=172.16.2.110 dst=224.0.1.60 sport=55882 dport=427 packets=1 bytes=85 [UNREPLIED] src=224.0.1.60 dst=172.16.2.110 sport=427 dport=55882 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431961 ESTABLISHED src=172.16.2.99 dst=172.16.2.252 sport=49202 dport=139 packets=19 bytes=2204 src=172.16.2.252 dst=172.16.2.99 sport=139 dport=49202 packets=19 bytes=1582 [ASSURED] mark=0 secmark=0 use=2
udp      17 26 src=172.16.2.238 dst=172.16.2.39 sport=933 dport=111 packets=1 bytes=84 [UNREPLIED] src=172.16.2.39 dst=172.16.2.238 sport=111 dport=933 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 586 src=172.16.2.47 dst=224.0.0.252 packets=2 bytes=64 [UNREPLIED] src=224.0.0.252 dst=172.16.2.47 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 520 src=172.16.2.90 dst=239.255.255.250 packets=42 bytes=1344 [UNREPLIED] src=239.255.255.250 dst=172.16.2.90 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 20 src=172.16.3.21 dst=255.255.255.255 sport=53122 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53122 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 8 src=172.16.3.21 dst=255.255.255.255 sport=53064 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53064 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 82 TIME_WAIT src=172.16.2.12 dst=172.16.2.238 sport=51225 dport=5357 packets=6 bytes=1204 src=172.16.2.238 dst=172.16.2.12 sport=5357 dport=51225 packets=4 bytes=2561 [ASSURED] mark=0 secmark=0 use=2
unknown  2 574 src=172.16.1.18 dst=239.255.255.250 packets=49 bytes=1568 [UNREPLIED] src=239.255.255.250 dst=172.16.1.18 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 22 src=172.16.2.236 dst=172.16.2.110 sport=427 dport=54651 packets=1 bytes=376 [UNREPLIED] src=172.16.2.110 dst=172.16.2.236 sport=54651 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 117 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=50405 dport=8080 packets=7 bytes=408 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=50405 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431906 ESTABLISHED src=172.16.4.252 dst=172.16.3.32 sport=139 dport=52936 packets=62 bytes=5832 src=172.16.3.32 dst=172.16.4.252 sport=52936 dport=139 packets=61 bytes=5432 [ASSURED] mark=0 secmark=0 use=2
udp      17 20 src=172.16.3.21 dst=255.255.255.255 sport=53124 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53124 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 17 src=172.16.3.21 dst=255.255.255.255 sport=53110 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53110 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 574 src=172.16.2.67 dst=239.255.255.250 packets=38 bytes=1216 [UNREPLIED] src=239.255.255.250 dst=172.16.2.67 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 586 src=172.16.1.246 dst=224.0.0.251 packets=279 bytes=8928 [UNREPLIED] src=224.0.0.251 dst=172.16.1.246 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 472 src=172.16.3.232 dst=239.255.255.250 packets=40 bytes=1280 [UNREPLIED] src=239.255.255.250 dst=172.16.3.232 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 336 src=172.16.70.42 dst=224.0.0.251 packets=3 bytes=96 [UNREPLIED] src=224.0.0.251 dst=172.16.70.42 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 82 TIME_WAIT src=172.16.2.12 dst=172.16.3.234 sport=51227 dport=3911 packets=7 bytes=1116 src=172.16.3.234 dst=172.16.2.12 sport=3911 dport=51227 packets=5 bytes=3640 [ASSURED] mark=0 secmark=0 use=2
udp      17 16 src=172.16.3.21 dst=255.255.255.255 sport=53102 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53102 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 16 src=172.16.2.236 dst=172.16.2.110 sport=427 dport=55882 packets=1 bytes=376 [UNREPLIED] src=172.16.2.110 dst=172.16.2.236 sport=55882 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431416 ESTABLISHED src=172.16.3.238 dst=172.16.2.39 sport=64727 dport=49156 packets=199 bytes=140809 src=172.16.2.39 dst=172.16.3.238 sport=49156 dport=64727 packets=216 bytes=163460 [ASSURED] mark=0 secmark=0 use=2
unknown  2 257 src=172.16.1.63 dst=224.0.0.251 packets=5 bytes=160 [UNREPLIED] src=224.0.0.251 dst=172.16.1.63 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 523 src=172.16.2.46 dst=239.255.255.250 packets=37 bytes=1184 [UNREPLIED] src=239.255.255.250 dst=172.16.2.46 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.8.36 dst=239.192.161.86 sport=5404 dport=5405 packets=9903 bytes=9474322 [UNREPLIED] src=239.192.161.86 dst=172.16.8.36 sport=5405 dport=5404 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 573 src=172.16.1.28 dst=239.255.255.250 packets=180 bytes=5760 [UNREPLIED] src=239.255.255.250 dst=172.16.1.28 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 426 src=172.16.1.223 dst=239.255.255.250 packets=115 bytes=3680 [UNREPLIED] src=239.255.255.250 dst=172.16.1.223 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431734 ESTABLISHED src=172.16.2.14 dst=172.16.2.252 sport=50328 dport=139 packets=22 bytes=1969 src=172.16.2.252 dst=172.16.2.14 sport=139 dport=50328 packets=24 bytes=1606 [ASSURED] mark=0 secmark=0 use=2
udp      17 7 src=172.16.3.21 dst=255.255.255.255 sport=53058 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53058 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.3.52 dst=239.255.255.250 packets=763 bytes=24416 [UNREPLIED] src=239.255.255.250 dst=172.16.3.52 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 3 src=172.16.3.21 dst=255.255.255.255 sport=53040 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53040 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 594 src=172.16.4.202 dst=224.0.1.60 packets=127 bytes=4064 [UNREPLIED] src=224.0.1.60 dst=172.16.4.202 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 88 TIME_WAIT src=172.16.2.12 dst=172.16.1.28 sport=51249 dport=5357 packets=8 bytes=2236 src=172.16.1.28 dst=172.16.2.12 sport=5357 dport=51249 packets=7 bytes=5022 [ASSURED] mark=0 secmark=0 use=2
udp      17 7 src=172.16.1.28 dst=172.16.255.255 sport=137 dport=137 packets=3 bytes=234 [UNREPLIED] src=172.16.255.255 dst=172.16.1.28 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 15 src=172.16.3.21 dst=255.255.255.255 sport=53098 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53098 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 15 src=172.16.3.21 dst=255.255.255.255 sport=53099 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53099 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 12 src=172.16.3.21 dst=255.255.255.255 sport=53085 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53085 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 596 src=172.16.8.33 dst=239.192.161.86 packets=264 bytes=8448 [UNREPLIED] src=239.192.161.86 dst=172.16.8.33 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 579 src=172.16.2.84 dst=224.0.0.251 packets=1 bytes=32 [UNREPLIED] src=224.0.0.251 dst=172.16.2.84 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 597 src=172.16.4.74 dst=239.255.255.250 packets=134 bytes=4288 [UNREPLIED] src=239.255.255.250 dst=172.16.4.74 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 18 src=172.16.3.21 dst=255.255.255.255 sport=53113 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53113 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 598 src=192.168.123.123 dst=239.255.255.250 packets=7194 bytes=230208 [UNREPLIED] src=239.255.255.250 dst=192.168.123.123 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.1.87 dst=255.255.255.255 sport=10001 dport=10002 packets=434 bytes=397544 [UNREPLIED] src=255.255.255.255 dst=172.16.1.87 sport=10002 dport=10001 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 9 src=172.16.3.21 dst=255.255.255.255 sport=53067 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53067 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 575 src=172.16.2.233 dst=224.0.1.60 packets=9 bytes=288 [UNREPLIED] src=224.0.1.60 dst=172.16.2.233 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 327 src=172.16.2.99 dst=239.255.255.250 packets=18 bytes=576 [UNREPLIED] src=239.255.255.250 dst=172.16.2.99 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 502 src=172.16.2.16 dst=239.255.255.250 packets=57 bytes=1824 [UNREPLIED] src=239.255.255.250 dst=172.16.2.16 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 426294 ESTABLISHED src=172.16.4.252 dst=172.16.2.84 sport=139 dport=49198 packets=7 bytes=308 [UNREPLIED] src=172.16.2.84 dst=172.16.4.252 sport=49198 dport=139 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 5 src=172.16.3.21 dst=255.255.255.255 sport=53048 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53048 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 325 src=172.16.2.45 dst=224.0.0.251 packets=3 bytes=96 [UNREPLIED] src=224.0.0.251 dst=172.16.2.45 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 507 src=172.16.2.12 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.2.12 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.4.14 dst=239.255.255.250 packets=2052 bytes=65664 [UNREPLIED] src=239.255.255.250 dst=172.16.4.14 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 382 src=172.16.3.32 dst=224.0.0.252 packets=2 bytes=64 [UNREPLIED] src=224.0.0.252 dst=172.16.3.32 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 201 src=172.16.2.236 dst=224.0.1.60 packets=3 bytes=96 [UNREPLIED] src=224.0.1.60 dst=172.16.2.236 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 1 src=172.16.3.21 dst=255.255.255.255 sport=53031 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53031 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 426323 ESTABLISHED src=172.16.2.252 dst=172.16.2.84 sport=139 dport=49210 packets=7 bytes=308 [UNREPLIED] src=172.16.2.84 dst=172.16.2.252 sport=49210 dport=139 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 15 src=172.16.3.21 dst=255.255.255.255 sport=53096 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53096 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 429438 ESTABLISHED src=172.16.3.252 dst=172.16.3.49 sport=139 dport=49177 packets=6 bytes=264 [UNREPLIED] src=172.16.3.49 dst=172.16.3.252 sport=49177 dport=139 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 71 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=50377 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=50377 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
tcp      6 299 ESTABLISHED src=172.16.2.13 dst=172.16.4.238 sport=57262 dport=3389 packets=4999 bytes=459117 src=172.16.4.238 dst=172.16.2.13 sport=3389 dport=57262 packets=5122 bytes=2882452 [ASSURED] mark=0 secmark=0 use=2
udp      17 3 src=172.16.1.66 dst=224.0.0.252 sport=59391 dport=5355 packets=2 bytes=100 [UNREPLIED] src=224.0.0.252 dst=172.16.1.66 sport=5355 dport=59391 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 589 src=172.16.10.51 dst=224.0.0.252 packets=283 bytes=9056 [UNREPLIED] src=224.0.0.252 dst=172.16.10.51 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 450 src=172.16.1.222 dst=224.0.1.60 packets=4 bytes=128 [UNREPLIED] src=224.0.1.60 dst=172.16.1.222 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 25 src=172.16.3.21 dst=255.255.255.255 sport=53147 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53147 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 22 src=172.16.3.21 dst=255.255.255.255 sport=53131 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53131 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 28 src=172.16.1.236 dst=255.255.255.255 sport=61650 dport=5200 packets=1300 bytes=67600 [UNREPLIED] src=255.255.255.255 dst=172.16.1.236 sport=5200 dport=61650 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 28 src=172.16.4.14 dst=224.0.0.252 sport=54452 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.4.14 sport=5355 dport=54452 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431724 ESTABLISHED src=172.16.3.49 dst=172.16.3.252 sport=54733 dport=139 packets=36 bytes=3782 src=172.16.3.252 dst=172.16.3.49 sport=139 dport=54733 packets=32 bytes=3405 [ASSURED] mark=0 secmark=0 use=2
unknown  2 592 src=172.16.10.54 dst=224.0.0.252 packets=235 bytes=7520 [UNREPLIED] src=224.0.0.252 dst=172.16.10.54 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 3 src=172.16.2.231 dst=239.255.255.250 packets=50 bytes=1600 [UNREPLIED] src=239.255.255.250 dst=172.16.2.231 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 503 src=172.16.2.47 dst=239.255.255.250 packets=44 bytes=1408 [UNREPLIED] src=239.255.255.250 dst=172.16.2.47 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 507 src=172.16.3.46 dst=239.255.255.250 packets=93 bytes=2976 [UNREPLIED] src=239.255.255.250 dst=172.16.3.46 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 5 src=172.16.3.21 dst=255.255.255.255 sport=53051 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53051 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.1.63 dst=255.255.255.255 sport=17500 dport=17500 packets=1 bytes=131 [UNREPLIED] src=255.255.255.255 dst=172.16.1.63 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 150 src=172.16.4.75 dst=224.0.0.252 packets=2 bytes=64 [UNREPLIED] src=224.0.0.252 dst=172.16.4.75 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.3.49 dst=224.0.0.252 sport=60791 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.49 sport=5355 dport=60791 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 0 src=172.16.1.63 dst=224.0.0.252 sport=54343 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.1.63 sport=5355 dport=54343 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 582 src=172.16.4.220 dst=224.0.1.60 packets=114 bytes=3648 [UNREPLIED] src=224.0.1.60 dst=172.16.4.220 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 11 src=172.16.3.21 dst=255.255.255.255 sport=53080 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53080 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 577 src=172.16.1.220 dst=224.0.0.251 packets=2 bytes=64 [UNREPLIED] src=224.0.0.251 dst=172.16.1.220 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 41 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=50359 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=50359 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
unknown  2 579 src=172.16.2.238 dst=224.0.1.24 packets=117 bytes=3744 [UNREPLIED] src=224.0.1.24 dst=172.16.2.238 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 86 TIME_WAIT src=172.16.2.12 dst=172.16.1.98 sport=51251 dport=5357 packets=7 bytes=1244 src=172.16.1.98 dst=172.16.2.12 sport=5357 dport=51251 packets=5 bytes=2569 [ASSURED] mark=0 secmark=0 use=2
udp      17 177 src=187.75.209.97 dst=186.231.3.203 sport=1195 dport=1195 packets=3121 bytes=431352 src=186.231.3.203 dst=187.75.209.97 sport=1195 dport=1195 packets=8 bytes=1088 [ASSURED] mark=0 secmark=0 use=2
udp      17 20 src=172.16.3.21 dst=255.255.255.255 sport=53123 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53123 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 84 src=172.16.3.238 dst=172.16.2.234 sport=58457 dport=161 packets=6 bytes=594 src=172.16.2.234 dst=172.16.3.238 sport=161 dport=58457 packets=5 bytes=567 [ASSURED] mark=0 secmark=0 use=2
unknown  2 470 src=172.16.1.57 dst=239.255.255.250 packets=134 bytes=4288 [UNREPLIED] src=239.255.255.250 dst=172.16.1.57 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 26 src=172.16.3.21 dst=255.255.255.255 sport=53149 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53149 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 5 src=172.16.1.69 dst=224.0.0.252 sport=64939 dport=5355 packets=2 bytes=100 [UNREPLIED] src=224.0.0.252 dst=172.16.1.69 sport=5355 dport=64939 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 84 src=172.16.3.238 dst=172.16.3.233 sport=58457 dport=161 packets=6 bytes=594 src=172.16.3.233 dst=172.16.3.238 sport=161 dport=58457 packets=5 bytes=567 [ASSURED] mark=0 secmark=0 use=2
unknown  2 587 src=172.16.4.80 dst=224.0.0.2 packets=249 bytes=7968 [UNREPLIED] src=224.0.0.2 dst=172.16.4.80 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 423 src=172.16.1.81 dst=239.255.255.250 packets=142 bytes=4544 [UNREPLIED] src=239.255.255.250 dst=172.16.1.81 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 275 src=172.16.3.231 dst=224.0.1.60 packets=4 bytes=128 [UNREPLIED] src=224.0.1.60 dst=172.16.3.231 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 573 src=172.16.4.17 dst=239.255.255.250 packets=1041 bytes=33312 [UNREPLIED] src=239.255.255.250 dst=172.16.4.17 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 568 src=172.16.1.52 dst=239.255.255.250 packets=67 bytes=2144 [UNREPLIED] src=239.255.255.250 dst=172.16.1.52 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.4.12 dst=239.255.255.250 packets=2065 bytes=66080 [UNREPLIED] src=239.255.255.250 dst=172.16.4.12 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 1 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=55484 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=55484 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
tcp      6 81 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=50385 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=50385 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
unknown  2 570 src=172.16.1.222 dst=239.255.255.250 packets=137 bytes=4384 [UNREPLIED] src=239.255.255.250 dst=172.16.1.222 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 140 src=172.16.1.252 dst=172.16.2.12 sport=138 dport=138 packets=6 bytes=1260 src=172.16.2.12 dst=172.16.1.252 sport=138 dport=138 packets=3 bytes=606 [ASSURED] mark=0 secmark=0 use=2
unknown  2 552 src=172.16.2.84 dst=239.255.255.250 packets=72 bytes=2304 [UNREPLIED] src=239.255.255.250 dst=172.16.2.84 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.4.17 dst=172.16.255.255 sport=138 dport=138 packets=1 bytes=229 [UNREPLIED] src=172.16.255.255 dst=172.16.4.17 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431712 ESTABLISHED src=172.16.0.1 dst=172.16.3.47 sport=139 dport=61669 packets=25 bytes=1092 src=172.16.3.47 dst=172.16.0.1 sport=61669 dport=139 packets=25 bytes=1020 [ASSURED] mark=0 secmark=0 use=2
unknown  2 336 src=172.16.2.17 dst=224.0.0.252 packets=2 bytes=64 [UNREPLIED] src=224.0.0.252 dst=172.16.2.17 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 587 src=172.16.1.223 dst=224.0.1.60 packets=9 bytes=288 [UNREPLIED] src=224.0.1.60 dst=172.16.1.223 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 83 TIME_WAIT src=172.16.2.12 dst=172.16.1.224 sport=51229 dport=3911 packets=7 bytes=1116 src=172.16.1.224 dst=172.16.2.12 sport=3911 dport=51229 packets=7 bytes=3449 [ASSURED] mark=0 secmark=0 use=2
udp      17 19 src=172.16.3.42 dst=224.0.0.252 sport=49457 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.42 sport=5355 dport=49457 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 82 TIME_WAIT src=172.16.2.12 dst=172.16.1.219 sport=51220 dport=3911 packets=8 bytes=1160 src=172.16.1.219 dst=172.16.2.12 sport=3911 dport=51220 packets=10 bytes=6076 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431904 ESTABLISHED src=172.16.3.21 dst=172.16.4.252 sport=49200 dport=139 packets=34 bytes=2990 src=172.16.4.252 dst=172.16.3.21 sport=139 dport=49200 packets=37 bytes=2529 [ASSURED] mark=0 secmark=0 use=2
udp      17 27 src=172.16.3.21 dst=255.255.255.255 sport=53157 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53157 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.3.21 dst=255.255.255.255 sport=53045 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53045 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 0 src=172.16.3.21 dst=255.255.255.255 sport=53026 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53026 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 81 TIME_WAIT src=172.16.2.12 dst=172.16.2.90 sport=51221 dport=5357 packets=7 bytes=1244 src=172.16.2.90 dst=172.16.2.12 sport=5357 dport=51221 packets=4 bytes=2531 [ASSURED] mark=0 secmark=0 use=2
unknown  2 588 src=172.16.8.34 dst=239.192.161.86 packets=271 bytes=8672 [UNREPLIED] src=239.192.161.86 dst=172.16.8.34 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.3.21 dst=255.255.255.255 sport=53163 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53163 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 586 src=172.16.10.56 dst=224.0.0.252 packets=280 bytes=8960 [UNREPLIED] src=224.0.0.252 dst=172.16.10.56 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 0 src=172.16.3.21 dst=255.255.255.255 sport=53028 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53028 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.1.237 dst=239.255.255.250 packets=2014 bytes=64448 [UNREPLIED] src=239.255.255.250 dst=172.16.1.237 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 159 src=172.16.4.78 dst=224.0.0.251 packets=1 bytes=32 [UNREPLIED] src=224.0.0.251 dst=172.16.4.78 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431726 ESTABLISHED src=172.16.3.238 dst=172.16.2.236 sport=65495 dport=3910 packets=5 bytes=1227 src=172.16.2.236 dst=172.16.3.238 sport=3910 dport=65495 packets=2 bytes=1338 [ASSURED] mark=0 secmark=0 use=2
udp      17 22 src=172.16.8.33 dst=239.192.161.86 sport=5404 dport=5405 packets=11715 bytes=11345309 [UNREPLIED] src=239.192.161.86 dst=172.16.8.33 sport=5405 dport=5404 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 1 src=172.16.2.12 dst=224.0.0.252 sport=62224 dport=5355 packets=2 bytes=106 [UNREPLIED] src=224.0.0.252 dst=172.16.2.12 sport=5355 dport=62224 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 10 src=172.16.1.16 dst=172.16.255.255 sport=138 dport=138 packets=1 bytes=248 [UNREPLIED] src=172.16.255.255 dst=172.16.1.16 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.3.21 dst=255.255.255.255 sport=53129 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53129 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 17 src=172.16.2.244 dst=172.16.2.110 sport=427 dport=55884 packets=1 bytes=393 [UNREPLIED] src=172.16.2.110 dst=172.16.2.244 sport=55884 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 33 src=172.16.3.28 dst=224.0.0.252 packets=2 bytes=64 [UNREPLIED] src=224.0.0.252 dst=172.16.3.28 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 449 src=172.16.3.234 dst=224.0.1.60 packets=9 bytes=288 [UNREPLIED] src=224.0.1.60 dst=172.16.3.234 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.1.87 dst=255.255.255.255 sport=10001 dport=0 packets=434 bytes=397544 [UNREPLIED] src=255.255.255.255 dst=172.16.1.87 sport=0 dport=10001 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 428973 ESTABLISHED src=172.16.2.252 dst=172.16.2.14 sport=139 dport=50153 packets=2 bytes=88 [UNREPLIED] src=172.16.2.14 dst=172.16.2.252 sport=50153 dport=139 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 61 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=50372 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=50372 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
tcp      6 38 SYN_SENT src=172.16.2.238 dst=172.16.2.14 sport=53083 dport=445 packets=3 bytes=152 [UNREPLIED] src=172.16.2.14 dst=172.16.2.238 sport=445 dport=53083 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 457 src=172.16.4.71 dst=239.255.255.250 packets=24 bytes=768 [UNREPLIED] src=239.255.255.250 dst=172.16.4.71 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 39 SYN_SENT src=172.16.2.238 dst=172.16.2.14 sport=53084 dport=139 packets=3 bytes=152 [UNREPLIED] src=172.16.2.14 dst=172.16.2.238 sport=139 dport=53084 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 83 TIME_WAIT src=172.16.2.12 dst=172.16.4.75 sport=51237 dport=5357 packets=7 bytes=1244 src=172.16.4.75 dst=172.16.2.12 sport=5357 dport=51237 packets=5 bytes=2573 [ASSURED] mark=0 secmark=0 use=2
udp      17 14 src=172.16.3.46 dst=255.255.255.255 sport=17500 dport=17500 packets=1 bytes=139 [UNREPLIED] src=255.255.255.255 dst=172.16.3.46 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 91 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=50389 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=50389 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
udp      17 12 src=172.16.4.79 dst=224.0.0.252 sport=60797 dport=5355 packets=2 bytes=118 [UNREPLIED] src=224.0.0.252 dst=172.16.4.79 sport=5355 dport=60797 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 573 src=172.16.1.92 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.92 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 211 src=172.16.1.77 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.77 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 12 src=172.16.3.21 dst=255.255.255.255 sport=53083 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53083 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 511 src=172.16.3.47 dst=239.255.255.250 packets=54 bytes=1728 [UNREPLIED] src=239.255.255.250 dst=172.16.3.47 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 15 src=172.16.3.21 dst=255.255.255.255 sport=53100 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53100 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 22 src=172.16.1.59 dst=224.0.0.252 sport=63360 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.1.59 sport=5355 dport=63360 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 590 src=172.16.2.20 dst=239.255.255.250 packets=23 bytes=736 [UNREPLIED] src=239.255.255.250 dst=172.16.2.20 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 27 src=172.16.3.32 dst=224.0.0.252 sport=63410 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.32 sport=5355 dport=63410 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 26 src=172.16.1.62 dst=224.0.0.252 sport=53064 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.1.62 sport=5355 dport=53064 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 5 src=172.16.3.21 dst=255.255.255.255 sport=53049 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53049 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.4.220 dst=239.255.255.250 packets=1910 bytes=61120 [UNREPLIED] src=239.255.255.250 dst=172.16.4.220 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 10 src=172.16.1.69 dst=172.16.255.255 sport=137 dport=137 packets=6 bytes=468 [UNREPLIED] src=172.16.255.255 dst=172.16.1.69 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 9 src=172.16.3.21 dst=255.255.255.255 sport=53071 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53071 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 507 src=172.16.3.24 dst=224.0.0.253 packets=93 bytes=2976 [UNREPLIED] src=224.0.0.253 dst=172.16.3.24 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 533 src=172.16.2.12 dst=239.255.255.250 packets=32 bytes=1024 [UNREPLIED] src=239.255.255.250 dst=172.16.2.12 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431778 ESTABLISHED src=172.16.2.84 dst=172.16.2.252 sport=52023 dport=139 packets=42 bytes=4445 src=172.16.2.252 dst=172.16.2.84 sport=139 dport=52023 packets=37 bytes=2803 [ASSURED] mark=0 secmark=0 use=2
unknown  2 452 src=172.16.2.39 dst=239.255.255.250 packets=6 bytes=192 [UNREPLIED] src=239.255.255.250 dst=172.16.2.39 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 26 src=172.16.3.21 dst=255.255.255.255 sport=53153 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53153 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 84 TIME_WAIT src=172.16.2.12 dst=172.16.3.28 sport=51244 dport=5357 packets=7 bytes=1244 src=172.16.3.28 dst=172.16.2.12 sport=5357 dport=51244 packets=5 bytes=2571 [ASSURED] mark=0 secmark=0 use=2
tcp      6 11 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=55489 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=55489 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
unknown  2 533 src=172.16.1.67 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.67 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 579 src=172.16.1.219 dst=224.0.1.60 packets=4 bytes=128 [UNREPLIED] src=224.0.1.60 dst=172.16.1.219 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 579 src=172.16.3.19 dst=239.255.255.250 packets=59 bytes=1888 [UNREPLIED] src=239.255.255.250 dst=172.16.3.19 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 19 src=172.16.3.21 dst=255.255.255.255 sport=53116 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53116 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 27 src=172.16.1.59 dst=172.16.255.255 sport=138 dport=138 packets=1 bytes=249 [UNREPLIED] src=172.16.255.255 dst=172.16.1.59 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 525 src=172.16.3.35 dst=224.0.0.251 packets=41 bytes=1312 [UNREPLIED] src=224.0.0.251 dst=172.16.3.35 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 323 src=172.16.1.65 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.65 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 17 src=172.16.3.21 dst=255.255.255.255 sport=53106 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53106 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431907 ESTABLISHED src=172.16.4.80 dst=172.16.2.252 sport=49210 dport=139 packets=25 bytes=2992 src=172.16.2.252 dst=172.16.4.80 sport=139 dport=49210 packets=24 bytes=1919 [ASSURED] mark=0 secmark=0 use=2
udp      17 27 src=172.16.4.75 dst=239.255.255.250 sport=57034 dport=1900 packets=2 bytes=304 [UNREPLIED] src=239.255.255.250 dst=172.16.4.75 sport=1900 dport=57034 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 575 src=172.16.1.236 dst=239.255.255.250 packets=76 bytes=2432 [UNREPLIED] src=239.255.255.250 dst=172.16.1.236 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 0 src=172.16.3.21 dst=255.255.255.255 sport=53024 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53024 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 283 src=172.16.2.71 dst=224.0.0.252 packets=2 bytes=64 [UNREPLIED] src=224.0.0.252 dst=172.16.2.71 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 356 src=172.16.4.10 dst=239.255.255.250 packets=132 bytes=4224 [UNREPLIED] src=239.255.255.250 dst=172.16.4.10 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 6 src=172.16.1.28 dst=224.0.0.252 sport=65291 dport=5355 packets=2 bytes=100 [UNREPLIED] src=224.0.0.252 dst=172.16.1.28 sport=5355 dport=65291 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 20 src=172.16.3.21 dst=255.255.255.255 sport=53121 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53121 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 83 TIME_WAIT src=172.16.2.12 dst=172.16.2.110 sport=51232 dport=5357 packets=7 bytes=1245 src=172.16.2.110 dst=172.16.2.12 sport=5357 dport=51232 packets=5 bytes=2571 [ASSURED] mark=0 secmark=0 use=2
udp      17 1 src=172.16.3.21 dst=255.255.255.255 sport=53033 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53033 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 453 src=172.16.2.240 dst=224.0.0.251 packets=1 bytes=32 [UNREPLIED] src=224.0.0.251 dst=172.16.2.240 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 594 src=172.16.2.45 dst=239.192.152.143 packets=285 bytes=9120 [UNREPLIED] src=239.192.152.143 dst=172.16.2.45 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 22 src=172.16.2.244 dst=172.16.2.110 sport=427 dport=54651 packets=1 bytes=393 [UNREPLIED] src=172.16.2.110 dst=172.16.2.244 sport=54651 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 83 TIME_WAIT src=172.16.2.12 dst=172.16.4.234 sport=51236 dport=3911 packets=7 bytes=1116 src=172.16.4.234 dst=172.16.2.12 sport=3911 dport=51236 packets=5 bytes=3640 [ASSURED] mark=0 secmark=0 use=2
udp      17 7 src=172.16.3.21 dst=255.255.255.255 sport=53061 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53061 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 535 src=172.16.1.75 dst=239.255.255.250 packets=149 bytes=4768 [UNREPLIED] src=239.255.255.250 dst=172.16.1.75 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 450 src=172.16.1.61 dst=224.0.0.251 packets=5 bytes=160 [UNREPLIED] src=224.0.0.251 dst=172.16.1.61 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 587 src=172.16.1.85 dst=224.0.0.252 packets=286 bytes=9152 [UNREPLIED] src=224.0.0.252 dst=172.16.1.85 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 3 src=172.16.3.21 dst=255.255.255.255 sport=53042 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53042 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 15 src=172.16.3.25 dst=172.16.255.255 sport=138 dport=138 packets=1 bytes=260 [UNREPLIED] src=172.16.255.255 dst=172.16.3.25 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.3.21 dst=255.255.255.255 sport=53126 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53126 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 408 src=172.16.3.233 dst=224.0.1.60 packets=7 bytes=224 [UNREPLIED] src=224.0.1.60 dst=172.16.3.233 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 0 src=172.16.1.63 dst=224.0.0.252 sport=61181 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.1.63 sport=5355 dport=61181 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 26 src=172.16.3.21 dst=255.255.255.255 sport=53150 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53150 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 220 src=172.16.3.25 dst=239.255.255.250 packets=121 bytes=3872 [UNREPLIED] src=239.255.255.250 dst=172.16.3.25 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 27 src=172.16.3.32 dst=224.0.0.252 sport=56602 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.32 sport=5355 dport=56602 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 6 src=172.16.1.61 dst=239.255.255.250 sport=59365 dport=1900 packets=6 bytes=966 [UNREPLIED] src=239.255.255.250 dst=172.16.1.61 sport=1900 dport=59365 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 433 src=172.16.2.49 dst=224.0.0.251 packets=25 bytes=800 [UNREPLIED] src=224.0.0.251 dst=172.16.2.49 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 598 src=172.16.1.79 dst=239.255.255.250 packets=233 bytes=7456 [UNREPLIED] src=239.255.255.250 dst=172.16.1.79 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.1.26 dst=239.255.255.250 packets=201 bytes=6432 [UNREPLIED] src=239.255.255.250 dst=172.16.1.26 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.3.48 dst=239.255.255.250 sport=60915 dport=1900 packets=3 bytes=483 [UNREPLIED] src=239.255.255.250 dst=172.16.3.48 sport=1900 dport=60915 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 17 src=172.16.3.21 dst=255.255.255.255 sport=53107 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53107 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 23 src=172.16.3.21 dst=255.255.255.255 sport=53135 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53135 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.8.32 dst=239.192.161.86 sport=5404 dport=5405 packets=16629 bytes=12368856 [UNREPLIED] src=239.192.161.86 dst=172.16.8.32 sport=5405 dport=5404 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 11 src=172.16.3.21 dst=255.255.255.255 sport=53079 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53079 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 540 src=172.16.2.17 dst=239.255.255.250 packets=105 bytes=3360 [UNREPLIED] src=239.255.255.250 dst=172.16.2.17 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 575 src=172.16.2.234 dst=224.0.1.60 packets=1 bytes=32 [UNREPLIED] src=224.0.1.60 dst=172.16.2.234 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 12 src=172.16.3.21 dst=255.255.255.255 sport=53082 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53082 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.2.238 dst=172.16.2.39 sport=137 dport=137 packets=1 bytes=78 src=172.16.2.39 dst=172.16.2.238 sport=137 dport=137 packets=1 bytes=203 mark=0 secmark=0 use=2
unknown  2 573 src=172.16.3.238 dst=239.255.255.250 packets=96 bytes=3072 [UNREPLIED] src=239.255.255.250 dst=172.16.3.238 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 448 src=172.16.1.94 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.94 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 341 src=172.16.3.233 dst=239.255.255.250 packets=2 bytes=64 [UNREPLIED] src=239.255.255.250 dst=172.16.3.233 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 453 src=172.16.3.24 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.3.24 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431206 ESTABLISHED src=172.16.4.78 dst=172.16.4.238 sport=58412 dport=3389 packets=2278 bytes=229649 src=172.16.4.238 dst=172.16.4.78 sport=3389 dport=58412 packets=2436 bytes=1772153 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431645 ESTABLISHED src=172.16.3.19 dst=172.16.4.238 sport=53624 dport=3389 packets=3665 bytes=399408 src=172.16.4.238 dst=172.16.3.19 sport=3389 dport=53624 packets=3575 bytes=2514367 [ASSURED] mark=0 secmark=0 use=2
udp      17 21 src=172.16.2.236 dst=172.16.2.110 sport=427 dport=55886 packets=1 bytes=376 [UNREPLIED] src=172.16.2.110 dst=172.16.2.236 sport=55886 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 7 src=172.16.3.21 dst=255.255.255.255 sport=53060 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53060 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.2.244 dst=172.16.2.110 sport=427 dport=54652 packets=1 bytes=393 [UNREPLIED] src=172.16.2.110 dst=172.16.2.244 sport=54652 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.3.21 dst=255.255.255.255 sport=53139 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53139 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.3.21 dst=255.255.255.255 sport=53127 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53127 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 86 TIME_WAIT src=172.16.2.12 dst=172.16.1.228 sport=51253 dport=3911 packets=7 bytes=1116 src=172.16.1.228 dst=172.16.2.12 sport=3911 dport=51253 packets=7 bytes=3449 [ASSURED] mark=0 secmark=0 use=2
tcp      6 86 TIME_WAIT src=172.16.2.12 dst=172.16.2.235 sport=51254 dport=3911 packets=7 bytes=1116 src=172.16.2.235 dst=172.16.2.12 sport=3911 dport=51254 packets=5 bytes=3640 [ASSURED] mark=0 secmark=0 use=2
udp      17 3 src=172.16.3.21 dst=255.255.255.255 sport=53043 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53043 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.4.79 dst=239.255.255.250 packets=2065 bytes=66080 [UNREPLIED] src=239.255.255.250 dst=172.16.4.79 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 587 src=172.16.1.51 dst=239.255.255.250 packets=85 bytes=2720 [UNREPLIED] src=239.255.255.250 dst=172.16.1.51 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 104 SYN_SENT src=172.16.2.238 dst=172.16.2.39 sport=941 dport=111 packets=3 bytes=152 [UNREPLIED] src=172.16.2.39 dst=172.16.2.238 sport=111 dport=941 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 598 src=172.16.4.202 dst=239.255.255.250 packets=1911 bytes=61152 [UNREPLIED] src=239.255.255.250 dst=172.16.4.202 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 577 src=172.16.1.226 dst=224.0.1.60 packets=5 bytes=160 [UNREPLIED] src=224.0.1.60 dst=172.16.1.226 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 9 src=172.16.3.21 dst=255.255.255.255 sport=53070 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53070 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.3.21 dst=255.255.255.255 sport=53167 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53167 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 203 src=172.16.1.228 dst=224.0.1.60 packets=9 bytes=288 [UNREPLIED] src=224.0.1.60 dst=172.16.1.228 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 10 src=172.16.3.21 dst=255.255.255.255 sport=53074 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53074 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 77 src=172.16.3.41 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.3.41 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.3.21 dst=255.255.255.255 sport=53143 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53143 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 9 src=172.16.3.21 dst=255.255.255.255 sport=53068 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53068 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 588 src=172.16.10.57 dst=224.0.0.252 packets=276 bytes=8832 [UNREPLIED] src=224.0.0.252 dst=172.16.10.57 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.3.21 dst=255.255.255.255 sport=53047 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53047 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431825 ESTABLISHED src=172.16.2.47 dst=172.16.2.252 sport=49209 dport=139 packets=31 bytes=2705 src=172.16.2.252 dst=172.16.2.47 sport=139 dport=49209 packets=32 bytes=2179 [ASSURED] mark=0 secmark=0 use=2
udp      17 19 src=172.16.3.21 dst=255.255.255.255 sport=53118 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53118 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 17 src=169.254.17.192 dst=255.255.255.255 sport=68 dport=67 packets=5 bytes=1910 [UNREPLIED] src=255.255.255.255 dst=169.254.17.192 sport=67 dport=68 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 450 src=172.16.4.78 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.4.78 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 525 src=172.16.2.231 dst=224.0.1.60 packets=1 bytes=32 [UNREPLIED] src=224.0.1.60 dst=172.16.2.231 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431756 ESTABLISHED src=172.16.2.252 dst=172.16.2.13 sport=139 dport=52156 packets=24 bytes=1760 src=172.16.2.13 dst=172.16.2.252 sport=52156 dport=139 packets=25 bytes=1776 [ASSURED] mark=0 secmark=0 use=2
unknown  2 569 src=172.16.1.229 dst=239.255.255.250 packets=131 bytes=4192 [UNREPLIED] src=239.255.255.250 dst=172.16.1.229 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431726 ESTABLISHED src=172.16.3.238 dst=172.16.2.236 sport=65496 dport=3910 packets=5 bytes=1227 src=172.16.2.236 dst=172.16.3.238 sport=3910 dport=65496 packets=2 bytes=1338 [ASSURED] mark=0 secmark=0 use=2
tcp      6 60 SYN_SENT src=172.16.2.238 dst=172.16.2.14 sport=53093 dport=139 packets=3 bytes=152 [UNREPLIED] src=172.16.2.14 dst=172.16.2.238 sport=139 dport=53093 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 22 src=172.16.3.21 dst=255.255.255.255 sport=53134 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53134 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.3.21 dst=255.255.255.255 sport=53141 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53141 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 28 src=172.16.3.21 dst=255.255.255.255 sport=53161 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53161 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 598 src=172.16.1.58 dst=239.255.255.250 packets=1988 bytes=63616 [UNREPLIED] src=239.255.255.250 dst=172.16.1.58 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431974 ESTABLISHED src=172.16.0.1 dst=172.16.2.17 sport=139 dport=64732 packets=25 bytes=1092 src=172.16.2.17 dst=172.16.0.1 sport=64732 dport=139 packets=25 bytes=1008 [ASSURED] mark=0 secmark=0 use=2
udp      17 21 src=172.16.3.21 dst=255.255.255.255 sport=53125 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53125 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 550 src=172.16.2.25 dst=224.0.0.2 packets=6 bytes=192 [UNREPLIED] src=224.0.0.2 dst=172.16.2.25 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 6 src=172.16.3.21 dst=255.255.255.255 sport=53056 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53056 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431960 ESTABLISHED src=172.16.2.12 dst=172.16.2.110 sport=51210 dport=2869 packets=5 bytes=448 src=172.16.2.110 dst=172.16.2.12 sport=2869 dport=51210 packets=3 bytes=1566 [ASSURED] mark=0 secmark=0 use=2
udp      17 18 src=172.16.3.21 dst=255.255.255.255 sport=53114 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53114 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 441 src=172.16.3.234 dst=239.255.255.250 packets=11 bytes=352 [UNREPLIED] src=239.255.255.250 dst=172.16.3.234 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 577 src=172.16.2.238 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.2.238 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 310 src=172.16.1.66 dst=239.255.255.250 packets=39 bytes=1248 [UNREPLIED] src=239.255.255.250 dst=172.16.1.66 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 9 src=172.16.1.69 dst=224.0.0.252 sport=63317 dport=5355 packets=2 bytes=100 [UNREPLIED] src=224.0.0.252 dst=172.16.1.69 sport=5355 dport=63317 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.1.85 dst=239.255.255.250 packets=3535 bytes=113120 [UNREPLIED] src=239.255.255.250 dst=172.16.1.85 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 2 src=172.16.3.21 dst=255.255.255.255 sport=53037 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53037 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 593 src=172.16.8.36 dst=239.192.161.86 packets=266 bytes=8512 [UNREPLIED] src=239.192.161.86 dst=172.16.8.36 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431768 ESTABLISHED src=172.16.0.1 dst=172.16.3.31 sport=139 dport=49162 packets=24 bytes=1048 src=172.16.3.31 dst=172.16.0.1 sport=49162 dport=139 packets=24 bytes=968 [ASSURED] mark=0 secmark=0 use=2
udp      17 29 src=172.16.1.237 dst=255.255.255.255 sport=52949 dport=5200 packets=1300 bytes=67600 [UNREPLIED] src=255.255.255.255 dst=172.16.1.237 sport=5200 dport=52949 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 569 src=172.16.1.20 dst=239.255.255.250 packets=216 bytes=6912 [UNREPLIED] src=239.255.255.250 dst=172.16.1.20 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 568 src=172.16.2.232 dst=239.255.255.250 packets=18 bytes=576 [UNREPLIED] src=239.255.255.250 dst=172.16.2.232 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431781 ESTABLISHED src=172.16.2.71 dst=172.16.4.238 sport=50400 dport=3389 packets=6125 bytes=651578 src=172.16.4.238 dst=172.16.2.71 sport=3389 dport=50400 packets=5747 bytes=2256665 [ASSURED] mark=0 secmark=0 use=2
udp      17 22 src=172.16.1.59 dst=224.0.0.252 sport=59779 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.1.59 sport=5355 dport=59779 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 28 src=172.16.3.21 dst=255.255.255.255 sport=53162 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53162 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 20 src=172.16.3.23 dst=239.255.255.250 sport=64426 dport=1900 packets=6 bytes=912 [UNREPLIED] src=239.255.255.250 dst=172.16.3.23 sport=1900 dport=64426 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.2.110 dst=224.0.0.252 sport=54650 dport=5355 packets=2 bytes=100 [UNREPLIED] src=224.0.0.252 dst=172.16.2.110 sport=5355 dport=54650 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 17 src=172.16.3.43 dst=239.255.255.250 packets=16 bytes=512 [UNREPLIED] src=239.255.255.250 dst=172.16.3.43 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431791 ESTABLISHED src=172.16.4.70 dst=172.16.2.238 sport=49412 dport=3389 packets=31 bytes=2365 src=172.16.2.238 dst=172.16.4.70 sport=3389 dport=49412 packets=17 bytes=1796 [ASSURED] mark=0 secmark=0 use=2
tcp      6 299 ESTABLISHED src=172.16.2.45 dst=172.16.0.4 sport=63887 dport=22 packets=668 bytes=53424 src=172.16.0.4 dst=172.16.2.45 sport=22 dport=63887 packets=576 bytes=217101 [ASSURED] mark=0 secmark=0 use=2
unknown  2 592 src=172.16.3.238 dst=224.0.1.24 packets=109 bytes=3488 [UNREPLIED] src=224.0.1.24 dst=172.16.3.238 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 13 src=172.16.3.21 dst=255.255.255.255 sport=53087 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53087 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 598 src=172.16.4.16 dst=239.255.255.250 packets=1173 bytes=37536 [UNREPLIED] src=239.255.255.250 dst=172.16.4.16 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 468 src=172.16.2.71 dst=239.255.255.250 packets=48 bytes=1536 [UNREPLIED] src=239.255.255.250 dst=172.16.2.71 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.3.21 dst=255.255.255.255 sport=53164 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53164 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 23 src=172.16.2.110 dst=172.16.255.255 sport=137 dport=137 packets=3 bytes=234 [UNREPLIED] src=172.16.255.255 dst=172.16.2.110 sport=137 dport=137 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 16 src=172.16.3.21 dst=255.255.255.255 sport=53104 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53104 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 84 src=172.16.3.238 dst=172.16.4.232 sport=58457 dport=161 packets=6 bytes=576 src=172.16.4.232 dst=172.16.3.238 sport=161 dport=58457 packets=5 bytes=546 [ASSURED] mark=0 secmark=0 use=2
udp      17 16 src=172.16.3.21 dst=255.255.255.255 sport=53105 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53105 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 550 src=172.16.0.53 dst=239.255.255.250 packets=87 bytes=2784 [UNREPLIED] src=239.255.255.250 dst=172.16.0.53 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 26 src=172.16.3.201 dst=239.255.255.250 sport=3090 dport=3702 packets=3311 bytes=11521649 [UNREPLIED] src=239.255.255.250 dst=172.16.3.201 sport=3702 dport=3090 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 8 src=172.16.3.21 dst=255.255.255.255 sport=53065 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53065 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 94 TIME_WAIT src=172.16.2.238 dst=172.16.2.39 sport=53105 dport=139 packets=3 bytes=204 src=172.16.2.39 dst=172.16.2.238 sport=139 dport=53105 packets=3 bytes=137 [ASSURED] mark=0 secmark=0 use=2
udp      17 18 src=172.16.2.244 dst=172.16.2.110 sport=427 dport=55885 packets=1 bytes=393 [UNREPLIED] src=172.16.2.110 dst=172.16.2.244 sport=55885 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 82 TIME_WAIT src=172.16.2.12 dst=172.16.1.229 sport=51228 dport=3911 packets=7 bytes=1116 src=172.16.1.229 dst=172.16.2.12 sport=3911 dport=51228 packets=7 bytes=3449 [ASSURED] mark=0 secmark=0 use=2
udp      17 25 src=172.16.3.21 dst=255.255.255.255 sport=53145 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53145 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 14 src=172.16.3.21 dst=255.255.255.255 sport=53094 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53094 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 598 src=172.16.3.49 dst=239.255.255.250 packets=38 bytes=1216 [UNREPLIED] src=239.255.255.250 dst=172.16.3.49 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 84 src=172.16.3.238 dst=172.16.2.236 sport=58457 dport=161 packets=3 bytes=358 src=172.16.2.236 dst=172.16.3.238 sport=161 dport=58457 packets=3 bytes=364 [ASSURED] mark=0 secmark=0 use=2
unknown  2 328 src=172.16.2.13 dst=239.255.255.250 packets=7 bytes=224 [UNREPLIED] src=239.255.255.250 dst=172.16.2.13 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 117 SYN_SENT src=172.16.2.238 dst=172.16.2.14 sport=53118 dport=445 packets=1 bytes=52 [UNREPLIED] src=172.16.2.14 dst=172.16.2.238 sport=445 dport=53118 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 594 src=172.16.10.53 dst=224.0.0.252 packets=287 bytes=9184 [UNREPLIED] src=224.0.0.252 dst=172.16.10.53 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 101 TIME_WAIT src=172.16.2.46 dst=172.16.2.233 sport=50397 dport=8080 packets=6 bytes=356 src=172.16.2.233 dst=172.16.2.46 sport=8080 dport=50397 packets=6 bytes=1524 [ASSURED] mark=0 secmark=0 use=2
unknown  2 585 src=172.16.2.233 dst=239.255.255.250 packets=20 bytes=640 [UNREPLIED] src=239.255.255.250 dst=172.16.2.233 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 16 src=172.16.2.244 dst=172.16.2.110 sport=427 dport=55882 packets=1 bytes=393 [UNREPLIED] src=172.16.2.110 dst=172.16.2.244 sport=55882 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 288 src=172.16.1.61 dst=239.255.255.250 packets=3 bytes=96 [UNREPLIED] src=239.255.255.250 dst=172.16.1.61 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 591 src=172.16.8.32 dst=239.192.161.86 packets=232 bytes=7424 [UNREPLIED] src=239.192.161.86 dst=172.16.8.32 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431906 ESTABLISHED src=172.16.4.252 dst=172.16.2.12 sport=139 dport=49176 packets=50 bytes=3769 src=172.16.2.12 dst=172.16.4.252 sport=49176 dport=139 packets=47 bytes=3423 [ASSURED] mark=0 secmark=0 use=2
unknown  2 587 src=172.16.3.48 dst=239.255.255.250 packets=75 bytes=2400 [UNREPLIED] src=239.255.255.250 dst=172.16.3.48 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 27 src=172.16.3.21 dst=255.255.255.255 sport=53158 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53158 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 586 src=172.16.10.11 dst=224.0.0.251 packets=282 bytes=9024 [UNREPLIED] src=224.0.0.251 dst=172.16.10.11 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 257 src=172.16.2.244 dst=224.0.1.60 packets=5 bytes=160 [UNREPLIED] src=224.0.1.60 dst=172.16.2.244 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 452 src=172.16.2.25 dst=224.0.0.252 packets=29 bytes=928 [UNREPLIED] src=224.0.0.252 dst=172.16.2.25 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 370 src=172.16.1.228 dst=239.255.255.250 packets=140 bytes=4480 [UNREPLIED] src=239.255.255.250 dst=172.16.1.228 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 14 src=172.16.3.21 dst=255.255.255.255 sport=53092 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53092 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.3.21 dst=255.255.255.255 sport=53046 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53046 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 426665 ESTABLISHED src=172.16.4.252 dst=172.16.2.71 sport=139 dport=49273 packets=16 bytes=704 [UNREPLIED] src=172.16.2.71 dst=172.16.4.252 sport=49273 dport=139 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 4 src=172.16.1.51 dst=172.16.255.255 sport=138 dport=138 packets=1 bytes=239 [UNREPLIED] src=172.16.255.255 dst=172.16.1.51 sport=138 dport=138 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 83 TIME_WAIT src=172.16.2.12 dst=172.16.3.232 sport=51238 dport=3911 packets=7 bytes=1116 src=172.16.3.232 dst=172.16.2.12 sport=3911 dport=51238 packets=5 bytes=3640 [ASSURED] mark=0 secmark=0 use=2
udp      17 28 src=172.16.8.34 dst=239.192.161.86 sport=5404 dport=5405 packets=8444 bytes=7842164 [UNREPLIED] src=239.192.161.86 dst=172.16.8.34 sport=5405 dport=5404 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 14 src=172.16.3.46 dst=172.16.255.255 sport=17500 dport=17500 packets=1 bytes=139 [UNREPLIED] src=172.16.255.255 dst=172.16.3.46 sport=17500 dport=17500 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 450 src=172.16.1.224 dst=239.255.255.250 packets=36 bytes=1152 [UNREPLIED] src=239.255.255.250 dst=172.16.1.224 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.3.21 dst=255.255.255.255 sport=53165 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53165 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 29 src=172.16.3.21 dst=255.255.255.255 sport=53166 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53166 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 18 src=172.16.2.110 dst=224.0.1.60 sport=55885 dport=427 packets=1 bytes=240 [UNREPLIED] src=224.0.1.60 dst=172.16.2.110 sport=427 dport=55885 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 543 src=172.16.1.92 dst=239.255.255.250 packets=98 bytes=3136 [UNREPLIED] src=239.255.255.250 dst=172.16.1.92 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 83 TIME_WAIT src=172.16.2.12 dst=172.16.2.46 sport=51231 dport=5357 packets=7 bytes=1244 src=172.16.2.46 dst=172.16.2.12 sport=5357 dport=51231 packets=4 bytes=2531 [ASSURED] mark=0 secmark=0 use=2
unknown  2 569 src=172.16.1.15 dst=239.255.255.250 packets=345 bytes=11040 [UNREPLIED] src=239.255.255.250 dst=172.16.1.15 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 581 src=172.16.3.44 dst=239.255.255.250 packets=24 bytes=768 [UNREPLIED] src=239.255.255.250 dst=172.16.3.44 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 83 TIME_WAIT src=172.16.2.12 dst=172.16.2.231 sport=51235 dport=3911 packets=7 bytes=1120 src=172.16.2.231 dst=172.16.2.12 sport=3911 dport=51235 packets=8 bytes=4656 [ASSURED] mark=0 secmark=0 use=2
udp      17 17 src=172.16.2.236 dst=172.16.2.110 sport=427 dport=55884 packets=1 bytes=376 [UNREPLIED] src=172.16.2.110 dst=172.16.2.236 sport=55884 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431960 ESTABLISHED src=172.16.2.12 dst=172.16.4.75 sport=51211 dport=2869 packets=5 bytes=447 src=172.16.4.75 dst=172.16.2.12 sport=2869 dport=51211 packets=3 bytes=2731 [ASSURED] mark=0 secmark=0 use=2
unknown  2 445 src=172.16.1.93 dst=239.255.255.250 packets=52 bytes=1664 [UNREPLIED] src=239.255.255.250 dst=172.16.1.93 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 352 src=172.16.1.62 dst=239.255.255.250 packets=60 bytes=1920 [UNREPLIED] src=239.255.255.250 dst=172.16.1.62 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 13 src=172.16.3.21 dst=255.255.255.255 sport=53089 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53089 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 8 src=172.16.3.21 dst=255.255.255.255 sport=53066 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53066 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 428277 ESTABLISHED src=172.16.3.24 dst=172.16.4.238 sport=50522 dport=3389 packets=409 bytes=70878 src=172.16.4.238 dst=172.16.3.24 sport=3389 dport=50522 packets=518 bytes=386645 [ASSURED] mark=0 secmark=0 use=2
unknown  2 507 src=172.16.1.57 dst=224.0.0.251 packets=2 bytes=64 [UNREPLIED] src=224.0.0.251 dst=172.16.1.57 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 16 src=172.16.3.21 dst=255.255.255.255 sport=53103 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53103 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 15 src=172.16.3.21 dst=255.255.255.255 sport=53097 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53097 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 5 src=172.16.1.83 dst=224.0.0.252 sport=60207 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.1.83 sport=5355 dport=60207 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 427924 ESTABLISHED src=172.16.4.70 dst=172.16.3.238 sport=49305 dport=3389 packets=20 bytes=1415 src=172.16.3.238 dst=172.16.4.70 sport=3389 dport=49305 packets=11 bytes=1199 [ASSURED] mark=0 secmark=0 use=2
unknown  2 533 src=172.16.3.232 dst=224.0.1.60 packets=1 bytes=32 [UNREPLIED] src=224.0.1.60 dst=172.16.3.232 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 564 src=192.168.5.60 dst=239.255.255.250 packets=69 bytes=2208 [UNREPLIED] src=239.255.255.250 dst=192.168.5.60 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 579 src=172.16.1.67 dst=239.255.255.250 packets=40 bytes=1280 [UNREPLIED] src=239.255.255.250 dst=172.16.1.67 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 575 src=172.16.8.20 dst=224.0.0.9 packets=111 bytes=3552 [UNREPLIED] src=224.0.0.9 dst=172.16.8.20 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 28 src=172.16.3.21 dst=255.255.255.255 sport=53159 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53159 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 1 src=172.16.3.21 dst=255.255.255.255 sport=53032 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53032 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 19 src=172.16.3.21 dst=255.255.255.255 sport=53119 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53119 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 21 src=172.16.3.42 dst=224.0.0.252 sport=54318 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.42 sport=5355 dport=54318 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431955 ESTABLISHED src=172.16.4.252 dst=172.16.4.73 sport=139 dport=49189 packets=14 bytes=612 src=172.16.4.73 dst=172.16.4.252 sport=49189 dport=139 packets=14 bytes=564 [ASSURED] mark=0 secmark=0 use=2
unknown  2 594 src=172.16.3.30 dst=239.255.255.250 packets=104 bytes=3328 [UNREPLIED] src=239.255.255.250 dst=172.16.3.30 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 24 src=172.16.3.21 dst=255.255.255.255 sport=53142 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53142 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 26 src=172.16.3.21 dst=255.255.255.255 sport=53151 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53151 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431458 ESTABLISHED src=172.16.3.43 dst=172.16.2.238 sport=50932 dport=3389 packets=10435 bytes=1214054 src=172.16.2.238 dst=172.16.3.43 sport=3389 dport=50932 packets=9384 bytes=4434026 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431826 ESTABLISHED src=172.16.2.84 dst=172.16.2.252 sport=52038 dport=139 packets=34 bytes=3266 src=172.16.2.252 dst=172.16.2.84 sport=139 dport=52038 packets=31 bytes=2588 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431912 ESTABLISHED src=172.16.4.70 dst=172.16.4.252 sport=49193 dport=139 packets=25 bytes=1008 src=172.16.4.252 dst=172.16.4.70 sport=139 dport=49193 packets=29 bytes=1268 [ASSURED] mark=0 secmark=0 use=2
udp      17 27 src=172.16.3.21 dst=255.255.255.255 sport=53155 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53155 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 6 src=172.16.3.21 dst=255.255.255.255 sport=53055 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53055 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 14 src=172.16.3.21 dst=255.255.255.255 sport=53091 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53091 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 18 src=172.16.2.236 dst=172.16.2.110 sport=427 dport=55885 packets=1 bytes=376 [UNREPLIED] src=172.16.2.110 dst=172.16.2.236 sport=55885 dport=427 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 337 src=172.16.1.98 dst=239.255.255.250 packets=45 bytes=1440 [UNREPLIED] src=239.255.255.250 dst=172.16.1.98 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 352 src=172.16.2.244 dst=239.255.255.250 packets=6 bytes=192 [UNREPLIED] src=239.255.255.250 dst=172.16.2.244 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 25 src=172.16.3.21 dst=255.255.255.255 sport=53144 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53144 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 10 src=172.16.3.21 dst=255.255.255.255 sport=53073 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53073 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 18 src=172.16.3.21 dst=255.255.255.255 sport=53111 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53111 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 2 src=172.16.3.21 dst=255.255.255.255 sport=53035 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53035 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 6 src=172.16.3.21 dst=255.255.255.255 sport=53057 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53057 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 328 src=172.16.1.220 dst=239.255.255.250 packets=15 bytes=480 [UNREPLIED] src=239.255.255.250 dst=172.16.1.220 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 135 src=172.16.2.236 dst=239.255.255.250 packets=22 bytes=704 [UNREPLIED] src=239.255.255.250 dst=172.16.2.236 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 27 src=172.16.3.32 dst=224.0.0.252 sport=54632 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.3.32 sport=5355 dport=54632 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 382 src=172.16.1.83 dst=224.0.0.252 packets=1 bytes=32 [UNREPLIED] src=224.0.0.252 dst=172.16.1.83 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 5 src=172.16.1.83 dst=224.0.0.252 sport=63670 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.1.83 sport=5355 dport=63670 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 26 src=172.16.3.21 dst=255.255.255.255 sport=53152 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53152 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 428270 ESTABLISHED src=172.16.3.19 dst=172.16.2.90 sport=52703 dport=2869 packets=6 bytes=511 src=172.16.2.90 dst=172.16.3.19 sport=2869 dport=52703 packets=5 bytes=4722 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431782 ESTABLISHED src=172.16.2.78 dst=172.16.3.238 sport=1586 dport=3389 packets=2482 bytes=167328 src=172.16.3.238 dst=172.16.2.78 sport=3389 dport=1586 packets=2884 bytes=3303647 [ASSURED] mark=0 secmark=0 use=2
unknown  2 573 src=172.16.1.97 dst=239.255.255.250 packets=98 bytes=3136 [UNREPLIED] src=239.255.255.250 dst=172.16.1.97 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431197 ESTABLISHED src=172.16.2.20 dst=172.16.2.238 sport=50032 dport=3389 packets=3427 bytes=287020 src=172.16.2.238 dst=172.16.2.20 sport=3389 dport=50032 packets=3961 bytes=3716989 [ASSURED] mark=0 secmark=0 use=2
unknown  2 591 src=172.16.10.55 dst=224.0.0.252 packets=243 bytes=7776 [UNREPLIED] src=224.0.0.252 dst=172.16.10.55 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 12 src=172.16.3.21 dst=255.255.255.255 sport=53084 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53084 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 19 src=172.16.1.66 dst=224.0.0.252 sport=55294 dport=5355 packets=2 bytes=100 [UNREPLIED] src=224.0.0.252 dst=172.16.1.66 sport=5355 dport=55294 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 599 src=172.16.10.52 dst=239.255.255.250 packets=3642 bytes=116544 [UNREPLIED] src=239.255.255.250 dst=172.16.10.52 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 26 src=172.16.1.62 dst=224.0.0.252 sport=51001 dport=5355 packets=1 bytes=55 [UNREPLIED] src=224.0.0.252 dst=172.16.1.62 sport=5355 dport=51001 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 587 src=172.16.1.242 dst=224.0.0.251 packets=270 bytes=8640 [UNREPLIED] src=224.0.0.251 dst=172.16.1.242 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 10 src=172.16.3.21 dst=255.255.255.255 sport=53072 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53072 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 17 SYN_SENT src=172.16.2.238 dst=172.16.2.14 sport=962 dport=111 packets=3 bytes=152 [UNREPLIED] src=172.16.2.14 dst=172.16.2.238 sport=111 dport=962 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 28 src=172.16.3.21 dst=255.255.255.255 sport=53160 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53160 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 514 src=172.16.4.75 dst=239.255.255.250 packets=39 bytes=1248 [UNREPLIED] src=239.255.255.250 dst=172.16.4.75 packets=0 bytes=0 mark=0 secmark=0 use=2
udp      17 23 src=172.16.3.21 dst=255.255.255.255 sport=53138 dport=2008 packets=1 bytes=41 [UNREPLIED] src=255.255.255.255 dst=172.16.3.21 sport=2008 dport=53138 packets=0 bytes=0 mark=0 secmark=0 use=2
unknown  2 578 src=172.16.2.238 dst=239.255.255.250 packets=81 bytes=2592 [UNREPLIED] src=239.255.255.250 dst=172.16.2.238 packets=0 bytes=0 mark=0 secmark=0 use=2
tcp      6 431992 ESTABLISHED src=172.16.3.44 dst=172.16.3.238 sport=51229 dport=3389 packets=3048 bytes=313417 src=172.16.3.238 dst=172.16.3.44 sport=3389 dport=51229 packets=2888 bytes=1191635 [ASSURED] mark=0 secmark=0 use=2
tcp      6 431865 ESTABLISHED src=172.16.2.71 dst=172.16.4.252 sport=50406 dport=139 packets=47 bytes=4282 src=172.16.4.252 dst=172.16.2.71 sport=139 dport=50406 packets=38 bytes=3598 [ASSURED] mark=0 secmark=0 use=2

IP Configuration

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    inet 127.0.0.1/8 scope host lo
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    inet 186.231.3.203/29 brd 186.231.3.207 scope global eth1
7: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN 
    inet 172.16.0.4/16 brd 172.16.255.255 scope global br0

IP Stats

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
2: eth4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 00:0a:cd:1b:e7:de brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      
3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1d:7d:0c:95:b8 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    166770206  435152   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    23936745   166657   0       0       0       0      
4: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:1a:3f:87:c7:1b brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    139716     469      0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    468        6        0       0       0       0      
5: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:08:54:a4:54:1d brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    36329155   171970   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    200237488  464692   0       0       0       0      
6: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
    link/ether 06:a1:6a:4c:ce:73 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    21565053   162324   0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    164020244  429846   0       286     0       0      
7: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN 
    link/ether 00:1d:7d:0c:95:b8 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    92377860   329758   0       0       0       325852 
    TX: bytes  packets  errors  dropped carrier collsns 
    2384042    4481     0       0       0       0      
8: tap1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
    link/ether da:10:e5:89:d5:bc brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    218207     3108     0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       6       0       0      
9: br1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN 
    link/ether 00:1a:3f:87:c7:1b brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    0          0        0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    0          0        0       0       0       0      

Bridges

bridge name	bridge id		STP enabled	interfaces
br0		8000.001d7d0c95b8	no		eth0
							tap0
br1		8000.001a3f87c71b	no		eth3
							tap1

/proc

   /proc/version = Linux version 2.6.32-5-amd64 (Debian 2.6.32-48squeeze4) (dannf@debian.org) (gcc version 4.3.5 (Debian 4.3.5-4) ) #1 SMP Mon Sep 23 22:14:43 UTC 2013
   /proc/sys/net/ipv4/ip_forward = 0
   /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
   /proc/sys/net/ipv4/conf/all/proxy_arp = 0
   /proc/sys/net/ipv4/conf/all/arp_filter = 0
   /proc/sys/net/ipv4/conf/all/arp_ignore = 0
   /proc/sys/net/ipv4/conf/all/rp_filter = 1
   /proc/sys/net/ipv4/conf/all/log_martians = 0
   /proc/sys/net/ipv4/conf/br0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/br0/arp_filter = 0
   /proc/sys/net/ipv4/conf/br0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/br0/rp_filter = 1
   /proc/sys/net/ipv4/conf/br0/log_martians = 1
   /proc/sys/net/ipv4/conf/br1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/br1/arp_filter = 0
   /proc/sys/net/ipv4/conf/br1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/br1/rp_filter = 1
   /proc/sys/net/ipv4/conf/br1/log_martians = 1
   /proc/sys/net/ipv4/conf/default/proxy_arp = 0
   /proc/sys/net/ipv4/conf/default/arp_filter = 0
   /proc/sys/net/ipv4/conf/default/arp_ignore = 0
   /proc/sys/net/ipv4/conf/default/rp_filter = 1
   /proc/sys/net/ipv4/conf/default/log_martians = 1
   /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth0/log_martians = 1
   /proc/sys/net/ipv4/conf/eth1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth1/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth1/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth1/log_martians = 1
   /proc/sys/net/ipv4/conf/eth3/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth3/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth3/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth3/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth3/log_martians = 1
   /proc/sys/net/ipv4/conf/eth4/proxy_arp = 0
   /proc/sys/net/ipv4/conf/eth4/arp_filter = 0
   /proc/sys/net/ipv4/conf/eth4/arp_ignore = 0
   /proc/sys/net/ipv4/conf/eth4/rp_filter = 1
   /proc/sys/net/ipv4/conf/eth4/log_martians = 1
   /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
   /proc/sys/net/ipv4/conf/lo/arp_filter = 0
   /proc/sys/net/ipv4/conf/lo/arp_ignore = 0
   /proc/sys/net/ipv4/conf/lo/rp_filter = 1
   /proc/sys/net/ipv4/conf/lo/log_martians = 1
   /proc/sys/net/ipv4/conf/tap0/proxy_arp = 0
   /proc/sys/net/ipv4/conf/tap0/arp_filter = 0
   /proc/sys/net/ipv4/conf/tap0/arp_ignore = 0
   /proc/sys/net/ipv4/conf/tap0/rp_filter = 1
   /proc/sys/net/ipv4/conf/tap0/log_martians = 1
   /proc/sys/net/ipv4/conf/tap1/proxy_arp = 0
   /proc/sys/net/ipv4/conf/tap1/arp_filter = 0
   /proc/sys/net/ipv4/conf/tap1/arp_ignore = 0
   /proc/sys/net/ipv4/conf/tap1/rp_filter = 1
   /proc/sys/net/ipv4/conf/tap1/log_martians = 1

Routing Rules

0:	from all lookup local 
32766:	from all lookup main 
32767:	from all lookup default 

Table default:


Table local:

local 172.16.0.4 dev br0  proto kernel  scope host  src 172.16.0.4 
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1 
broadcast 172.16.0.0 dev br0  proto kernel  scope link  src 172.16.0.4 
broadcast 186.231.3.200 dev eth1  proto kernel  scope link  src 186.231.3.203 
local 186.231.3.203 dev eth1  proto kernel  scope host  src 186.231.3.203 
broadcast 172.16.255.255 dev br0  proto kernel  scope link  src 172.16.0.4 
broadcast 186.231.3.207 dev eth1  proto kernel  scope link  src 186.231.3.203 
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1 
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1 
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1 

Table main:

186.231.3.200/29 dev eth1  proto kernel  scope link  src 186.231.3.203 
172.16.0.0/16 dev br0  proto kernel  scope link  src 172.16.0.4 
default via 186.231.3.201 dev eth1 

ARP

? (186.231.3.201) at 20:37:06:b9:ec:df [ether] on eth1
? (172.16.2.45) at c8:60:00:cb:49:9f [ether] on br0

Modules

iptable_filter          2258  1 
iptable_mangle          2817  1 
iptable_nat             4283  1 
iptable_raw             1867  0 
ip_tables              13915  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_addrtype            1769  3 
ipt_ah                  1061  0 
ipt_CLUSTERIP           4910  0 
ipt_ecn                 1272  0 
ipt_ECN                 1672  0 
ipt_LOG                 4518  16 
ipt_MASQUERADE          1554  0 
ipt_NETMAP              1137  0 
ipt_REDIRECT            1111  0 
ipt_REJECT              1953  4 
ipt_ULOG                7113  0 
nf_conntrack           46391  31 xt_connlimit,ipt_MASQUERADE,ipt_CLUSTERIP,nf_nat_tftp,nf_nat_snmp_basic,nf_nat_sip,nf_nat_pptp,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_sane,nf_conntrack_tftp,nf_conntrack_sip,nf_conntrack_proto_sctp,nf_conntrack_pptp,nf_conntrack_proto_gre,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_irc,nf_conntrack_h323,nf_conntrack_ftp,xt_helper,xt_conntrack,xt_CONNMARK,xt_connmark,xt_state,iptable_nat,nf_nat,nf_conntrack_ipv4
nf_conntrack_amanda     2197  1 nf_nat_amanda
nf_conntrack_ftp        5521  1 nf_nat_ftp
nf_conntrack_h323      36976  1 nf_nat_h323
nf_conntrack_ipv4       9833  24 iptable_nat,nf_nat
nf_conntrack_irc        3331  1 nf_nat_irc
nf_conntrack_netbios_ns     1282  0 
nf_conntrack_netlink    13128  0 
nf_conntrack_pptp       3769  1 nf_nat_pptp
nf_conntrack_proto_gre     3547  1 nf_conntrack_pptp
nf_conntrack_proto_sctp     6238  0 
nf_conntrack_sane       3604  0 
nf_conntrack_sip       13530  1 nf_nat_sip
nf_conntrack_tftp       3321  1 nf_nat_tftp
nf_defrag_ipv4          1139  2 xt_TPROXY,nf_conntrack_ipv4
nf_nat                 13308  12 ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_proto_gre,nf_nat_irc,nf_nat_h323,nf_nat_ftp,nf_nat_amanda,iptable_nat
nf_nat_amanda           1112  0 
nf_nat_ftp              2015  0 
nf_nat_h323             5063  0 
nf_nat_irc              1350  0 
nf_nat_pptp             2018  0 
nf_nat_proto_gre        1245  1 nf_nat_pptp
nf_nat_sip              4918  0 
nf_nat_snmp_basic       7796  0 
nf_nat_tftp              950  0 
nf_tproxy_core          1517  1 xt_TPROXY,[permanent]
xt_CLASSIFY              925  0 
xt_comment               907  19 
xt_connlimit            2863  0 
xt_connmark             1123  0 
xt_CONNMARK             1267  0 
xt_conntrack            2407  21 
xt_dccp                 1915  0 
xt_dscp                 1611  0 
xt_DSCP                 1995  0 
xt_hashlimit            7675  0 
xt_helper               1227  0 
xt_iprange              1433  0 
xt_length               1164  0 
xt_limit                1782  0 
xt_mac                   979  0 
xt_mark                  917  0 
xt_MARK                  917  1 
xt_multiport            2267  7 
xt_NFLOG                1038  0 
xt_NFQUEUE              1989  0 
xt_owner                1063  0 
xt_physdev              1508  0 
xt_pkttype              1003  0 
xt_policy               2170  0 
xt_realm                 919  0 
xt_recent               5961  0 
xt_state                1303  0 
xt_tcpmss               1401  0 
xt_tcpudp               2319  31 
xt_time                 1723  0 
xt_TPROXY               1329  0 

Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   Multi-port Match: Available
   Extended Multi-port Match: Available
   Connection Tracking Match: Available
   Extended Connection Tracking Match Support: Available
   Packet Type Match: Available
   Policy Match: Available
   Physdev Match: Available
   Physdev-is-bridged Support: Available
   Packet length Match: Available
   IP range Match: Available
   Recent Match: Available
   Owner Match: Available
   Ipset Match: Not available
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   Raw Table: Available
   IPP2P Match: Not available
   CLASSIFY Target: Available
   Extended REJECT: Available
   Repeat match: Available
   MARK Target: Available
   Extended MARK Target: Available
   Extended MARK Target 2: Available
   Mangle FORWARD Chain: Available
   Comments: Available
   Address Type Match: Available
   TCPMSS Match: Available
   Hashlimit Match: Available
   NFQUEUE Target: Available
   Realm Match: Available
   Helper Match: Available
   Connlimit Match: Available
   Time Match: Available
   Goto Support: Available
   LOGMARK Target: Not available
   IPMARK Target: Not available
   LOG Target: Available
   Persistent SNAT: Available
   TPROXY Target: Available
   FLOW Classifier: Available
   fwmark route mask: Available

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1964/sshd       
tcp        0      0 0.0.0.0:7779            0.0.0.0:*               LISTEN      1561/perl       
tcp        0      0 172.16.0.4:22           172.16.2.45:63887       ESTABLISHED 1835/0          
tcp6       0      0 :::22                   :::*                    LISTEN      1964/sshd       
udp        0      0 0.0.0.0:1195            0.0.0.0:*                           4468/openvpn    
udp        0      0 0.0.0.0:7779            0.0.0.0:*                           1561/perl       
udp        0      0 0.0.0.0:1194            0.0.0.0:*                           4463/openvpn    

Traffic Control

Device eth0:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 23937015 bytes 166660 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth3:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 468 bytes 6 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device eth1:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 200212226 bytes 464713 pkt (dropped 0, overlimits 0 requeues 16630) 
 rate 0bit 0pps backlog 0b 0p requeues 16630 


Device tap0:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 163648426 bytes 421885 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 


Device tap1:
qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap  1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1
 Sent 468 bytes 6 pkt (dropped 0, overlimits 0 requeues 0) 
 rate 0bit 0pps backlog 0b 0p requeues 0 



TC Filters

Device eth0:

Device eth3:

Device eth1:

Device tap0:

Device tap1:

